Function at 0x44a290
Capabilities:
Get common file path

Disassembly:
mov eax, 0x180c
call fcn.004b0000
mov eax, dword [0x4d98f0]
xor eax, esp
mov dword [esp + 0x1808], eax
push ebp
mov ebp, dword [esp + 0x1814]
push esi
push edi
mov edi, ecx
mov ecx, 0x4c6b28
mov eax, ebp
jmp 0x44a2c0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44a2e6
test dx, dx
je 0x44a2e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44a2e6
add eax, 4
add ecx, 4
test dx, dx
jne 0x44a2c0
xor eax, eax
jmp 0x44a2eb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
cmp byte [edi + 0x81a], 0
mov byte [esp + 0xf], al
je 0x44a35a
xor esi, esi
test al, al
je 0x44a308
mov esi, 1
mov ecx, 0x4c6884
mov eax, ebp
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44a336
test dx, dx
je 0x44a332
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44a336
add eax, 4
add ecx, 4
test dx, dx
jne 0x44a310
xor eax, eax
jmp 0x44a33b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x44a345
mov esi, dword [edi + 0x91c]
test esi, esi
je 0x44a35a
push 0
push esi
mov ecx, edi
call fcn.00445bf0
push 0
jmp 0x44a562
mov byte [edi + 0x81a], 0
cmp byte [0x51a779], 0
je 0x44a47a
push 0
push 0x4c7a78
push str.FileList
call fcn.004604a0
test eax, eax
je 0x44a38e
cmp byte [esp + 0xf], 0
je 0x44a569
push 0x400
lea eax, [esp + 0x1018]
push eax
mov ecx, 0x5219d0
call fcn.004131f0
mov ecx, 0x4c6884
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44a3d6
test dx, dx
je 0x44a3d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44a3d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x44a3b0
xor eax, eax
jmp 0x44a3db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44a40d
push ebp
mov ecx, 0x5219d0
call fcn.004130d0
test al, al
je 0x44a40d
movzx ecx, byte [esp + 0xf]
neg ecx
sbb ecx, ecx
lea edx, [esp + 0x1014]
and ecx, edx
push ecx
mov ecx, edi
call fcn.004494e0
jmp 0x44a569
push 0x400
lea eax, [esp + 0x818]
push eax
mov ecx, 0x5219d0
call fcn.00413210
xor eax, eax
jmp 0x44a430
movzx ecx, word [esp + eax + 0x814]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x44a430
lea ecx, [esp + 0x14]
push ecx
call fcn.00456410
lea edx, [esp + 0x14]
push edx
call fcn.0048b040
mov ecx, edi
call fcn.00448480
test al, al
je 0x44a569
lea eax, [esp + 0x814]
push eax
call fcn.00455e90
jmp 0x44a561
push 0x400
lea ecx, [esp + 0x1018]
push ecx
call fcn.0048c140
cmp byte [esp + 0xf], 0
je 0x44a543
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1014]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x44a4a0
lea edx, [esp + 0x814]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00457280
lea ecx, [esp + 0x14]
push ecx
call fcn.00455810
lea edx, [esp + 0x814]
push edx
call fcn.00455810
lea eax, [esp + 0x814]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00477400
test eax, eax
jne 0x44a543
cmp dword [edi + 0x91c], eax
jle 0x44a506
mov byte [edi + 0x81a], 1
push eax
jmp 0x44a562
mov eax, dword [edi]
lea edx, [esp + 0x10]
push edx
push 0x11
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x5210a8
call fcn.004469a0
mov eax, dword [0x53eddc]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
push 0
jmp 0x44a562
push ebp
call fcn.0048b040
cmp byte [esp + 0xf], 0
je 0x44a55f
lea eax, [esp + 0x1014]
push eax
call fcn.00455e90
jmp 0x44a561
xor eax, eax
push eax
mov ecx, edi
call fcn.00448c00
mov ecx, dword [esp + 0x1814]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004affec
add esp, 0x180c
ret 4