Function at 0x18003f40c
Capabilities:
Get common file path

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x1c0
mov dword [rbp - 0x7e], ecx
mov eax, dword [rbp - 0xe5]
cmp eax, edx
je 0x18003f424
and dword [rbp - 0xf8], eax
movzx eax, byte [rbp - 0xab]
test edx, 0x4f311d9
jno 0x18003f469
mov eax, 0x5e8b
mov r11, 0xa502
mov r10, qword [rbp - 0x83]
mov r10, qword [rbp - 0x47]
mov qword [rbp - 0x170], r11
mov ecx, dword [rbp - 0x166]
mov qword [rbp - 0x14b], r10
mov eax, 0xc9ec
movzx ecx, ch
add dword [rbp - 0x50], edx
add r9, rax
mov qword [rbp - 0xd5], r10
or dword [rbp - 0x1a0], ecx
mov dword [rbp - 0x6a], ecx
mov rcx, r11
sub rdx, 0x2982
mov r9, r10
push r9
and rdx, qword [rbp - 0x10b]
mov eax, 0x45d2
movzx edx, cl
add rax, 0xe7dd
mov edx, dword [rbp - 0xfc]
movzx edx, al
sub rax, qword [rbp - 0x1ba]
mov rcx, r11
movzx ecx, dx
cmp edx, eax
jae 0x18003f4e4
add dword [rbp - 0x14d], edx
mov edx, dword [rbp - 0x121]
mov ecx, ecx
or rcx, 0xc2dd
movzx edx, al
mov rax, rax
mov eax, edx
mov qword [rbp - 0x98], r11
mov eax, dword [rbp - 0x1bb]
mov r11, 0xf603
mov qword [rbp - 0x161], rcx
mov r11, 0x529e
mov eax, 0x567a
add rax, 0x938e
movzx edx, cl
mov eax, 0x773e
mov dword [rbp - 0x185], edx
or qword [rbp - 0xc0], r8
mov eax, 0x4bdf
movzx eax, ax
lea r8, [rbp - 0x1b8]
mov eax, dword [0x1800c0ae1]
mov ecx, 0x429
sub r8, qword [rbp - 0xca]
mov rcx, qword [rbp - 0x50]
mov dword [rbp - 0xe8], eax
mov qword [rbp - 0x8b], rax
add eax, edx
sub eax, edx
add r10, rax
sub r10, 0xdef1
cmp r8, r8
jno 0x18003f583
add rcx, 0x8429
mov qword [rbp - 0x140], r8
xor rdx, r8
mov edx, dword [rbp - 0xa]
sub edx, ecx
mov dword [rbp - 0x15], eax
mov ch, byte [rbp - 0x12b]
and edx, edx
mov qword [rbp - 0x13a], rdx
mov ecx, dword [rbp - 0x71]
mov rdx, r8
and qword [rbp - 0x14], rax
mov rdx, qword [rbp - 0x9d]
movzx edx, byte [0x1800c1c06]
or eax, 0xeec5
mov dword [rbp - 0xcb], eax
sub rdx, 0xae23
mov ecx, dword [0x1800be828]
cmp edx, dword [0x1800c1113]
jne 0x18003f5c4
add dword [rbp - 0x1ba], eax
movzx edx, ch
mov eax, dword [rbp - 0x167]
sub qword [rbp - 0x169], rdx
sub eax, ecx
sub rcx, qword [rbp - 0x5e]
mov qword [rbp - 0xee], rax
pop r8
add r11, 0xadd0
mov rcx, r9
mov qword [rbp - 0xa], r10
mov ax, word [rbp - 0x199]
mov qword [rbp - 0x142], rcx
mov edx, dword [rbp - 0x29]
mov dword [rbp - 0x191], ecx
movzx ecx, cl
mov edx, dword [rbp - 0xc0]
add r11, qword [0x1800bfdeb]
cmp r9, 0xffffffffb11acdd4
jae 0x18003f67f
mov dx, word [rbp - 0x11]
mov qword [0x1800c0861], r10
mov ch, 0x16
mov qword [rbp - 0x180], r8
mov rcx, qword [rbp - 0x197]
lea rcx, [rbp - 0x134]
sub rdx, 0x8352
lea edx, [rbp - 0x120]
mov r9, r10
add byte [rbp - 0x46], ch
mov ecx, ecx
mov edx, edx
movzx ecx, byte [rbp - 0x44]
mov ecx, dword [0x1800be67c]
mov r11, qword [rbp - 0x198]
add r10, qword [rbp - 0x91]
mov r10, qword [rbp - 0x12d]
mov qword [rbp - 0xfb], rdx
add r10, qword [0x1800be0ee]
movzx ecx, cl
sub rdx, rdx
mov dword [rbp - 0x104], ecx
sub r9, 0x4385
add ecx, dword [rbp - 0x1ab]
xor eax, dword [rbp - 0x76]
cmp dl, 0xdc
jno 0x18003f6c4
mov r8, qword [rbp - 0xef]
mov edx, 0x106a
mov qword [rbp - 0x32], r9
sub dword [rbp - 0x145], eax
mov r9, qword [rbp - 0x1ad]
add eax, ecx
and rcx, qword [rbp - 0x9f]
cmp rdx, 0xfffffffff240a193
jb 0x18003f6e1
sub r9, qword [rbp - 0x40]
test dword [0x1800be098], ecx
jns 0x18003f6e9
add eax, dword [0x1800bfc46]
movzx ecx, byte [0x1800bfc99]
mov rdx, qword [rbp - 0x5a]
sub rdx, r8
mov r11, rcx
mov qword [rbp - 0x23], rcx
mov r9, rax
mov edx, ecx
mov edx, dword [0x1800c0e2e]
mov dword [rbp - 0x1a9], ecx
mov qword [rbp - 0x186], r9
mov dword [rbp - 0x127], eax
mov eax, eax
movzx ecx, al
mov r11, r9
mov rax, qword [rbp - 0x92]
cmp rcx, r10
jae 0x18003f756
mov ecx, edx
cmp r11, qword [0x1800bf8cd]
jmp 0x18003f741
mov edx, ecx
mov r8, 0x78b9
lea edx, [rbp - 0x69]
mov eax, edx
xor qword [rbp - 0x102], rcx
mov ecx, edx
mov ecx, ecx
mov rax, r8
mov edx, 0x4cb
and ch, cl
mov qword [rbp - 0x83], rdx
mov rdx, qword [rbp - 0xd6]
add ecx, dword [rbp - 0x11]
cmp r10, qword [0x1800c06e5]
jne 0x18003f77e
mov qword [rbp - 0x49], r10
sub ecx, 0x6ffa
add eax, dword [rbp - 0x161]
lea edx, [rbp - 0x178]
mov r8, 0xee5d
mov byte [rbp - 0x15], ch
sub r8, r9
mov r11, 0xe66d
and edx, 0xec8c
sub dword [rbp - 0x12b], eax
sub r11, rdx
mov edx, ecx
sub dword [rbp - 0x2d], edx
mov qword [rbp - 0x34], rax
mov dword [rbp - 0x12c], ecx
movzx edx, cx
sub dword [rbp - 0x6c], ecx
lea r9, [rbp - 0x133]
mov edx, 0x973f
mov qword [0x1800bf504], r9
mov r9, 0x48c7
mov rdx, qword [rbp - 0x12f]
mov eax, 0x345
mov edx, ecx
lea edx, [rbp - 0xc8]
sub dword [rbp - 0x93], edx
or qword [rbp - 0x85], r9
and edx, dword [rbp - 0x1ab]
mov qword [0x1800c0244], rdx
movzx edx, dl
mov ecx, dword [rbp - 0xde]
mov dword [0x1800be25b], eax
mov r8, r9
lea rcx, [0x1800c03b2]
mov qword [rbp - 0x107], rdx
mov rcx, r8
mov r8, rdx
cmp edx, 0x97cc8df
jae 0x18003f880
sub rdx, 0x262d
add dword [rbp - 0xef], eax
mov edx, dword [rbp - 0x1f]
mov qword [rbp - 0x4d], rcx
mov ecx, eax
or r11, qword [rbp - 0xe]
sub r8, r9
mov dword [rbp - 0x55], ecx
mov rax, qword [rbp - 0x146]
mov r8, qword [rbp - 0x11c]
mov r11, rcx
add r11, 0xd3a3
mov dword [rbp - 0x1ae], eax
mov dword [rbp - 0x8f], ecx
mov rcx, 0xf2c9
test ecx, 0xc84d62cb
je 0x18003f98a
mov edx, ecx
mov rcx, qword [rbp - 0x153]
and r11, qword [rbp - 0x199]
mov qword [rbp - 0xda], r11
mov dword [rbp - 0x15c], edx
sub r8, 0x6c2f
mov qword [rbp - 0x10f], r11
sub eax, dword [rbp - 0x159]
cmp ecx, edx
jns 0x18003f95b
cmp r11, qword [0x1800c050f]
jmp 0x18003f8f8
movzx eax, ax
sub cl, al
lea rcx, [rbp - 0x148]
mov rax, rax
movzx edx, ch
mov dword [rbp - 0x196], ecx
mov edx, dword [rbp - 0x159]
lea eax, [rbp - 0x160]
mov rcx, 0xb435
add qword [rbp - 0x1b], rax
lea eax, [rbp - 0x16d]
mov qword [rbp - 0x10b], r8
sub ax, 0x864d
mov rcx, r9
sub dword [rbp - 0xd5], ecx
mov ecx, ecx
sub qword [rbp - 0x1af], r8
call fcn.18003fc91
lea r10, [0x1800c0260]
xor eax, 0x18ed
and r9, rdx
and rdx, rax
mov r11, qword [rbp - 0x1f]
sub r11, qword [rbp - 0xa0]
lea r11, [0x1800be634]
mov qword [rbp - 0x57], r10
add r9, qword [rbp - 0xf9]
mov dword [rbp - 0x140], edx
lea edx, [rbp - 0x15e]
push r11
call fcn.18003f9d9
mov rcx, qword [rbp - 0x171]
push rax
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov ecx, 0x63e5
mov qword [rbp - 0x68], r8
cmp eax, dword [0x1800bffe3]
jns 0x18003f9d4
sub ecx, eax
sub dword [rbp - 0x74], eax
movzx eax, dx
mov qword [rbp - 0x174], r8
movzx eax, ch
mov dword [rbp - 0x7d], eax
mov r9, qword [rbp - 0x1ab]
mov dword [rbp - 0x16f], ecx
xor dword [rbp - 0x68], eax
pop r9
pop rcx
leave
ret