Function at 0x10151ef
Capabilities:
Get common file path

Disassembly:
push 0x458
mov eax, 0x101bd93
call fcn.010167d7
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x454], eax
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x448], ebx
mov dword [ebp - 0x43c], 0xaac56b
mov word [ebp - 0x438], 0xcd44
mov word [ebp - 0x436], 0x11d0
mov byte [ebp - 0x434], 0x8c
mov byte [ebp - 0x433], 0xc2
mov byte [ebp - 0x432], 0
mov byte [ebp - 0x431], 0xc0
mov byte [ebp - 0x430], 0x4f
mov byte [ebp - 0x42f], 0xc2
mov byte [ebp - 0x42e], 0x95
mov byte [ebp - 0x42d], 0xee
xor edi, edi
mov dword [eax], edi
push 0x30
call dword [sym.imp.msvcrt.dll_malloc]
pop ecx
mov esi, eax
mov dword [ebp - 0x450], esi
cmp esi, edi
jne 0x1015293
mov eax, dword [ebx]
push 0x1003ef8
push edi
mov ecx, ebx
call dword [eax]
xor eax, eax
call fcn.01016842
ret 0xc
push 0x30
push edi
push esi
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x440], edi
mov dword [esi], 0x30
xor eax, eax
inc eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0xc], 2
mov dword [esi + 0x28], 0x1080
mov dword [esi + 0x14], eax
lea eax, [ebp - 0x464]
mov dword [esi + 0x18], eax
xor eax, eax
lea edi, [ebp - 0x464]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x464], 0x10
mov eax, dword [ebp + 8]
mov dword [ebp - 0x460], eax
xor edi, edi
mov dword [ebp - 0x458], edi
mov dword [ebp - 0x45c], edi
mov dword [ebp - 4], edi
mov word [ebp - 0x220], di
push 0x208
push edi
lea eax, [ebp - 0x21e]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x1003edc
push 0x105
lea eax, [ebp - 0x220]
push eax
call fcn.01016f7e
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
call fcn.01015162
mov dword [ebp - 0x440], eax
cmp eax, edi
jne 0x1015385
mov eax, dword [ebx]
push 0x1003e98
push edi
mov ecx, ebx
call dword [eax]
mov eax, dword [ebx]
lea ecx, [ebp - 0x220]
push ecx
push edi
mov ecx, ebx
call dword [eax]
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x1015289
push 0x1003e88
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
jne 0x10153ba
mov eax, dword [ebx]
push 0x1003e40
push edi
mov ecx, ebx
call dword [eax]
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
push dword [ebp - 0x440]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1015289
push esi
lea ecx, [ebp - 0x43c]
push ecx
push edi
call eax
mov dword [ebp - 0x444], eax
mov eax, dword [ebx]
push 0x1003e04
push edi
mov ecx, ebx
call dword [eax]
mov word [ebp - 0x42c], di
push 0x208
push edi
lea eax, [ebp - 0x42a]
push eax
call sub.msvcrt.dll_memset
push 0xa
push 0x105
lea eax, [ebp - 0x42c]
push eax
push dword [ebp - 0x444]
call fcn.01016d78
add esp, 0x1c
mov eax, dword [ebx]
lea ecx, [ebp - 0x42c]
push ecx
push edi
mov ecx, ebx
call dword [eax]
xor eax, eax
cmp dword [ebp - 0x444], edi
sete al
mov dword [ebp - 0x44c], eax
push dword [ebp - 0x440]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x454]
mov dword [eax], esi
mov eax, dword [ebp - 0x44c]
jmp 0x101528b