Function at 0x44ac8f
Capabilities:
Get common file path
Get file system object information

Disassembly:
push 0x774
mov eax, 0x4d5fd1
call fcn.004a9c62
mov edi, ecx
mov dword [ebp - 0x6ec], edi
push 0xffff0000
xor ebx, ebx
push ebx
push 0x1101
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x6dc]
mov esi, ebx
push eax
push 0x11
push dword [edi + 0x3c]
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
js 0x44aeae
mov ebx, 0x2b4
lea eax, [ebp - 0x6d8]
push ebx
xor ecx, ecx
push ecx
push eax
call fcn.004ab9a0
add esp, 0xc
lea eax, [ebp - 0x6d8]
push 0x4208
push ebx
push eax
xor ebx, ebx
push ebx
push dword [ebp - 0x6dc]
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
js 0x44ae9c
mov eax, dword [ebp - 0x6d4]
push 0x210
mov dword [ebp - 0x73c], 0xffff0002
mov dword [ebp - 0x740], 0xffff0000
mov dword [ebp - 0x738], 0x6f
mov dword [ebp - 0x730], 0x1000
mov dword [ebp - 0x72c], 0xf000
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], 1
call fcn.004a8eb3
mov ebx, eax
mov dword [esp], 0x208
xor edi, edi
mov dword [ebp - 0x6f0], ebx
push edi
lea esi, [ebx + 8]
push esi
call fcn.004ab9a0
add esp, 0xc
mov byte [ebx], 1
push 0x11
pop ecx
call fcn.0045e514
mov edx, 0x1bbc
lea ecx, [ebp - 0x6e8]
call fcn.0043e2df
push 0x208
lea eax, [ebp - 0x420]
mov dword [ebp - 4], edi
push edi
push eax
call fcn.004ab9a0
mov eax, dword [ebp - 0x6e4]
add esp, 0xc
cmp eax, dword [ebp - 0x6e0]
jbe 0x44adda
push eax
lea ecx, [ebp - 0x6e8]
call fcn.004029aa
mov ebx, dword [ebp - 0x6e8]
lea edx, [ebp - 0x420]
mov ecx, ebx
sub edx, ebx
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44adea
lea eax, [ebp - 0x420]
mov dword [ebp - 0x724], 0xc
mov edx, esi
mov dword [ebp - 0x728], eax
mov ecx, ebx
sub edx, ebx
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44ae15
lea edi, [esi - 2]
xor ecx, ecx
mov ax, word [edi + 2]
lea edi, [edi + 2]
cmp ax, cx
jne 0x44ae29
mov eax, dword [0x4f1ffc]
mov dword [edi], eax
mov edi, dword [ebp - 0x6ec]
mov ecx, edi
sub ecx, esi
movzx eax, word [esi]
lea esi, [esi + 2]
mov word [ecx + esi + 0x192], ax
test ax, ax
jne 0x44ae46
or dword [ebp - 4], 0xffffffff
push ebx
call fcn.004a8d17
mov eax, dword [ebp - 0x6f0]
xor ebx, ebx
pop ecx
mov dword [eax + 4], 0x11
mov dword [ebp - 0x714], eax
lea eax, [ebp - 0x740]
push eax
push ebx
push 0x1132
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
mov ecx, edi
push esi
call fcn.0044b047
push dword [ebp - 0x6dc]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x6dc], ebx
push esi
push 2
push 0x1102
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x6e8]
call fcn.00402b1a
push 5
pop ecx
mov dword [ebp - 4], 1
call fcn.0045e514
mov edx, 0x1bbe
lea ecx, [ebp - 0x6fc]
mov esi, eax
call fcn.0043e2df
lea eax, [ebp - 0x6fc]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402ccc
mov byte [ebp - 4], 1
push dword [ebp - 0x6fc]
call fcn.004a8d17
mov eax, dword [ebp - 0x6e4]
pop ecx
cmp eax, dword [ebp - 0x6e0]
jbe 0x44af2e
push eax
lea ecx, [ebp - 0x6e8]
call fcn.004029aa
mov ebx, dword [ebp - 0x6e8]
push 0x210
mov dword [ebp - 0x768], ebx
mov dword [ebp - 0x760], esi
mov dword [ebp - 0x75c], esi
mov dword [ebp - 0x77c], 0xffff0002
mov dword [ebp - 0x780], 0xffff0000
mov dword [ebp - 0x778], 0x67
mov dword [ebp - 0x770], 0x1000
mov dword [ebp - 0x76c], 0xf000
call fcn.004a8eb3
mov esi, eax
mov dword [esp], 0x208
xor ecx, ecx
mov dword [ebp - 0x6f0], esi
push ecx
lea edi, [esi + 8]
push edi
call fcn.004ab9a0
add esp, 0xc
mov byte [esi], 1
xor eax, eax
mov dword [esi + 4], 5
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004ab9a0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
xor eax, eax
push eax
push eax
push 5
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x44b00c
lea ecx, [ebp - 0x218]
mov edx, edi
mov eax, ecx
sub edx, eax
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44afe5
sub edi, 2
xor ecx, ecx
mov ax, word [edi + 2]
lea edi, [edi + 2]
cmp ax, cx
jne 0x44aff9
mov eax, dword [0x4f1ffc]
mov dword [edi], eax
or dword [ebp - 0x758], 0xffffffff
lea eax, [ebp - 0x780]
push eax
xor eax, eax
mov dword [ebp - 0x754], esi
push eax
mov eax, dword [ebp - 0x6ec]
push 0x1132
push dword [eax + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
call fcn.004a8d17
pop ecx
call fcn.004a9c0c
ret