Function at 0x10006b6dc
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x30
xor ebp, ebp
mov ebx, edx
mov rsi, rcx
mov dword [rsp + 0x20], ebp
mov edi, 0x80004005
cmp rcx, rbp
je 0x10006bac4
cmp ebx, ebp
je 0x10006bac4
lea r8, [rsp + 0x20]
lea rdx, [0x1000297a8]
call qword [sym.imp.msvcrt.dll_swscanf]
cmp eax, ebp
jne 0x10006b729
mov eax, 0x80070057
jmp 0x10006bac9
mov eax, dword [rsp + 0x20]
cmp eax, 0xffffffff
je 0x10006b71f
cmp eax, 0x19
ja 0x10006b9a2
je 0x10006b990
cmp eax, 0x11
ja 0x10006b87c
je 0x10006b82c
cmp eax, ebp
je 0x10006bac0
sub eax, 1
je 0x10006b7fa
sub eax, 9
je 0x10006b990
sub eax, 1
je 0x10006b7e2
cmp eax, 1
jne 0x10006bac0
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp eax, ebp
je 0x10006b78d
mov edi, ebp
jmp 0x10006b7b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
xor edx, edx
lea ecx, [rdx + 4]
call fcn.100053778
mov rdx, rbx
mov rcx, rsi
shr rdx, 1
lea r8, [0x10002ef48]
cmp eax, ebp
jne 0x10006b7d8
lea r8, [0x10002ef60]
call fcn.100039ee4
jmp 0x10006bac0
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp eax, ebp
je 0x10006b809
mov edi, ebp
jmp 0x10006bac0
shr ebx, 1
mov rdx, rsi
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
jmp 0x10006b7ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
jmp 0x10006bac0
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebp
je 0x10006b841
mov edi, ebp
jmp 0x10006b867
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea r8, [0x10002ef78]
mov rdx, rbx
mov rcx, rsi
shr rdx, 1
jmp 0x10006b7d8
sub eax, 0x12
je 0x10006b949
sub eax, 2
je 0x10006b902
sub eax, 1
je 0x10006bac0
sub eax, 2
je 0x10006bac0
cmp eax, 1
jne 0x10006bac0
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp eax, ebp
je 0x10006b8ba
mov edi, ebp
jmp 0x10006b8e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea rdx, [0x1000297b0]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_wcsstr]
cmp rax, rbp
je 0x10006bac0
mov word [rax + 4], bp
jmp 0x10006bac0
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebp
je 0x10006b917
mov edi, ebp
jmp 0x10006b93d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea r8, [0x10002ef98]
jmp 0x10006b86e
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebp
je 0x10006b95e
mov edi, ebp
jmp 0x10006b984
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea r8, [0x10002ef88]
jmp 0x10006b86e
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
jmp 0x10006b7ef
cmp eax, 0x4019
ja 0x10006ba62
cmp eax, 0x4016
jae 0x10006bac0
cmp eax, 0x1e
je 0x10006bac0
cmp eax, 0x32
je 0x10006bac0
cmp eax, 0x33
je 0x10006ba1f
cmp eax, 0x34
jne 0x10006bac0
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebp
je 0x10006b9ed
mov edi, ebp
jmp 0x10006ba13
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea r8, [0x10002efb8]
jmp 0x10006b86e
mov edx, ebx
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebp
je 0x10006ba34
mov edi, ebp
jmp 0x10006ba56
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x57
cmp eax, ebp
cmove eax, ecx
movzx edi, ax
or edi, 0x80070000
cmp eax, ebp
cmovle edi, eax
cmp edi, ebp
jne 0x10006bac0
lea r8, [0x10002efa8]
jmp 0x10006b86e
sub eax, 0x401f
je 0x10006bac0
sub eax, 4
je 0x10006bab2
sub eax, 3
je 0x10006baa4
sub eax, 5
je 0x10006ba96
cmp eax, 0x3825
jne 0x10006bac0
mov edx, 1
mov rcx, rsi
call fcn.100053eb0
neg eax
sbb ecx, ecx
not ecx
and edi, ecx
jmp 0x10006bac0
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call fcn.10006b154
jmp 0x10006babe
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call fcn.10006ae74
jmp 0x10006babe
shr ebx, 1
mov rcx, rsi
mov edx, ebx
call fcn.10006b2f4
mov edi, eax
mov eax, edi
jmp 0x10006bac9
mov eax, 0x80004003
mov rbx, qword [rsp + 0x60]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret