Function at 0x443200
Capabilities:
Get common file path

Disassembly:
push 0x398
mov eax, 0x44f60b
call fcn.0043bccd
mov edi, ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
and dword [ebp - 4], 0
mov dword [ebp - 0x368], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x374], eax
add eax, 0x14
mov dword [ebp - 0x378], ecx
lea ecx, [ebp - 0x358]
push eax
call fcn.00466bcd
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 1
call fcn.0043598d
push ecx
push 0x407e44
lea ecx, [ebp - 0x358]
call fcn.00435959
push ecx
push 0x407e34
lea ecx, [ebp - 0x358]
mov esi, eax
call fcn.00435959
push ecx
push 0x407e24
lea ecx, [ebp - 0x358]
mov ebx, eax
call fcn.00435959
cmp eax, 0xffffffff
je 0x443559
cmp esi, eax
jg 0x44329a
cmp ebx, eax
jle 0x443559
push 0x40b388
lea ecx, [ebp - 0x2c]
call fcn.004244fa
mov byte [ebp - 4], 2
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x4a2894]
cmp eax, dword [ecx + 4]
jg 0x443597
lea ecx, [ebp - 0x358]
call fcn.0042c50d
push ecx
mov edx, 0x4a2898
mov ecx, eax
call fcn.004831aa
xor ebx, ebx
test al, al
je 0x44354e
mov dword [ebp - 0x35c], ebx
lea eax, [ebp - 0x35c]
mov dword [ebp - 0x380], ebx
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x37c], 1
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 5
push eax
push ebx
push ebx
push 0x408f74
call dword [sym.imp.ext_ms_win_shell32_shellfolders_l1_1_0.dll_SHGetKnownFolderPath]
mov ecx, dword [ebp + 4]
test eax, eax
js 0x4435d9
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 4
call fcn.004747a6
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x364]
call fcn.00423364
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 6
call fcn.00446be8
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x44336e
push eax
push 0x40b478
mov edx, 0x648
jmp 0x4435e4
lea ecx, [ebp - 0x354]
call fcn.0042bd68
mov eax, ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x364]
mov ecx, dword [edi + 0x38]
push eax
call fcn.0042e4f0
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x4433a5
push eax
push 0x40b478
mov edx, 0x64b
jmp 0x4435e4
push ebx
lea ecx, [ebp - 0x354]
call fcn.0042e5c5
push eax
lea ecx, [ebp - 0x36c]
call fcn.00423364
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x3a4]
call fcn.00423441
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x36c]
lea ecx, [ecx - 0x10]
call fcn.00429900
push dword [ebp - 0x374]
lea ecx, [ebp - 0x3a4]
call fcn.0042a36c
test eax, eax
je 0x443513
mov esi, dword [ebp - 0x35c]
mov ecx, esi
mov dword [ebp - 0x370], ebx
call fcn.00446cad
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x443428
push eax
push 0x40b478
mov edx, 0x653
jmp 0x4435e4
push 1
push esi
mov ecx, edi
call fcn.00442eac
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x443449
push eax
push 0x40b478
mov edx, 0x654
jmp 0x4435e4
lea ecx, [ebp - 0x1c0]
call fcn.0042bd68
mov eax, ecx
mov byte [ebp - 4], 0xb
push eax
push esi
mov ecx, edi
call fcn.00443646
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x44347a
push eax
push 0x40b478
mov edx, 0x657
jmp 0x4435e4
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x360]
call fcn.00423364
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0xc
call fcn.00446b28
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x4434b1
push eax
push 0x40b478
mov edx, 0x65a
jmp 0x4435e4
mov esi, dword [ebp - 0x378]
lea eax, [ebp - 0x370]
push esi
push eax
lea eax, [ebp - 0x360]
mov ecx, edi
push eax
call fcn.00443180
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x4434e4
push eax
push 0x40b478
mov edx, 0x65b
jmp 0x4435e4
cmp dword [ebp - 0x370], 0
je 0x4434fa
mov eax, dword [ebp - 0x368]
xor ecx, ecx
inc ecx
mov dword [eax], ecx
mov dword [esi], ecx
mov ecx, dword [ebp - 0x360]
lea ecx, [ecx - 0x10]
call fcn.00429900
lea ecx, [ebp - 0x1c0]
call fcn.00436d15
lea ecx, [ebp - 0x3a4]
call fcn.00483b70
lea ecx, [ebp - 0x354]
call fcn.00436d15
mov ecx, dword [ebp - 0x364]
lea ecx, [ecx - 0x10]
call fcn.00429900
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x35c], ebx
test eax, eax
je 0x44354e
push eax
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0042454a
mov ecx, dword [ebp - 0x358]
lea ecx, [ecx - 0x10]
call fcn.00429900
xor eax, eax
jmp 0x44358f
call fcn.0043bc1f
ret 0xc
mov esi, 0x4a2894
push esi
call fcn.0043ba62
cmp dword [0x4a2894], 0xffffffff
pop ecx
jne 0x4432c4
push ecx
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
call fcn.00442158
push 0x450ba0
call fcn.0043b961
push esi
mov byte [ebp - 4], 2
call fcn.0043ba0f
pop ecx
pop ecx
jmp 0x4432c4
push eax
push 0x40b478
mov edx, 0x644
call fcn.0043f81b
int3