Function at 0x1400d9000
Capabilities:
Get common file path

Disassembly:
mov r8, rdx
lea rdx, [rcx + 0x28]
jmp 0x1400d9000
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x1402c5168]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov rsi, r8
mov r15, rdx
mov r14, rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14024e620]
movdqu xmmword [rsp + 0x40], xmm1
xor r12d, r12d
mov word [rsp + 0x30], r12w
mov qword [rsp + 0x28], r12
lea rax, [0x1402c9fb8]
mov qword [rsp + 0x28], rax
mov rcx, qword [0x1402c9fb8]
test rcx, rcx
je 0x1400d9081
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov rbx, 0xffffffffffffffff
mov r8, qword [0x1402c5cc8]
test r8, r8
je 0x1400d90b0
lea rdx, [0x1402c5cb8]
cmp qword [0x1402c5cd0], 8
cmovae rdx, qword [0x1402c5cb8]
jmp 0x1400d9170
xor edx, edx
mov r8d, 0x20c
lea rcx, [rsp + 0x50]
call fcn.14018d8d0
lea rdx, [rsp + 0x50]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
dec eax
cmp eax, 0x103
ja 0x1400d9255
mov word [rbp + 0x15a], r12w
xor edx, edx
mov r8d, 0x412
lea rcx, [rbp + 0x160]
call fcn.14018d8d0
mov r8d, 0x208
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [rax - 1]
cmp ecx, 0x207
ja 0x1400d9156
mov eax, eax
add rax, rax
cmp rax, 0x412
jae 0x1400d92ea
mov word [rbp + rax + 0x160], r12w
lea rax, [rbp + 0x160]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400d9142
lea rdx, [rbp + 0x160]
jmp 0x1400d9170
lea rax, [rsp + 0x50]
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400d9160
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140006b90
nop
mov rcx, qword [0x1402c9fb8]
test rcx, rcx
je 0x1400d918d
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x28], r12
lea rdi, [r14 + 8]
cmp byte [r14], 0
je 0x1400d91ac
mov rcx, rdi
call fcn.1400fd820
test al, al
sete al
mov byte [r14], al
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.1400fdd60
test al, al
je 0x1400d91e9
cmp rdi, rsi
je 0x1400d91de
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400d91d2
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006b90
mov byte [r14], 1
mov bl, 1
jmp 0x1400d926e
xor edx, edx
mov r8d, 0x20c
lea rcx, [rsp + 0x50]
call fcn.14018d8d0
mov edx, 0x105
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
dec eax
cmp eax, 0x103
ja 0x1400d926c
mov word [rbp + 0x15a], r12w
lea rax, [rsp + 0x50]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400d9221
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140006b90
mov r9, rsi
mov r8, r15
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1400d8f60
movzx ebx, al
jmp 0x1400d926e
mov rcx, qword [0x1402c9fb8]
test rcx, rcx
je 0x1400d9267
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x28], r12
xor bl, bl
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1400d92ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d92a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d92e4
call fcn.140186ea4
movdqa xmm0, xmmword [0x14024e620]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r12w
movzx eax, bl
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140187450
add rsp, 0x690
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140199c8c
nop
call fcn.14018758c
nop
push rbx
sub rsp, 0x20
cmp byte [rcx], 0
mov rbx, rcx
jne 0x1400d9306
mov al, 1
add rsp, 0x20
pop rbx
ret
add rcx, 8
call fcn.1400fd820
test al, al
sete cl
test al, al
mov byte [rbx], cl
setne al
add rsp, 0x20
pop rbx
ret