Function at 0x1400445c0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x650]
sub rsp, 0x750
mov rax, qword [0x14012bc80]
xor rax, rsp
mov qword [rbp + 0x640], rax
mov rdi, rcx
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0xfe
mov byte [rsp + 0x40], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x341]
xor edx, edx
mov r8d, 0xfe
mov byte [rbp + 0x340], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x41]
xor edx, edx
mov r8d, 0xfe
mov byte [rbp + 0x40], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x142]
xor ebx, ebx
xor edx, edx
mov r8d, 0x1fc
mov word [rbp + 0x140], bx
call fcn.14000cbf0
lea rcx, [rbp + 0x442]
xor edx, edx
mov r8d, 0x1fc
mov word [rbp + 0x440], bx
call fcn.14000cbf0
lea rcx, [rbp + 0x40]
mov edx, 0xff
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, str.FLEXID_LIBRARY_PATH
call fcn.140044d6c
mov r8, rax
test rax, rax
je 0x140044790
mov qword [rsp + 0x30], rbx
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], bx
jne 0x1400446a2
cmp rcx, 0xff
jbe 0x1400446e1
test rdi, rdi
je 0x1400448ec
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1400448ec
mov r9d, 0x497
lea r8, str.The__FLEXID_LIBRARY_PATH__path_for_Aladdin_exceeded_the_max_limit_of_255_characters_
mov edx, reloc.WS2_32.dll_inet_addr
jmp 0x1400448e7
lea rcx, [rbp + 0x440]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], bx
lea rcx, [rcx + 2]
jne 0x1400446f0
xor edx, edx
nop dword [rax]
movzx eax, word [r8 + rdx*2]
lea rdx, [rdx + 1]
mov word [rcx + rdx*2 - 2], ax
test ax, ax
jne 0x140044700
lea r8, [rsp + 0x30]
lea rdx, [0x14011a7a4]
lea rcx, [rbp + 0x440]
call fcn.14000f250
test rax, rax
je 0x1400447f4
lea rsi, [0x14011ad58]
nop dword [rax + rax]
lea r8, str._ls_ls
lea rcx, [rbp + 0x140]
mov r9, rax
mov edx, 0xff
mov qword [rsp + 0x20], rsi
call fcn.140044920
lea rcx, [rbp + 0x140]
call fcn.1400449e0
lea r8, [rsp + 0x30]
lea rdx, [0x14011a7a4]
xor ecx, ecx
mov ebx, eax
call fcn.14000f250
test ebx, ebx
jne 0x140044808
test rax, rax
jne 0x140044740
jmp 0x1400447f4
lea rax, [rbp + 0x140]
lea r8, [rbp + 0x40]
or r9, 0xffffffffffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], 0xff
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, [rbp + 0x140]
sub rcx, 2
cmp word [rcx + 2], bx
lea rcx, [rcx + 2]
jne 0x1400447c1
mov eax, dword [0x14011ad78]
movups xmm0, xmmword [0x14011ad58]
movups xmm1, xmmword [0x14011ad68]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov dword [rcx + 0x20], eax
movzx eax, word [0x14011ad7c]
mov word [rcx + 0x24], ax
lea rcx, [rbp + 0x140]
call fcn.1400449e0
test eax, eax
je 0x1400448c7
lea r8, [rbp + 0x340]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x140]
call fcn.140044ad0
test eax, eax
jne 0x140044851
test rdi, rdi
je 0x1400448ec
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1400448ec
mov r9d, 0x4c3
lea r8, str.Unable_to_get_ALADDIN_DLL_certificate_information_
mov edx, 3
jmp 0x1400448e7
lea rdx, str.VeriSign
lea rcx, [rsp + 0x40]
mov r8, rdi
call fcn.14002ae90
test rax, rax
jne 0x140044883
lea rdx, str.Symantec
lea rcx, [rsp + 0x40]
mov r8, rdi
call fcn.14002ae90
test rax, rax
je 0x1400448a5
lea rdx, [0x14011af60]
lea rcx, [rbp + 0x340]
mov r8, rdi
call fcn.14002ae90
test rax, rax
je 0x1400448a5
mov eax, 1
jmp 0x1400448ee
test rdi, rdi
je 0x1400448ec
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1400448ec
mov r9d, 0x4cf
lea r8, str.ALADDIN_DLL_Signature_not_matched_
mov edx, 8
jmp 0x1400448e7
test rdi, rdi
je 0x1400448ec
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1400448ec
mov r9d, 0x4d6
lea r8, str.ALADDIN_DLL_not_found_
mov edx, 7
mov rcx, qword [rdi]
call rax
xor eax, eax
mov rcx, qword [rbp + 0x640]
xor rcx, rsp
call fcn.14000c9f0
lea r11, [rsp + 0x750]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret