Function at 0x10060f1
Capabilities:
Get common file path

Disassembly:
push ecx
movzx eax, byte [0x1030017]
push ebx
push esi
push edi
push 0xffffffffffffffb6
pop ecx
sub ecx, eax
sub ecx, dword [esp + 0xc]
push 0x1032af8
add dword [0x102ff94], ecx
mov edi, 0x45b
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov bl, al
movzx eax, byte [0x1030017]
add eax, 0x45a
mov dword [0x102ff94], eax
push 2
shl al, 3
add al, byte [0x1030020]
push 0
push str.interest
mov byte [0x1030017], al
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov dword [0x1158220], eax
mov al, 0xb6
sub al, byte [0x103001c]
mov esi, edi
sub al, byte [0x102ff94]
add bl, al
movzx eax, byte [0x1030017]
movzx ecx, bl
sub eax, ecx
add eax, 0xf2c7
mov dword [0x102ff94], eax
call fcn.01005e9d
mov cl, byte [0x1030017]
mov edx, eax
cmp dword [0x102ffc4], edx
ja 0x10061ab
movzx eax, cl
mov dword [0x102ffd4], eax
mov bl, 0x9e
mov al, dl
imul bl
add cl, al
mov bl, dl
sub bl, cl
mov byte [0x1030017], cl
sub bl, 0x39
movzx ax, cl
cmp word [0x1030014], ax
jb 0x10061d8
mov al, cl
imul bl
mov cl, al
mov eax, dword [0x1030020]
add cl, al
imul eax, dword [0x102fff0]
mov byte [0x1030017], cl
mov word [0x102fff0], ax
mov bl, byte [0x102ff94]
shl bl, 3
mov esi, edx
add bl, cl
call fcn.01005f5f
cmp dword [0x102ff98], 0xe87
mov esi, eax
jne 0x100620e
mov al, byte [0x102ffc0]
add al, byte [0x1030017]
mov cl, bl
inc cl
imul cl
mov byte [0x1030017], al
mov eax, dword [0x103001c]
movzx cx, byte [0x1030017]
imul eax, esi
add ax, cx
mov word [0x103001c], ax
call fcn.01005e9d
mov ecx, eax
mov al, byte [0x1030017]
movzx dx, al
cmp word [0x1030014], dx
jb 0x100625d
mov edx, dword [0x1030020]
imul bl
add al, dl
imul edx, dword [0x102fff0]
mov byte [0x1030017], al
mov word [0x102fff0], dx
mov bl, byte [0x1030020]
sub bl, cl
add bl, 0x5a
mov esi, 0x102ffa4
mov dl, byte [0x1030020]
sub dl, byte [esi]
add dl, al
add dl, 4
add bl, dl
movzx edx, bl
cmp edx, dword [str.2R_]
je 0x1006292
add esi, 8
cmp esi, str.:_
jl 0x100626d
mov esi, ecx
mov dword [0x102ff94], edi
call fcn.01005f5f
mov ecx, dword [0x102ffc4]
test ecx, ecx
je 0x10062dc
cmp ecx, 0x30
je 0x10062c5
cmp ecx, 0xba
je 0x10062bc
mov cl, 0xb6
sub cl, bl
jmp 0x10062d4
mov cl, al
sub cl, bl
add cl, 0x5a
jmp 0x10062d4
mov cl, byte [0x1030017]
mov dl, al
add dl, bl
add dl, 4
add cl, dl
mov byte [0x1030017], cl
jmp 0x10062e9
mov cl, byte [0x1030017]
mov bl, cl
sub bl, al
sub bl, 0x39
movzx cx, cl
mov dx, ax
sub dx, cx
add dx, 0x51
mov esi, eax
mov word [0x103001c], dx
call fcn.01005e9d
movzx esi, bl
mov dword [esp + 0xc], eax
lea eax, [esi + 0x51]
mov edi, 0x102fff8
mov edx, dword [0x1030020]
sub word [edi], dx
mov cl, al
sub edi, 4
sub cl, dl
cmp edi, 0x102ffee
jg 0x1006314
movzx eax, cl
lea edx, [esi + eax - 1]
mov esi, dword [0x102ffc4]
mov dword [0x102ff94], edx
xor edx, edx
cmp edx, dword [0x1030024]
mov edx, dword [0x1030020]
ja 0x1006369
jb 0x1006355
cmp esi, edx
ja 0x1006369
mov dword [0x102ffd4], eax
mov bl, 0x9e
mov al, dl
imul bl
add cl, al
mov bl, dl
sub bl, cl
sub bl, 0x39
movzx esi, bl
push 6
pop eax
lea ebx, [esi + 0x51]
sub dword [eax*4 + 0x102ff98], edx
mov cl, bl
sub cl, dl
dec eax
dec eax
cmp eax, 1
mov byte [0x1030017], cl
jg 0x1006372
mov dword [0x115905c], eax
movzx eax, cl
imul eax, eax, 0xe89e
mov bl, dl
add bl, byte [esp + 0xc]
add dword [esp + 0xc], eax
movzx eax, word [0x102fffc]
movzx edx, word [0x103000e]
add eax, edx
mov edi, 0x284
dec bl
push ebp
mov ebp, 0xffb6
cmp eax, edi
jne 0x10063e1
mov al, byte [0x102ff94]
shl al, 3
add bl, al
movzx eax, bl
push 0xffffffffffffffb6
pop edx
sub edx, eax
sub edx, dword [esp + 0x10]
add dword [0x102ff94], edx
jmp 0x10063fe
movzx ax, bl
mov edx, ebp
sub dx, ax
sub dx, word [esp + 0x10]
mov al, bl
add word [0x102fff8], dx
mov dl, 0x9f
imul dl
mov bl, al
cmp dword [0x102ff98], 0xe87
jne 0x100641f
mov al, byte [0x102ffc0]
add al, cl
mov cl, bl
inc cl
imul cl
mov cl, al
mov byte [0x1030017], cl
movzx edx, word [0x1030002]
mov eax, dword [esp + 0x10]
cmp edx, eax
ja 0x1006454
movzx dx, bl
mov word [0x103000a], dx
mov dl, 0x9e
imul dl
mov edx, dword [esp + 0x10]
add bl, al
movzx eax, bl
sub edx, eax
add edx, 0xf2c7
mov dword [0x102ff94], edx
mov esi, dword [esp + 0x10]
mov al, cl
mov cl, 0x9e
imul cl
add bl, al
call fcn.01005f5f
mov ecx, dword [0x102ffc4]
test ecx, ecx
je 0x10064a2
cmp ecx, 0x30
je 0x100648b
cmp ecx, 0xba
je 0x1006482
mov cl, 0xb6
sub cl, bl
jmp 0x100649a
mov cl, al
sub cl, bl
add cl, 0x5a
jmp 0x100649a
mov cl, byte [0x1030017]
mov dl, al
add dl, bl
add dl, 4
add cl, dl
mov byte [0x1030017], cl
jmp 0x10064af
mov cl, byte [0x1030017]
mov bl, cl
sub bl, al
sub bl, 0x39
movzx cx, cl
mov edx, 0xe89e
imul cx, dx
add word [0x103001c], cx
mov esi, eax
call fcn.01005e9d
movzx eax, word [0x1030002]
test eax, eax
je 0x1006508
cmp eax, 0x30
je 0x10064f7
cmp eax, 0xba
je 0x10064e7
mov al, 0xb6
sub al, bl
jmp 0x10064f0
mov al, byte [0x1030020]
sub al, bl
add al, 0x5a
mov byte [0x1030017], al
jmp 0x1006517
mov al, byte [0x1030020]
add al, bl
add al, 4
add byte [0x1030017], al
jmp 0x1006517
mov bl, byte [0x1030017]
sub bl, byte [0x1030020]
sub bl, 0x39
movzx eax, bl
push eax
call fcn.010048b1
movzx ecx, al
mov byte [0x1030017], al
mov eax, dword [0x102ff94]
sub eax, ecx
add eax, 0x51
push eax
call fcn.01005db8
movzx edx, word [0x103000e]
pop ecx
pop ecx
mov ecx, eax
movzx eax, word [0x102fffc]
add eax, edx
cmp eax, edi
jne 0x100656c
mov al, byte [0x102ff94]
shl al, 3
add bl, al
movzx eax, bl
push 0xffffffffffffffb6
pop edx
sub edx, eax
sub edx, ecx
add dword [0x102ff94], edx
jmp 0x1006585
movzx ax, bl
sub bp, ax
sub bp, cx
add word [0x102fff8], bp
mov al, bl
mov dl, 0x9f
imul dl
mov bl, al
movzx eax, byte [0x1030017]
add eax, dword [0x1030020]
lea eax, [ecx + eax + 4]
push eax
call fcn.01005d15
mov esi, eax
pop ecx
mov ecx, dword [0x102ff94]
mov eax, 0xe87
pop ebp
cmp word [0x102ffec], ax
jne 0x10065c3
mov al, byte [0x1030000]
add al, bl
mov dl, cl
inc dl
imul dl
mov bl, al
movzx eax, byte [0x1030017]
add eax, esi
push 3
lea eax, [ecx + eax + 4]
pop ecx
mov dword [0x115905c], ecx
movzx edx, bl
mov edi, edx
sub edi, dword [ecx*4 + 0x102ff98]
add edi, esi
lea eax, [eax + edi + 4]
mov dword [0x102ff94], eax
cmp eax, dword [str.2R_]
je 0x1006605
inc ecx
inc ecx
cmp ecx, 6
mov dword [0x115905c], ecx
jl 0x10065dc
pop edi
pop esi
xor eax, eax
pop ebx
pop ecx
ret 0x10