Function at 0x10019364
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x414
mov eax, dword [0x10032138]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x20c], ax
xor edi, edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push edi
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push esi
mov word [ebp - 0x414], ax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push edi
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
push edi
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x100196b8
mov esi, edi
call fcn.10018df0
mov ecx, eax
mov ebx, 0x1000ffff
test ecx, ecx
js 0x1001941a
push 0x100196f8
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.1001911a
mov esi, eax
test esi, esi
je 0x1001944d
mov ecx, dword [0x100320c8]
cmp ecx, 0x100320c8
je 0x100196a6
test byte [ecx + 0x1c], 1
je 0x100196a6
push esi
push 0x1000bcb8
push 0x7f
push dword [ecx + 0x14]
push dword [ecx + 0x10]
jmp 0x100196a1
and eax, ebx
cmp eax, 3
je 0x1001944d
mov esi, eax
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push ecx
push 0x1000bcb8
push 0x80
jmp 0x10019566
push edi
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x1000bd40
call fcn.10018df0
mov ecx, eax
test ecx, ecx
js 0x100194a7
push 0x1000bd98
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.1001911a
mov esi, eax
test esi, esi
je 0x100194dc
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push esi
push 0x1000bcb8
push 0x81
jmp 0x1001969b
mov eax, ecx
and eax, ebx
cmp eax, 3
je 0x100194dc
mov esi, eax
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push ecx
push 0x1000bcb8
push 0x82
jmp 0x10019566
push edi
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x10019708
call fcn.10018df0
mov ecx, eax
test ecx, ecx
js 0x10019536
push 0x1000bda4
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.1001911a
mov esi, eax
test esi, esi
je 0x10019571
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push esi
push 0x1000bcb8
push 0x83
jmp 0x1001969b
mov eax, ecx
and eax, ebx
cmp eax, 3
je 0x10019571
mov esi, eax
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push ecx
push 0x1000bcb8
push 0x84
push dword [eax + 0x14]
push dword [eax + 0x10]
jmp 0x10019667
push 0x104
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call sub.KERNEL32.dll_GetSystemDirectoryW
test eax, eax
je 0x1001966e
mov ecx, 0x104
cmp eax, ecx
ja 0x1001966e
push 0x10019748
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x10006950
push ecx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.100010fa
mov ecx, eax
add esp, 0x14
test ecx, ecx
jns 0x100195ea
mov esi, ecx
and esi, ebx
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100195ea
test byte [eax + 0x1c], 1
je 0x100195ea
push ecx
push 0x1000bcb8
push 0x86
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1001fead
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.10006961
test eax, eax
js 0x10019635
push 0x10019764
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.1001911a
mov esi, eax
test esi, esi
je 0x10019635
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push esi
push 0x1000bcb8
push 0x87
jmp 0x1001969b
call fcn.1002a279
test eax, eax
jns 0x100196a6
mov esi, eax
and esi, ebx
mov ecx, dword [0x100320c8]
cmp ecx, 0x100320c8
je 0x100196a6
test byte [ecx + 0x1c], 1
je 0x100196a6
push eax
push 0x1000bcb8
push 0x88
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.1001fead
jmp 0x100196a6
call sub.KERNEL32.dll_GetLastError
mov esi, eax
test esi, esi
jne 0x1001967e
mov esi, 0x54f
mov eax, dword [0x100320c8]
cmp eax, 0x100320c8
je 0x100196a6
test byte [eax + 0x1c], 1
je 0x100196a6
push esi
push 0x1000bcb8
push 0x85
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1001334b
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.100024c8
leave
ret