Function at 0x10007c70
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1001465b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
mov eax, dword [0x100192e0]
push ebx
push esi
push edi
xor esi, esi
push esi
push 0x1001538a
lea ecx, [esp + 0x24]
mov dword [esp + 0x14c], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.100026e0
mov byte [esp + 0x38], 0
xor eax, eax
mov ecx, 0x40
lea edi, [esp + 0x39]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp + 0x154], esi
mov dword [esp + 0x14], esi
movzx esi, byte [0x1001574f]
stosb byte es:[edi], al
lea edi, [esi + 1]
push edi
mov dword [esp + 0x14], esi
call fcn.1000c516
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov ebx, eax
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, esi
mov eax, ecx
shr ecx, 2
mov esi, 0x10015744
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x100158b4
mov ecx, eax
push ecx
push ebx
call fcn.1000a5f0
mov eax, ebx
add esp, 0x10
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10007d40
sub eax, edx
push eax
push ebx
lea ecx, [esp + 0x24]
call fcn.100026e0
push ebx
call fcn.1000ceb2
mov eax, dword [esp + 0x38]
add esp, 4
cmp eax, 0x10
mov eax, dword [esp + 0x20]
jae 0x10007d6e
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [esp + 0x18], eax
je 0x10007e3f
movzx esi, byte [0x10015864]
lea edi, [esi + 1]
push edi
mov dword [esp + 0x14], esi
call fcn.1000c516
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov ebx, eax
xor eax, eax
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, esi
mov eax, ecx
shr ecx, 2
mov esi, 0x10015854
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x100158b4
mov ecx, eax
push ecx
push ebx
call fcn.1000a5f0
mov eax, ebx
add esp, 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10007dd8
sub eax, edx
push eax
push ebx
lea ecx, [esp + 0x24]
call fcn.100026e0
push ebx
call fcn.1000ceb2
mov eax, dword [esp + 0x38]
add esp, 4
cmp eax, 0x10
mov eax, dword [esp + 0x20]
jae 0x10007e06
lea eax, [esp + 0x20]
mov esi, dword [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10007e30
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x38]
push edx
push 0
push 0
push ecx
push 0
call eax
test eax, eax
mov edi, 1
jge 0x10007e34
mov edi, dword [esp + 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
jne 0x10007e4f
push 0x104
lea edx, [esp + 0x3c]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov esi, dword [ebp + 8]
lea eax, [esp + 0x38]
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], 0
mov byte [esi + 4], 0
lea edx, [eax + 1]
jmp 0x10007e70
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10007e70
sub eax, edx
push eax
lea eax, [esp + 0x3c]
push eax
mov ecx, esi
call fcn.100026e0
cmp dword [esp + 0x34], 0x10
jb 0x10007e9a
mov ecx, dword [esp + 0x20]
push ecx
call fcn.1000cae8
add esp, 4
mov ecx, dword [esp + 0x14c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x144]
mov eax, esi
call fcn.1000ca3e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8