Function at 0x1400027f8
Capabilities:
Get common file path

Disassembly:
push r15
mov rax, 7
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140002801
sub rsp, 0x28
call fcn.140011fb0
movabs rax, 0x14001e10c
mov qword [0x14001f464], rax
mov qword [rsp + 0x28], 0
jmp 0x140002837
mov rax, 3
cmp rax, qword [rsp + 0x28]
jl 0x1400028f5
mov rax, qword [0x14001f464]
movsx rax, byte [rax]
mov qword [rsp + 0x30], rax
inc qword [0x14001f464]
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
mov r15, qword [rsp + 0x48]
imul r15, r15, 0xffffffffffffffff
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140007eb0
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.140011de0
mov rcx, qword [rsp + 0x40]
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140012020
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.140012020
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.140011de0
inc qword [rsp + 0x28]
jno 0x140002837
push 0x400
pop rcx
call fcn.14000c5b0
mov qword [rsp + 0x48], rax
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
pop rcx
sub rsp, 0x20
call fcn.14000d5c8
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.140011de0
push qword [rsp + 0x48]
push 0
movabs rax, 0x14001e020
push rax
push qword [rsp + 0x68]
pop rcx
pop rdx
pop r8
pop r9
call sub.KERNEL32.DLL_GetTempFileNameW
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000c5d0
add rsp, 0x28
lea rcx, [0x14001f4dc]
pop rdx
call fcn.140011de0
push qword [0x14001f4dc]
pop rcx
call fcn.14000d58c
push qword [0x14001f4dc]
pop rcx
call fcn.14000d4dc
push qword [rsp + 0x48]
push 0
movabs rax, 0x14001e020
push rax
push qword [0x14001f4dc]
pop rcx
pop rdx
pop r8
pop r9
call sub.KERNEL32.DLL_GetTempFileNameW
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000c5d0
add rsp, 0x28
lea rcx, [0x14001f50c]
pop rdx
call fcn.140011de0
push qword [0x14001f50c]
pop rcx
call fcn.14000d58c
push qword [0x14001f50c]
pop rcx
call fcn.14000d4dc
push qword [rsp + 0x48]
push 0
movabs rax, 0x14001e020
push rax
push qword [0x14001f50c]
pop rcx
pop rdx
pop r8
pop r9
call sub.KERNEL32.DLL_GetTempFileNameW
push qword [0x14001f50c]
pop rcx
call sub.SHLWAPI.DLL_PathAddBackslashW
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140011d90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000c5d0
add rsp, 0x28
lea rcx, [0x14001f4cc]
pop rdx
call fcn.140011de0
push qword [0x14001f4cc]
pop rcx
call fcn.14000d58c
push qword [rsp + 0x40]
push qword [0x14001f4cc]
pop rcx
pop rdx
call sub.SHLWAPI.DLL_PathRenameExtensionW
push qword [rsp + 0x48]
pop rcx
call fcn.14000c590
jmp 0x140002ae3
push rax
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.140011f30
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.140011f30
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.140011f30
add rsp, 0x28
pop rax
add rsp, 0x60
pop r15
ret