Function at 0x140036070
Capabilities:
Get common file path
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20a0]
mov eax, 0x21a0
call fcn.140087b30
sub rsp, rax
mov rax, qword [0x1400ec380]
xor rax, rsp
mov qword [rbp + 0x2090], rax
mov rdi, rdx
mov ebx, ecx
xor r14d, r14d
mov rcx, qword [0x1400eebf0]
test rcx, rcx
jne 0x1400360ce
call fcn.140036a00
test al, al
je 0x140036966
mov rcx, qword [0x1400eebf0]
xor sil, sil
mov dword [rsp + 0x50], esi
mov qword [rsp + 0x60], r14
mov rax, qword [rcx]
mov qword [rsp + 0x60], r14
lea rdx, [rsp + 0x60]
call qword [rax + 0x68]
test eax, eax
js 0x140036951
mov qword [rsp + 0x58], r14
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400369a1
mov rax, qword [rcx]
mov qword [rsp + 0x58], r14
lea r8, [rsp + 0x58]
lea rdx, [0x1400bb1d8]
call qword [rax]
test eax, eax
js 0x140036940
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r14
lea r8, [rsp + 0x68]
mov rdx, rdi
mov ecx, ebx
call fcn.1400480e0
mov rcx, qword [rsp + 0x68]
cmp qword [rsp + 0x70], rcx
je 0x14003690c
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x90]
call fcn.1400af4f0
lea rdx, [rbp + 0x90]
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140036907
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
mov r8d, 0x11
lea rdx, str.FLiNGTrainer.tmp
lea rcx, [rbp]
call fcn.1400032c0
nop
lea r8, [rbp]
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x80]
call fcn.140035960
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x1400361f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400361f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369ac
call fcn.14008768c
movdqa xmm0, xmmword [0x1400b7bd0]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 1
lea rdx, [0x1400b7e7c]
lea rcx, [rbp - 0x40]
call fcn.1400032c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, 2
lea rdx, [0x1400bb92c]
lea rcx, [rbp - 0x60]
call fcn.1400032c0
nop
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.14004e4e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x1400362a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400362a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369b2
call fcn.14008768c
movdqa xmm0, xmmword [0x1400b7bd0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x1400362fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400362f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369b8
call fcn.14008768c
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rcx, qword [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140036818
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor esi, esi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
mov r12, qword [rbp - 0x70]
lea rbx, [rbp - 0x80]
mov rax, qword [rbp - 0x68]
cmp rax, 7
cmova rbx, qword [rbp - 0x80]
movabs r14, 0x7ffffffffffffffe
mov qword [rsp + 0x48], r14
cmp r12, r14
ja 0x1400369be
cmp r12, 7
ja 0x1400363a5
mov qword [rbp - 0x10], r12
mov r14d, 7
mov qword [rsp + 0x48], r14
mov qword [rbp - 8], r14
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm0
movq r13, xmm0
jmp 0x140036459
mov rax, r12
or rax, 7
cmp rax, r14
jbe 0x1400363c1
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x1400363f8
mov r14, rax
mov ecx, 0xa
cmp rax, rcx
cmovb r14, rcx
mov qword [rsp + 0x48], r14
lea rcx, [r14 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1400369e2
add rcx, rcx
cmp rcx, 0x1000
jb 0x140036424
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400369e2
mov rcx, rax
call fcn.140087650
test rax, rax
je 0x1400369dc
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x140036436
test rcx, rcx
je 0x140036433
call fcn.140087650
mov r13, rax
jmp 0x140036436
mov r13, rsi
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r14
lea r8, [r12*2 + 2]
mov rdx, rbx
mov rcx, r13
call fcn.1400aee50
mov rax, qword [rbp - 0x68]
mov r15d, esi
movzx ebx, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
nop word [rax + rax]
lea r9, [rbp - 0x20]
cmp r14, 7
cmova r9, r13
cmp r12, rax
ja 0x1400364b4
lea r14, [rbp - 0x80]
cmp rax, 7
cmova r14, qword [rbp - 0x80]
mov qword [rbp - 0x70], r12
lea rsi, [r12 + r12]
mov r8, rsi
mov rdx, r9
mov rcx, r14
call fcn.1400aee50
xor eax, eax
mov word [rsi + r14], ax
mov r14, qword [rsp + 0x48]
xor esi, esi
jmp 0x1400364d5
movzx r8d, bl
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.140004c20
mov r14, qword [rbp - 8]
mov qword [rsp + 0x48], r14
mov r12, qword [rbp - 0x10]
mov r13, qword [rbp - 0x20]
lea r10, [rbp + 0x8a]
mov r8d, r15d
test r15d, r15d
jns 0x140036530
neg r8d
nop word [rax + rax]
sub r10, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r10], r8w
mov r8d, edx
test edx, edx
jne 0x1400364f0
add r10, 0xfffffffffffffffe
mov word [r10], 0x2d
jmp 0x140036560
sub r10, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r10], r8w
mov r8d, edx
test edx, edx
jne 0x140036530
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x8a]
mov rdx, r10
lea rcx, [rbp + 0x40]
call fcn.140035800
nop
lea r8, [rbp + 0x40]
lea rdx, [0x1400bb944]
lea rcx, [rbp + 0x20]
call fcn.140035960
mov rcx, rax
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
mov rax, r9
sub rax, r8
cmp rax, 4
jb 0x1400365cc
lea rdx, [r8 + 4]
mov qword [rcx + 0x10], rdx
mov rax, rcx
cmp r9, 7
jbe 0x1400365b8
mov rax, qword [rcx]
movabs r9, 0x70006d0074002e
mov qword [rax + r8*2], r9
mov word [rax + rdx*2], si
jmp 0x1400365ed
mov qword [rsp + 0x20], 4
lea r9, str..tmp
movzx r8d, dil
mov edx, 4
call fcn.14002c070
mov rcx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rsi
movups xmm0, xmmword [rcx]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], 7
mov word [rcx], si
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rbp - 0x60]
call fcn.1400032c0
nop
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.14004e4e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140036692
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003668d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369c4
call fcn.14008768c
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x1400366e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400366dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369ca
call fcn.14008768c
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], si
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x140036732
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003672d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369d0
call fcn.14008768c
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], si
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140036782
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003677d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369d6
call fcn.14008768c
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rcx, qword [rbp - 0x80]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400367d4
inc r15d
cmp r15d, 0x32
jge 0x1400367d4
mov rax, qword [rbp - 0x68]
xor esi, esi
jmp 0x140036470
cmp r14, 7
jbe 0x14003680f
lea rdx, [r14*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x140036807
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369dc
mov rcx, r13
call fcn.14008768c
xor r14d, r14d
cmp rsi, 0xffffffffffffffff
je 0x140036846
mov dword [rsp + 0x48], r14d
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
sub r8, rdx
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x80]
call fcn.14004d980
test al, al
je 0x1400368c3
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
jbe 0x1400368aa
mov rcx, qword [rbp - 0x80]
test rcx, rcx
jne 0x1400368aa
mov rbx, r14
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x48], r14d
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400369e8
mov rax, qword [rcx]
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, rbx
call qword [rax + 0x190]
mov esi, eax
shr esi, 0x1f
xor sil, 1
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1400368c7
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140036996
jmp 0x14003686f
mov esi, dword [rsp + 0x50]
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140036907
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036902
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400369f3
call fcn.14008768c
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140036940
mov rdx, qword [rsp + 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003693a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036990
call fcn.14008768c
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140036951
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140036962
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
movzx eax, sil
mov rcx, qword [rbp + 0x2090]
xor rcx, rsp
call fcn.140087b00
mov rbx, qword [rsp + 0x21f0]
add rsp, 0x21a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14008e680
nop
mov ecx, 0x8007000e
call fcn.140035d30
nop
mov ecx, 0x80004003
call fcn.140084db0
nop
call fcn.14008e680
nop
call fcn.14008e680
nop
call fcn.14008e680
int3
call fcn.140027df0
nop
call fcn.14008e680
nop
call fcn.14008e680
nop
call fcn.14008e680
nop
call fcn.14008e680
nop
call fcn.14008e680
int3
call fcn.140027740
nop
mov ecx, 0x80004003
call fcn.140084db0
nop
call fcn.14008e680
int3