Function at 0x18004d9b0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1800ab9c8]
xor rax, rsp
mov qword [rbp + 0xa0], rax
lea eax, [rcx - 9]
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x50], eax
mov rbx, r8
mov edi, ecx
cmp ecx, eax
jbe case.0x18004da37.55
mov r15d, dword [rsp + 0x50]
lea r8, [0x180000000]
mov r14d, dword [rsp + 0x50]
mov r12d, dword [rsp + 0x50]
mov r13d, dword [rsp + 0x50]
nop dword [rax]
lea eax, [rdi - 0x27]
cmp eax, 0x12
ja case.0x18004da37.40
mov ecx, dword [r8 + rax*4 + 0x4dfa0]
add rcx, r8
jmp rcx
mov r8, rbx
mov dword [rsp + 0x48], 0
lea rdx, [rsp + 0x48]
mov ecx, 0x6a
call fcn.180041a50
jmp 0x18004df3b
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x18004da78
mov edx, 0x7e
mov rcx, rsi
call fcn.180035b30
cmp eax, 1
je 0x18004df55
mov r9d, dword [rsp + 0x6c]
lea rax, [rbp - 0x70]
mov r8, qword [rbp - 0x80]
mov edx, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
jmp 0x18004df3b
mov esi, dword [rbx + 8]
mov edi, 0x3f
nop word [rax + rax]
lea eax, [rdi - 0x3f]
cmp eax, 6
ja case.0x18004dac7.65
mov ecx, dword [r8 + rax*4 + 0x4dfec]
add rcx, r8
jmp rcx
mov r15d, dword [rbx + 8]
jmp case.0x18004dac7.65
mov eax, dword [rbx + 0xc]
lea rdx, [rsp + 0x40]
mov r8, qword [rbx]
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], eax
mov r9d, SHSetInstanceExplorer
mov eax, dword [rbx + 8]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x48], 0
call fcn.1800483d0
lea r8, [0x180000000]
test eax, eax
js 0x18004dd6c
mov dword [rbx + 8], eax
jmp case.0x18004dac7.65
mov dword [rbx + 8], r15d
jmp case.0x18004dac7.65
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x38]
mov dword [rsp + 0x20], 0xdd
mov rdx, rbx
mov dword [rsp + 0x40], 0xfc
lea rcx, [0x18008bb28]
mov dword [rsp + 0x38], 0x61
call fcn.180044fc0
test eax, eax
jne 0x18004dd44
mov eax, dword [rbx + 8]
mov edi, 0xa1
mov dword [rbx + 0x14], eax
mov eax, edi
sub eax, 0xa1
je 0x18004dc7e
sub eax, 1
je 0x18004dd13
sub eax, 1
je 0x18004dcfe
sub eax, 1
je 0x18004dc41
cmp eax, 1
jne 0x18004dcfe
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x38]
mov dword [rsp + 0x20], 0xdd
mov rdx, rbx
mov dword [rsp + 0x40], 0xfc
lea rcx, [0x18008bb28]
mov dword [rsp + 0x38], 0x61
call fcn.180044fc0
test eax, eax
jne 0x18004dd44
mov r9, rbx
mov dword [rsp + 0x30], 1
mov r8d, 0x80
lea rdx, [rsp + 0x30]
lea rcx, [0x18008b857]
call fcn.180080480
test eax, eax
jns 0x18004dcfe
mov dword [rsp + 0x58], eax
jmp case.0x18004da37.55
mov r9, rbx
mov dword [rbx + 8], r14d
lea r8, [rsp + 0x30]
mov dword [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILAppendID
lea rcx, [0x18008b853]
call fcn.18004e010
test eax, eax
je 0x18004dd44
mov eax, dword [rbx + 8]
mov dword [rbx + 0x18], eax
jmp 0x18004dcfe
mov r14d, dword [rbx + 8]
lea r8, [rsp + 0x30]
mov r9, rbx
mov dword [rsp + 0x30], 1
xor edx, edx
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILAppendID
lea rcx, [0x18008b84f]
call fcn.18004e010
test eax, eax
je 0x18004dcf9
mov eax, dword [rbx + 8]
lea r9, [rsp + 0x40]
mov dword [rbx + 0x18], eax
lea r8, [rsp + 0x38]
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
lea rcx, [0x18008bb28]
mov rdx, rbx
mov dword [rsp + 0x20], 0xdd
mov dword [rsp + 0x40], 0xfc
mov dword [rsp + 0x38], 0x61
call fcn.180044fc0
test eax, eax
je 0x18004dcfe
mov edi, 0xa2
inc edi
cmp edi, 0xa6
jb 0x18004db92
mov edi, 0x40
jmp 0x18004dd49
mov r9, rbx
mov dword [rsp + 0x30], 1
mov r8d, 0x80
lea rdx, [rsp + 0x30]
lea rcx, [0x18008b852]
call fcn.180080480
test eax, eax
js 0x18004dc38
mov edi, 0x40
jmp 0x18004dd49
mov edi, 0x42
lea r8, [0x180000000]
inc edi
cmp edi, 0x46
jb 0x18004dab0
jmp 0x18004daa1
mov dword [rbx + 8], r15d
mov esi, r15d
jmp 0x18004daa1
mov dword [rbx + 8], esi
mov edi, 0x38
mov dword [rsp + 0x58], 1
jmp 0x18004df42
mov qword [rsp + 0x70], 0
jmp case.0x18004da37.40
mov dword [rsp + 0x68], 0x36
jmp case.0x18004da37.40
mov eax, dword [rdx]
lea rcx, [rsp + 0x30]
lea rdx, [rbx + 0x48]
mov dword [rsp + 0x30], eax
mov r8d, 0x125
call fcn.1800393f0
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 0
mov dword [rsp + 0x6c], 0
jmp 0x18004df3b
mov ecx, 0xc7
nop word [rax + rax]
mov eax, ecx
sub eax, 0xc5
je 0x18004df29
sub eax, 1
je 0x18004de10
cmp eax, 1
jne 0x18004df2d
mov r13d, dword [rbx + 8]
jmp 0x18004df2d
mov esi, dword [rbx + 8]
mov edi, 0xe2
nop dword [rax + rax]
mov eax, edi
sub eax, 0xe2
je 0x18004de99
sub eax, 1
je 0x18004dee4
sub eax, 1
je 0x18004de93
cmp eax, 1
jne 0x18004ded1
mov r8, qword [rbx]
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x38], eax
lea rcx, [rsp + 0x48]
mov eax, dword [rbx + 0xc]
mov r9d, SHSetInstanceExplorer
mov dword [rsp + 0x48], eax
mov eax, dword [rbx + 8]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0
call fcn.1800483d0
test eax, eax
js 0x18004df1a
mov dword [rbx + 8], eax
jmp 0x18004ded1
mov dword [rbx + 8], r12d
jmp 0x18004ded1
mov r12d, dword [rbx + 8]
lea r8, [rsp + 0x30]
mov r9, rbx
mov dword [rbx + 0x14], r12d
xor edx, edx
mov dword [rsp + 0x30], 2
lea rcx, [0x18008bc44]
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILAppendID
call fcn.18004e010
test eax, eax
mov eax, 0xe3
cmove edi, eax
inc edi
cmp edi, 0xe6
jb 0x18004de20
jmp 0x18004de10
mov eax, dword [rbx + 8]
lea rdx, [rsp + 0x30]
mov r9, rbx
mov dword [rbx + 0x18], eax
mov r8d, 0x80
mov dword [rsp + 0x30], 2
lea rcx, [0x18008bc48]
call fcn.180080480
test eax, eax
jns 0x18004de10
mov dword [rsp + 0x58], eax
jmp case.0x18004da37.55
mov dword [rbx + 8], esi
mov ecx, 0xc6
mov edi, 0x39
jmp 0x18004df2d
mov dword [rbx + 8], r13d
dec ecx
cmp ecx, 0xc4
ja 0x18004dde0
lea r8, [0x180000000]
mov rdx, qword [rsp + 0x60]
dec edi
cmp edi, dword [rsp + 0x50]
ja 0x18004da20
jmp case.0x18004da37.55
movsd xmm0, qword [0x1800a4c48]
jmp 0x18004df64
movsd xmm0, qword [rdx + 8]
movsd qword [rsp + 0x58], xmm0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180089600
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret