Function at 0x45462b
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x4ed820]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x88
mov eax, 0x4acba3
call fcn.004711ef
mov ebx, dword [ebp + 0x41c]
xor esi, esi
mov dword [ebp - 0x48], ebx
cmp ebx, esi
jne 0x454668
xor eax, eax
jmp 0x4549b3
push 0x4f39f8
lea ecx, [ebp - 0x14]
call fcn.004028e9
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
mov dword [ebp - 4], esi
call fcn.0045da4b
mov ecx, ebx
call fcn.0045bfe0
mov edi, eax
mov dword [ebp - 0x4c], edi
cmp edi, esi
jne 0x4546a5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040290e
mov eax, esi
jmp 0x4549b3
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], esi
jge 0x4546b7
push 0x80070057
call fcn.00402932
movzx eax, word [eax]
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x4c]
push dword [ebp - 0x14]
mov esi, edx
shrd eax, esi, 0x14
push str.FullDir_:__s
mov dword [ebp - 0x28], eax
shr esi, 0x14
call fcn.00404d3e
pop ecx
pop ecx
lea ecx, [ebp - 0x94]
call fcn.0046163a
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.0045bdc5
test eax, eax
jne 0x454712
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
jl 0x4546ad
movzx eax, word [eax]
push eax
lea ecx, [ebp - 0x94]
call fcn.00463e00
test eax, eax
je 0x454750
test esi, esi
ja 0x45471f
cmp dword [ebp - 0x28], 0x190
jb 0x454750
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
cmp eax, 1
jne 0x454750
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0
call fcn.004616b5
xor esi, esi
inc esi
jmp 0x454693
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
mov ebx, 0x5000
test eax, eax
je 0x4547bb
push ecx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454413
pop ecx
cmp eax, 1
jne 0x4547bb
push dword [ebp - 0x14]
mov ecx, 0x4f1850
call fcn.00439d44
test eax, eax
jne 0x4547bb
push dword [ebp - 0x14]
mov ecx, 0x4f1850
call fcn.0043c642
test eax, eax
jne 0x4547bb
test esi, esi
ja 0x454996
cmp dword [ebp - 0x28], ebx
jae 0x454996
push 0x4f39f8
lea ecx, [ebp - 0x10]
call fcn.004028e9
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00447e36
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 3
call fcn.0045459a
pop ecx
test eax, eax
jne 0x454818
lea ecx, [ebp - 0x44]
call fcn.00441fd5
push dword [ebp - 0x44]
call fcn.0046d88b
pop ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0040290e
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0
call fcn.004616b5
xor esi, esi
jmp 0x454693
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x38]
and dword [ebp - 0x18], 0
sar eax, 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ebx
test eax, eax
jle 0x454967
mov ebx, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
jmp 0x45483d
mov edi, dword [ebp - 0x4c]
xor eax, eax
push 0x206
push eax
mov word [ebp + 0x208], ax
lea eax, [ebp + 0x20a]
push eax
call fcn.004701a0
add esp, 0xc
push 1
push 0x26
lea eax, [ebp + 0x208]
push eax
push 0
call ebx
push str.360360Safe
lea eax, [ebp + 0x208]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x44]
call fcn.0044213e
mov ax, word [eax]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x44]
mov word [ebp + 0x208], ax
call fcn.0044213e
movzx eax, word [eax]
mov ecx, dword [edi]
push eax
push edi
call dword [ecx + 0x4c]
mov edi, eax
mov esi, edx
lea eax, [ebp + 0x208]
shrd edi, esi, 0x14
push eax
lea ecx, [ebp - 0x10]
shr esi, 0x14
call fcn.0040285e
xor ecx, ecx
cmp esi, ecx
ja 0x454907
jb 0x4548cd
cmp edi, dword [ebp - 0x28]
jae 0x454907
mov eax, dword [ebp - 0x2c]
dec eax
cmp dword [ebp - 0x18], eax
jne 0x454bbc
mov eax, 0x190
cmp dword [ebp - 0x28], eax
jne 0x4548ec
test ecx, ecx
je 0x4547e6
mov dword [ebp - 0x28], eax
test esi, esi
ja 0x4548fb
cmp edi, eax
jb 0x4549d6
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
call fcn.00401d9d
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
test eax, eax
je 0x4549df
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454413
pop ecx
mov edi, 0x4f1850
cmp eax, 1
jne 0x4549e4
push dword [ebp - 0x10]
mov ecx, edi
call fcn.00439d44
test eax, eax
jne 0x4549e4
push dword [ebp - 0x10]
mov ecx, edi
call fcn.0043c642
test eax, eax
jne 0x4549e4
mov ecx, dword [ebp - 0x48]
call fcn.0045b9d0
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.00401d9d
lea ecx, [ebp - 0x44]
call fcn.00441fd5
push dword [ebp - 0x44]
call fcn.0046d88b
pop ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0040290e
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0
call fcn.004616b5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040290e
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.0047021a
add ebp, 0x414
leave
ret
or dword [ebp - 0x18], 0xffffffff
jmp 0x454bbc
mov edi, 0x4f1850
push 0x4f39f8
lea ecx, [ebp - 0x1c]
call fcn.004028e9
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x1c]
push 0x4cd954
push eax
call fcn.00403ac2
mov esi, dword [ebp - 0x1c]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x10]
push esi
call fcn.00403bb5
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
test eax, eax
je 0x454a6f
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454413
pop ecx
cmp eax, 1
jne 0x454a6f
push dword [ebp - 0x10]
mov ecx, edi
call fcn.00439d44
test eax, eax
jne 0x454a6f
push dword [ebp - 0x10]
mov ecx, edi
call fcn.0043c642
test eax, eax
je 0x454bd0
xor eax, eax
push 0x206
push eax
mov word [ebp], ax
lea eax, [ebp + 2]
push eax
call fcn.004701a0
add esp, 0xc
push 1
push 0x26
lea eax, [ebp]
push eax
push 0
call ebx
push str.360Safe
lea eax, [ebp]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x44]
call fcn.0044213e
mov ax, word [eax]
mov word [ebp], ax
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040285e
push dword [esi - 0xc]
lea ecx, [ebp - 0x10]
push esi
call fcn.00403bb5
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
test eax, eax
je 0x454b1f
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454413
pop ecx
cmp eax, 1
jne 0x454b1f
push dword [ebp - 0x10]
mov ecx, edi
call fcn.00439d44
test eax, eax
jne 0x454b1f
push dword [ebp - 0x10]
mov ecx, edi
call fcn.0043c642
test eax, eax
je 0x454bd0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x44]
call fcn.0044213e
movzx eax, word [eax]
push eax
lea ecx, [ebp - 0x10]
call fcn.00453b11
push str.:360Safe
lea ecx, [ebp - 0x10]
call fcn.00403a9d
push dword [esi - 0xc]
lea ecx, [ebp - 0x10]
push esi
call fcn.00403bb5
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454557
pop ecx
test eax, eax
je 0x454b82
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00403c4d
call fcn.00454413
pop ecx
cmp eax, 1
je 0x454bd0
mov edx, dword [ebp - 0x2c]
dec edx
mov eax, 0x190
cmp dword [ebp - 0x18], edx
jne 0x454bae
cmp dword [ebp - 0x28], eax
jne 0x454b99
xor ecx, ecx
je 0x454ba0
or dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x18], edx
jne 0x454bae
cmp dword [ebp - 0x28], eax
jne 0x454bae
xor eax, eax
je 0x454be3
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.0040290e
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c]
jl 0x45483a
jmp 0x454967
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.0040290e
jmp 0x454967
lea ecx, [esi - 0x10]
call fcn.0040290e
jmp 0x4547e6