Function at 0x180019010
Capabilities:
Check if file exists
Get common file path
Get startup folder

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb88]
sub rsp, 0xc60
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180143158]
xor rax, rsp
mov qword [rbp + 0xb30], rax
call fcn.180034e40
test eax, eax
jne 0x180019c62
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov r14d, 2
mov edx, r14d
mov rcx, rax
call qword [sym.imp.USER32.dll_MonitorFromWindow]
mov dword [rbp + 0x4c0], 0x68
lea rdx, [rbp + 0x4c0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ebx, dword [rbp + 0x4cc]
sub ebx, dword [rbp + 0x4c4]
mov dword [rbp + 0x574], 0xdc
xor esi, esi
lea r8, [rbp + 0x530]
mov edx, 0xffffffff
lea rcx, [rbp + 0x4e8]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
movd xmm6, dword [rbp + 0x5dc]
cvtdq2pd xmm6, xmm6
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x710]
call fcn.18009b770
xor r9d, r9d
lea r8d, [r14 + 0x18]
lea rdx, [rbp + 0x710]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea rdx, str.ludashi
lea rcx, [rbp + 0x710]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x920]
call fcn.18009b770
lea r8, str.LogComputerZ7_RunDll.log.on
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x920]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
lea rcx, [rbp + 0x920]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [0x180153400], eax
lea rdx, str.LogComputerZ7_RunDll.log
lea rcx, [rbp + 0x710]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
call fcn.1800121e0
mov rcx, rax
test rax, rax
je 0x180019ca2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x710]
lea rcx, [rsp + 0x30]
cmp rax, 0x10000
jae 0x1800191b9
lea rax, [rbp + 0x710]
movzx edx, ax
call fcn.180012a10
jmp 0x1800191c6
lea rdx, [rbp + 0x710]
call fcn.180012540
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x180153410]
call fcn.180013b30
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov r12, 0xffffffffffffffff
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800191fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.18007a540
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
lea r13, [0x1800f4e38]
cmp al, 1
jne 0x1800193bc
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x468], xmm0
mov byte [rbp + 0x458], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x458]
call fcn.18000fec0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x3d8]
call fcn.18000fec0
nop
call fcn.18007a540
mov rdi, rax
movsd qword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movq r9, xmm3
lea r8, str.DllGetScreenZoom:screenZoom___f__horzScale_f
mov edx, r14d
lea rcx, [rsp + 0x38]
call fcn.18007a0d0
nop
mov r9d, 0x104
lea r8, [rbp + 0x458]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0xb0]
call fcn.180014970
mov rbx, rax
mov rcx, qword [rsp + 0x38]
mov rdx, r13
test rcx, rcx
cmovne rdx, rcx
mov rcx, rax
call fcn.180013fb0
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0xb0]
call fcn.180014d70
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180019323
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0x10
jb 0x180019364
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001935f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019cad
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x3e8], xmm0
mov byte [rbp + 0x3d8], 0
mov rdx, qword [rbp + 0x470]
cmp rdx, 0x10
jb 0x1800193bc
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800193b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019cb3
call fcn.180050b00
movdqa xmm0, xmmword [0x180118160]
movdqu xmmword [rbp + 0x448], xmm0
mov word [rbp + 0x438], si
mov r8d, 0xd
lea rdx, str.LdsScreenZoom
lea rcx, [rbp + 0x438]
call fcn.18000f600
nop
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a0], rsi
lea r14, [rbp + 0x438]
mov rsi, qword [rbp + 0x438]
mov r15, qword [rbp + 0x450]
cmp r15, 8
cmovae r14, rsi
mov rdi, qword [rbp + 0x448]
cmp rdi, 8
jae 0x180019437
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x388], xmm0
mov ebx, 7
jmp 0x18001947e
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp + 0x388]
call fcn.18000f800
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x388], rax
lea r8, [rdi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.18009b300
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x398], rdi
xor r14d, r14d
mov qword [rbp + 0x3a8], r14
mov ecx, 0x500000
mov dword [rbp + 0x3b0], ecx
cmp r15, 8
jb 0x1800194f0
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800194d4
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019cb9
mov rcx, rsi
call fcn.180050b00
mov ecx, dword [rbp + 0x3b0]
mov rbx, qword [rbp + 0x3a0]
mov rdi, qword [rbp + 0x398]
test rdi, rdi
je 0x180019a99
lea rax, [rbp + 0x388]
cmp rbx, 8
cmovae rax, qword [rbp + 0x388]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rbp + 0x3a8], rax
test rax, rax
je 0x180019a99
movsd xmm7, qword [0x180118140]
comisd xmm7, xmm6
ja 0x180019644
movsd xmm2, qword [0x1800f6428]
comisd xmm6, xmm7
jb 0x180019561
comisd xmm2, xmm6
ja 0x180019604
movsd xmm7, qword [0x1800f6430]
comisd xmm6, xmm2
jb 0x1800195a0
comisd xmm7, xmm6
jbe 0x1800195a0
movaps xmm1, xmm6
subsd xmm1, xmm2
andps xmm1, xmmword [0x1800f6470]
subsd xmm6, xmm7
andps xmm6, xmmword [0x1800f6470]
comisd xmm6, xmm1
jbe 0x180019644
movaps xmm7, xmm2
jmp 0x180019644
movsd xmm2, qword [0x1800f6438]
comisd xmm6, xmm7
jb 0x1800195b4
comisd xmm2, xmm6
ja 0x180019604
movsd xmm7, qword [0x1800f6440]
comisd xmm6, xmm2
jb 0x1800195c8
comisd xmm7, xmm6
ja 0x180019575
movsd xmm2, qword [0x1800f6448]
comisd xmm6, xmm7
jb 0x1800195dc
comisd xmm2, xmm6
ja 0x180019604
movsd xmm7, qword [0x1800f6450]
comisd xmm6, xmm2
jb 0x1800195f0
comisd xmm7, xmm6
ja 0x180019575
movsd xmm2, qword [0x1800f6458]
comisd xmm6, xmm7
jb 0x180019628
comisd xmm2, xmm6
jbe 0x180019628
movaps xmm1, xmm6
subsd xmm1, xmm7
andps xmm1, xmmword [0x1800f6470]
subsd xmm6, xmm2
andps xmm6, xmmword [0x1800f6470]
comisd xmm6, xmm1
ja 0x180019644
movaps xmm7, xmm2
jmp 0x180019644
movsd xmm7, qword [0x1800f6460]
comisd xmm6, xmm2
jb 0x180019640
comisd xmm7, xmm6
ja 0x180019575
minsd xmm7, xmm6
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x610]
call fcn.18009b770
movaps xmm2, xmm7
movq r8, xmm2
lea rdx, [0x1800f5f50]
lea rcx, [rbp + 0x610]
call fcn.18001e6b0
mov qword [rbp + 0x378], r14
mov qword [rbp + 0x380], 0xf
mov byte [rbp + 0x368], 0
lea rax, [rbp + 0x610]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x180019696
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x368]
call fcn.18000fec0
nop
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x180019892
cmp qword [rbp + 0x378], 0
je 0x180019892
movsxd rdi, dword [rbp + 0x378]
lea rax, [rdi + 5]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
je 0x180019892
mov dword [rax], edi
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 0x10
cmovae rdx, qword [rbp + 0x368]
mov r8, rdi
lea rcx, [rax + 4]
call fcn.18009b300
lea rcx, [rbx + 4]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x3c8], xmm0
mov byte [rbp + 0x3b8], 0
mov r8d, 0x3b
lea rdx, str.C:UsersAdministratorAppDataRoamingLudashiLog_test.txt
lea rcx, [rbp + 0x3b8]
call fcn.18000fec0
nop
lea rdx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 0x10
cmovae rdx, qword [rbp + 0x3b8]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x38]
lea rcx, [rbp - 0x60]
call fcn.180017970
nop
cmp qword [rbp + 0x28], 0
je 0x18001982b
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 0x10
cmovae rdx, qword [rbp + 0x368]
mov r8, qword [rbp + 0x378]
lea rcx, [rbp - 0x60]
call fcn.180017220
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.18001dba0
movzx edx, al
mov rcx, rbx
call fcn.18001d3f0
mov rcx, rbx
call fcn.18001d020
lea rcx, [rbp - 0x58]
call fcn.18001cdd0
test rax, rax
jne 0x18001982b
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx - 0x18], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx - 0x50]
and eax, 0x17
mov dword [rbp + rcx - 0x50], eax
mov edx, dword [rbp + rcx - 0x4c]
and edx, eax
jne 0x180019cbf
lea rcx, [rbp - 0x60]
call fcn.1800180c0
nop
mov rdx, qword [rbp + 0x3d0]
cmp rdx, 0x10
jb 0x180019876
inc rdx
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019d13
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x3c8], xmm0
mov byte [rbp + 0x3b8], 0
jmp 0x180019a3a
call fcn.18007a540
mov r9, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r9 + 0x10]
cmp al, 1
jne 0x180019a3a
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x488], xmm0
mov byte [rbp + 0x478], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x478]
call fcn.18000fec0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x408], xmm0
mov byte [rbp + 0x3f8], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x3f8]
call fcn.18000fec0
nop
call fcn.18007a540
mov rdi, rax
lea r8, [0x1800f6358]
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.18007a0d0
nop
mov r9d, 0x150
lea r8, [rbp + 0x478]
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x198]
call fcn.180014970
mov rbx, rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
cmovne r13, rcx
mov rdx, r13
mov rcx, rax
call fcn.180013fb0
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x198]
call fcn.180014d70
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1800199a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x410]
cmp rdx, 0x10
jb 0x1800199e1
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800199dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019d19
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x408], xmm0
mov byte [rbp + 0x3f8], 0
mov rdx, qword [rbp + 0x490]
cmp rdx, 0x10
jb 0x180019a3a
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019a34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019d1f
call fcn.180050b00
nop
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x180019a7b
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019a76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019d25
call fcn.180050b00
mov qword [rbp + 0x378], r14
mov qword [rbp + 0x380], 0xf
mov byte [rbp + 0x368], 0
jmp 0x180019c3d
call fcn.18007a540
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x180019c3d
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x4a8], xmm0
mov byte [rbp + 0x498], 0
mov r8d, 0x5e
lea rdx, str.d:jenkins.jenkinsworkspacemaster_lucomputerz_band_win10computerz7_band_win10dllmain.cpp
lea rcx, [rbp + 0x498]
call fcn.18000fec0
nop
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x428], xmm0
mov byte [rbp + 0x418], 0
mov r8d, 3
lea rdx, [0x1800f4ed4]
lea rcx, [rbp + 0x418]
call fcn.18000fec0
nop
call fcn.18007a540
mov rdi, rax
lea r8, [0x1800f6320]
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.18007a0d0
nop
mov r9d, 0x109
lea r8, [rbp + 0x498]
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x280]
call fcn.180014970
mov rbx, rax
mov rcx, qword [rsp + 0x48]
test rcx, rcx
cmovne r13, rcx
mov rdx, r13
mov rcx, rax
call fcn.180013fb0
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x280]
call fcn.180014d70
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x180019ba7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x430]
cmp rdx, 0x10
jb 0x180019be8
inc rdx
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019be3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019d2b
call fcn.180050b00
movdqa xmm0, xmmword [0x180118170]
movdqu xmmword [rbp + 0x428], xmm0
mov byte [rbp + 0x418], 0
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0x10
jb 0x180019c3d
inc rdx
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019c37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019c9c
call fcn.180050b00
nop
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x180019c56
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x3a8], r14
lea rcx, [rbp + 0x388]
call fcn.1800104b0
mov rcx, qword [rbp + 0xb30]
xor rcx, rsp
call fcn.180050f90
lea r11, [rsp + 0xc60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18009e87c
nop
mov ecx, 0x80004005
call fcn.180010a30
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
test dl, 4
je 0x180019ccd
lea rbx, [0x1800f4c80]
jmp 0x180019ce2
test dl, 2
lea rbx, [0x1800f4c98]
lea rax, [0x1800f4cb0]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x60]
call fcn.18000f290
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.18000eff0
lea rdx, [0x18013e3d8]
lea rcx, [rsp + 0x70]
call fcn.18009b204
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
nop
call fcn.18009e87c
int3