Function at 0x45e164
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdbc
mov eax, 0x51c6c1
push ebx
push esi
push edi
call fcn.004d08c0
xor edx, edx
mov dword [ebp - 0x28], edx
mov esi, 0x51c6b4
lea edi, [ebp - 0x38]
mov ecx, 3
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov word [ebp - 0x14], 8
mov eax, dword [0x519bfc]
test eax, eax
je 0x45e1af
xor eax, eax
mov edx, dword [ebp - 0x24]
mov dword fs:[0], edx
jmp 0x45e51f
mov cl, byte [0x519bf1]
test cl, cl
je 0x45e1fe
test byte [0x516435], 4
je 0x45e1d9
push 0x5d5dea
push 0x5d5dd7
push 0x516438
call fcn.00451598
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 1
call fcn.00462b98
add esp, 0x1c
mov edx, dword [ebp - 0x24]
mov dword fs:[0], edx
jmp 0x45e51f
xor eax, eax
mov dword [ebp - 0x3c], eax
mov word [ebp - 0x14], 8
push 0
lea ecx, [ebp - 0x3c]
push ecx
push 0
push 0x72
call sub.USER32.dll_SystemParametersInfoA
test eax, eax
je 0x45e244
mov eax, dword [ebp - 0x3c]
push eax
push 0x5d5deb
push 0x400
call fcn.00451678
add esp, 0xc
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x24]
mov dword fs:[0], edx
jmp 0x45e51f
push 0x5d5e05
push 0x5d5e04
lea ecx, [ebp - 0x140]
push ecx
lea eax, [ebp - 0x38]
push eax
push 0x5d5dff
call fcn.0040c948
mov dl, byte [ebp - 0x140]
test dl, dl
jne 0x45e35a
lea edi, [ebp - 0x140]
mov esi, 0x5d5e10
mov byte [ebp - 0x244], 0
mov eax, edi
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 1
lea edx, [ebp - 0x244]
push 0x104
push edx
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x140]
push ecx
push eax
push 0x80000001
call fcn.00406a20
add esp, 0x18
mov dl, byte [ebp - 0x244]
test dl, dl
jne 0x45e2f9
push 0x5d5e57
lea ecx, [ebp - 0x140]
push ecx
call fcn.004cdf10
add esp, 8
lea eax, [ebp - 0x244]
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x140]
push 1
push 0x104
push eax
push edx
push ecx
push 0x80000001
call fcn.00406a20
add esp, 0x18
mov byte [ebp - 0x140], 0
movsx eax, byte [ebp - 0x244]
cmp eax, 0x55
jne 0x45e334
push 1
lea edx, [ebp - 0x140]
push 0x104
push edx
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x240]
push ecx
push eax
push 0x80000001
call fcn.00406a20
add esp, 0x18
jmp 0x45e35a
push 1
lea edx, [ebp - 0x140]
push 0x104
push edx
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x240]
push ecx
push eax
push 0x80000002
call fcn.00406a20
add esp, 0x18
mov al, byte [ebp - 0x140]
test al, al
je 0x45e42d
movsx edx, al
cmp edx, 0x28
je 0x45e42d
push pe_nt_image_headers32
lea ecx, [ebp - 0x140]
push ecx
call fcn.00405b9c
add esp, 8
test eax, eax
jne 0x45e42d
push 0x104
lea eax, [ebp - 0x244]
push eax
call sub.KERNEL32.dll_GetSystemDirectoryA
lea edx, [ebp - 0x244]
push edx
call fcn.004cdfec
pop ecx
movsx ecx, byte [ebp + eax - 0x245]
cmp ecx, 0x5c
je 0x45e3cf
push 0x5d5e5d
lea eax, [ebp - 0x244]
push eax
call fcn.004cdf10
add esp, 8
lea edx, [ebp - 0x140]
push edx
lea ecx, [ebp - 0x244]
push ecx
call fcn.004cdf10
add esp, 8
mov byte [ebp - 0x140], 0
push pe_nt_image_headers32
lea eax, [ebp - 0x244]
push eax
call fcn.00405b9c
add esp, 8
test eax, eax
je 0x45e42d
xor eax, eax
lea edi, [ebp - 0x244]
or ecx, 0xffffffff
lea esi, [ebp - 0x140]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov al, byte [ebp - 0x140]
test al, al
jne 0x45e460
test byte [0x516435], 4
je 0x45e4eb
push 0x5d5e70
push 0x5d5e5f
push 0x516438
call fcn.00451598
add esp, 0xc
jmp 0x45e4eb
lea edx, [ebp - 0x140]
push edx
call fcn.0045e050
pop ecx
sub eax, 0xffffffff
je 0x45e4c9
dec eax
je 0x45e47a
dec eax
je 0x45e49e
jmp 0x45e4eb
test byte [0x516435], 4
je 0x45e4eb
lea ecx, [ebp - 0x140]
push ecx
push 0x5d5e73
push 0x516438
call fcn.00451598
add esp, 0xc
jmp 0x45e4eb
mov dword [ebp - 0x28], 1
test byte [0x516435], 4
je 0x45e4eb
lea eax, [ebp - 0x140]
push eax
push 0x5d5e86
push 0x516438
call fcn.00451598
add esp, 0xc
jmp 0x45e4eb
test byte [0x516435], 4
je 0x45e4eb
lea edx, [ebp - 0x140]
push edx
push 0x5d5e99
push 0x516438
call fcn.00451598
add esp, 0xc
mov word [ebp - 0x14], 0
jmp 0x45e512
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword fs:[0], edx
mov esp, ebp
mov edi, dword [ebp - 0x250]
mov esi, dword [ebp - 0x24c]
mov ebx, dword [ebp - 0x248]
pop ebp
ret