Function at 0x1400320e0
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
sub rsp, 0x20
xor ebp, ebp
mov edi, edx
mov dword [rax + 8], ebp
mov rsi, rcx
mov ebx, 0x80004005
test rcx, rcx
je 0x1400324b9
test edx, edx
je 0x1400324b9
lea r8, [rax + 8]
lea rdx, [0x140043750]
call fcn.140002424
test eax, eax
je 0x1400324b2
mov eax, dword [rsp + 0x30]
cmp eax, 0xffffffff
je 0x1400324b2
cmp eax, 0x33
ja 0x1400323d3
je 0x140032390
cmp eax, 0x14
ja 0x1400322f5
je 0x1400322b2
test eax, eax
je 0x1400324ae
sub eax, 1
je 0x140032280
sub eax, 9
je 0x140032319
sub eax, 1
je 0x140032262
sub eax, 1
je 0x140032211
sub eax, 5
je 0x1400321d1
cmp eax, 1
jne 0x1400324ae
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x1400321ac
mov ebx, ebp
jmp 0x1400321c8
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x1400321c0
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.Help
jmp 0x14003224f
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x1400321ec
mov ebx, ebp
jmp 0x140032208
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x140032200
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.INF
jmp 0x14003224f
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x14003222c
mov ebx, ebp
jmp 0x140032248
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x140032240
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.Drivers
mov rdx, rdi
mov rcx, rsi
shr rdx, 1
call fcn.140010470
jmp 0x1400324ae
shr edi, 1
mov rcx, rsi
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x140032295
mov ebx, ebp
jmp 0x1400324ae
shr edi, 1
mov rdx, rsi
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
nop dword [rax + rax]
jmp 0x140032275
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x1400324ae
movzx ebx, ax
or ebx, 0x80070000
jmp 0x1400324ae
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x1400322cd
mov ebx, ebp
jmp 0x1400322e9
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x1400322e1
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.Fonts
jmp 0x14003224f
sub eax, 0x15
je 0x1400324ae
sub eax, 2
je 0x1400324ae
sub eax, 1
je 0x140032331
sub eax, 1
je 0x140032319
sub eax, 5
jmp 0x1400324ae
shr edi, 1
mov rcx, rsi
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
jmp 0x140032275
shr edi, 1
mov rcx, rsi
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x14003234c
mov ebx, ebp
jmp 0x140032368
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x140032360
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea rdx, [0x140043758]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsstr]
nop dword [rax + rax]
test rax, rax
je 0x1400324ae
mov word [rax + 4], bp
jmp 0x1400324ae
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x1400323ab
mov ebx, ebp
jmp 0x1400323c7
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x1400323bf
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.Spool
jmp 0x14003224f
mov ecx, 0x4018
cmp eax, ecx
ja 0x14003244b
je 0x1400324ae
sub eax, 0x34
je 0x14003240c
sub eax, 1
je 0x1400324ae
sub eax, 1
je 0x1400324ae
sub eax, 1
je 0x1400324ae
sub eax, 0x3fdf
jmp 0x1400324ae
mov edx, edi
mov rcx, rsi
shr edx, 1
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
nop dword [rax + rax]
test eax, eax
je 0x140032427
mov ebx, ebp
jmp 0x14003243f
call fcn.140015998
mov ebx, eax
test eax, eax
jle 0x14003243b
movzx ebx, ax
or ebx, 0x80070000
test ebx, ebx
jne 0x1400324ae
lea r8, str.SpoolDrivers
jmp 0x14003224f
sub eax, 0x4019
je 0x1400324ae
sub eax, 6
je 0x1400324ae
sub eax, 4
je 0x1400324a0
sub eax, 3
je 0x140032492
sub eax, 5
je 0x140032484
cmp eax, 0x3825
jne 0x1400324ae
mov edx, 1
mov rcx, rsi
call fcn.14001a520
neg eax
sbb ecx, ecx
not ecx
and ebx, ecx
jmp 0x1400324ae
shr edi, 1
mov rcx, rsi
mov edx, edi
call fcn.140031b88
jmp 0x1400324ac
shr edi, 1
mov rcx, rsi
mov edx, edi
call fcn.140031d30
jmp 0x1400324ac
shr edi, 1
mov rcx, rsi
mov edx, edi
call fcn.1400319c4
mov ebx, eax
mov eax, ebx
jmp 0x1400324be
mov eax, 0x80070057
jmp 0x1400324be
mov eax, 0x80004003
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret