Function at 0x448760
Capabilities:
Get common file path

Disassembly:
mov eax, 0x180c
call fcn.004af5f0
mov eax, dword [0x4d8620]
xor eax, esp
mov dword [esp + 0x1808], eax
push ebp
mov ebp, dword [esp + 0x1814]
push esi
push edi
mov edi, ecx
mov ecx, 0x4c5b18
mov eax, ebp
jmp 0x448790
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4487b6
test dx, dx
je 0x4487b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4487b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x448790
xor eax, eax
jmp 0x4487bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
cmp byte [edi + 0x81a], 0
mov byte [esp + 0xf], al
je 0x44882a
xor esi, esi
test al, al
je 0x4487d8
mov esi, 1
mov ecx, 0x4c5874
mov eax, ebp
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x448806
test dx, dx
je 0x448802
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x448806
add eax, 4
add ecx, 4
test dx, dx
jne 0x4487e0
xor eax, eax
jmp 0x44880b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x448815
mov esi, dword [edi + 0x91c]
test esi, esi
je 0x44882a
push 0
push esi
mov ecx, edi
call fcn.004440e0
push 0
jmp 0x448a32
mov byte [edi + 0x81a], 0
cmp byte [0x526d89], 0
je 0x44894a
push 0
push 0x4c6a68
push str.FileList
call fcn.0045fbd0
test eax, eax
je 0x44885e
cmp byte [esp + 0xf], 0
je 0x448a39
push 0x400
lea eax, [esp + 0x1018]
push eax
mov ecx, 0x52dfe8
call fcn.00412e70
mov ecx, 0x4c5874
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4488a6
test dx, dx
je 0x4488a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4488a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x448880
xor eax, eax
jmp 0x4488ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4488dd
push ebp
mov ecx, 0x52dfe8
call fcn.00412d50
test al, al
je 0x4488dd
movzx ecx, byte [esp + 0xf]
neg ecx
sbb ecx, ecx
lea edx, [esp + 0x1014]
and ecx, edx
push ecx
mov ecx, edi
call fcn.004479e0
jmp 0x448a39
push 0x400
lea eax, [esp + 0x818]
push eax
mov ecx, 0x52dfe8
call fcn.00412e90
xor eax, eax
jmp 0x448900
movzx ecx, word [esp + eax + 0x814]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x448900
lea ecx, [esp + 0x14]
push ecx
call fcn.004560c0
lea edx, [esp + 0x14]
push edx
call fcn.00489e20
mov ecx, edi
call fcn.004469a0
test al, al
je 0x448a39
lea eax, [esp + 0x814]
push eax
call fcn.00455b40
jmp 0x448a31
push 0x400
lea ecx, [esp + 0x1018]
push ecx
call fcn.0048af80
cmp byte [esp + 0xf], 0
je 0x448a13
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1014]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x448970
lea edx, [esp + 0x814]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00456f30
lea ecx, [esp + 0x14]
push ecx
call fcn.004554c0
lea edx, [esp + 0x814]
push edx
call fcn.004554c0
lea eax, [esp + 0x814]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00477c80
test eax, eax
jne 0x448a13
cmp dword [edi + 0x91c], eax
jle 0x4489d6
mov byte [edi + 0x81a], 1
push eax
jmp 0x448a32
mov eax, dword [edi]
lea edx, [esp + 0x10]
push edx
push 0x11
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x52d6c0
call fcn.00444e90
mov eax, dword [0x5662e4]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
push 0
jmp 0x448a32
push ebp
call fcn.00489e20
cmp byte [esp + 0xf], 0
je 0x448a2f
lea eax, [esp + 0x1014]
push eax
call fcn.00455b40
jmp 0x448a31
xor eax, eax
push eax
mov ecx, edi
call fcn.00447100
mov ecx, dword [esp + 0x1814]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004aedbb
add esp, 0x180c
ret 4