Function at 0x1400d8f20
Capabilities:
Get common file path

Disassembly:
mov r8, rdx
lea rdx, [rcx + 0x28]
jmp 0x1400d8fd0
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x1402c4148]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov rsi, r8
mov r15, rdx
mov r14, rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14024e310]
movdqu xmmword [rsp + 0x40], xmm1
xor r12d, r12d
mov word [rsp + 0x30], r12w
mov qword [rsp + 0x28], r12
lea rax, [0x1402c8f98]
mov qword [rsp + 0x28], rax
mov rcx, qword [0x1402c8f98]
test rcx, rcx
je 0x1400d9051
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov rbx, 0xffffffffffffffff
mov r8, qword [0x1402c4ca8]
test r8, r8
je 0x1400d9080
lea rdx, [0x1402c4c98]
cmp qword [0x1402c4cb0], 8
cmovae rdx, qword [0x1402c4c98]
jmp 0x1400d9140
xor edx, edx
mov r8d, 0x20c
lea rcx, [rsp + 0x50]
call fcn.14018da90
lea rdx, [rsp + 0x50]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
dec eax
cmp eax, 0x103
ja 0x1400d9225
mov word [rbp + 0x15a], r12w
xor edx, edx
mov r8d, 0x412
lea rcx, [rbp + 0x160]
call fcn.14018da90
mov r8d, 0x208
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [rax - 1]
cmp ecx, 0x207
ja 0x1400d9126
mov eax, eax
add rax, rax
cmp rax, 0x412
jae 0x1400d92ba
mov word [rbp + rax + 0x160], r12w
lea rax, [rbp + 0x160]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400d9112
lea rdx, [rbp + 0x160]
jmp 0x1400d9140
lea rax, [rsp + 0x50]
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400d9130
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140006b60
nop
mov rcx, qword [0x1402c8f98]
test rcx, rcx
je 0x1400d915d
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x28], r12
lea rdi, [r14 + 8]
cmp byte [r14], 0
je 0x1400d917c
mov rcx, rdi
call fcn.1400fd7f0
test al, al
sete al
mov byte [r14], al
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.1400fdd30
test al, al
je 0x1400d91b9
cmp rdi, rsi
je 0x1400d91ae
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400d91a2
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140006b60
mov byte [r14], 1
mov bl, 1
jmp 0x1400d923e
xor edx, edx
mov r8d, 0x20c
lea rcx, [rsp + 0x50]
call fcn.14018da90
mov edx, 0x105
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
dec eax
cmp eax, 0x103
ja 0x1400d923c
mov word [rbp + 0x15a], r12w
lea rax, [rsp + 0x50]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400d91f1
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140006b60
mov r9, rsi
mov r8, r15
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1400d8f30
movzx ebx, al
jmp 0x1400d923e
mov rcx, qword [0x1402c8f98]
test rcx, rcx
je 0x1400d9237
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x28], r12
xor bl, bl
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1400d927c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d9277
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d92b4
call fcn.140187064
movdqa xmm0, xmmword [0x14024e310]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r12w
movzx eax, bl
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.140187610
add rsp, 0x690
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140199e4c
nop
call fcn.14018774c
nop
push rbx
sub rsp, 0x20
cmp byte [rcx], 0
mov rbx, rcx
jne 0x1400d92d6
mov al, 1
add rsp, 0x20
pop rbx
ret
add rcx, 8
call fcn.1400fd7f0
test al, al
sete cl
test al, al
mov byte [rbx], cl
setne al
add rsp, 0x20
pop rbx
ret