Function at 0x100018d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x100099f7]
sub eax, 0xebe18cdc
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], ecx
push str.LocalzjGPN6t
mov ecx, dword [ebp - 0x30]
sub ecx, 0x57867dd0
push ecx
mov dword [ebp - 0x4c], 0x98138646
call dword [sym.imp.kernel32.dll_CreateJobObjectA]
mov dword [ebp - 8], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x30]
sub eax, 0x57867dd0
cmp dword [ebp - 8], eax
je 0x10001961
cmp dword [ebp - 0x30], 0
je 0x100019be
mov byte [ebp - 0x5c], 0xa6
lea eax, [ebp - 0x28]
push eax
mov edx, dword [ebp - 0x30]
sub edx, 0x57867dc0
push edx
mov byte [ebp - 0x5c], 0x9e
mov byte [ebp - 0x54], 0x7e
call dword [sym.imp.kernel32.dll_GetCurrentDirectoryW]
mov edx, dword [ebp - 0x30]
and edx, dword [0x100099f3]
mov dword [0x1000c214], edx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x3c], ecx
push ecx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x4c], 0xb7
mov ecx, dword [ebp - 0x30]
add ecx, 0xa8798232
push ecx
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x38]
push edx
test dword [ebp - 0x30], 0xde
jne 0x1000198b
lea eax, [ebp - 0x4c]
push eax
call fcn.100013e0
add esp, 4
mov dword [ebp - 0x3c], 0xbde9fb3d
mov eax, dword [ebp - 0x30]
sub eax, 0x57867dd1
push eax
push str.SRmIMSxUh4
mov word [ebp - 0x44], 0x5380
mov eax, dword [ebp - 0x30]
add eax, 0xa8f98430
push eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x30]
add eax, 0xa8798630
push eax
call dword [sym.imp.kernel32.dll_LCMapStringW]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x4c], 0x7592a06f
mov edx, dword [ebp - 0x30]
sub edx, 0x57867dd0
cmp dword [ebp - 0x2c], edx
jne 0x10001a4c
call dword [sym.imp.kernel32.dll_GetLastError]
mov word [ebp - 0x3c], 0x75b1
mov edx, dword [ebp - 0x30]
add edx, 0xa87982aa
cmp eax, edx
jbe 0x10001a4c
push str.7nBeNJ
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [0x100099f7]
je 0x100019a6
mov edx, dword [ebp - 0x30]
sub edx, 0xd8e3
cmp edx, 0xea0776bb
je 0x10001ae9
mov edx, dword [0x1000c214]
sub edx, dword [ebp - 0x44]
mov dword [0x1000c214], edx
push str.Cr1lfx.dll
mov word [ebp - 0x34], 0x9dd7
test dword [ebp - 0x30], 0x100
je 0x10001ab7
mov byte [ebp - 0x5c], 0xe6
call sub.kernel32.dll_DelayLoadFailureHook
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x5c]
push 0x2a
mov dword [ebp - 0x44], 0x9eb0e76f
mov edx, dword [ebp - 0x30]
sub edx, 0x57867d0e
push edx
mov word [ebp - 0x4c], 0x8adb
mov ecx, dword [ebp - 0x30]
add ecx, 0xa8798230
push ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
sub eax, 0x57867dd0
push eax
call fcn.10007102
mov dword [ebp - 0x54], 0x64141634
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x57867cfa
push ecx
mov edx, dword [ebp - 0x30]
add edx, 0xa8798230
push edx
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x57867dd0
push edx
mov word [ebp - 0x3c], 0xeae
mov dword [ebp - 0x44], 0xdc75c8ff
mov eax, dword [ebp - 0x30]
sub eax, 0x57867dd0
push eax
call fcn.10004bf3
add esp, 0x10
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x57867dd0
push edx
mov byte [ebp - 0x3c], 0xc1
cmp dword [ebp - 0x30], 0
jne 0x10001af4
call fcn.10006694
mov word [ebp - 0x44], 0x8fd1
mov edx, dword [ebp - 0x30]
sub edx, 0x57867dd0
push edx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x34], edx
call fcn.1000659f
mov dword [ebp - 0x5c], 0x756dae99
add esp, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x30]
sub eax, 0x57867db8
push eax
mov dword [ebp - 0x5c], eax
call fcn.10004969
add esp, 4
mov edx, dword [ebp - 0x30]
add edx, 0xa8798230
push edx
mov byte [ebp - 0x5c], 0x26
mov eax, dword [0x100099f3]
cmp eax, dword [ebp - 0x30]
je 0x10001adb
call fcn.10001646
mov dword [ebp - 0x5c], eax
add esp, 4
mov esp, ebp
pop ebp
ret