Function at 0x140002050
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14025bd70]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov qword [rsp + 0x40], rcx
xor r13d, r13d
mov word [rsp + 0x70], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x72]
call fcn.14018f8c0
mov r8d, 0x104
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.140009adc
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400020e3
mov ecx, 0x80004005
call fcn.140004af0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x28], rdi
lea rcx, [rsp + 0x70]
lea rax, [rsp + 0x70]
shr rax, 0x10
mov qword [rsp + 0x58], rax
mov r15d, 1
or r12, 0xffffffffffffffff
test rax, rax
jne 0x140002144
movzx ebx, cx
mov ecx, ebx
call fcn.1400094ec
test rax, rax
je 0x140002234
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.140004550
mov rdi, qword [rsp + 0x28]
jmp 0x140002234
lea rax, [rsp + 0x70]
mov rbx, r12
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140002150
test ebx, ebx
jne 0x1400021b7
lea rdx, [rdi - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140002234
cmp dword [rdx + 0x10], 0
jge 0x140002193
cmp dword [rdi - 0xc], 0
jge 0x140002186
mov ecx, 0x80070057
call fcn.140004af0
int3
mov dword [rdi - 0x10], r13d
mov word [rdi], r13w
jmp 0x140002234
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400021a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x28], rdi
jmp 0x140002234
mov r14d, dword [rdi - 0x10]
lea rsi, [rsp + 0x70]
sub rsi, rdi
sar rsi, 1
test ebx, ebx
jns 0x1400021d5
mov ecx, 0x80070057
call fcn.140004af0
int3
mov ecx, r15d
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, ebx
or eax, ecx
jge 0x1400021f5
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.140004810
mov rdi, qword [rsp + 0x28]
movsxd rax, ebx
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
add rdx, rdx
cmp rsi, r14
lea r14, [rax + rax]
mov r9, r14
ja 0x140002219
lea r8, [rdi + rsi*2]
call fcn.14018d548
jmp 0x140002223
lea r8, [rsp + 0x70]
call fcn.14018d4c0
cmp ebx, dword [rdi - 0xc]
jg 0x1400028a4
mov dword [rdi - 0x10], ebx
mov word [r14 + rdi], r13w
lea rsi, [rdi - 0x18]
mov rcx, rsi
call fcn.140004a20
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
mov edx, 0x5c
mov rcx, rbx
call fcn.14018e11c
test rax, rax
jne 0x140002260
mov eax, r12d
jmp 0x140002266
sub rax, rbx
sar rax, 1
lea r9d, [rax + 1]
test r9d, r9d
jle 0x1400022f9
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x20]
call fcn.140003df0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
cmp rcx, rsi
je 0x1400022d6
cmp dword [rsi + 0x10], 0
jl 0x1400022c7
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x1400022c7
call fcn.140004a20
mov rbx, rax
lock add dword [rsi + 0x10], 0xffffffff
jg 0x1400022bc
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x1400022d6
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140004870
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400022ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
lea r13, [rdi - 0x18]
mov qword [rsp + 0x38], r13
lea rsi, [rbx - 0x18]
cmp r13, rsi
je 0x14000235f
cmp dword [rsi + 0x10], 0
jl 0x140002349
mov rax, qword [rsi]
cmp qword [r13], rax
jne 0x140002349
mov rcx, r13
call fcn.140004a20
mov rbx, rax
lock add dword [rsi + 0x10], 0xffffffff
jg 0x140002339
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rbx, 0x18
mov qword [rsp + 0x20], rbx
mov rdi, qword [rsp + 0x28]
jmp 0x14000235f
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.140004870
mov rbx, qword [rsp + 0x20]
mov r14, rbx
xor eax, eax
mov esi, eax
cmp word [rbx], ax
je 0x140002409
xor r13d, r13d
nop word [rax + rax]
movzx edx, word [r14]
lea rcx, [0x140216a8c]
call fcn.14018e704
test rax, rax
je 0x14000239f
test rsi, rsi
jne 0x1400023a2
mov rsi, r14
jmp 0x1400023a2
mov rsi, r13
add r14, 2
cmp word [r14], r13w
jne 0x140002380
test rsi, rsi
mov r13, qword [rsp + 0x38]
je 0x140002409
sub rsi, rbx
sar rsi, 1
test esi, esi
jns 0x1400023cb
mov ecx, 0x80070057
call fcn.140004af0
int3
mov ecx, r15d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400023eb
mov edx, esi
lea rcx, [rsp + 0x20]
call fcn.140004810
mov rbx, qword [rsp + 0x20]
cmp esi, dword [rbx - 0xc]
jg 0x1400023fe
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
jmp 0x140002409
mov ecx, 0x80070057
call fcn.140004af0
int3
mov r14d, dword [rbx - 0x10]
lea esi, [r14 + 1]
test esi, esi
jns 0x140002420
mov ecx, 0x80070057
call fcn.140004af0
int3
mov ecx, r15d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x140002440
mov edx, esi
lea rcx, [rsp + 0x20]
call fcn.140004810
mov rbx, qword [rsp + 0x20]
mov ecx, 0x5c
mov word [rbx + r14*2], cx
cmp esi, dword [rbx - 0xc]
jg 0x140002899
mov dword [rbx - 0x10], esi
movsxd rax, esi
xor ecx, ecx
mov word [rbx + rax*2], cx
lea r15, [rbx - 0x18]
cmp r15, r13
je 0x1400024be
cmp dword [r13 + 0x10], ecx
jl 0x1400024a8
mov rax, qword [r13]
cmp qword [r15], rax
jne 0x1400024a8
mov rcx, r15
call fcn.140004a20
mov rdi, rax
lock add dword [r13 + 0x10], 0xffffffff
jg 0x140002498
mov rcx, qword [r13]
mov r8, qword [rcx]
mov rdx, r13
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rdi, 0x18
mov qword [rsp + 0x28], rdi
mov rbx, qword [rsp + 0x20]
jmp 0x1400024be
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x28]
call fcn.140004870
mov rdi, qword [rsp + 0x28]
mov r14, qword [rsp + 0x40]
lea r13, [rdi - 0x18]
mov qword [rsp + 0x38], r13
mov rsi, qword [r14 + 0x298]
sub rsi, 0x18
cmp r13, rsi
je 0x14000252f
cmp dword [rsi + 0x10], 0
jl 0x14000251c
mov rax, qword [rsi]
cmp qword [r13], rax
jne 0x14000251c
mov rcx, r13
call fcn.140004a20
mov rbx, rax
lock add dword [rsi + 0x10], 0xffffffff
jg 0x14000250a
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [r14 + 0x298], rax
mov rbx, qword [rsp + 0x20]
jmp 0x14000252f
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [r14 + 0x298]
call fcn.140004870
lea rdx, [rsp + 0x70]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
call fcn.140009adc
mov rdx, rax
xor r14d, r14d
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140002562
mov ecx, 0x80004005
call fcn.140004af0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x70]
cmp qword [rsp + 0x58], 0
jne 0x1400025ae
movzx esi, ax
mov ecx, esi
call fcn.1400094ec
test rax, rax
je 0x1400026ad
mov r8d, esi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140004550
mov rdi, qword [rsp + 0x30]
jmp 0x1400026ad
lea rax, [rsp + 0x70]
mov rsi, r12
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400025b6
test esi, esi
jne 0x140002625
lea rdx, [rdi - 0x18]
mov rsi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400026ad
cmp dword [rdx + 0x10], 0
jge 0x1400025f9
cmp dword [rdi - 0xc], 0
jge 0x1400025ec
mov ecx, 0x80070057
call fcn.140004af0
int3
mov dword [rdi - 0x10], r14d
mov word [rdi], r14w
jmp 0x1400026ad
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140002609
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x30], rdi
mov rbx, qword [rsp + 0x20]
jmp 0x1400026ad
mov r13d, dword [rdi - 0x10]
lea r14, [rsp + 0x70]
sub r14, rdi
sar r14, 1
test esi, esi
jns 0x140002643
mov ecx, 0x80070057
call fcn.140004af0
int3
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, esi
or eax, ecx
jge 0x140002665
mov edx, esi
lea rcx, [rsp + 0x30]
call fcn.140004810
mov rdi, qword [rsp + 0x30]
movsxd rax, esi
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
add rdx, rdx
cmp r14, r13
lea r13, [rax + rax]
mov r9, r13
ja 0x140002689
lea r8, [rdi + r14*2]
call fcn.14018d548
jmp 0x140002693
lea r8, [rsp + 0x70]
call fcn.14018d4c0
cmp esi, dword [rdi - 0xc]
jg 0x14000288e
mov dword [rdi - 0x10], esi
xor r14d, r14d
mov word [r13 + rdi], r14w
mov r13, qword [rsp + 0x38]
lea rcx, [rdi - 0x18]
cmp rcx, r15
je 0x140002703
cmp dword [r15 + 0x10], 0
jl 0x1400026ed
mov rax, qword [r15]
cmp qword [rcx], rax
jne 0x1400026ed
call fcn.140004a20
mov rbx, rax
lock add dword [r15 + 0x10], 0xffffffff
jg 0x1400026e2
mov rcx, qword [r15]
mov r8, qword [rcx]
mov rdx, r15
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
add rbx, 0x18
mov qword [rsp + 0x20], rbx
jmp 0x140002703
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.140004870
mov rbx, qword [rsp + 0x20]
mov rsi, rbx
mov rdi, r14
cmp word [rbx], 0
je 0x1400027a4
nop word [rax + rax]
movzx edx, word [rsi]
lea rcx, [0x140216a8c]
call fcn.14018e704
test rax, rax
je 0x14000273e
test rdi, rdi
jne 0x140002741
mov rdi, rsi
jmp 0x140002741
mov rdi, r14
add rsi, 2
cmp word [rsi], 0
jne 0x140002720
test rdi, rdi
je 0x1400027a4
sub rdi, rbx
sar rdi, 1
test edi, edi
jns 0x140002765
mov ecx, 0x80070057
call fcn.140004af0
int3
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140002787
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.140004810
mov rbx, qword [rsp + 0x20]
cmp edi, dword [rbx - 0xc]
jg 0x140002799
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r14w
jmp 0x1400027a4
mov ecx, 0x80070057
call fcn.140004af0
int3
lea rdx, [rsp + 0x50]
call fcn.140003570
nop
mov r9, qword [rax]
mov r8, rbx
lea rdx, str._s_s_
lea rcx, [rsp + 0x30]
call fcn.140004430
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400027e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rsi, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
lea rdi, [rdx - 0x18]
mov rbx, qword [rsi + 0x290]
sub rbx, 0x18
cmp rdi, rbx
je 0x140002849
cmp dword [rbx + 0x10], 0
jl 0x140002838
mov rax, qword [rbx]
cmp qword [rdi], rax
jne 0x140002838
mov rcx, rdi
call fcn.140004a20
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14000282b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsi + 0x290], rax
jmp 0x140002849
mov r8d, dword [rdx - 0x10]
lea rcx, [rsi + 0x290]
call fcn.140004870
nop
lock add dword [rdi + 0x10], 0xffffffff
jg 0x14000285d
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140002877
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lock add dword [r13 + 0x10], 0xffffffff
jg 0x1400028af
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400028af
mov ecx, 0x80070057
call fcn.140004af0
nop
mov ecx, 0x80070057
call fcn.140004af0
nop
mov ecx, 0x80070057
call fcn.140004af0
nop
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.14018d4a0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret