Function at 0x1000c7ea
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10064c38
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc8
push ebx
push esi
push edi
push 3
pop esi
mov dword [esp + 0x34], ecx
xor ebx, ebx
push esi
lea ecx, [esp + 0x4c]
mov dword [esp + 0x24], ebx
mov edi, edx
call fcn.10001d4c
mov dword [esp + 0xdc], ebx
lea ecx, [esp + 0x54]
mov dword [esp + 0x14], 0x39d6b9c2
mov dword [esp + 0x18], 0x86992f1e
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0xc], 1
push esi
call fcn.10001d4c
mov dword [esp + 0xc], 0x9a984365
mov dword [esp + 0xc], 0x47073e70
mov dword [esp + 0xc], ebx
jmp 0x1000c881
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x8be135e1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1000c86e
mov dword [esp + 0xc], ebx
jmp 0x1000c8a0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x54]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1000c88d
mov esi, dword [esp + 0x48]
cmp dword [esi + 4], ebx
jne 0x1000c8ea
mov dword [esp + 0x14], ebx
xor edx, edx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov ecx, 0xc5ec62bb
setg dl
xor eax, eax
test edx, edx
sets al
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
cmp dword [esi + 4], eax
jge 0x1000c8e6
cmp dword [esp + 0x14], ebx
jne 0x1000c8ea
mov ecx, ebx
jmp 0x1000c8ed
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, dword [esi + 4]
setne al
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], ebx
je 0x1000c904
xor ecx, ecx
inc ecx
jmp 0x1000c906
mov ecx, ebx
xor eax, eax
cmp ecx, dword [esi + 4]
setne al
cmp eax, 0xfffffffb
sbb eax, eax
inc eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x54]
neg eax
sbb eax, eax
neg eax
mov dword [ecx + 8], eax
jne 0x1000c92f
mov eax, dword [esp + 0x18]
mov eax, dword [ecx + 8]
lea ecx, [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0xc], 0xffffb2ba
call fcn.10001d88
or dword [esp + 0xdc], 0xffffffff
lea ecx, [esp + 0x48]
call fcn.10001d88
call fcn.1000885d
push ecx
push eax
lea ecx, [esp + 0x40]
call fcn.1000d329
mov dword [esp + 0xdc], 1
lea esi, [edi - 0x8e3]
mov edx, dword [esp + 0x38]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000c9af
cmp dword [eax + 0x10], esi
jge 0x1000c992
mov eax, dword [eax + 8]
jmp 0x1000c996
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000c988
cmp ecx, edx
je 0x1000c9af
cmp esi, dword [ecx + 0x10]
jl 0x1000c9af
mov dword [esp + 0x44], ecx
lea esi, [esp + 0x44]
jmp 0x1000c9b7
mov dword [esp + 0x40], edx
lea esi, [esp + 0x40]
mov esi, dword [esi]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], 0x3543
cmp dword [esp + 0xc], 0x3737
mov dword [esp + 0x1c], esi
jle 0x1000ca2d
xor edi, edi
xor esi, esi
mov dword [esp + 0x18], 0x763d
mov eax, esi
lea ecx, [esp + 0x70]
and eax, ebx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000c9f9
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push 0
push 1
lea ecx, [esp + 0x78]
call fcn.1000205a
add esi, edi
dec dword [esp + 0x18]
jne 0x1000c9df
inc edi
cmp edi, 0x5fd7
jl 0x1000c9d5
inc ebx
cmp ebx, 0x6b2e
jl 0x1000c9d3
mov esi, dword [esp + 0x1c]
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x14], ebx
inc edi
cmp dword [esp + 0x14], 0xfffffffe
jge 0x1000cb00
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1000ca51
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov dword [esp + 0x18], 0x17d1
cmp dword [esp + 0x18], 0x1830
jle 0x1000cac6
push edi
push 0x25b8
push 0x10f4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edi, ebx
mov eax, ebx
lea ecx, [esp + 0xa0]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ca9a
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push 0
push 1
lea ecx, [esp + 0xa8]
call fcn.1000205a
inc ebx
cmp ebx, 0x3f00
jl 0x1000ca7d
inc edi
push 0
pop ebx
cmp edi, 0x740f
jl 0x1000ca7d
mov byte [esp + 0x13], bl
cmp dword [esp + 0x18], 0x1612
jge 0x1000cadf
push str.quau_tka_bxldryyc_nihktao_jqrccxawk_gpczpztfw_tdch
call fcn.1004c39e
pop ecx
xor edi, edi
inc edi
mov dword [esp + 0xdc], edi
cmp byte [esp + 0x13], 0
je 0x1000caf7
push ebx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
dec dword [esp + 0x14]
jmp 0x1000ca34
cmp dword [esp + 0xc], 0x33fe
jge 0x1000cb15
push str.whyqrstmm_cemf_nmtg_qcywqezcu_pmchos_mnjapoax_rcne
call fcn.1004c39e
pop ecx
mov dword [esp + 0xdc], edi
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1000cb33
push 0x26aa
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov eax, dword [0x10146df0]
test al, 1
jne 0x1000cb66
or eax, edi
mov dword [0x10146e10], 7
mov dword [0x10146df0], eax
xor eax, eax
push 0x100661d0
mov dword [0x10146e0c], ebx
mov word [0x10146dfc], ax
call fcn.1004c374
pop ecx
push 4
lea ecx, [esp + 0x2c]
call fcn.10001d4c
mov dword [esp + 0xc], 0xfffffff9
mov dword [esp + 0xc], ebx
jmp 0x1000cb8f
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1000cb7f
mov dword [esp + 0xc], ebx
jmp 0x1000cbac
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x24], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x1000cb9c
mov dword [esp + 0xc], 3
cmp dword [esp + 0xc], ebx
jl 0x1000ccf1
mov dword [esp + 0x14], 0x4b25b3b9
mov dword [esp + 0x1c], 0x4e2b79dc
mov dword [esp + 0x14], ebx
jmp 0x1000cbea
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x60], 0xa6f9a4d9
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x1000cbda
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1000cc2d
push ebx
push 0xd07
push 0xe21
push 0x15c8
push 0x462
push 0x1f1e
push 0x2166
push 0x933
push 0x6bc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov dword [esp + 0x14], ebx
jmp 0x1000ccdc
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
cmp dword [eax + ecx*4], ebx
jne 0x1000cce7
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
cmp dword [eax + ecx*4], 8
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xc5ec
mov eax, dword [esp + 0x28]
setne cl
imul edx, ecx
xor ecx, ecx
imul edx, dword [eax]
mov eax, dword [esp + 0x14]
cmp edx, eax
mov edx, dword [esp + 0x28]
setg cl
sub ecx, dword [edx + edi*4]
neg ecx
sbb ecx, ecx
or eax, 0xffffffff
inc ecx
sub eax, ecx
xor ecx, ecx
cmp eax, dword [edx + ebx*4]
setl cl
xor ebx, ebx
mov dword [esp + 0x24], ecx
test ecx, ecx
jne 0x1000ccba
cmp dword [esp + 0x14], ebx
jne 0x1000ccba
xor edi, edi
mov eax, ebx
inc edi
jmp 0x1000ccbf
xor edi, edi
inc edi
mov eax, edi
mov ecx, dword [esp + 0x14]
xor edx, edx
add ecx, eax
mov eax, dword [esp + 0x1c]
cmp ecx, eax
setl dl
add edx, dword [esp + 0xc]
mov dword [esp + 0x68], edx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jle 0x1000cc36
dec dword [esp + 0xc]
jns 0x1000cbc4
mov dword [esp + 0xc], ebx
jmp 0x1000cd03
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x24], edi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x1000ccf7
lea ecx, [esp + 0x28]
call fcn.10001d88
cmp esi, dword [esp + 0x38]
je 0x1000cd37
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [esp + 0xbc]
call fcn.10003431
pop ecx
mov byte [esp + 0xdc], 6
mov ebx, edi
jmp 0x1000cd56
push 0x10146dfc
lea ecx, [esp + 0x8c]
call fcn.10001cd7
push 2
mov dword [esp + 0xe0], 7
pop ebx
mov esi, dword [esp + 0x34]
mov ecx, esi
push eax
mov dword [esp + 0x24], ebx
call fcn.10001cd7
or ebx, 4
test bl, 2
je 0x1000cd80
push 0
push edi
lea ecx, [esp + 0x90]
and ebx, 0xfffffffd
call fcn.1000232a
test bl, 1
je 0x1000cd94
push 0
push edi
lea ecx, [esp + 0xc0]
call fcn.1000232a
lea ecx, [esp + 0x38]
call fcn.1000d214
mov ecx, dword [esp + 0xd4]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret