Function at 0x5aec00
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov eax, 0x5ae6b8
call fcn.00406a48
xor eax, eax
push ebp
push 0x5afb5e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5afb70
push 0xffffffffffffffff
push 0
call sub.kernel32.dll_CreateMutexA
mov dword [0x5c1a74], eax
call fcn.0040299c
push 0x5afb80
call sub.user32.dll_RegisterWindowMessageA
mov edx, dword [0x5bba58]
mov dword [edx], eax
mov eax, dword [0x5bba20]
mov edx, 0x5afb98
call fcn.00403cf0
mov eax, dword [0x5bbee4]
mov eax, dword [eax]
call fcn.0044ee94
mov eax, dword [0x5bbee4]
mov eax, dword [eax]
mov edx, 0x5afc88
call fcn.0044eab4
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x5bb928]
mov dword [edx], eax
xor eax, eax
push ebp
push 0x5afb3c
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [0x5bbee4]
mov eax, dword [eax]
call fcn.0044f42c
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.004095a8
lea eax, [ebp - 0x10]
mov edx, 0x5afc9c
call fcn.00403f20
mov eax, dword [ebp - 0x10]
call fcn.0040934c
test al, al
je 0x5aed81
xor ecx, ecx
mov dl, 1
mov eax, dword [0x496100]
call fcn.00496278
mov edx, dword [0x5bbda0]
mov dword [edx], eax
xor eax, eax
push ebp
push 0x5aed62
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5bbda0]
mov eax, dword [eax]
mov byte [eax + 0x24], 1
mov eax, dword [0x5bbda0]
mov eax, dword [eax]
mov byte [eax + 0x25], 1
mov eax, dword [0x5bbda0]
mov eax, dword [eax]
add eax, 0x28
mov edx, 0x5afcb4
call fcn.00403cf0
lea edx, [ebp - 0x14]
mov eax, dword [0x5bbee4]
mov eax, dword [eax]
call fcn.0044f42c
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.004095a8
lea eax, [ebp - 0x10]
mov edx, 0x5afc9c
call fcn.00403f20
mov edx, dword [ebp - 0x10]
mov eax, dword [0x5bbda0]
mov eax, dword [eax]
call fcn.004967e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5aed81
mov dl, 1
mov eax, dword [0x48ae84]
call fcn.0048afcc
mov dword [0x5c1950], eax
xor eax, eax
push ebp
push 0x5aef12
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x80000001
call fcn.005ae580
test al, al
jne 0x5aedc0
mov eax, 0x80000002
call fcn.005ae580
test al, al
je 0x5aeeba
push 0x5c1954
push 0x1a
push 0
call sub.shell32.dll_SHGetSpecialFolderLocation
call fcn.00494950
test al, al
je 0x5aeeba
mov eax, 0x5c1968
mov edx, 0x104
call fcn.00404248
mov eax, dword [0x5c1968]
call fcn.004040dc
push eax
mov eax, dword [0x5c1954]
push eax
call sub.shell32.dll_SHGetPathFromIDList
test eax, eax
je 0x5aee1f
mov eax, dword [0x5c1968]
call fcn.004040dc
call fcn.00409918
mov edx, eax
mov eax, 0x5c1968
call fcn.00404248
mov eax, 0x5c1968
call fcn.00469a88
mov eax, dword [0x5c1968]
call fcn.00469ac4
test al, al
je 0x5aee71
mov eax, dword [0x5bbd9c]
mov edx, dword [0x5c1968]
call fcn.00403cf0
mov eax, dword [0x5bbd9c]
mov edx, 0x5afcc4
call fcn.00403f20
mov eax, dword [0x5bbd9c]
mov eax, dword [0x5bbd9c]
call fcn.00469a88
mov eax, dword [0x5bbd9c]
mov eax, dword [eax]
call fcn.0046aac4
cmp dword [0x5c1954], 0
je 0x5aeeba
push 0x5c1958
call sub.shell32.dll_SHGetMalloc
call fcn.00494950
test al, al
je 0x5aeeba
mov eax, dword [0x5c1954]
push eax
mov eax, dword [0x5c1958]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
test eax, eax
jle 0x5aeeba
mov eax, dword [0x5c1954]
push eax
mov eax, dword [0x5c1958]
push eax
mov eax, dword [eax]
call dword [eax + 0x14]
xor eax, eax
mov dword [0x5c1954], eax
mov eax, dword [0x5bbd9c]
mov eax, dword [eax]
mov edx, dword [0x5bc024]
mov edx, dword [edx]
call fcn.00404028
jne 0x5aeeda
mov eax, 0x80000001
call fcn.005ae498
mov eax, dword [0x5bbd9c]
mov eax, dword [eax]
mov edx, dword [0x5bc024]
mov edx, dword [edx]
call fcn.00404028
jne 0x5aeefa
mov eax, 0x80000002
call fcn.005ae498
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5aef19
mov eax, dword [0x5c1950]
call fcn.00402fb8
ret