Function at 0x10005d07c
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
sub rsp, 0x460
mov rax, qword [0x100086110]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov r12, rcx
mov ecx, 0xc8
mov rsi, rdx
call fcn.10007faba
test rax, rax
je 0x10005d0c5
mov rcx, rax
call fcn.10005b170
mov rbx, rax
jmp 0x10005d0c7
xor ebx, ebx
test rbx, rbx
jne 0x10005d0d6
mov eax, 0x8007000e
jmp 0x10005d370
and dword [rsp + 0x20], 0
lea r8, [rsp + 0x30]
lea rdx, [0x100024e30]
mov r9d, 0x208
mov rcx, rsi
call fcn.10005992c
mov edi, eax
test eax, eax
jns 0x10005d118
lea r8, [0x100024e30]
lea rdx, [0x10002bd68]
mov ecx, 2
call fcn.1000527f4
jmp 0x10005d345
lea rax, [rsp + 0x30]
test rax, rax
je 0x10005d12f
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.10005b528
cmp dword [rbx + 0x58], 1
jne 0x10005d177
and dword [rsp + 0x20], 0
lea r8, [rsp + 0x30]
lea rdx, [0x100024e98]
mov r9d, 0x208
mov rcx, rsi
call fcn.10005992c
test eax, eax
js 0x10005d177
lea rdx, [0x100025080]
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__wcsicmp]
xor ecx, ecx
test eax, eax
sete cl
mov dword [rbx + 0x90], ecx
and dword [rsp + 0x20], 0
lea r8, [rsp + 0x30]
lea rdx, [0x100024e48]
mov r9d, 0x208
mov rcx, rsi
call fcn.10005992c
mov edi, eax
test eax, eax
jns 0x10005d1a8
lea r8, [0x100024e48]
jmp 0x10005d102
cmp dword [rbx + 0x58], 1
je 0x10005d254
mov ebp, 0x104
lea rcx, [rsp + 0x240]
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x10005d20e
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x240]
repne scasw ax, word [rdi]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x240]
not rcx
lea r8, [0x10002bda8]
mov qword [rsp + 0x20], rax
dec rcx
sub rbp, rcx
lea rcx, [rsp + 0x240]
mov rdx, rbp
call fcn.10003a080
lea rcx, [rsp + 0x240]
call fcn.100053454
test eax, eax
jne 0x10005d23d
lea r8, [0x100024e48]
lea rdx, [0x10002bdc0]
lea ecx, [rax + 2]
lea edi, [rax + 1]
call fcn.1000527f4
jmp 0x10005d349
lea rax, [rsp + 0x240]
test rax, rax
je 0x10005d26b
lea rdx, [rsp + 0x240]
jmp 0x10005d263
lea rax, [rsp + 0x30]
test rax, rax
je 0x10005d26b
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.10005b600
and dword [rsp + 0x20], 0
lea r8, [rsp + 0x30]
lea rdx, [0x100024e80]
mov r9d, 0x208
mov rcx, rsi
call fcn.10005992c
mov edi, eax
test eax, eax
jns 0x10005d29c
lea r8, [0x100024e80]
jmp 0x10005d102
lea rdx, [0x100025080]
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x10005d2ba
and dword [rbx + 0x8c], eax
jmp 0x10005d2e6
lea rdx, [0x10000b7e4]
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x10005d2dc
mov dword [rbx + 0x8c], 1
jmp 0x10005d2e6
mov dword [rbx + 0x8c], 2
and dword [rsp + 0x20], 0
lea r8, [rsp + 0x30]
lea rdx, [0x100024e60]
mov r9d, 0x208
mov rcx, rsi
call fcn.10005992c
test eax, eax
js 0x10005d317
lea rcx, [rbx + 0x28]
lea rdx, [rsp + 0x30]
call fcn.100052cbc
cmp qword [rbx + 8], 0
jne 0x10005d325
cmp qword [rbx + 0x18], 0
je 0x10005d340
cmp dword [rbx + 0x8c], 2
je 0x10005d340
xor r8d, r8d
mov rdx, rbx
mov rcx, r12
call fcn.10005cff0
mov edi, eax
jmp 0x10005d345
mov edi, 1
test edi, edi
je 0x10005d36e
mov edx, 1
mov rcx, rbx
call fcn.10005ce9c
test edi, edi
jns 0x10005d36e
lea rdx, [0x10002bdf0]
mov r8d, edi
mov ecx, 2
call fcn.1000527f4
mov eax, edi
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.10007fa70
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret