Function at 0x1400033ce
Capabilities:
Get common file path

Disassembly:
push rbp
push r15
mov rax, recvfrom
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400033d8
sub rsp, 0x28
call main
mov rcx, qword [rsp + 0xc0]
call fcn.14000cf94
mov rdx, rsp
mov rcx, 0x1c
call fcn.14001aa80
mov rcx, 0x1001c4
call fcn.14000cce4
mov rcx, 0x1001c5
call fcn.14000cce4
sub rsp, 0x18
mov rdx, 1
mov rcx, rdx
call fcn.14000ce0c
lea rax, [rsp + 0x40]
push rax
xor r9, r9
mov r8, reloc.WS2_32.dll_inet_addr
mov rcx, 2
sub rsp, 0x20
call fcn.140018878
add rsp, 0x40
mov qword [rsp + 0x28], rax
mov rcx, 0x1001c6
call fcn.14000cce4
push 0
push 0
pop rcx
pop rdx
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov rcx, 0x1001c6
call fcn.14000cec6
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x1001c7
call fcn.14000cce4
movsxd r15, dword [rsp + 0x78]
and r15, r15
jne 0x1400034ed
mov rcx, 0x1001c8
call fcn.14000cce4
movabs rcx, 0x1400b40e0
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
pop rax
push rax
call fcn.140019cb0
pop rdx
add rax, rdx
jmp 0x14000384a
mov rcx, 0x1001c9
call fcn.14000cce4
mov rcx, 0x1001ca
call fcn.14000cce4
movsxd r15, dword [rsp + 0x78]
shl r15, 2
mov rax, r15
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x1001cb
call fcn.14000cce4
movsxd rax, dword [rsp + 0x78]
inc rax
lea rdx, [rsp + 0x28]
mov rcx, rax
call fcn.14000ce0c
call fcn.140018aac
mov rcx, 0x1001cc
call fcn.14000cce4
movsxd r15, dword [rsp + 0x78]
add r15, r15
mov rax, r15
push rax
mov rax, 0
mov rdx, qword [rsp + 0x30]
mov rdx, qword [rdx - 0x10]
call fcn.14000ce1f
mov rbp, qword [rsp + 0x30]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
movabs r10, 0x140019200
mov r11, 0
call fcn.14000cee4
call fcn.140019900
mov rcx, 0x1001cd
call fcn.14000cce4
movsxd rax, dword [rsp + 0x78]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0x30]
mov rdx, qword [rdx - 0x10]
call fcn.14000ce1f
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov rcx, 0x1001cd
call fcn.14000cec6
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x1001ce
call fcn.14000cce4
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rax, 0
mov rdx, qword [rsp + 0x50]
mov rdx, qword [rdx - 0x10]
call fcn.14000ce1f
mov rbp, qword [rsp + 0x50]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140019430
mov r11, 0
call fcn.14000cee4
call fcn.1400197b0
add rsp, 0x28
movabs rcx, 0x1400b4132
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140019ba0
mov rcx, 0x1001cf
call fcn.14000cce4
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400b412e
push rax
push 1
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x14000d930
mov r11, 0
call fcn.14000cee4
call fcn.14000dff0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140019ba0
mov rcx, 0x1001d0
call fcn.14000cce4
call fcn.1400115a4
mov r15, rax
cmp r15, 0x32
jne 0x140003788
mov rcx, 0x1001d1
call fcn.14000cce4
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
movabs rcx, str.:winnt_
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140019ba0
mov rcx, 0x1001d2
call fcn.14000cce4
jmp 0x1400037ea
mov rcx, 0x1001d2
call fcn.14000cce4
mov rcx, 0x1001d3
call fcn.14000cce4
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
movabs rcx, str.:windows_
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140019ba0
mov rcx, 0x1001d4
call fcn.14000cce4
mov rcx, 0x1001d5
call fcn.14000cce4
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140019b50
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140019e80
add rsp, 0x28
pop rax
push rax
call fcn.140019cb0
pop rdx
add rax, rdx
jmp 0x14000384a
push rax
push rax
sub rsp, 0x20
call fcn.14001acf0
add rsp, 0x20
pop rax
mov rcx, qword [rsp + 0x88]
sub rsp, 0x28
call fcn.140019d60
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.140018a3c
add rsp, 0x28
pop rax
add rsp, 0x88
pop r15
pop rbp
ret