Function at 0x1000ed80
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10028a86
mov eax, dword fs:[0]
push eax
sub esp, 0x438
mov eax, dword [0x10031018]
xor eax, esp
mov dword [esp + 0x430], eax
push ebx
push esi
push edi
mov eax, dword [0x10031018]
xor eax, esp
push eax
lea eax, [esp + 0x448]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], eax
mov byte [esp + 0x13], 0
test eax, eax
jne 0x1000ede7
mov dword [esi + 0x650], 2
xor al, al
jmp 0x1000f078
mov eax, dword [esi + 0x210]
test eax, eax
je 0x1000f06a
push 0
push 0
push 0
lea edi, [esi + 4]
push edi
push eax
push 0
mov dword [esp + 0x40], edi
call dword [sym.imp.WINSPOOL.DRV_DocumentPropertiesW]
push eax
push 0x40
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
mov dword [esp + 0x1c], ebx
test ebx, ebx
je 0x1000f05e
mov eax, dword [esi + 0x210]
push 2
push 0
push ebx
push edi
push eax
push 0
call dword [sym.imp.WINSPOOL.DRV_DocumentPropertiesW]
cmp eax, 1
jne 0x1000f04b
lea edx, [esp + 0x2c]
push edx
xor ecx, ecx
push 0x104
mov word [esp + 0x34], cx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x1000f038
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [esp + eax*2 + 0x2a], 0x5c
je 0x1000ee8a
push 0x1002b2bc
mov esi, 0x208
lea ebx, [esp + 0x30]
call fcn.1000d1d0
lea esi, [esp + 0x14]
call fcn.1000a8b0
lea edx, [esp + 0x2c]
mov edi, esi
mov dword [esp + 0x450], 0
call fcn.1000aa00
mov esi, dword [esp + 0x28]
mov edx, esi
mov eax, edi
call fcn.10011400
mov edx, str..xml
mov eax, edi
call fcn.10011400
mov ecx, edi
push ecx
mov ecx, 0x1002b2b8
call fcn.1000ab10
add esp, 4
test al, al
je 0x1000f014
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
mov ecx, dword [edi + 0x210]
mov ebx, dword [esp + 0x14]
push edx
push eax
push ecx
mov ecx, ebx
mov edx, edi
call fcn.10010080
test al, al
je 0x1000eff4
push 1
push edi
lea ecx, [esp + 0x20]
call fcn.1000fbd0
mov byte [esp + 0x450], 1
mov edx, dword [edi + 0x210]
mov ecx, dword [esp + 0x18]
push edx
push edi
mov edx, ebx
call fcn.1000fcd0
cmp al, 1
jne 0x1000efc1
mov eax, dword [edi + 0x648]
test eax, eax
je 0x1000efcb
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.100026e0
test al, al
je 0x1000ef8e
mov ecx, dword [esp + 0x24]
push ebx
mov edx, edi
call fcn.10012890
test al, al
je 0x1000efcb
mov esi, ebx
mov byte [esp + 0x13], 1
call fcn.10010cf0
lea eax, [esp + 0x18]
call fcn.1000a970
lea eax, [esp + 0x14]
call fcn.1000a970
mov ebx, dword [esp + 0x1c]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
mov esi, ebx
mov dword [edi + 0x650], 0xb
call fcn.10010cf0
lea eax, [esp + 0x18]
call fcn.1000a970
lea eax, [esp + 0x14]
call fcn.1000a970
mov ebx, dword [esp + 0x1c]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
mov dword [edi + 0x650], 0xc
mov esi, ebx
call fcn.10010cf0
lea eax, [esp + 0x18]
call fcn.1000a970
lea eax, [esp + 0x14]
call fcn.1000a970
mov ebx, dword [esp + 0x1c]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
lea eax, [esp + 0x14]
mov dword [edi + 0x650], 0x1f
call fcn.1000a970
mov ebx, dword [esp + 0x1c]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
mov dword [edx + 0x650], 7
call fcn.1000a970
mov ebx, dword [esp + 0x1c]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
push ebx
mov dword [esi + 0x650], 7
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
push ebx
mov dword [esi + 0x650], 1
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x1000f074
mov dword [esi + 0x650], 4
jmp 0x1000f074
mov dword [esi + 0x650], 3
mov al, byte [esp + 0x13]
mov ecx, dword [esp + 0x448]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x430]
xor ecx, esp
call fcn.1001cf84
mov esp, ebp
pop ebp
ret 4