Function at 0x5e008580
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
push ebx
push esi
push edi
lea eax, [ebp - 0x424]
xor esi, esi
push 0x208
push eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], 0xc
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp dword [ebp + 0xc], esi
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
jne 0x5e008634
lea eax, [ebp - 0x21c]
push esi
push eax
push esi
push esi
push edi
call fcn.5e012050
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 0x14
lea eax, [ebp - 0x424]
push eax
push edi
call ebx
push edi
call fcn.5e008aba
pop ecx
lea eax, [ebp - 0x21c]
push eax
push edi
call esi
push dword [ebp - 4]
lea eax, [ebp - 0x1c]
push 0x5e001b88
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1c]
push eax
push edi
call esi
push 0x5e001b80
push edi
call esi
push edi
call fcn.5e008aeb
test eax, eax
pop ecx
je 0x5e008632
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x3e7
jle 0x5e0085d7
jmp 0x5e00886b
xor esi, esi
push esi
push 0x80000080
lea eax, [ebp - 0x10]
push 2
push eax
push esi
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x5e00886b
push dword [ebp + 0x14]
lea eax, [ebp - 0x11c]
push eax
call ebx
cmp byte [ebp - 0x11c], 0
lea eax, [ebp - 0x11c]
je 0x5e00868e
mov cl, byte [eax]
cmp cl, 0xa
je 0x5e00867f
cmp cl, 0xd
jne 0x5e008682
mov byte [eax], 0x20
push eax
call dword [sym.imp.USER32.dll_CharNextA]
cmp byte [eax], 0
jne 0x5e008673
push 0x5e001b6c
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001b54
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001b44
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001b28
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001b1c
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001af4
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001ae0
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001ac8
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001abc
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001aa4
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
mov ebx, 0x5e001a98
push ebx
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
cmp dword [ebp + 0x10], 0
mov eax, 0x5e001a8c
jne 0x5e008786
mov eax, 0x5e001a80
push eax
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
mov edi, 0x5e001a6c
push edi
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001ae0
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001a50
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001a44
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001a2c
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push ebx
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e0013b4
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push edi
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001a1c
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push 0x5e001a0c
push esi
call fcn.5e008a41
pop ecx
test eax, eax
pop ecx
je 0x5e008864
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x5e00886b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
leave
ret