Function at 0x444730
Capabilities:
Get common file path

Disassembly:
mov eax, 0x180c
call fcn.004a5370
mov eax, dword [0x4cc3b0]
xor eax, esp
mov dword [esp + 0x1808], eax
push ebp
mov ebp, dword [esp + 0x1814]
push esi
push edi
mov edi, ecx
mov ecx, 0x4babbc
mov eax, ebp
jmp 0x444760
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x444786
test dx, dx
je 0x444782
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x444786
add eax, 4
add ecx, 4
test dx, dx
jne 0x444760
xor eax, eax
jmp 0x44478b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
cmp byte [edi + 0x81a], 0
mov byte [esp + 0xf], al
je 0x4447fa
xor esi, esi
test al, al
je 0x4447a8
mov esi, 1
mov ecx, 0x4ba854
mov eax, ebp
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4447d6
test dx, dx
je 0x4447d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4447d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4447b0
xor eax, eax
jmp 0x4447db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4447e5
mov esi, dword [edi + 0x91c]
test esi, esi
je 0x4447fa
push 0
push esi
mov ecx, edi
call fcn.004401c0
push 0
jmp 0x444a02
mov byte [edi + 0x81a], 0
cmp byte [0x4e9b89], 0
je 0x44491a
push 0
push 0x4bb9d4
push str.FileList
call fcn.0045ba90
test eax, eax
je 0x44482e
cmp byte [esp + 0xf], 0
je 0x444a09
push 0x400
lea eax, [esp + 0x1018]
push eax
mov ecx, 0x4f0dd0
call fcn.00413080
mov ecx, 0x4ba854
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x444876
test dx, dx
je 0x444872
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x444876
add eax, 4
add ecx, 4
test dx, dx
jne 0x444850
xor eax, eax
jmp 0x44487b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4448ad
push ebp
mov ecx, 0x4f0dd0
call fcn.00412f60
test al, al
je 0x4448ad
movzx ecx, byte [esp + 0xf]
neg ecx
sbb ecx, ecx
lea edx, [esp + 0x1014]
and ecx, edx
push ecx
mov ecx, edi
call fcn.00443a40
jmp 0x444a09
push 0x400
lea eax, [esp + 0x818]
push eax
mov ecx, 0x4f0dd0
call fcn.004130a0
xor eax, eax
jmp 0x4448d0
movzx ecx, word [esp + eax + 0x814]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x4448d0
lea ecx, [esp + 0x14]
push ecx
call fcn.004521a0
lea edx, [esp + 0x14]
push edx
call fcn.00484d30
mov ecx, edi
call fcn.00442a80
test al, al
je 0x444a09
lea eax, [esp + 0x814]
push eax
call fcn.00451c20
jmp 0x444a01
push 0x400
lea ecx, [esp + 0x1018]
push ecx
call fcn.00485d40
cmp byte [esp + 0xf], 0
je 0x4449e3
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1014]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x444940
lea edx, [esp + 0x814]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00452f90
lea ecx, [esp + 0x14]
push ecx
call fcn.004516c0
lea edx, [esp + 0x814]
push edx
call fcn.004516c0
lea eax, [esp + 0x814]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00473520
test eax, eax
jne 0x4449e3
cmp dword [edi + 0x91c], eax
jle 0x4449a6
mov byte [edi + 0x81a], 1
push eax
jmp 0x444a02
mov eax, dword [edi]
lea edx, [esp + 0x10]
push edx
push 0x11
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x4f04a8
call fcn.00440f70
mov eax, dword [0x511094]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
push 0
jmp 0x444a02
push ebp
call fcn.00484d30
cmp byte [esp + 0xf], 0
je 0x4449ff
lea eax, [esp + 0x1014]
push eax
call fcn.00451c20
jmp 0x444a01
xor eax, eax
push eax
mov ecx, edi
call fcn.00443130
mov ecx, dword [esp + 0x1814]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004a4b43
add esp, 0x180c
ret 4