Function at 0x413123
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa4
push ebx
push esi
mov dword [ebp - 4], ecx
mov ebx, 0x81
push edi
xor esi, esi
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0xaa2]
mov word [ebp - 0xaa4], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xaa4]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x41335a
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x282]
mov word [ebp - 0x284], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [ebp - 0x14]
mov dword [ebp - 0x18], esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
jne 0x4131d3
and word [ebp - 0x7c], 0
push 0x18
pop ecx
xor eax, eax
lea edi, [ebp - 0x7a]
push 0x32
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xaa4]
push eax
lea eax, [ebp - 0x284]
push eax
call esi
jmp 0x4131f3
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0xaa4]
push 0x426174
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov edx, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [edx + 0x24], eax
je 0x41329e
cmp dword [edx + 0x34], eax
je 0x41329e
mov edx, dword [edx + 0x6c]
mov ecx, ebx
lea edi, [ebp - 0x692]
mov word [ebp - 0x694], ax
rep stosd dword es:[edi], eax
test edx, edx
stosw word es:[edi], ax
jne 0x41322d
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push 0x429afc
lea eax, [ebp - 0x694]
push edx
push eax
call esi
lea eax, [ebp - 0x694]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41329b
and word [ebp - 0x48c], 0
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x48a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x284]
push 0x429afc
push eax
lea eax, [ebp - 0x48c]
push eax
call esi
lea eax, [ebp - 0x48c]
push 0
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.004016c4
add esp, 0xc
test eax, eax
je 0x41329b
mov dword [ebp - 8], 1
mov edx, dword [ebp - 4]
and word [ebp - 0x89c], 0
mov edx, dword [edx + 0x6c]
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x89a]
rep stosd dword es:[edi], eax
test edx, edx
stosw word es:[edi], ax
jne 0x4132c1
mov edx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push 0x429ac4
lea eax, [ebp - 0x89c]
push edx
push eax
call esi
lea eax, [ebp - 0x89c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41332f
and word [ebp - 0x48c], 0
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x48a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x284]
push 0x429ac4
push eax
lea eax, [ebp - 0x48c]
push eax
call esi
lea eax, [ebp - 0x48c]
push 0
push eax
lea eax, [ebp - 0x89c]
push eax
call fcn.004016c4
add esp, 0xc
test eax, eax
je 0x41332f
mov dword [ebp - 8], 1
cmp dword [ebp - 8], 0
je 0x41335a
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
push eax
lea eax, [ebp - 0x284]
push eax
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x178]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
pop edi
pop esi
pop ebx
leave
ret