Function at 0x18000cd00
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3d0
mov rax, qword [0x1800ad828]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r8d, 1
lea rdx, [0x1800ad330]
xor ecx, ecx
call fcn.18002cb90
xor r14d, r14d
mov qword [rbp], r14
mov qword [rbp + 8], ILClone
mov byte [rbp - 0x10], r14b
mov dword [rsp + 0x20], 0x26
xor r9d, r9d
lea r8, [rbp - 0x10]
xor edx, edx
xor ecx, ecx
call fcn.180035600
test al, al
jne 0x18000cfc7
mov word [rbp + 0x20], r14w
lea r8d, [r14 + 2]
lea rdx, [0x1800a2c94]
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
lea rcx, [rbp + 0x20]
sub rcx, 2
nop
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18000cda0
mov eax, dword [0x1800a2c9c]
mov dword [rcx], eax
mov eax, dword [0x1800a2ca0]
mov dword [rbp + 0x26], eax
movzx eax, word [0x1800a2ca4]
mov word [rbp + 0x2a], ax
mov r8d, 4
lea rdx, [0x1800a2ca8]
lea rcx, [rbp + 0x2a]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [0x1800a2cb0]
mov dword [rbp + 0x30], eax
movabs rax, 0x52003a003a
mov qword [rbp + 0x34], rax
mov edx, 0x65
mov word [rbp + 0x3a], dx
mov eax, dword [0x1800a2cb8]
mov dword [rbp + 0x3c], eax
movzx eax, word [0x1800a2cbc]
mov word [rbp + 0x40], ax
lea rcx, [rbp + 0x20]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x18000ce20
mov eax, dword [0x1800a2cc0]
mov dword [rcx], eax
movzx eax, word [0x1800a2cc4]
mov word [rcx + 4], ax
mov eax, dword [0x1800a2cc8]
mov dword [rbp + 0x44], eax
movzx eax, word [0x1800a2ccc]
mov word [rbp + 0x48], ax
mov eax, dword [str._ZN78_INTERNAL_56_tmpxft_000195c0_00000000_8_syscall_device_shared_cpp1_ii_a2f34a8f16cnpQmdLaunchFreeEP15CNPqmdLaunch_st]
mov dword [rbp + 0x70], eax
movzx eax, word [0x1800a2cd4]
mov word [rbp + 0x74], ax
movsd xmm0, qword [0x1800a2dce]
movsd qword [rbp + 0x76], xmm0
movzx eax, word [0x1800a2dd6]
mov word [rbp + 0x7e], ax
mov eax, dword [0x1800a2e54]
mov dword [rbp + 0x80], eax
movzx eax, word [0x1800a2e58]
mov word [rbp + 0x84], ax
movsd xmm0, qword [0x1800a2eb0]
movsd qword [rbp + 0x86], xmm0
movzx eax, word [0x1800a2eb8]
mov word [rbp + 0x8e], ax
mov dword [rbp + 0x90], 0x6d0051
mov dword [rbp + 0x94], 0x450064
mov ecx, 0x76
mov dword [rbp + 0x98], ecx
movsd xmm0, qword [str.P.Pn]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [0x1800a2edc]
mov dword [rbp + 0x58], eax
movsd xmm0, qword [str.rceR]
movsd qword [rbp + 0x5c], xmm0
mov dword [rbp + 0x64], edx
mov eax, dword [0x1800a2ef4]
mov dword [rbp + 0x66], eax
mov dword [rbp + 0x6a], ecx
mov dword [rbp + 0x6c], edx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x58], xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x10], xmm1
lea rax, [rbp - 0x80]
mov qword [rsp + 0x80], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x78], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], r14d
lea rax, [rbp + 0x10]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x58], 1
lea rax, [rbp - 0x68]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], 0x2000000
mov qword [rsp + 0x30], r14
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x70]
xor edx, edx
lea r8, [rcx - 0x77]
lea rcx, [rbp + 0x20]
call qword [sym.imp.ADVAPI32.dll_AccessCheckByTypeResultListAndAuditAlarmByHandleW]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x36]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathAndSubDirW]
jmp 0x18000d11b
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], ILClone
mov byte [rbp - 0x30], 0
movsd xmm0, qword [0x1800ad3d8]
mulsd xmm0, qword [0x1800a7720]
addsd xmm0, qword [0x1800a7708]
cvttsd2si rax, xmm0
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x20], 0xce
lea r9, [rbp - 0x10]
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x30]
lea rcx, [0x1800ad358]
call fcn.180010e50
mov r9d, 0x74
lea r8, [rbp - 0x30]
xor edx, edx
xor ecx, ecx
call fcn.18000d8e0
xor edx, edx
test al, al
jne 0x18000d0a8
mov dil, 1
movzx esi, dil
mov qword [rbp - 0x70], r14
lea r9, [rbp - 0x70]
xor r8d, r8d
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov ebx, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
movzx ecx, dil
test ebx, ebx
cmovne ecx, r14d
mov ebx, esi
test eax, eax
cmovne ebx, r14d
test cl, cl
je 0x18000d098
mov qword [rbp - 0x78], r14
lea r8, [rbp - 0x78]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x18000d08a
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x18000d098
call sub.RPCRT4.dll_MesHandleFree
test bl, bl
je 0x18000d0cd
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
jmp 0x18000d0cd
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHeaps]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r9d, 0x63
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180058e50
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000d10b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d106
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000d106
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], ILClone
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18000d159
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d154
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000d154
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180092818
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.180092fc0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret