Function at 0x1400078a0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x580]
sub rsp, 0x680
mov rax, qword [0x140047008]
xor rax, rsp
mov qword [rbp + 0x570], rax
mov rax, qword [0x14004a6a8]
lea r14, [0x14004a6a8]
mov esi, r8d
mov ebx, ecx
mov edi, edx
test byte [rax + 0x1c], 8
je 0x14000793d
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x104
call fcn.14001c070
mov r9d, ebx
mov dword [rsp + 0x20], edi
lea r8, str.CheckNotificationFromService__dwNotifyCode__0x_x__dwParam__0x_x
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.140008680
mov rcx, qword [0x14004a6a8]
cmp rcx, r14
je 0x14000793d
test byte [rcx + 0x1c], 8
je 0x14000793d
mov rcx, qword [rcx + 0x10]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140019c20
mov rax, qword [0x14004f1c8]
test rax, rax
je 0x140007964
mov edx, dword [0x14004e768]
test edx, edx
je 0x140007964
mov r8, rbx
xor r9d, r9d
mov ecx, 0xffff
call qword [0x1400335f0]
lea eax, [rbx - 0x35]
cmp eax, 0xc4
ja case.0x14000798b.54
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x8454]
mov ecx, dword [rdx + rax*4 + 0x83d8]
add rcx, rdx
jmp rcx
mov ecx, 0x29
call fcn.140013150
jmp case.0x14000798b.54
mov ecx, 0x2a
call fcn.140013150
jmp case.0x14000798b.54
mov ecx, dword [0x140047968]
xor ebx, ebx
cmp ecx, 2
jne 0x140007a1b
mov rax, qword [0x14004ee60]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140007a13
lea rax, [rsp + 0x38]
mov dword [rsp + 0x30], 0x100051
lea r9, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
lea r8d, [rbx + 4]
mov dword [rsp + 0x38], 4
lea rdx, [rsp + 0x30]
mov ecx, 0x53545344
call fcn.1400089c0
test eax, eax
je 0x140007a13
cmp dword [rsp + 0x38], 4
lea ecx, [rbx + 1]
mov eax, ebx
cmovae eax, dword [rsp + 0x3c]
bt eax, 0x10
jb 0x140007a15
mov ecx, ebx
mov dword [0x140047968], ecx
mov r9, qword [0x14004d840]
mov r8d, ecx
mov eax, dword [0x140047998]
mov rcx, r9
cmp eax, 2
jne 0x140007a48
cmp dword [0x14004799c], ebx
sete bl
mov edx, ebx
call fcn.14000ec70
jmp case.0x14000798b.54
test eax, eax
sete bl
mov edx, ebx
mov dword [0x140047998], ebx
call fcn.14000ec70
jmp case.0x14000798b.54
mov ecx, 2
call fcn.140013150
jmp case.0x14000798b.54
mov ecx, 3
call fcn.140013150
jmp case.0x14000798b.54
mov ecx, 5
call fcn.140013150
jmp case.0x14000798b.54
mov ecx, 4
call fcn.140013150
jmp case.0x14000798b.54
xor edx, edx
call fcn.140004810
call fcn.1400124c0
jmp case.0x14000798b.54
xor edx, edx
call fcn.140004810
jmp case.0x14000798b.54
cmp dword [0x14004e718], 0
je case.0x14000798b.54
cmp dword [0x14004e504], 0
jne case.0x14000798b.54
call fcn.140012a80
test eax, eax
js case.0x14000798b.54
mov edx, eax
mov ecx, 1
call fcn.140012b10
jmp case.0x14000798b.54
mov edx, 1
call fcn.140004810
jmp case.0x14000798b.54
cmp dword [0x14004e738], 0
mov rdi, qword [0x14004d840]
je case.0x14000798b.54
cmp dword [0x14004e720], 0
je 0x140007b8c
lea rcx, [rsp + 0x30]
call fcn.140012600
test eax, eax
je 0x140007b8c
cmp dword [rsp + 0x30], 0
jne 0x140007b8c
call fcn.140012830
cmp dword [0x14004e728], 0
mov rax, qword [0x14004f238]
je 0x140007b60
test rax, rax
je 0x140007b60
mov edx, 0x2b
mov rcx, rdi
call qword [0x1400335f0]
mov rax, qword [0x14004f238]
xor ebx, ebx
cmp dword [0x14004e730], ebx
mov dword [0x14004e728], ebx
je 0x140007b81
test rax, rax
je 0x140007b81
lea edx, [rbx + 0x1f]
mov rcx, rdi
call qword [0x1400335f0]
mov dword [0x14004e730], ebx
jmp case.0x14000798b.54
cmp dword [0x14004e728], 0
mov rax, qword [0x14004f238]
je 0x140007bb6
test rax, rax
je 0x140007bb6
mov edx, 0x2b
mov rcx, rdi
call qword [0x1400335f0]
mov rax, qword [0x14004f238]
xor ebx, ebx
cmp dword [0x14004e730], ebx
mov dword [0x14004e728], ebx
je 0x140007bd7
test rax, rax
je 0x140007bd7
lea edx, [rbx + 0x1f]
mov rcx, rdi
call qword [0x1400335f0]
mov rax, qword [0x14004f230]
mov ecx, 1
mov dword [0x14004e730], ecx
test rax, rax
je case.0x14000798b.54
lea edx, [rcx + 0x1e]
xor r9d, r9d
mov rcx, rdi
mov r8d, 0x5dc
call qword [0x1400335f0]
jmp case.0x14000798b.54
xor ebx, ebx
test edi, edi
sete bl
mov ecx, ebx
call fcn.14000fef0
jmp case.0x14000798b.54
xor ebx, ebx
test edi, edi
sete bl
cmp dword [0x1400479d4], 6
jne case.0x14000798b.54
mov ecx, ebx
call fcn.140010300
test eax, eax
jne case.0x14000798b.54
mov ecx, ebx
call fcn.140010530
test eax, eax
jne case.0x14000798b.54
mov ecx, ebx
call fcn.14000ed80
test eax, eax
jne case.0x14000798b.54
lea edx, [rax + 3]
mov ecx, ebx
call fcn.140012080
jmp case.0x14000798b.54
mov eax, dword [0x1400479d4]
test eax, eax
je 0x140007c89
mov ecx, 1
call fcn.140011fc0
mov eax, dword [0x1400479d4]
cmp eax, 6
jne case.0x14000798b.54
cmp dword [0x14004e4a0], 0
je 0x140007cf4
mov rax, qword [0x14004f1d0]
test rax, rax
je case.0x14000798b.54
lea rdx, str.ATKOSD2
lea rcx, str.CNewOsd
call qword [0x1400335f0]
mov rcx, rax
test rax, rax
je case.0x14000798b.54
mov rax, qword [0x14004f1c8]
test rax, rax
je case.0x14000798b.54
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x150068
call qword [0x1400335f0]
jmp case.0x14000798b.54
cmp dword [0x14004e4d0], 0
je 0x140007d24
xor ebx, ebx
cmp dword [0x14004e4c4], ebx
je 0x140007d13
cmp dword [0x14004e4c8], ebx
setne bl
add ebx, 0xb
mov edx, ebx
mov ecx, 0x68
call fcn.140014620
jmp case.0x14000798b.54
cmp dword [0x14004e478], 0
je 0x140007d84
mov rax, qword [0x14004f1d0]
test rax, rax
je case.0x14000798b.54
lea rdx, str.ATKOSD2
lea rcx, str.CNewOsd
call qword [0x1400335f0]
mov rcx, rax
test rax, rax
je case.0x14000798b.54
mov rax, qword [0x14004f1c8]
test rax, rax
je case.0x14000798b.54
xor r9d, r9d
mov edx, 0x111
lea r8d, [r9 + 0x69]
call qword [0x1400335f0]
jmp case.0x14000798b.54
xor edx, edx
lea ecx, [rdx + 0x6a]
call fcn.140014620
jmp case.0x14000798b.54
mov eax, dword [0x1400479d4]
test eax, eax
je 0x140007daa
xor ecx, ecx
call fcn.140011fc0
mov eax, dword [0x1400479d4]
cmp eax, 6
jne case.0x14000798b.54
cmp dword [0x14004e4a0], 0
je 0x140007e15
mov rax, qword [0x14004f1d0]
test rax, rax
je case.0x14000798b.54
lea rdx, str.ATKOSD2
lea rcx, str.CNewOsd
call qword [0x1400335f0]
mov rcx, rax
test rax, rax
je case.0x14000798b.54
mov rax, qword [0x14004f1c8]
test rax, rax
je case.0x14000798b.54
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x170068
call qword [0x1400335f0]
jmp case.0x14000798b.54
cmp dword [0x14004e4d0], 0
je 0x140007e3f
cmp dword [0x14004e4c4], 0
mov eax, 0xe
mov edx, 3
cmovne edx, eax
lea ecx, [rax + 0x5a]
call fcn.140014620
jmp case.0x14000798b.54
cmp dword [0x14004e478], 0
je 0x140007ea1
mov rax, qword [0x14004f1d0]
test rax, rax
je case.0x14000798b.54
lea rdx, str.ATKOSD2
lea rcx, str.CNewOsd
call qword [0x1400335f0]
mov rcx, rax
test rax, rax
je case.0x14000798b.54
mov rax, qword [0x14004f1c8]
test rax, rax
je case.0x14000798b.54
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x30069
call qword [0x1400335f0]
jmp case.0x14000798b.54
xor edx, edx
lea ecx, [rdx + 0x6b]
call fcn.140014620
jmp case.0x14000798b.54
cmp dword [0x14004e4d0], 0
jne 0x140007ed8
cmp dword [0x14004e4a0], 0
jne 0x140007ed8
cmp dword [0x14004e4a4], 0
jne 0x140007ed8
cmp dword [0x14004e4cc], 0
je case.0x14000798b.54
mov dword [0x1400479c4], 2
jmp case.0x14000798b.54
xor r8d, r8d
lea rdx, str._Camera
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
cmp edi, 2
jne 0x140007f23
cmp dword [0x14004e1d4], 0
jne 0x140007f31
mov edx, dword [0x14004e1d0]
lea ecx, [rdi - 1]
xor r8d, r8d
call fcn.140013450
jmp case.0x14000798b.54
cmp edi, 3
jne 0x140007f5f
cmp dword [0x14004e1d4], 0
je 0x140007f4a
cmp dword [0x14004e1c8], 0
je case.0x14000798b.54
xor ecx, ecx
call fcn.14000c7c0
jmp case.0x14000798b.54
mov edx, dword [0x14004e1d0]
xor r8d, r8d
xor ecx, ecx
call fcn.140013450
jmp case.0x14000798b.54
cmp dword [0x14004e1d4], 0
jne 0x140007f31
mov edx, dword [0x14004e1d0]
xor ebx, ebx
test edi, edi
mov ecx, 2
sete bl
mov r8d, ebx
call fcn.140013450
jmp case.0x14000798b.54
xor r8d, r8d
lea rdx, str._MyASUS
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
call fcn.14001c070
lea r8, str.ms_settings:bluetooth
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.14001f62c
lea rdx, [0x14003cef8]
lea rcx, [rsp + 0x40]
call fcn.140012ff0
jmp case.0x14000798b.54
mov rax, qword [0x14004f1d0]
test rax, rax
je case.0x14000798b.54
lea rdx, str.ACMON
lea rcx, str.ACMON
call qword [0x1400335f0]
mov rcx, rax
test rax, rax
je case.0x14000798b.54
mov rax, qword [0x14004f1c8]
test rax, rax
je case.0x14000798b.54
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x393
call qword [0x1400335f0]
jmp case.0x14000798b.54
test edi, edi
jne case.0x14000798b.54
cmp esi, 0x9d
jne case.0x14000798b.54
mov rax, qword [0x14004f1d0]
test rax, rax
je 0x140008073
lea rdx, str.ATKOSD2
lea rcx, str.CNewOsd
call qword [0x1400335f0]
test rax, rax
jne case.0x14000798b.54
xor ebx, ebx
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], ebx
call qword [sym.imp.api_ms_win_oobe_notification_l1_1_0.dll_OOBEComplete]
cmp dword [rsp + 0x38], ebx
je case.0x14000798b.54
lea r9, [rsp + 0x30]
mov dword [rsp + 0x3c], ebx
xor r8d, r8d
mov dword [rsp + 0x30], ebx
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x20], rbx
lea rcx, [0x14003e260]
call qword [sym.imp.api_ms_win_appmodel_runtime_l1_1_0.dll_GetPackagesByPackageFamily]
cmp eax, 0x7a
jne 0x1400080ca
cmp dword [rsp + 0x3c], ebx
je 0x1400080ca
cmp dword [rsp + 0x30], ebx
jne case.0x14000798b.54
xor ecx, ecx
call fcn.140019740
test eax, eax
jne case.0x14000798b.54
call fcn.1400199c0
test eax, eax
jne case.0x14000798b.54
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
call fcn.14001c070
lea r8, str.ms_windows_store:__pdp__productid9n7r5s6b0zzh
jmp 0x140007fb8
mov rax, qword [0x14004ee60]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400081cb
lea rax, [rsp + 0x30]
mov dword [rsp + 0x3c], 0x100055
lea r9, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r8d, 4
mov dword [rsp + 0x30], 4
lea rdx, [rsp + 0x3c]
mov ecx, 0x53545344
call fcn.1400089c0
test eax, eax
je 0x1400081cb
xor ebx, ebx
cmp dword [rsp + 0x30], 4
cmovae ebx, dword [rsp + 0x38]
bt ebx, 0x10
jae 0x1400081cb
movzx ecx, bx
cmp ecx, 3
jb 0x140008171
je 0x140008176
cmp ecx, 4
jne 0x1400081cb
cmp ecx, 3
jne 0x14000818e
xor r8d, r8d
lea rdx, str._Aura
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
lea eax, [rcx - 1]
cmp eax, 1
jbe 0x1400081b3
cmp ecx, 4
jne 0x1400081cb
xor r8d, r8d
lea rdx, str._TUFAuraCore
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
xor r8d, r8d
lea rdx, str._AuraCore
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
xor r8d, r8d
lea rdx, str._AuraSeries
lea ecx, [r8 - 1]
call fcn.140016a30
jmp case.0x14000798b.54
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
call fcn.14001c070
lea r8, str.https:__www.tmall.com
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.14001f62c
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140012ff0
jmp case.0x14000798b.54
xor r8d, r8d
lea rdx, str._Calculate
lea ecx, [r8 - 1]
call fcn.140016a30
test eax, eax
jne case.0x14000798b.54
lea ecx, [rax + 0x2b]
call fcn.140013150
jmp case.0x14000798b.54
call fcn.14001a2e0
test eax, eax
jne case.0x14000798b.54
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
xor ebx, ebx
call fcn.14001c070
mov edx, 0x104
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemDirectoryW]
test eax, eax
je 0x14000838b
xor edx, edx
lea rcx, [rbp + 0x150]
mov r8d, 0x208
call fcn.14001c070
lea r9, [rsp + 0x40]
mov edx, 0x104
lea r8, str._sShell32.dll
lea rcx, [rbp + 0x150]
call fcn.14000afd0
lea rcx, [rbp + 0x150]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x14000838b
lea rdx, str.SHGetKnownFolderPath
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x14000837e
mov rcx, qword [0x14004a6a8]
cmp rcx, r14
je 0x14000830a
test byte [rcx + 0x1c], 8
je 0x14000830a
mov rcx, qword [rcx + 0x10]
lea rax, str.Get_Shell32_SHGetKnownFolderPath_function_success
mov qword [rsp + 0x20], rax
call fcn.140019c20
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
xor r8d, r8d
lea rcx, [0x140033920]
xor edx, edx
mov rax, rsi
call qword [0x1400335f0]
test eax, eax
jne 0x14000836e
xor edx, edx
lea rcx, [rbp + 0x360]
mov r8d, 0x208
call fcn.14001c070
mov r9, qword [rsp + 0x30]
lea r8, str._sASUS_streaming.html
mov edx, 0x104
lea rcx, [rbp + 0x360]
call fcn.14000afd0
xor edx, edx
lea rcx, [rbp + 0x360]
call fcn.140012ff0
mov ebx, eax
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000837e
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
test ebx, ebx
jne case.0x14000798b.54
mov ecx, 0x25
call fcn.140013150
jmp case.0x14000798b.54
lea rcx, str._lock
jmp 0x1400083a7
lea rcx, str._eject
xor r8d, r8d
xor edx, edx
call fcn.1400187f0
mov rcx, qword [rbp + 0x570]
xor rcx, rsp
call fcn.14001a990
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret