Function at 0x449bd0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xae0
mov eax, dword [0x57d54c]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x20a
lea eax, [ebp - 0x66c]
mov ebx, ecx
push 0
push eax
mov dword [ebp - 0xadc], ebx
call fcn.00504c70
add esp, 0xc
call fcn.00407680
mov esi, eax
mov eax, dword [esi + 4]
test eax, eax
je 0x449c39
movaps xmm0, xmmword [0x565ac0]
lea ecx, [ebp - 0x38]
push ecx
push eax
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0x61507265
mov dword [ebp - 0x24], 0x576874
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0x20], eax
push 0
push dword [ebp + 8]
lea eax, [ebp - 0x66c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x449f85
push 0x20a
lea eax, [ebp - 0x45c]
push 0
push eax
call fcn.00504c70
add esp, 0xc
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x45c]
push 0x105
push eax
call fcn.00509c6c
add esp, 0xc
lea eax, [ebp - 0x45c]
push str..lnk
push 0x105
push eax
call fcn.00509c6c
add esp, 0xc
lea eax, [ebp - 0xacc]
push eax
lea eax, [ebp - 0x45c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0xae0], esi
cmp esi, 0xffffffff
je 0x449f85
nop dword [eax]
nop dword [eax + eax]
test byte [ebp - 0xacc], 0x10
jne 0x449f68
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0xad0]
push eax
push 0x551910
push 1
push 0
push 0x551950
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x449f62
mov eax, dword [ebp - 0xad0]
lea edx, [ebp - 0xad4]
push edx
push 0x551940
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
js 0x449f56
push 0x20a
lea eax, [ebp - 0x24c]
push 0
push eax
call fcn.00504c70
add esp, 0xc
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x24c]
push 0x105
push eax
call fcn.00509c6c
add esp, 0xc
lea eax, [ebp - 0x24c]
push 0x55fb5c
push 0x105
push eax
call fcn.00509c6c
add esp, 0xc
lea eax, [ebp - 0xaa0]
push eax
lea eax, [ebp - 0x24c]
push 0x105
push eax
call fcn.00509c6c
mov eax, dword [ebp - 0xad4]
lea edx, [ebp - 0x24c]
add esp, 0xc
mov ecx, dword [eax]
push 0
push edx
push eax
call dword [ecx + 0x14]
test eax, eax
js 0x449f4a
push 0x20a
lea eax, [ebp - 0x87c]
push 0
push eax
call fcn.00504c70
mov eax, dword [ebp - 0xad0]
lea edx, [ebp - 0x87c]
add esp, 0xc
mov ecx, dword [eax]
push 4
push 0
push 0x104
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x449f4a
mov esi, dword [ebx + 0x14]
mov eax, 0x2aaaaaab
mov edi, dword [ebx + 0x10]
mov ecx, esi
sub ecx, edi
mov dword [ebp - 0xad8], 0
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x449f44
xor ebx, ebx
mov ecx, ebx
sub esi, edi
mov eax, 0x2aaaaaab
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x449f98
cmp dword [ebx + edi + 0x14], 8
lea esi, [ebx + edi]
jb 0x449e39
mov esi, dword [esi]
call fcn.00407550
mov edi, eax
mov eax, dword [edi + 4]
test eax, eax
je 0x449e67
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x53727453
push ecx
push eax
mov dword [ebp - 0x10], 0x57497274
mov byte [ebp - 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x1c], eax
push esi
lea eax, [ebp - 0x87c]
push eax
mov eax, dword [edi + 0x1c]
call eax
test eax, eax
jne 0x449eb5
mov eax, dword [ebp - 0xadc]
add ebx, 0x18
inc dword [ebp - 0xad8]
mov esi, dword [eax + 0x14]
mov ecx, esi
mov edi, dword [eax + 0x10]
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0xad8]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jb 0x449e12
jmp 0x449f3e
mov ebx, dword [ebp - 0xacc]
test bl, 1
je 0x449f01
and ebx, 0xfffffffe
call fcn.00412ea0
mov esi, eax
mov eax, dword [esi + 4]
test eax, eax
je 0x449ef4
movaps xmm0, xmmword [0x565b50]
lea ecx, [ebp - 0x34]
push ecx
push eax
movups xmmword [ebp - 0x34], xmm0
mov word [ebp - 0x24], 0x5773
mov byte [ebp - 0x22], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0x10], eax
push ebx
lea eax, [ebp - 0x24c]
push eax
mov eax, dword [esi + 0x10]
call eax
call fcn.00412ea0
mov esi, eax
mov eax, dword [esi + 4]
test eax, eax
je 0x449f32
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x656c6544
push ecx
push eax
mov dword [ebp - 0x1c], 0x69466574
mov dword [ebp - 0x18], 0x57656c
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0x54], eax
lea eax, [ebp - 0x24c]
push eax
mov eax, dword [esi + 0x54]
call eax
mov ebx, dword [ebp - 0xadc]
mov esi, dword [ebp - 0xae0]
mov eax, dword [ebp - 0xad4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xad0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [ebp - 0xacc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x449cd0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00501e95
mov esp, ebp
pop ebp
ret 4
call fcn.0040a8a0
int3