Function at 0x101deeb
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 4]
call fcn.010164f9
mov ecx, dword [ebp + 8]
call fcn.01015d2c
lea ecx, [ebp - 4]
call fcn.01015a9f
test eax, eax
jne 0x101e181
lea ecx, [ebp + 0x10]
call fcn.01015a9f
test eax, eax
jne 0x101e181
cmp dword [ebp + 0x14], eax
je 0x101e181
lea ecx, [ebp - 0x10]
call fcn.01015d2c
push 0x82
call fcn.010209f1
mov edi, eax
test edi, edi
je 0x101df94
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x40
push edi
call esi
mov ebx, eax
test ebx, ebx
je 0x101df8e
cmp ebx, 0x40
jb 0x101df81
lea eax, [ebx + ebx + 2]
push eax
call fcn.010209f1
mov edi, eax
test edi, edi
je 0x101df94
push ebx
push edi
call esi
test eax, eax
jne 0x101df81
push edi
call fcn.0101c26d
xor edi, edi
test edi, edi
je 0x101df94
push edi
lea ecx, [ebp - 0x10]
call fcn.01015f1e
push edi
call fcn.0101c26d
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0xc]
call fcn.010164f9
lea ecx, [ebp - 0xc]
call fcn.010160ee
mov edi, 0x10051d8
push edi
lea eax, [ebp - 0xc]
push eax
call fcn.01015b5c
test eax, eax
mov ebx, 0x10051c4
je 0x101dfc5
lea eax, [ebp + 0x10]
jmp 0x101dfd6
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.01015b5c
test eax, eax
je 0x101dfdf
lea eax, [ebp - 0x10]
mov ecx, dword [ebp + 8]
push eax
call fcn.01015ec4
mov ecx, dword [ebp + 8]
call fcn.01015a9f
cmp eax, 1
jne 0x101e171
lea ecx, [ebp - 8]
call fcn.01015d2c
push edi
lea ecx, [ebp - 8]
call fcn.01015f1e
lea ecx, [ebp - 8]
call fcn.01020ceb
push eax
lea ecx, [ebp - 4]
call fcn.01015ca0
mov esi, eax
cmp esi, 0xffffffff
jne 0x101e03e
push ebx
lea ecx, [ebp - 8]
call fcn.01015f1e
lea ecx, [ebp - 8]
call fcn.01020ceb
push eax
lea ecx, [ebp - 4]
call fcn.01015ca0
mov esi, eax
cmp esi, 0xffffffff
je 0x101e128
lea ecx, [ebp - 8]
call fcn.01015a94
add esi, eax
push esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.01016633
push eax
lea ecx, [ebp - 4]
call fcn.01015ec4
lea ecx, [ebp - 0x14]
call fcn.01015bce
lea ecx, [ebp - 4]
call fcn.01015a9f
test eax, eax
jne 0x101e169
push eax
lea ecx, [ebp - 4]
call fcn.01015b25
cmp ax, 0x2b
jne 0x101e169
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.01016633
push eax
lea ecx, [ebp - 4]
call fcn.01015ec4
lea ecx, [ebp - 0x14]
call fcn.01015bce
lea ecx, [ebp - 4]
call fcn.01015a9f
test eax, eax
jne 0x101e169
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.010164f9
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x14]
push eax
call fcn.01020699
push eax
lea ecx, [ebp - 4]
call fcn.01015ec4
lea ecx, [ebp - 0x14]
call fcn.01015bce
lea ecx, [ebp - 4]
call fcn.01016490
lea ecx, [ebp - 4]
call fcn.01016441
lea ecx, [ebp - 4]
call fcn.01015a9f
test eax, eax
jne 0x101e169
push edi
lea eax, [ebp - 8]
push eax
call fcn.01015b5c
test eax, eax
push dword [ebp - 4]
je 0x101e113
push dword [ebp + 0x10]
jmp 0x101e116
push dword [ebp - 0x10]
push 0x1002530
push dword [ebp + 8]
call fcn.01016426
add esp, 0x10
jmp 0x101e169
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.010164f9
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x14]
push eax
call fcn.01020699
push eax
lea ecx, [ebp - 4]
call fcn.01015ec4
lea ecx, [ebp - 0x14]
call fcn.01015bce
lea ecx, [ebp - 4]
call fcn.01015a9f
test eax, eax
jne 0x101e169
mov ecx, dword [ebp + 8]
lea eax, [ebp - 4]
push eax
call fcn.01015ec4
lea ecx, [ebp - 8]
call fcn.01015bce
lea ecx, [ebp - 0xc]
call fcn.01015bce
lea ecx, [ebp - 0x10]
call fcn.01015bce
lea ecx, [ebp - 4]
call fcn.01015bce
lea ecx, [ebp + 0xc]
call fcn.01015bce
lea ecx, [ebp + 0x10]
call fcn.01015bce
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
leave
ret 0x10