Function at 0x448a40
Capabilities:
Get common file path

Disassembly:
mov eax, 0x180c
call fcn.004af840
mov eax, dword [0x4d8620]
xor eax, esp
mov dword [esp + 0x1808], eax
push ebp
mov ebp, dword [esp + 0x1814]
push esi
push edi
mov edi, ecx
mov ecx, 0x4c5b18
mov eax, ebp
jmp 0x448a70
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x448a96
test dx, dx
je 0x448a92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x448a96
add eax, 4
add ecx, 4
test dx, dx
jne 0x448a70
xor eax, eax
jmp 0x448a9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
cmp byte [edi + 0x81a], 0
mov byte [esp + 0xf], al
je 0x448b0a
xor esi, esi
test al, al
je 0x448ab8
mov esi, 1
mov ecx, 0x4c5874
mov eax, ebp
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x448ae6
test dx, dx
je 0x448ae2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x448ae6
add eax, 4
add ecx, 4
test dx, dx
jne 0x448ac0
xor eax, eax
jmp 0x448aeb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x448af5
mov esi, dword [edi + 0x91c]
test esi, esi
je 0x448b0a
push 0
push esi
mov ecx, edi
call fcn.004443a0
push 0
jmp 0x448d12
mov byte [edi + 0x81a], 0
cmp byte [0x526d89], 0
je 0x448c2a
push 0
push 0x4c6a68
push str.FileList
call fcn.0045fe70
test eax, eax
je 0x448b3e
cmp byte [esp + 0xf], 0
je 0x448d19
push 0x400
lea eax, [esp + 0x1018]
push eax
mov ecx, 0x52dfe8
call fcn.00412e70
mov ecx, 0x4c5874
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x448b86
test dx, dx
je 0x448b82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x448b86
add eax, 4
add ecx, 4
test dx, dx
jne 0x448b60
xor eax, eax
jmp 0x448b8b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x448bbd
push ebp
mov ecx, 0x52dfe8
call fcn.00412d50
test al, al
je 0x448bbd
movzx ecx, byte [esp + 0xf]
neg ecx
sbb ecx, ecx
lea edx, [esp + 0x1014]
and ecx, edx
push ecx
mov ecx, edi
call fcn.00447cb0
jmp 0x448d19
push 0x400
lea eax, [esp + 0x818]
push eax
mov ecx, 0x52dfe8
call fcn.00412e90
xor eax, eax
jmp 0x448be0
movzx ecx, word [esp + eax + 0x814]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x448be0
lea ecx, [esp + 0x14]
push ecx
call fcn.00456390
lea edx, [esp + 0x14]
push edx
call fcn.0048a0a0
mov ecx, edi
call fcn.00446c60
test al, al
je 0x448d19
lea eax, [esp + 0x814]
push eax
call fcn.00455e10
jmp 0x448d11
push 0x400
lea ecx, [esp + 0x1018]
push ecx
call fcn.0048b200
cmp byte [esp + 0xf], 0
je 0x448cf3
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1014]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x448c50
lea edx, [esp + 0x814]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00457200
lea ecx, [esp + 0x14]
push ecx
call fcn.00455790
lea edx, [esp + 0x814]
push edx
call fcn.00455790
lea eax, [esp + 0x814]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00477f20
test eax, eax
jne 0x448cf3
cmp dword [edi + 0x91c], eax
jle 0x448cb6
mov byte [edi + 0x81a], 1
push eax
jmp 0x448d12
mov eax, dword [edi]
lea edx, [esp + 0x10]
push edx
push 0x11
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x52d6c0
call fcn.00445150
mov eax, dword [0x5662e4]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
push 0
jmp 0x448d12
push ebp
call fcn.0048a0a0
cmp byte [esp + 0xf], 0
je 0x448d0f
lea eax, [esp + 0x1014]
push eax
call fcn.00455e10
jmp 0x448d11
xor eax, eax
push eax
mov ecx, edi
call fcn.004473c0
mov ecx, dword [esp + 0x1814]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004af00b
add esp, 0x180c
ret 4