Function at 0x456060
Capabilities:
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1178
call fcn.00468360
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x628], ax
push 0x206
push 0
lea ecx, [ebp - 0x626]
push ecx
call fcn.00467d60
add esp, 0xc
xor edx, edx
mov word [ebp - 0x420], dx
push 0x206
push 0
lea eax, [ebp - 0x41e]
push eax
call fcn.00467d60
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.00467d60
add esp, 0xc
xor eax, eax
mov word [ebp - 0x830], ax
push 0x206
push 0
lea ecx, [ebp - 0x82e]
push ecx
call fcn.00467d60
add esp, 0xc
mov dword [ebp - 0x954], 4
push 0x11c
push 0
lea edx, [ebp - 0x950]
push edx
call fcn.00467d60
add esp, 0xc
mov dword [ebp - 0x950], 0x11c
lea eax, [ebp - 0x950]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x456168
push str.ReadLockedFiles____OSVERSIONINFOEX_failed
call fcn.004573f0
add esp, 4
mov dword [ebp - 0x950], 0x114
lea ecx, [ebp - 0x950]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x456168
xor eax, eax
jmp 0x4563f8
cmp dword [ebp + 0xc], 0
je 0x456227
mov edx, dword [ebp + 8]
push edx
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathStripPathW]
push 3
lea edx, [ebp - 0x420]
push edx
push 0x104
lea eax, [ebp - 0x830]
push eax
call fcn.0046afc1
add esp, 0x10
mov ecx, dword [ebp + 0xc]
push ecx
push 0x104
lea edx, [ebp - 0x628]
push edx
call fcn.0046a6ad
add esp, 0xc
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [ebp - 0x210]
push ecx
push 0
lea edx, [ebp - 0x830]
push edx
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 0
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004557e0
add esp, 0xc
test eax, eax
jne 0x456216
xor eax, eax
jmp 0x4563f8
mov eax, dword [ebp - 0x954]
or eax, 1
mov dword [ebp - 0x954], eax
jmp 0x45623f
mov ecx, dword [ebp + 8]
push ecx
push 0x104
lea edx, [ebp - 0x210]
push edx
call fcn.0046a6ad
add esp, 0xc
cmp dword [ebp - 0x940], 2
jne 0x45628a
mov eax, dword [ebp - 0x954]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x210]
push edx
push str.MoveFileEx__s___s___d
call fcn.00456fc0
add esp, 0x10
jmp 0x4563f6
xor eax, eax
mov word [ebp - 0xb60], ax
push 0x206
push 0
lea ecx, [ebp - 0xb5e]
push ecx
call fcn.00467d60
add esp, 0xc
xor edx, edx
mov word [ebp - 0xd68], dx
push 0x206
push 0
lea eax, [ebp - 0xd66]
push eax
call fcn.00467d60
add esp, 0xc
lea ecx, [ebp - 0xd68]
push ecx
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, [ebp - 0xd68]
push edx
push 0x104
lea eax, [ebp - 0xb60]
push eax
call fcn.0046a6ad
add esp, 0xc
push str.WinInit.ini
lea ecx, [ebp - 0xb60]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
xor edx, edx
mov word [ebp - 0xf70], dx
push 0x206
push 0
lea eax, [ebp - 0xf6e]
push eax
call fcn.00467d60
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xf70]
push ecx
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
xor eax, eax
mov word [ebp - 0x1178], ax
push 0x206
push 0
lea ecx, [ebp - 0x1176]
push ecx
call fcn.00467d60
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x45637f
push 0x104
lea edx, [ebp - 0x1178]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
jmp 0x456398
push 0x4bdfd4
push 0x104
lea ecx, [ebp - 0x1178]
push ecx
call fcn.0046a6ad
add esp, 0xc
lea edx, [ebp - 0xb60]
push edx
lea eax, [ebp - 0xf70]
push eax
lea ecx, [ebp - 0x1178]
push ecx
push str.rename
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea edx, [ebp - 0xb60]
push edx
push 0x4bdfec
push 0x4bdff0
push 0x4bdff4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xf70]
push ecx
lea edx, [ebp - 0x1178]
push edx
push str.ReadLockedFiles____WritePrivateProfileString_rename___s___s___s_
call fcn.00456fc0
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00467d4f
mov esp, ebp
pop ebp
ret