Function at 0x18005b370
Capabilities:
Get common file path

Disassembly:
jmp 0x18005b370
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x9c0]
sub rsp, 0xac0
mov rax, qword [0x1802678f8]
xor rax, rsp
mov qword [rbp + 0x9b0], rax
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x20a
call fcn.180005f33
lea rdx, [rbp + 0x7a0]
mov ecx, 0x105
call qword [0x180298310]
mov ebx, eax
lea ecx, [rax - 1]
cmp ecx, 0x103
ja 0x18005b701
mov rbx, 0xffffffffffffffff
lea rcx, [rbp + 0x7a0]
mov rax, rbx
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x18005b3e0
cmp rax, 0xf6
jbe 0x18005b403
lea rcx, str.CShadowPlayApi::DeleteLogFile:_Temp_Path_exceeds_supported_length
call fcn.18000a056
jmp 0x18005b589
lea rcx, [rbp + 0x7a0]
call qword [0x1802988b0]
test eax, eax
jne 0x18005b42d
call qword [0x180298248]
mov edx, eax
lea rcx, str.CShadowPlayApi::DeleteLogFile:_Temp_path_does_not_exist__err__d_
call fcn.18000a056
jmp 0x18005b589
mov qword [rsp + 0xad0], rsi
lea rcx, [rsp + 0x30]
xor esi, esi
mov qword [rsp + 0xad8], rdi
mov dword [rsp + 0x30], esi
call fcn.18000a443
test eax, eax
je 0x18005b45a
call fcn.180007b2b
mov dword [rsp + 0x30], eax
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x208
call fcn.180005f33
xor eax, eax
lea rcx, [rbp + 0x590]
xorps xmm0, xmm0
mov qword [rsp + 0x48], rax
xor edx, edx
mov word [rsp + 0x50], ax
mov r8d, 0x208
movups xmmword [rsp + 0x38], xmm0
call fcn.180005f33
xor edx, edx
lea rcx, [rbp + 0x172]
mov r8d, 0x206
call fcn.180005f33
xor edx, edx
lea rcx, [rbp + 0x380]
mov r8d, 0x208
call fcn.180005f33
lea rax, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8023
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
test eax, eax
js 0x18005b6e2
lea rax, [rsp + 0x60]
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], si
jne 0x18005b4f0
cmp rbx, 0xd5
jbe 0x18005b510
lea rcx, str.CShadowPlayApi::DeleteLogFile:_Log_Path_exceeds_supported_length
call fcn.18000a056
jmp 0x18005b579
lea r8, str.NVIDIA_CorporationShadowPlay_
mov edx, 0x104
lea rcx, [rsp + 0x60]
call fcn.18000b4ba
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rbp + 0x590]
call fcn.18000b4ba
lea r8, [0x1801f6cf0]
mov edx, 0x104
lea rcx, [rbp + 0x590]
call fcn.18000b4ba
lea rcx, [rbp + 0x590]
call qword [0x1802988b0]
test eax, eax
jne 0x18005b5a9
call qword [0x180298248]
mov edx, eax
lea rcx, str.CShadowPlayApi::DeleteLogFile_Log_File_Path_does_not_exist__err__d_
call fcn.18000a056
mov rsi, qword [rsp + 0xad0]
mov rdi, qword [rsp + 0xad8]
mov rcx, qword [rbp + 0x9b0]
xor rcx, rsp
call fcn.180003008
mov rbx, qword [rsp + 0xae0]
add rsp, 0xac0
pop rbp
ret
mov ebx, 0x64
nop
mov ecx, dword [rsp + 0x30]
lea r8, str.NVSP__03d.TMP
mov r9d, ecx
mov eax, 0x10624dd3
mul ecx
inc ecx
shr edx, 6
imul eax, edx, 0x3e8
mov edx, 0xd
mov dword [rsp + 0x30], ecx
lea rcx, [rsp + 0x38]
sub r9d, eax
call fcn.180009d6d
lea r8, [rsp + 0x60]
mov word [rbp + 0x170], si
mov edx, 0x104
lea rcx, [rbp + 0x170]
call fcn.18000b4ba
lea r8, [rsp + 0x38]
mov edx, 0x104
lea rcx, [rbp + 0x170]
call fcn.18000b4ba
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x590]
call fcn.180005cf9
test eax, eax
je 0x18005b655
call qword [0x180298248]
mov r8d, ebx
lea rcx, str.CShadowPlayApi::DeleteLogFile_Failed_to_rename_file__err__d___tries_remaining__d_
mov edx, eax
call fcn.18000a056
add ebx, 0xffffffff
jne 0x18005b5b0
jmp 0x18005b579
lea r8, [rbp + 0x7a0]
mov word [rbp + 0x380], si
mov edx, 0x104
lea rcx, [rbp + 0x380]
call fcn.18000b4ba
lea r8, [rsp + 0x38]
mov edx, 0x104
lea rcx, [rbp + 0x380]
call fcn.18000b4ba
xor r8d, r8d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x170]
call qword [0x180298330]
test eax, eax
je 0x18005b6ce
lea rcx, [rbp + 0x380]
call qword [0x180298308]
test eax, eax
jne 0x18005b579
call qword [0x180298248]
mov edx, eax
lea rcx, str.CShadowPlayApi::DeleteLogFile:_DeleteFile_Failed__err__d_
jmp 0x18005b574
call qword [0x180298248]
mov edx, eax
lea rcx, str.CShadowPlayApi::DeleteLogFile_MoveFileEx_Failed_to_move_file__err__d_
jmp 0x18005b574
lfence
call qword [0x180298248]
mov edx, edi
lea rcx, str.CShadowPlayApi::DeleteLogFile:_SHGetFolderPath_Failed_with__X__err__d_
mov r8d, eax
call fcn.18000a056
jmp 0x18005b579
call qword [0x180298248]
mov edx, ebx
lea rcx, str.CShadowPlayApi::DeleteLogFile:_GetTempPath_failed_with__d__err__d_
mov r8d, eax
call fcn.18000a056
jmp 0x18005b589