Function at 0x1400b7dc8
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x630
mov rdi, rcx
lea rcx, [rax + 0x10]
mov qword [rsp + 0x100], r8
call fcn.140057738
mov r14d, 4
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a60c]
mov r8d, r14d
call fcn.1400623c0
xor esi, esi
lea ebp, [r14 - 3]
mov bl, al
mov byte [rsp + 0x58], al
cmp al, sil
jne 0x1400b7e4a
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a604]
mov r8d, r14d
call fcn.1400623c0
cmp al, sil
mov al, bpl
jne 0x1400b7e4d
mov al, sil
mov byte [rsp + 0x40], al
or al, bl
jne 0x1400b814b
lea rdx, [rsp + 0x678]
lea rcx, [0x140117f94]
mov r8d, r14d
call fcn.1400623c0
cmp al, sil
je 0x1400b814b
mov r13, qword [rsp + 0x678]
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a5fc]
mov r8d, r14d
mov r12d, esi
call fcn.1400623c0
cmp al, sil
je 0x1400b7ea8
mov r12d, 0x80000000
jmp 0x1400b7ecb
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a5f4]
mov r8d, 6
call fcn.1400623c0
cmp al, sil
je 0x1400b809a
lea rcx, [rsp + 0x80]
mov qword [rsp + 0xb8], rsi
call fcn.14005fa18
mov rdx, qword [rsp + 0x678]
lea r8, [rsp + 0x80]
xor r9d, r9d
mov rcx, rdi
mov byte [rsp + 0x20], bpl
call fcn.1400742a0
mov r11, qword [rsp + 0x80]
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a5ec]
mov r8d, 5
mov qword [rsp + 0x678], r11
mov qword [rsp + 0x688], rsi
call fcn.1400623c0
mov r11b, al
mov rax, qword [rsp + 0x678]
cmp rax, rsi
je 0x1400b7f5c
mov ecx, 0x2d
cmp word [rax], cx
je 0x1400b7f5c
mov ecx, 0x5c
movzx r11d, r11b
cmp word [rax], cx
cmovne r11d, ebp
mov r15d, 0xd
cmp r11b, sil
je 0x1400b7f8f
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x688]
mov r8d, r15d
mov qword [rsp + 0x688], rax
call fcn.140023f84
mov qword [rsp + 0x678], rax
lea rdx, [rsp + 0x678]
lea rcx, [0x14011a5e0]
mov r8d, 8
mov r13, rsi
mov qword [rsp + 0xc0], rsi
call fcn.1400623c0
cmp al, sil
mov rax, qword [rsp + 0x678]
je 0x1400b8004
mov r8d, 0x2a
cmp r8w, word [rax]
jne 0x1400b7fdf
add rax, 2
lea r13d, [r8 + 0x13]
mov qword [rsp + 0x678], rax
jmp 0x1400b8004
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x678]
call fcn.14006eb98
mov rax, qword [rsp + 0x678]
mov r13, qword [rsp + 0xc0]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xb0]
mov r8d, r15d
mov qword [rsp + 0xb0], rax
call fcn.140023f84
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x678], rax
cmp word [rax], si
mov rbx, rsi
cmovne rbx, rax
call fcn.14005fa18
mov rcx, qword [rsp + 0xb0]
and r13d, 0xfeffff
mov r9d, r12d
lea rdx, [rsp + 0x60]
mov r8, rbx
or r9, r13
mov qword [rsp + 0x20], rsi
call fcn.140051bd4
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x688]
mov rcx, rdi
call fcn.14005ee18
lea rcx, [rsp + 0x60]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
xor eax, eax
jmp 0x1400b94c0
movzx eax, word [r13]
or ax, 0x20
sub ax, 0x61
cmp ax, 0x19
jbe 0x1400b80e8
cmp word [r13], 0x30
jb 0x1400b80bd
cmp word [r13], 0x39
jbe 0x1400b80e8
mov eax, 0x2e
cmp ax, word [r13]
je 0x1400b80e8
cmp word [r13], 0x61
jb 0x1400b80d9
cmp word [r13], 0x66
jbe 0x1400b80e8
mov ebx, 0x78
cmp word [r13], bx
je 0x1400b80e8
mov bpl, sil
lea rax, [0x14011a5d0]
lea rdx, [0x14011a5b8]
cmp bpl, sil
cmovne rdx, rax
lea rcx, [rsp + 0x688]
or r8, 0xffffffffffffffff
call fcn.14006acd8
mov rdx, qword [rsp + 0x678]
lea rcx, [rsp + 0x688]
call fcn.14005fb54
mov rdx, qword [rsp + 0x688]
mov rcx, rdi
call fcn.1400300d0
lea rcx, [rsp + 0x688]
mov rbx, rax
call fcn.140057768
mov rax, rbx
jmp 0x1400b94c0
lea rcx, [rsp + 0xe0]
call fcn.14005fa18
lea rbx, [0x14010d568]
lea rcx, [rsp + 0x68]
mov rdx, rbx
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], rsi
call fcn.14006ac98
lea rcx, [rsp + 0x78]
mov rdx, rbx
call fcn.14006ac98
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.14006ac98
lea rcx, [rsp + 0x48]
mov rdx, rbx
call fcn.14006ac98
mov rbx, qword [rsp + 0x678]
mov ecx, 0x2d
cmp cx, word [rbx]
mov eax, 0x200
lea r14d, [rcx - 0x2b]
mov qword [rsp + 0xb0], rax
mov r13, 0xffffffff80000000
mov al, 0x2a
cmove eax, ecx
or r12, 0xffffffffffffffff
mov qword [rsp + 0xd8], rsi
movsx ecx, al
mov qword [rsp + 0xa0], rsi
movzx eax, word [rbx]
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0xa8], esi
mov dword [rsp + 0x9c], esi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x98], esi
mov dword [rsp + 0xc8], esi
mov dword [rsp + 0x88], esi
mov r15b, sil
mov byte [rsp + 0x688], sil
mov byte [rsp + 0x41], sil
mov qword [rsp + 0xb8], rsi
mov dword [rsp + 0xcc], r14d
mov qword [rsp + 0xc0], r12
cmp ecx, eax
jne 0x1400b8583
lea r15d, [r14 + 0xb]
mov r13d, ecx
lea r11, [rbx + 2]
lea rcx, [0x14011a5ac]
mov r8d, 5
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b82e8
mov byte [rsp + 0x688], bpl
mov edx, 9
movzx eax, word [rbx]
cmp ax, si
je 0x1400b82b6
mov ecx, 0x20
cmp dx, ax
ja 0x1400b829e
cmp ax, r15w
jbe 0x1400b82b6
cmp cx, ax
je 0x1400b82b6
add rbx, r14
mov qword [rsp + 0x678], rbx
mov ax, word [rbx]
cmp ax, si
jne 0x1400b8293
lea rcx, [rsp + 0x678]
call fcn.140057738
mov rbx, qword [rsp + 0x678]
movzx eax, word [rbx]
cmp r13d, eax
je 0x1400b825b
mov r13, qword [rsp + 0xd0]
mov r15b, byte [rsp + 0x688]
jmp 0x1400b8583
lea rcx, [0x14011a5a8]
mov r8d, 3
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b83ab
lea rcx, [rsp + 0x678]
add rbx, 8
mov qword [rsp + 0x678], rbx
call fcn.140057738
mov rcx, qword [rsp + 0x678]
mov qword [rsp + 0xd8], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400b8376
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400b834c
cmp ax, r15w
jbe 0x1400b8366
cmp dx, ax
je 0x1400b8366
add rcx, r14
mov qword [rsp + 0x678], rcx
mov ax, word [rcx]
cmp ax, si
je 0x1400b8376
jmp 0x1400b8340
cmp word [rcx], si
je 0x1400b8376
mov word [rcx], si
add qword [rsp + 0x678], r14
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0xd8]
xor r9d, r9d
mov rcx, rdi
mov word [rsp + 0x20], si
call fcn.140050d3c
mov r11, qword [rsp + 0xa0]
mov qword [rsp + 0xd8], r11
jmp 0x1400b82b6
lea rcx, [0x14011361c]
mov r8d, ebp
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b83cc
mov byte [rsp + 0x41], bpl
jmp 0x1400b8281
lea rcx, [0x14011a5a4]
mov r8d, ebp
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b83ef
mov dword [rsp + 0x9c], ebp
jmp 0x1400b8281
lea rcx, [0x14011a5a0]
mov r8d, r14d
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b8417
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x9c], esi
jmp 0x1400b8281
lea rcx, [0x1401135cc]
mov r8d, ebp
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b843b
mov dword [rsp + 0x98], r14d
jmp 0x1400b8281
lea rcx, [0x14011a59c]
mov r8d, r14d
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b8462
mov dword [rsp + 0x98], 3
jmp 0x1400b8281
lea rcx, [0x14011a598]
mov r8d, 3
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b8491
lea rax, [rsp + 0xcc]
mov qword [rsp + 0xb8], rax
jmp 0x1400b83e3
lea rcx, [0x140119954]
mov r8d, ebp
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b84b4
mov dword [rsp + 0xc8], ebp
jmp 0x1400b8281
lea rcx, [0x14011a594]
mov r8d, ebp
mov rdx, r11
call fcn.140058d5c
cmp al, sil
je 0x1400b84d8
mov dword [rsp + 0x88], r14d
jmp 0x1400b8281
lea rcx, [0x14011a590]
mov r8d, r14d
mov rdx, r11
call fcn.140058db8
cmp al, sil
je 0x1400b82d3
add rbx, 6
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x678], rbx
mov qword [rsp + 0x90], rbx
call fcn.140065d5c
movzx r11d, word [rbx]
cmp r11w, si
je 0x1400b82b6
mov eax, 0x20
lea edx, [rax - 0x17]
cmp dx, r11w
ja 0x1400b8542
cmp r11w, r15w
jbe 0x1400b8286
cmp ax, r11w
je 0x1400b8286
add rbx, r14
mov qword [rsp + 0x678], rbx
mov r11w, word [rbx]
cmp r11w, si
je 0x1400b82b6
jmp 0x1400b8532
mov ecx, 0x21
cmp cx, ax
jne 0x1400b858b
add rbx, r14
mov dword [rsp + 0xa8], ebp
mov qword [rsp + 0x678], rbx
movzx eax, word [rbx]
cmp ax, si
jne 0x1400b8567
lea rcx, [rsp + 0x678]
call fcn.140057738
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x678]
mov r9d, 0x2c
mov rcx, rdi
mov word [rsp + 0x20], si
call fcn.140050d3c
mov r12, qword [rsp + 0x68]
mov ecx, 0x5c
mov qword [rsp + 0x678], rax
mov rbx, rax
lea eax, [rcx - 0x2e]
cmp cx, word [r12]
je 0x1400b85e8
lea edx, [rcx - 0x2d]
cmp dx, word [r12]
jne 0x1400b860d
cmp cx, word [r12]
jne 0x1400b8611
cmp cx, word [r12 + 2]
jne 0x1400b8611
mov edx, 0x3f
cmp dx, word [r12 + 4]
je 0x1400b8605
cmp ax, word [r12 + 4]
jne 0x1400b8611
cmp cx, word [r12 + 6]
jne 0x1400b8611
mov eax, esi
jmp 0x1400b8613
mov eax, ebp
mov dword [rsp + 0x70], eax
cmp r15b, sil
jne 0x1400b869a
cmp eax, esi
je 0x1400b869a
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rsi
lea ecx, [rax + 3]
mov edi, eax
mov qword [rsp + 0x90], rbx
movsxd rdx, ecx
lea rcx, [rsp + 0x68]
call fcn.14005fb18
mov r12, qword [rsp + 0x68]
mov eax, 0x20
mov word [r12], ax
mov eax, 0x3a
lea rcx, [r12 + 4]
mov word [r12 + 2], ax
lea eax, [rdi + 1]
mov rdx, rbx
movsxd r8, eax
add r8, r8
call fcn.14001c8fc
lea rcx, [rsp + 0x90]
call fcn.140057768
mov rbx, qword [rsp + 0x678]
mov rdi, qword [rsp + 0x670]
mov rcx, rbx
call fcn.14001b49c
cmp word [rax], si
je 0x1400b86dd
add rbx, r14
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x678]
mov r9d, 0x2c
mov rcx, rdi
mov word [rsp + 0x20], si
mov qword [rsp + 0x678], rbx
call fcn.140050d3c
mov rbx, rax
mov qword [rsp + 0x678], rax
mov rdi, qword [rsp + 0x78]
or qword [rsp + 0xd0], 0xffffffffffffffff
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x60], rdi
mov r15, rsi
mov qword [rsp + 0x90], rsi
cmp byte [rsp + 0x688], sil
je 0x1400b871a
cmp byte [rsp + 0x40], sil
je 0x1400b888f
jmp 0x1400b878b
mov rcx, rbx
call fcn.14001b49c
cmp word [rax], si
je 0x1400b878b
add rbx, r14
mov eax, 0x22
mov qword [rsp + 0x678], rbx
cmp ax, word [rbx]
jne 0x1400b8747
add rbx, r14
mov qword [rsp + 0x678], rbx
mov ebx, 0x2c
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0xe0]
mov r8d, ebx
mov r9b, bpl
call fcn.140079680
lea rdx, [rsp + 0xf8]
movzx r8d, bx
mov rcx, rax
call fcn.140063b2c
mov rbx, qword [rsp + 0x678]
mov r13, qword [rsp + 0xf8]
mov rcx, rbx
call fcn.14001b49c
cmp word [rax], si
je 0x1400b87d3
mov rcx, qword [rsp + 0x670]
add rbx, r14
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x678]
mov r9d, 0x2c
mov qword [rsp + 0x678], rbx
mov word [rsp + 0x20], si
call fcn.140050d3c
mov rbx, rax
mov qword [rsp + 0x678], rax
cmp byte [rsp + 0x688], sil
je 0x1400b881b
cmp byte [rsp + 0x40], sil
je 0x1400b888f
mov rcx, rbx
call fcn.14001b49c
cmp word [rax], si
je 0x1400b887b
add rbx, r14
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x678]
mov qword [rsp + 0x678], rbx
call fcn.140064048
jmp 0x1400b887b
cmp byte [rsp + 0x40], sil
je 0x1400b888f
mov rcx, rbx
call fcn.14001b49c
cmp word [rax], si
je 0x1400b887b
add rbx, r14
lea rcx, [rsp + 0x678]
mov edx, 0x2c
mov qword [rsp + 0x678], rbx
mov qword [rsp + 0x90], rbx
call fcn.1400e7958
mov rcx, qword [rsp + 0x678]
cmp word [rcx], si
je 0x1400b886c
mov word [rcx], si
add qword [rsp + 0x678], r14
cmp word [rbx], si
lea r15, [rsp + 0x108]
cmove r15, rsi
lea rax, [rsp + 0xcc]
mov ebx, ebp
cmp qword [rsp + 0xb8], rax
je 0x1400b8891
mov ebx, esi
cmp byte [rsp + 0x40], sil
je 0x1400b8ca6
lea rcx, [0x14012d7d8]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
call fcn.14005ba54
lea rcx, [0x14012d7d8]
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp byte [rsp + 0x41], sil
je 0x1400b88dc
neg ebx
mov rcx, r12
sbb edx, edx
and edx, r14d
add edx, 0x10000
call fcn.14006515c
movsxd rbx, eax
jmp 0x1400b8937
mov dl, byte [rsp + 0x688]
mov eax, ebx
neg eax
sbb r14, r14
neg r14
sub r14, rbp
mov qword [rsp + 0xa8], r14
cmp dl, sil
je 0x1400b8997
mov rcx, qword [rsp + 0x670]
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rdi
mov r14, rsi
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140017c8c
mov r13, rax
cmp rax, rsi
jne 0x1400b897c
mov rbx, 0xffffffff80070057
lea rcx, [rsp + 0xa0]
call fcn.140057768
lea rcx, [rsp + 0x48]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
lea rcx, [rsp + 0x78]
call fcn.140057768
lea rcx, [rsp + 0x68]
call fcn.140057768
lea rcx, [rsp + 0xe0]
jmp 0x1400b813e
mov rcx, qword [rsp + 0xd0]
mov dl, byte [rsp + 0x688]
cmp rcx, rsi
jl 0x1400b8997
mov rax, qword [rax + 8]
mov qword [rax], rcx
cmp dword [rsp + 0x98], esi
je 0x1400b8a4e
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x688], rsi
mov rbx, rdi
call fcn.140065d5c
mov r11, qword [rsp + 0x60]
cmp word [r11], si
je 0x1400b89d5
add r11, 2
mov qword [rsp + 0x60], r11
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x60]
call fcn.140065d5c
mov rdi, qword [rsp + 0x60]
cmp qword [rsp + 0x688], rsi
je 0x1400b89f9
mov word [rdi], si
cmp dword [rsp + 0xc8], esi
cmovne ebp, esi
cmp qword [rsp + 0x688], 0x100000
jge 0x1400b8a22
cmp word [rbx], si
jne 0x1400b8a22
mov rbx, 0xffffffff80070057
jmp 0x1400b8c3f
mov eax, dword [rsp + 0xb0]
mov r9d, dword [rsp + 0x98]
mov r8d, ebp
mov rdx, rbx
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.140070658
movsxd rbx, eax
mov r14, rbx
jmp 0x1400b8c3f
mov rax, r15
neg rax
sbb ecx, ecx
not ecx
and ecx, 4
or ecx, dword [rsp + 0x88]
or ecx, dword [rsp + 0x9c]
cmp word [rdi], si
je 0x1400b8a7d
mov r8d, 0x2a
cmp r8w, word [rdi]
je 0x1400b8a7d
or ecx, 2
cmp ebx, esi
je 0x1400b8a89
cmp dword [rsp + 0x50], esi
jg 0x1400b8a89
or ecx, ebp
mov rax, qword [rsp + 0x48]
cmp word [rax], si
jne 0x1400b8a97
bts ecx, 0x10
cmp dl, sil
jne 0x1400b8aa3
cmp r13, rsi
cmovle r13, rbp
mov al, dl
mov qword [rsp + 0x30], r15
mov r9, r13
neg al
mov rax, qword [rsp + 0xb8]
mov r8, rdi
sbb edx, edx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xa8]
and edx, 0x20
mov qword [rsp + 0x20], rax
or edx, ecx
mov rcx, r12
call fcn.1400ae2a8
movsxd rbx, eax
cmp r15, rsi
je 0x1400b8c02
mov r13, qword [r15]
cmp r13, rsi
je 0x1400b8c02
mov r12, qword [rsp + 0x90]
mov eax, 0x7e
cmp ax, word [r12]
jne 0x1400b8b36
add r12, 2
mov qword [r15], rsi
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
mov dword [rsp + 0x30], 3
mov r9, r15
mov rdx, r13
mov r8, rax
mov rcx, rax
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.DLL_DuplicateHandle]
cmp qword [r15], rsi
je 0x1400b8c02
mov eax, 0x2e
cmp ax, word [r12]
je 0x1400b8bea
mov eax, pe_nt_image_headers64
cmp ax, word [r12]
jne 0x1400b8bd2
mov r13, qword [rsp + 0x100]
cmp r13, rsi
jne 0x1400b8b84
mov rbp, qword [rsp + 0x670]
mov rdx, rbp
mov rcx, rbp
call fcn.14001a3e0
mov r13, qword [rbp + 0x40]
cmp r13, rsi
je 0x1400b8bf2
lea rdx, [r12 + 2]
lea rcx, [rsp + 0x90]
call fcn.14006ac98
mov r9, qword [r15]
mov rdx, qword [r13 + 0x270]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
or dword [rsp + 0x28], 0xffffffff
lea r8, [rsp + 0x90]
mov rcx, r13
mov qword [rsp + 0x20], rsi
call fcn.1400604d4
lea rcx, [rsp + 0x90]
call fcn.140057768
jmp 0x1400b8c02
mov rbp, qword [rsp + 0x670]
mov rdx, qword [r15]
mov r8, r12
mov rcx, rbp
call fcn.14003e230
jmp 0x1400b8c0a
mov rbp, qword [rsp + 0x670]
mov edx, dword [r15]
lea r8, [r12 + 2]
mov rcx, rbp
call fcn.140062c80
mov rbp, qword [rsp + 0x670]
cmp byte [rsp + 0x688], sil
je 0x1400b8c37
mov r8, qword [rsp + 0x48]
cmp word [r8], si
je 0x1400b8937
mov edx, dword [rsp + 0xa8]
mov rcx, rbp
call fcn.140062c80
jmp 0x1400b8937
mov r14, qword [rsp + 0xa8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
lea rcx, [rsp + 0x688]
movsxd rdx, eax
add rdx, 0x96
call fcn.14005fa8c
mov rcx, qword [rsp + 0x688]
lea rdx, [0x14011a578]
mov r9d, ebx
mov r8, r14
mov qword [rsp + 0x20], rdi
call qword [sym.imp.USER32.DLL_wsprintfW]
mov r8, qword [rsp + 0x688]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x670]
call fcn.14005ee18
lea rcx, [rsp + 0x688]
jmp 0x1400b9473
mov bl, byte [rsp + 0x688]
cmp bl, sil
jne 0x1400b8ccd
cmp word [rdi], si
jne 0x1400b8ccd
cmp byte [rsp + 0x41], sil
je 0x1400b8930
cmp word [r12], si
je 0x1400b8930
cmp byte [rsp + 0x58], sil
je 0x1400b8dde
lea rdx, [0x14011a558]
lea rcx, [rsp + 0x688]
or r8, 0xffffffffffffffff
call fcn.14006acd8
lea rcx, [rsp + 0x688]
mov rdx, r12
mov word [rsp + 0x140], si
call fcn.14005fb54
lea rbx, [0x140111d38]
lea rcx, [rsp + 0x688]
mov rdx, rbx
call fcn.14005fb54
lea rcx, [rsp + 0x688]
mov rdx, rdi
call fcn.14005fb54
lea rcx, [rsp + 0x688]
mov rdx, rbx
call fcn.14005fb54
cmp r13, rsi
jl 0x1400b8d69
lea rcx, [rsp + 0x140]
mov rdx, r13
call fcn.1400d9364
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x688]
call fcn.14005fb54
lea rcx, [rsp + 0x688]
mov rdx, rbx
call fcn.14005fb54
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x688]
call fcn.14005fb54
lea rdx, [0x140111db0]
lea rcx, [rsp + 0x688]
call fcn.14005fb54
mov rdx, qword [rsp + 0x678]
lea rcx, [rsp + 0x688]
call fcn.14005fb54
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x670]
call fcn.1400300d0
lea rcx, [rsp + 0x688]
mov rbx, rax
call fcn.140057768
jmp 0x1400b8937
lea rcx, [0x14012dbe0]
call qword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x688]
call fcn.140058f74
lea rcx, [rsp + 0x688]
call fcn.140058f58
lea rcx, [0x14012dbe0]
mov r15d, eax
mov dword [rsp + 0x50], eax
call qword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp r15d, esi
jge 0x1400b8e42
mov rcx, qword [rsp + 0x670]
lea rdx, [0x14011a538]
call fcn.1400180a0
mov rbx, rbp
jmp 0x1400b8937
cmp bl, sil
je 0x1400b8ff1
cmp qword [0x14012d400], rsi
jne 0x1400b8e5e
mov ebx, 0x78
jmp 0x1400b8937
mov edx, 0x3d
mov rcx, r12
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
mov r13, rax
cmp rax, rsi
je 0x1400b8e7a
mov word [rax], si
add r13, r14
cmp word [r12], si
je 0x1400b8930
lea rcx, [rsp + 0x88]
call fcn.14005fa18
mov rbx, qword [rsp + 0x678]
mov rcx, rbx
call fcn.14001b49c
mov ecx, 0x2c
cmp word [rax], cx
jne 0x1400b8ee5
mov r8d, ecx
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0xe0]
add rbx, r14
mov r9b, bpl
mov qword [rsp + 0x678], rbx
call fcn.140079680
lea rdx, [rsp + 0x88]
mov rcx, rax
xor r8d, r8d
call fcn.140063854
mov rcx, qword [rsp + 0x88]
call fcn.14001ae54
lea rcx, [rsp + 0x688]
mov rbx, rax
call fcn.14005fa18
mov eax, 0x3a
cmp word [rdi], si
je 0x1400b8f3c
cmp ax, word [rdi + 2]
je 0x1400b8f3c
lea rdx, [rsp + 0x688]
mov rcx, rdi
call fcn.14001b2b0
mov rdx, qword [rsp + 0x688]
lea rcx, [rsp + 0x78]
call fcn.14006ad18
mov rdi, qword [rax]
mov eax, 0x3a
cmp word [rbx], si
je 0x1400b8f6f
cmp ax, word [rbx + 2]
je 0x1400b8f6f
lea rdx, [rsp + 0x688]
mov rcx, rbx
call fcn.14001b2b0
mov rdx, qword [rsp + 0x688]
lea rcx, [rsp + 0x88]
call fcn.14006ad18
mov rbx, qword [rax]
lea rcx, [rsp + 0x60]
mov edx, 0x20
call fcn.14005fa8c
mov rax, qword [rsp + 0x60]
mov r8, rbx
mov rbx, qword [rsp + 0x670]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0x60]
mov rdx, rdi
mov rcx, rbx
mov qword [rsp + 0x28], rsi
mov word [rax + 4], si
mov qword [rsp + 0x20], r13
call fcn.14007039c
mov r8, qword [rsp + 0x60]
mov rdx, r12
mov rcx, rbx
add r8, 4
call fcn.14005ee18
lea rcx, [rsp + 0x60]
call fcn.140057768
lea rcx, [rsp + 0x688]
call fcn.140057768
lea rcx, [rsp + 0x88]
call fcn.140057768
mov rbx, rsi
jmp 0x1400b8937
cmp byte [rsp + 0x41], sil
jne 0x1400b9279
cmp word [r12], si
je 0x1400b9279
mov rax, qword [rsp + 0x48]
mov r8d, 0x2a
cmp r8w, word [rax]
jne 0x1400b903f
lea rcx, [rsp + 0x48]
mov edx, 0x105
call fcn.14005fb18
mov rax, qword [rsp + 0x48]
mov ecx, 0x104
mov word [rax], si
mov rdx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.DLL_GetTempPathW]
cmp qword [0x14012d3e8], rsi
je 0x1400b8e3a
mov rcx, rdi
call fcn.1400f2c08
cmp eax, esi
jne 0x1400b908a
lea rcx, [rsp + 0x688]
mov rdx, rdi
call fcn.14006ac98
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x670]
call fcn.140026924
lea rcx, [rsp + 0x688]
call fcn.140057768
mov rcx, rdi
call fcn.1400f2c08
cmp eax, esi
je 0x1400b8e3a
cmp dword [rsp + 0x70], esi
jne 0x1400b90b0
mov rcx, r12
call fcn.1400f2d44
cmp eax, esi
je 0x1400b8e3a
xor edx, edx
lea rcx, [rsp + 0x114]
mov dword [rsp + 0x110], esi
lea r8d, [rdx + 0x20]
call fcn.1400f3900
lea r8, [rsp + 0x110]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesExW]
cmp eax, esi
je 0x1400b90eb
test byte [rsp + 0x110], bpl
jne 0x1400b90f6
mov r14, qword [rsp + 0x48]
cmp word [r14], si
jne 0x1400b90f9
mov r14, rsi
mov ecx, dword [rsp + 0x70]
mov bx, si
mov word [rsp + 0x688], bx
cmp ecx, esi
je 0x1400b9137
cmp r15d, esi
jne 0x1400b911e
mov ebx, 0x100
mov word [rsp + 0x688], bx
cmp dword [rsp + 0xa8], esi
je 0x1400b9137
mov eax, 0x200
or bx, ax
mov word [rsp + 0x688], bx
mov eax, ebp
cmp ecx, esi
je 0x1400b9155
lea rdx, [rsp + 0x688]
mov rcx, r12
call fcn.1400ae958
mov bx, word [rsp + 0x688]
sar eax, 8
mov rcx, r12
movzx r15d, al
sub r15d, ebp
cmp r13, 0xffffffff80000000
cmove r13, rbp
call fcn.1400f2d44
cmp eax, esi
je 0x1400b91d0
mov r9, r14
mov rdx, r12
mov rcx, rdi
cmp dword [rsp + 0x50], esi
je 0x1400b9196
cmp r13, rsi
cmovge ebp, r13d
mov r8d, ebp
call fcn.14007017c
jmp 0x1400b91a6
cmp r13, rsi
cmovge ebp, r13d
mov r8d, ebp
call qword [0x14012d3e8]
mov r9, rdi
mov rdi, qword [rsp + 0x670]
mov dword [rsp + 0x28], eax
lea rdx, [0x14011a4e0]
mov r8, r12
mov rcx, rdi
mov ebp, eax
mov qword [rsp + 0x20], r14
call fcn.1400180a0
jmp 0x1400b91da
mov rdi, qword [rsp + 0x670]
mov ebp, esi
cmp dword [rsp + 0x70], esi
je 0x1400b91f6
cmp dword [rsp + 0xa8], esi
jne 0x1400b91f6
cmp bx, si
je 0x1400b91f6
movzx ecx, bx
call fcn.140059ab0
cmp r15d, esi
jl 0x1400b9226
lea rdx, [0x14011a4b8]
lea rcx, [rsp + 0x140]
mov r8d, r15d
call qword [sym.imp.USER32.DLL_wsprintfW]
lea rdx, [rsp + 0x148]
xor r8d, r8d
mov rcx, rdi
call fcn.1400881f8
lea rcx, [rsp + 0xa0]
call fcn.140057768
lea rcx, [rsp + 0x48]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
lea rcx, [rsp + 0x78]
call fcn.140057768
lea rcx, [rsp + 0x68]
call fcn.140057768
lea rcx, [rsp + 0xe0]
call fcn.140057768
cmp ebp, esi
sete sil
mov rax, rsi
jmp 0x1400b94c0
lea rcx, [rsp + 0x50]
call fcn.14005fa18
mov eax, 0x3a
cmp word [rdi], si
je 0x1400b92b7
cmp ax, word [rdi + 2]
je 0x1400b92b7
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.14001b2b0
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14006ad18
mov rdi, qword [rax]
mov eax, 0x3a
cmp word [r12], si
je 0x1400b92e5
cmp ax, word [r12 + 2]
je 0x1400b92e5
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.14001b2b0
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.14006ad18
mov r12, qword [rax]
or dword [rsp + 0x688], 0xffffffff
cmp word [rdi], si
jne 0x1400b9355
cmp word [r12], si
je 0x1400b9350
mov rcx, qword [rsp + 0x670]
lea rax, [rsp + 0x688]
lea rdx, [0x14010d568]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x210]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov r8, r12
mov qword [rsp + 0x20], rdx
call fcn.14007039c
cmp rax, rsi
je 0x1400b9379
mov eax, dword [rsp + 0x688]
lea rdi, [rsp + 0x418]
mov qword [rsp + 0xc0], rax
cmp word [rdi], si
je 0x1400b9379
cmp qword [0x14012d3f0], rsi
jne 0x1400b936d
lea rcx, [rsp + 0x50]
call fcn.140057768
jmp 0x1400b8e3a
mov rcx, rdi
call fcn.1400f2c08
cmp eax, esi
jne 0x1400b9388
lea rcx, [rsp + 0x50]
call fcn.140057768
jmp 0x1400b8930
movzx eax, word [r12]
mov ebx, ebp
neg ax
movzx eax, word [rdi]
sbb r14, r14
and r14, r12
neg ax
sbb r12, r12
and r12, rdi
cmp r13, 0xffffffff80000000
cmove r13, rsi
cmp dword [rsp + 0xc0], esi
jg 0x1400b9409
cmp r15d, esi
je 0x1400b93d6
mov edx, esi
cmp r13, rsi
mov rcx, rdi
setne dl
xor r8d, r8d
call fcn.14005b8c0
mov ebx, eax
cmp eax, esi
je 0x1400b9400
cmp r13, 0xffffffff80000000
je 0x1400b93e7
mov r9d, ebp
cmp r13, rsi
jne 0x1400b93ea
mov r9d, esi
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call qword [0x14012d3f0]
mov ebx, esi
cmp eax, esi
sete bl
cmp dword [rsp + 0xc0], esi
je 0x1400b946e
cmp ebx, esi
je 0x1400b946e
mov r10, qword [0x14012d3f8]
cmp r10, rsi
je 0x1400b946e
cmp qword [0x14012d468], rsi
setne al
cmp al, sil
je 0x1400b9448
mov edx, esi
cmp r13, rsi
mov r8d, ebp
setne dl
mov rcx, rdi
call fcn.14005b8c0
mov ebx, eax
cmp eax, esi
je 0x1400b946e
mov r10, qword [0x14012d3f8]
cmp r13, 0xffffffff80000000
je 0x1400b9456
cmp r13, rsi
jne 0x1400b9458
mov ebp, esi
mov r9d, ebp
xor r8d, r8d
mov rdx, r14
mov rcx, r12
call r10
mov ebx, esi
cmp eax, esi
sete bl
lea rcx, [rsp + 0x50]
call fcn.140057768
lea rcx, [rsp + 0xa0]
call fcn.140057768
lea rcx, [rsp + 0x48]
call fcn.140057768
lea rcx, [rsp + 0x80]
call fcn.140057768
lea rcx, [rsp + 0x78]
call fcn.140057768
lea rcx, [rsp + 0x68]
call fcn.140057768
lea rcx, [rsp + 0xe0]
call fcn.140057768
movsxd rax, ebx
mov rbx, qword [rsp + 0x680]
add rsp, 0x630
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret