Function at 0x4488f0
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x738
mov eax, dword [0x4f00a8]
xor eax, esp
mov dword [esp + 0x734], eax
push ebx
push ebp
push esi
push edi
push 0x4001
push 0x2b4
lea eax, [esp + 0x88]
push eax
xor edi, edi
push edi
mov ebx, ecx
push 0x4c96a8
mov dword [esp + 0x28], ebx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 0x30
mov esi, eax
xor eax, eax
lea ecx, [esp + 0x54]
push edi
push ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x58], edi
call fcn.004911c0
mov edx, dword [ebx + 0x940]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0xc
push esi
push edi
add ebx, 0x940
push 0x1109
push edx
call ebp
mov eax, dword [ebx]
push edi
push 0x64
push 0x1121
push eax
call ebp
lea ecx, [esp + 0x10]
push ecx
push edi
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jl 0x448cb2
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
test eax, eax
jge 0x4489e2
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x4489db
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x14]
call eax
xor al, al
jmp 0x448cb4
push 0x10
call fcn.004919dd
add esp, 4
cmp eax, edi
je 0x448aad
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax], ecx
mov edx, dword [esp + 0x10]
mov dword [eax + 4], edx
mov dword [esp + 0x3c], eax
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x4c]
push eax
push 0
mov ecx, 0xa
lea esi, [esp + 0x20]
lea edi, [esp + 0x5c]
mov dword [esp + 0x20], 0x67
mov dword [esp + 0x40], 1
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx]
push 0x1132
push ecx
mov dword [esp + 0x60], 0xffff0002
call ebp
mov edx, dword [ebx]
mov esi, eax
push esi
push 2
push 0x1102
push edx
call ebp
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x53c]
push eax
push ecx
lea ecx, [edi + 0xd90]
call fcn.00456340
push 0x4ee93c
lea edx, [esp + 0x540]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x448ae0
mov eax, dword [ebx]
push esi
push 9
push 0x110b
push eax
call ebp
jmp 0x448c6c
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x448acd
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor al, al
jmp 0x448cb4
push 0x11
mov ecx, edi
call fcn.00447300
test al, al
je 0x448c32
mov ecx, dword [0x538d70]
push esi
push 4
push 0x110a
push ecx
call ebp
mov esi, eax
push esi
mov ecx, 0x538d70
call fcn.00445890
push 0x4ee93c
call fcn.00476ff0
add esp, 4
push 0x4ee93c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [esp + 0x44], eax
mov byte [edi + 0xb48], 0
test esi, esi
je 0x448c2b
lea ebx, [ebx]
xor eax, eax
lea edx, [esp + 0x18]
push edx
push eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov eax, dword [0x538d70]
push 0x113e
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], 4
call ebp
neg eax
sbb eax, eax
and eax, dword [esp + 0x3c]
push 0x103
mov edx, dword [eax]
mov eax, dword [eax + 8]
lea ecx, [esp + 0x338]
push ecx
push edx
push eax
mov ecx, 0x5391c0
call fcn.004565d0
lea ecx, [esp + 0x334]
push ecx
call fcn.00476ff0
add esp, 4
lea edx, [esp + 0x334]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
push edi
lea eax, [esp + 0x338]
push 0x4ee93c
push eax
call fcn.00492fc2
add esp, 0xc
test eax, eax
jne 0x448c0d
mov ecx, dword [0x538d70]
push esi
push 9
push 0x110b
push ecx
call ebp
mov edx, dword [0x538d70]
push esi
push 2
push 0x1102
push edx
call ebp
cmp edi, dword [esp + 0x44]
je 0x448c27
mov eax, dword [0x538d70]
push esi
push 6
push 0x110a
push eax
call ebp
mov esi, eax
test esi, esi
jne 0x448b40
mov edi, dword [esp + 0x14]
mov byte [edi + 0xb48], 1
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebx
call fcn.00446d00
mov eax, dword [eax]
push eax
mov ecx, ebx
call fcn.00445890
cmp dword [eax + 0xc], 0
jne 0x448c6c
cmp dword [eax + 8], 0
mov ecx, dword [edi + 0x93c]
mov edx, dword [ecx]
push 1
jne 0x448c62
mov eax, dword [eax]
jmp 0x448c65
mov eax, dword [eax + 4]
push eax
push ecx
mov ecx, dword [edx + 0x2c]
call ecx
mov eax, dword [esp + 0x40]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esp + 0x10]
mov edx, dword [edi + 4]
push 1
push ecx
push 0x20018
push 0x800f
push edx
lea ecx, [edi + 0x938]
call fcn.00438030
test al, al
jne 0x448cb2
mov eax, dword [edi + 4]
push 0x10
push str.Error
push str.An_error_occured_when_trying_to_register_the_directory_monitor._As_a_result_the_FeyWriter_explorer_tree_will_not_automatically_synchronize_with_Windows_Explorer.
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov al, 1
mov ecx, dword [esp + 0x744]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004911aa
add esp, 0x738
ret