Function at 0x456310
Capabilities:
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1178
call fcn.00468610
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x628], ax
push 0x206
push 0
lea ecx, [ebp - 0x626]
push ecx
call fcn.00468010
add esp, 0xc
xor edx, edx
mov word [ebp - 0x420], dx
push 0x206
push 0
lea eax, [ebp - 0x41e]
push eax
call fcn.00468010
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.00468010
add esp, 0xc
xor eax, eax
mov word [ebp - 0x830], ax
push 0x206
push 0
lea ecx, [ebp - 0x82e]
push ecx
call fcn.00468010
add esp, 0xc
mov dword [ebp - 0x954], 4
push 0x11c
push 0
lea edx, [ebp - 0x950]
push edx
call fcn.00468010
add esp, 0xc
mov dword [ebp - 0x950], 0x11c
lea eax, [ebp - 0x950]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x456418
push str.ReadLockedFiles____OSVERSIONINFOEX_failed
call fcn.004576a0
add esp, 4
mov dword [ebp - 0x950], 0x114
lea ecx, [ebp - 0x950]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x456418
xor eax, eax
jmp 0x4566a8
cmp dword [ebp + 0xc], 0
je 0x4564d7
mov edx, dword [ebp + 8]
push edx
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathStripPathW]
push 3
lea edx, [ebp - 0x420]
push edx
push 0x104
lea eax, [ebp - 0x830]
push eax
call fcn.0046b271
add esp, 0x10
mov ecx, dword [ebp + 0xc]
push ecx
push 0x104
lea edx, [ebp - 0x628]
push edx
call fcn.0046a95d
add esp, 0xc
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [ebp - 0x210]
push ecx
push 0
lea edx, [ebp - 0x830]
push edx
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 0
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00455a90
add esp, 0xc
test eax, eax
jne 0x4564c6
xor eax, eax
jmp 0x4566a8
mov eax, dword [ebp - 0x954]
or eax, 1
mov dword [ebp - 0x954], eax
jmp 0x4564ef
mov ecx, dword [ebp + 8]
push ecx
push 0x104
lea edx, [ebp - 0x210]
push edx
call fcn.0046a95d
add esp, 0xc
cmp dword [ebp - 0x940], 2
jne 0x45653a
mov eax, dword [ebp - 0x954]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x210]
push edx
push str.MoveFileEx__s___s___d
call fcn.00457270
add esp, 0x10
jmp 0x4566a6
xor eax, eax
mov word [ebp - 0xb60], ax
push 0x206
push 0
lea ecx, [ebp - 0xb5e]
push ecx
call fcn.00468010
add esp, 0xc
xor edx, edx
mov word [ebp - 0xd68], dx
push 0x206
push 0
lea eax, [ebp - 0xd66]
push eax
call fcn.00468010
add esp, 0xc
lea ecx, [ebp - 0xd68]
push ecx
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, [ebp - 0xd68]
push edx
push 0x104
lea eax, [ebp - 0xb60]
push eax
call fcn.0046a95d
add esp, 0xc
push str.WinInit.ini
lea ecx, [ebp - 0xb60]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
xor edx, edx
mov word [ebp - 0xf70], dx
push 0x206
push 0
lea eax, [ebp - 0xf6e]
push eax
call fcn.00468010
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xf70]
push ecx
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
xor eax, eax
mov word [ebp - 0x1178], ax
push 0x206
push 0
lea ecx, [ebp - 0x1176]
push ecx
call fcn.00468010
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x45662f
push 0x104
lea edx, [ebp - 0x1178]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
jmp 0x456648
push 0x4be054
push 0x104
lea ecx, [ebp - 0x1178]
push ecx
call fcn.0046a95d
add esp, 0xc
lea edx, [ebp - 0xb60]
push edx
lea eax, [ebp - 0xf70]
push eax
lea ecx, [ebp - 0x1178]
push ecx
push str.rename
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea edx, [ebp - 0xb60]
push edx
push 0x4be06c
push 0x4be070
push 0x4be074
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xf70]
push ecx
lea edx, [ebp - 0x1178]
push edx
push str.ReadLockedFiles____WritePrivateProfileString_rename___s___s___s_
call fcn.00457270
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00467fff
mov esp, ebp
pop ebp
ret