Function at 0x1001bbe4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c7b2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push esi
push edi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1001bc48
lea eax, [ebp + 0x14]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [eax]
test eax, eax
je 0x1001bc2e
push 0x23f2
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x1001bc43
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], 0xfffffffb
jmp 0x1001be88
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x54], 0
push 3
lea ecx, [ebp - 0x78]
call fcn.1002cb22
and dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0xfa8fad7
mov dword [ebp - 0x14], 0
jmp 0x1001bc87
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1001bca0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1002cc7e
mov dword [eax], 0xe0f758fc
jmp 0x1001bc80
mov dword [ebp - 0x10], 0
jmp 0x1001bcb0
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff3
jne 0x1001be62
push 3
lea ecx, [ebp - 0x6c]
call fcn.1002cb22
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], 0xe197e7c1
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x18], 0
jmp 0x1001bce6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1001bcff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
mov dword [eax], 0x7d7c118
jmp 0x1001bcdf
cmp dword [ebp - 0x10], 0
je 0x1001bdee
cmp dword [ebp - 0x54], 0
jne 0x1001bd87
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
imul eax, dword [eax], 9
test eax, eax
je 0x1001bd2f
cmp dword [ebp - 0x1c], 0
je 0x1001bd2f
mov dword [ebp - 0x20], 1
jmp 0x1001bd33
and dword [ebp - 0x20], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x20]
je 0x1001bd4d
mov dword [ebp - 0x24], 1
jmp 0x1001bd51
and dword [ebp - 0x24], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax]
jne 0x1001bd7d
cmp dword [ebp - 0x10], 0
jne 0x1001bd7d
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
cmp dword [eax], 0
jne 0x1001bd7d
and dword [ebp - 0x28], 0
jmp 0x1001bd84
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
cmp dword [eax], 0xaed1d25b
jne 0x1001bda2
mov dword [ebp - 0x2c], 1
jmp 0x1001bda6
and dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c], eax
jne 0x1001bdbd
cmp dword [ebp - 0x1c], 0
je 0x1001bdbd
mov dword [ebp - 0x30], 1
jmp 0x1001bdc1
and dword [ebp - 0x30], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
mov esi, eax
imul edi, dword [ebp - 0x30], 0x639e
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
imul edi, dword [eax]
cmp dword [esi], edi
jne 0x1001bdee
mov dword [ebp - 0x34], 1
jmp 0x1001bdf2
and dword [ebp - 0x34], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [eax]
jl 0x1001be0c
mov dword [ebp - 0x38], 1
jmp 0x1001be10
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
push 1
lea ecx, [ebp - 0x78]
call fcn.1002cc7e
mov dword [eax], 0x8ca8
mov dword [ebp - 0x3c], 0x8ca8
mov esi, dword [ebp - 0x3c]
push 1
lea ecx, [ebp - 0x6c]
call fcn.1002cc7e
cmp esi, dword [eax]
jne 0x1001be47
mov dword [ebp - 0x40], 1
jmp 0x1001be4b
and dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.1002cbfb
jmp 0x1001bca9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.1002cbfb
push 0x7ab
push 0
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push 0x6cab
call fcn.1000cf88
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret