Function at 0x44aba4
Capabilities:
Get common file path
Get file system object information

Disassembly:
push 0x774
mov eax, 0x497677
call fcn.0046af26
mov edi, ecx
mov dword [ebp - 0x6ec], edi
push 0xffff0000
xor ebx, ebx
push ebx
push 0x1101
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x6dc]
mov esi, ebx
push eax
push 0x11
push dword [edi + 0x3c]
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
js 0x44adc3
mov ebx, 0x2b4
lea eax, [ebp - 0x6d8]
push ebx
xor ecx, ecx
push ecx
push eax
call fcn.0046d670
add esp, 0xc
lea eax, [ebp - 0x6d8]
push 0x4208
push ebx
push eax
xor ebx, ebx
push ebx
push dword [ebp - 0x6dc]
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
js 0x44adb1
mov eax, dword [ebp - 0x6d4]
push 0x210
mov dword [ebp - 0x73c], 0xffff0002
mov dword [ebp - 0x740], 0xffff0000
mov dword [ebp - 0x738], 0x6f
mov dword [ebp - 0x730], 0x1000
mov dword [ebp - 0x72c], 0xf000
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], 1
call fcn.0046a4f4
mov ebx, eax
mov dword [esp], 0x208
xor edi, edi
mov dword [ebp - 0x6f0], ebx
push edi
lea esi, [ebx + 8]
push esi
call fcn.0046d670
add esp, 0xc
mov byte [ebx], 1
push 0x11
pop ecx
call fcn.0045e1f6
mov edx, 0x1bbc
lea ecx, [ebp - 0x6e8]
call fcn.0043e1cc
push 0x208
lea eax, [ebp - 0x420]
mov dword [ebp - 4], edi
push edi
push eax
call fcn.0046d670
mov eax, dword [ebp - 0x6e4]
add esp, 0xc
cmp eax, dword [ebp - 0x6e0]
jbe 0x44acef
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402919
mov ebx, dword [ebp - 0x6e8]
lea edx, [ebp - 0x420]
mov ecx, ebx
sub edx, ebx
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44acff
lea eax, [ebp - 0x420]
mov dword [ebp - 0x724], 0xc
mov edx, esi
mov dword [ebp - 0x728], eax
mov ecx, ebx
sub edx, ebx
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44ad2a
lea edi, [esi - 2]
xor ecx, ecx
mov ax, word [edi + 2]
lea edi, [edi + 2]
cmp ax, cx
jne 0x44ad3e
mov eax, dword [0x4a6424]
mov dword [edi], eax
mov edi, dword [ebp - 0x6ec]
mov ecx, edi
sub ecx, esi
movzx eax, word [esi]
lea esi, [esi + 2]
mov word [ecx + esi + 0x192], ax
test ax, ax
jne 0x44ad5b
or dword [ebp - 4], 0xffffffff
push ebx
call fcn.0046a358
mov eax, dword [ebp - 0x6f0]
xor ebx, ebx
pop ecx
mov dword [eax + 4], 0x11
mov dword [ebp - 0x714], eax
lea eax, [ebp - 0x740]
push eax
push ebx
push 0x1132
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
mov ecx, edi
push esi
call fcn.0044af5c
push dword [ebp - 0x6dc]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x6dc], ebx
push esi
push 2
push 0x1102
push dword [edi + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x6e8]
call fcn.00402a89
push 5
pop ecx
mov dword [ebp - 4], 1
call fcn.0045e1f6
mov edx, 0x1bbe
lea ecx, [ebp - 0x6fc]
mov esi, eax
call fcn.0043e1cc
lea eax, [ebp - 0x6fc]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402c3b
mov byte [ebp - 4], 1
push dword [ebp - 0x6fc]
call fcn.0046a358
mov eax, dword [ebp - 0x6e4]
pop ecx
cmp eax, dword [ebp - 0x6e0]
jbe 0x44ae43
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402919
mov ebx, dword [ebp - 0x6e8]
push 0x210
mov dword [ebp - 0x768], ebx
mov dword [ebp - 0x760], esi
mov dword [ebp - 0x75c], esi
mov dword [ebp - 0x77c], 0xffff0002
mov dword [ebp - 0x780], 0xffff0000
mov dword [ebp - 0x778], 0x67
mov dword [ebp - 0x770], 0x1000
mov dword [ebp - 0x76c], 0xf000
call fcn.0046a4f4
mov esi, eax
mov dword [esp], 0x208
xor ecx, ecx
mov dword [ebp - 0x6f0], esi
push ecx
lea edi, [esi + 8]
push edi
call fcn.0046d670
add esp, 0xc
mov byte [esi], 1
xor eax, eax
mov dword [esi + 4], 5
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0046d670
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
xor eax, eax
push eax
push eax
push 5
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x44af21
lea ecx, [ebp - 0x218]
mov edx, edi
mov eax, ecx
sub edx, eax
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x44aefa
sub edi, 2
xor ecx, ecx
mov ax, word [edi + 2]
lea edi, [edi + 2]
cmp ax, cx
jne 0x44af0e
mov eax, dword [0x4a6424]
mov dword [edi], eax
or dword [ebp - 0x758], 0xffffffff
lea eax, [ebp - 0x780]
push eax
xor eax, eax
mov dword [ebp - 0x754], esi
push eax
mov eax, dword [ebp - 0x6ec]
push 0x1132
push dword [eax + 0x84]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
call fcn.0046a358
pop ecx
call fcn.0046aed0
ret