Function at 0x4eaa40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
lea esi, [ebp - 0x418]
lea ebx, [ebp - 0x210]
sub esp, 0x448
mov dword [esp + 0x14], 0x104
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], 0x5e8772
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
sub esp, 0x18
mov dword [esp + 4], ebx
mov dword [esp], 0x104
call dword [sym.imp.kernel32.dll_GetTempPathW]
mov edx, ebx
sub esp, 8
cmp word [ebp - 0x210], 0
je 0x4eaab9
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x4eaab0
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4eaac0
xor edx, edx
xor eax, eax
mov dword [ebp + eax - 0x434], edx
add eax, 4
cmp eax, 0x1c
jb 0x4eaad4
lea eax, [ebp - 0x438]
mov dword [ebp - 0x430], ebx
mov dword [ebp - 0x438], 0x20
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CreateActCtxW]
sub esp, 4
mov esi, eax
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6ba
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 4], 0x5e8780
mov dword [esp + 8], eax
xor eax, eax
cmp esi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6bc
mov eax, dword [ebp - 0x438]
mov dword [esp + 4], 0x5e87a5
cmp eax, 0x20
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6bd
mov eax, dword [ebp - 0x434]
mov dword [esp + 4], 0x5e87b1
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6be
mov eax, dword [ebp - 0x430]
mov dword [esp + 4], 0x5e87be
cmp eax, ebx
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6bf
movzx edx, word [ebp - 0x42c]
mov dword [esp + 4], 0x5e87cb
test dx, dx
mov dword [esp + 8], edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6c0
movzx edx, word [ebp - 0x42a]
mov dword [esp + 4], 0x5e87e6
test dx, dx
mov dword [esp + 8], edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6c1
mov eax, dword [ebp - 0x428]
mov dword [esp + 4], 0x5e87f2
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6c2
mov eax, dword [ebp - 0x424]
mov dword [esp + 4], 0x5e880a
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6c3
mov eax, dword [ebp - 0x420]
mov dword [esp + 4], 0x5e881d
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
call fcn.0057d110
mov dword [eax], 0x5e82d4
mov dword [eax + 4], 0x6c4
mov eax, dword [ebp - 0x41c]
mov dword [esp + 4], 0x5e8833
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004e88d0
lea esp, [ebp - 8]
mov eax, esi
pop ebx
pop esi
pop ebp
ret