Function at 0x180018a60
Capabilities:
Check if file exists
Get common file path
Get startup folder

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb88]
sub rsp, 0xc60
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180142d48]
xor rax, rsp
mov qword [rbp + 0xb30], rax
call fcn.180034890
test eax, eax
jne 0x1800196b2
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov r14d, 2
mov edx, r14d
mov rcx, rax
call qword [sym.imp.USER32.dll_MonitorFromWindow]
mov dword [rbp + 0x4c0], 0x68
lea rdx, [rbp + 0x4c0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ebx, dword [rbp + 0x4cc]
sub ebx, dword [rbp + 0x4c4]
mov dword [rbp + 0x574], 0xdc
xor esi, esi
lea r8, [rbp + 0x530]
mov edx, 0xffffffff
lea rcx, [rbp + 0x4e8]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
movd xmm6, dword [rbp + 0x5dc]
cvtdq2pd xmm6, xmm6
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x710]
call fcn.18009b170
xor r9d, r9d
lea r8d, [r14 + 0x18]
lea rdx, [rbp + 0x710]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea rdx, str.ludashi
lea rcx, [rbp + 0x710]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x920]
call fcn.18009b170
lea r8, str.LogComputerZ7_RunDll.log.on
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x920]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
lea rcx, [rbp + 0x920]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [0x180153000], eax
lea rdx, str.LogComputerZ7_RunDll.log
lea rcx, [rbp + 0x710]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
call fcn.180011c30
mov rcx, rax
test rax, rax
je 0x1800196f2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x710]
lea rcx, [rsp + 0x30]
cmp rax, 0x10000
jae 0x180018c09
lea rax, [rbp + 0x710]
movzx edx, ax
call fcn.180012460
jmp 0x180018c16
lea rdx, [rbp + 0x710]
call fcn.180011f90
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x180153010]
call fcn.180013580
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov r12, 0xffffffffffffffff
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180018c4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.18007a080
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
lea r13, [0x1800f4e38]
cmp al, 1
jne 0x180018e0c
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x468], xmm0
mov byte [rbp + 0x458], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x458]
call fcn.18000f910
nop
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x3d8]
call fcn.18000f910
nop
call fcn.18007a080
mov rdi, rax
movsd qword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movq r9, xmm3
lea r8, str.DllGetScreenZoom:screenZoom___f__horzScale_f
mov edx, r14d
lea rcx, [rsp + 0x38]
call fcn.180079c10
nop
mov r9d, 0x104
lea r8, [rbp + 0x458]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0xb0]
call fcn.1800143c0
mov rbx, rax
mov rcx, qword [rsp + 0x38]
mov rdx, r13
test rcx, rcx
cmovne rdx, rcx
mov rcx, rax
call fcn.180013a00
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0xb0]
call fcn.1800147c0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180018d73
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0x10
jb 0x180018db4
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018daf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800196fd
call fcn.180050640
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], 0
mov rdx, qword [rbp + 0x470]
cmp rdx, 0x10
jb 0x180018e0c
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180018e07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019703
call fcn.180050640
movdqa xmm0, xmmword [0x1801180d0]
movdqu xmmword [rbp + 0x448], xmm0
mov word [rbp + 0x438], si
mov r8d, 0xd
lea rdx, str.LdsScreenZoom
lea rcx, [rbp + 0x438]
call fcn.18000f050
nop
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a0], rsi
lea r14, [rbp + 0x438]
mov rsi, qword [rbp + 0x438]
mov r15, qword [rbp + 0x450]
cmp r15, 8
cmovae r14, rsi
mov rdi, qword [rbp + 0x448]
cmp rdi, 8
jae 0x180018e87
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x388], xmm0
mov ebx, 7
jmp 0x180018ece
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x388]
call fcn.18000f250
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x388], rax
lea r8, [rdi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.18009ad00
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x398], rdi
xor r14d, r14d
mov qword [rbp + 0x3a8], r14
mov ecx, 0x500000
mov dword [rbp + 0x3b0], ecx
cmp r15, 8
jb 0x180018f40
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180018f24
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019709
mov rcx, rsi
call fcn.180050640
mov ecx, dword [rbp + 0x3b0]
mov rbx, qword [rbp + 0x3a0]
mov rdi, qword [rbp + 0x398]
test rdi, rdi
je 0x1800194e9
lea rax, [rbp + 0x388]
cmp rbx, 8
cmovae rax, qword [rbp + 0x388]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rbp + 0x3a8], rax
test rax, rax
je 0x1800194e9
movsd xmm7, qword [0x1801180b0]
comisd xmm7, xmm6
ja 0x180019094
movsd xmm2, qword [0x1800f6428]
comisd xmm6, xmm7
jb 0x180018fb1
comisd xmm2, xmm6
ja 0x180019054
movsd xmm7, qword [0x1800f6430]
comisd xmm6, xmm2
jb 0x180018ff0
comisd xmm7, xmm6
jbe 0x180018ff0
movaps xmm1, xmm6
subsd xmm1, xmm2
andps xmm1, xmmword [0x1800f6470]
subsd xmm6, xmm7
andps xmm6, xmmword [0x1800f6470]
comisd xmm6, xmm1
jbe 0x180019094
movaps xmm7, xmm2
jmp 0x180019094
movsd xmm2, qword [0x1800f6438]
comisd xmm6, xmm7
jb 0x180019004
comisd xmm2, xmm6
ja 0x180019054
movsd xmm7, qword [0x1800f6440]
comisd xmm6, xmm2
jb 0x180019018
comisd xmm7, xmm6
ja 0x180018fc5
movsd xmm2, qword [0x1800f6448]
comisd xmm6, xmm7
jb 0x18001902c
comisd xmm2, xmm6
ja 0x180019054
movsd xmm7, qword [0x1800f6450]
comisd xmm6, xmm2
jb 0x180019040
comisd xmm7, xmm6
ja 0x180018fc5
movsd xmm2, qword [0x1800f6458]
comisd xmm6, xmm7
jb 0x180019078
comisd xmm2, xmm6
jbe 0x180019078
movaps xmm1, xmm6
subsd xmm1, xmm7
andps xmm1, xmmword [0x1800f6470]
subsd xmm6, xmm2
andps xmm6, xmmword [0x1800f6470]
comisd xmm6, xmm1
ja 0x180019094
movaps xmm7, xmm2
jmp 0x180019094
movsd xmm7, qword [0x1800f6460]
comisd xmm6, xmm2
jb 0x180019090
comisd xmm7, xmm6
ja 0x180018fc5
minsd xmm7, xmm6
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x610]
call fcn.18009b170
movaps xmm2, xmm7
movq r8, xmm2
lea rdx, [0x1800f5f50]
lea rcx, [rbp + 0x610]
call fcn.18001e100
mov qword [rbp + 0x378], r14
mov qword [rbp + 0x380], 0xf
mov byte [rbp + 0x368], 0
lea rax, [rbp + 0x610]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x1800190e6
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x368]
call fcn.18000f910
nop
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x1800192e2
cmp qword [rbp + 0x378], 0
je 0x1800192e2
movsxd rdi, dword [rbp + 0x378]
lea rax, [rdi + 5]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
je 0x1800192e2
mov dword [rax], edi
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 0x10
cmovae rdx, qword [rbp + 0x368]
mov r8, rdi
lea rcx, [rax + 4]
call fcn.18009ad00
lea rcx, [rbx + 4]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x3c8], xmm0
mov byte [rbp + 0x3b8], 0
mov r8d, 0x3b
lea rdx, str.C:UsersAdministratorAppDataRoamingLudashiLog_test.txt
lea rcx, [rbp + 0x3b8]
call fcn.18000f910
nop
lea rdx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 0x10
cmovae rdx, qword [rbp + 0x3b8]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x38]
lea rcx, [rbp - 0x60]
call fcn.1800173c0
nop
cmp qword [rbp + 0x28], 0
je 0x18001927b
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 0x10
cmovae rdx, qword [rbp + 0x368]
mov r8, qword [rbp + 0x378]
lea rcx, [rbp - 0x60]
call fcn.180016c70
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.18001d5f0
movzx edx, al
mov rcx, rbx
call fcn.18001ce40
mov rcx, rbx
call fcn.18001ca70
lea rcx, [rbp - 0x58]
call fcn.18001c820
test rax, rax
jne 0x18001927b
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx - 0x18], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx - 0x50]
and eax, 0x17
mov dword [rbp + rcx - 0x50], eax
mov edx, dword [rbp + rcx - 0x4c]
and edx, eax
jne 0x18001970f
lea rcx, [rbp - 0x60]
call fcn.180017b10
nop
mov rdx, qword [rbp + 0x3d0]
cmp rdx, 0x10
jb 0x1800192c6
inc rdx
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800192c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019763
call fcn.180050640
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x3c8], xmm0
mov byte [rbp + 0x3b8], 0
jmp 0x18001948a
call fcn.18007a080
mov r9, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r9 + 0x10]
cmp al, 1
jne 0x18001948a
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x488], xmm0
mov byte [rbp + 0x478], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x478]
call fcn.18000f910
nop
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x408], xmm0
mov byte [rbp + 0x3f8], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x3f8]
call fcn.18000f910
nop
call fcn.18007a080
mov rdi, rax
lea r8, [0x1800f6358]
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.180079c10
nop
mov r9d, 0x150
lea r8, [rbp + 0x478]
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x198]
call fcn.1800143c0
mov rbx, rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
cmovne r13, rcx
mov rdx, r13
mov rcx, rax
call fcn.180013a00
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x198]
call fcn.1800147c0
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1800193f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x410]
cmp rdx, 0x10
jb 0x180019431
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001942c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019769
call fcn.180050640
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x408], xmm0
mov byte [rbp + 0x3f8], 0
mov rdx, qword [rbp + 0x490]
cmp rdx, 0x10
jb 0x18001948a
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019484
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001976f
call fcn.180050640
nop
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x1800194cb
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800194c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019775
call fcn.180050640
mov qword [rbp + 0x378], r14
mov qword [rbp + 0x380], 0xf
mov byte [rbp + 0x368], 0
jmp 0x18001968d
call fcn.18007a080
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18001968d
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x4a8], xmm0
mov byte [rbp + 0x498], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x498]
call fcn.18000f910
nop
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x428], xmm0
mov byte [rbp + 0x418], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x418]
call fcn.18000f910
nop
call fcn.18007a080
mov rdi, rax
lea r8, [0x1800f6320]
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.180079c10
nop
mov r9d, 0x109
lea r8, [rbp + 0x498]
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x280]
call fcn.1800143c0
mov rbx, rax
mov rcx, qword [rsp + 0x48]
test rcx, rcx
cmovne r13, rcx
mov rdx, r13
mov rcx, rax
call fcn.180013a00
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x280]
call fcn.1800147c0
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1800195f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x430]
cmp rdx, 0x10
jb 0x180019638
inc rdx
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019633
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001977b
call fcn.180050640
movdqa xmm0, xmmword [0x1801180e0]
movdqu xmmword [rbp + 0x428], xmm0
mov byte [rbp + 0x418], 0
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0x10
jb 0x18001968d
inc rdx
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019687
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800196ec
call fcn.180050640
nop
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x1800196a6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x3a8], r14
lea rcx, [rbp + 0x388]
call fcn.18000ff00
mov rcx, qword [rbp + 0xb30]
xor rcx, rsp
call fcn.180050ad0
lea r11, [rsp + 0xc60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18009e27c
nop
mov ecx, 0x80004005
call fcn.180010480
nop
call fcn.18009e27c
nop
call fcn.18009e27c
nop
call fcn.18009e27c
nop
test dl, 4
je 0x18001971d
lea rbx, [0x1800f4c80]
jmp 0x180019732
test dl, 2
lea rbx, [0x1800f4c98]
lea rax, [0x1800f4cb0]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x60]
call fcn.18000ece0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.18000ea40
lea rdx, [0x18013e0d8]
lea rcx, [rsp + 0x70]
call fcn.18009ac04
nop
call fcn.18009e27c
nop
call fcn.18009e27c
nop
call fcn.18009e27c
nop
call fcn.18009e27c
nop
call fcn.18009e27c
int3