Function at 0x140075260
Capabilities:
Get common file path

Disassembly:
jmp 0x140075270
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rax, qword [0x14013d0a8]
xor rax, rsp
mov qword [rbp + 7], rax
mov r13d, r9d
mov rdi, r8
mov qword [rbp - 0x59], r8
mov r12, rdx
mov r15, rcx
cmp word [rcx], 0x5c
jne 0x1400758cb
cmp word [rdx], 0x19
jb 0x140075309
mov esi, reloc.OLEAUT32.dll_SafeArrayPutElement
mov r8d, esi
lea rdx, [0x140107770]
call fcn.1400cef68
test eax, eax
jne 0x140075309
mov ebx, 0x2d
cmp word [r15 + 0x32], 0x3b
cmovne ebx, esi
mov dword [r15], 0x5c005c
movzx r8d, word [r12]
sub r8, rbx
add r8, r8
lea rdx, [r15 + rbx*2]
lea rcx, [r15 + 4]
call fcn.1400b9c80
mov eax, 2
sub ax, bx
add word [r12], ax
cmp word [r12], 4
jb 0x140075352
mov r8d, 4
lea rdx, [0x140107760]
mov rcx, r15
call fcn.1400cf5b8
test eax, eax
jne 0x140075352
movzx r8d, word [r12]
lea r8, [r8*2 - 8]
lea rdx, [r15 + 8]
mov rcx, r15
call fcn.1400b9c80
mov eax, 0xfffc
add word [r12], ax
jmp 0x1400758cb
cmp word [r12], 0xc
jbe 0x1400753a3
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.DeviceMup_
mov rcx, r15
call fcn.1400cef68
test eax, eax
jne 0x1400753a3
mov dword [r15], 0x5c005c
movzx r8d, word [r12]
lea r8, [r8*2 - 0x18]
lea rdx, [r15 + 0x18]
lea rcx, [r15 + 4]
call fcn.1400b9c80
mov eax, 0xfff6
add word [r12], ax
jmp 0x1400758cb
cmp byte [0x140142ec2], 0
je 0x1400753df
cmp word [r15], 0x5c
jne 0x1400758cb
cmp word [r15 + 2], 0x5c
je 0x1400758cb
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor r9d, r9d
mov r8, r12
mov rdx, r15
mov rcx, rax
call fcn.140075990
jmp 0x1400758cb
xor r14d, r14d
cmp word [r12], 0xc
jbe 0x1400754c8
lea r8d, [r14 + 0xc]
lea rdx, str.SystemRoot_
mov rcx, r15
call fcn.1400cef68
test eax, eax
jne 0x1400754c8
lea rsi, [0x140142960]
lea rdi, [r14 - 1]
mov ecx, dword [0x140142b68]
test ecx, ecx
jne 0x140075474
mov edx, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ebx, 0x5c
mov edx, ebx
lea rcx, [0x140142966]
call fcn.1400ba484
mov word [rax], r14w
mov rcx, rdi
inc rcx
cmp word [rsi + rcx*2], r14w
jne 0x140075446
mov eax, ecx
mov word [rsi + rax*2], bx
inc ecx
mov dword [0x140142b68], ecx
mov eax, ecx
add rax, rax
cmp rax, 0x208
jae 0x1400758f1
mov word [rax + rsi], r14w
cmp ecx, 0xc
ja 0x1400754c4
nop dword [rax]
inc rdi
cmp word [rsi + rdi*2], r14w
jne 0x140075480
lea rbx, [rdi + rdi]
mov r8, rbx
mov rdx, rsi
mov rcx, r15
call fcn.1400b9c80
movzx r8d, word [r12]
lea r8, [r8*2 - 0x18]
lea rdx, [r15 + 0x18]
lea rcx, [rbx + r15]
call fcn.1400b9c80
sub di, 0xc
add word [r12], di
jmp 0x1400758cb
mov rdi, qword [rbp - 0x59]
mov ecx, dword [0x140143e58]
mov rax, qword gs:[0x58]
mov edx, reloc.OLEAUT32.dll_SafeArrayLock
mov rbx, qword [rax + rcx*8]
add rbx, rdx
lea rsi, [0x140142b70]
mov eax, dword [rbx]
cmp dword [0x140142b98], eax
jg 0x1400758f7
mov qword [rbp - 0x39], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov eax, dword [rbx]
cmp dword [0x140142bb0], eax
jg 0x140075936
lea rax, [0x140142ba0]
cmp byte [0x140142ec3], 0
je 0x14007554c
mov rbx, qword [0x140142ba0]
mov r8, qword [rbx + 8]
mov rdx, rax
mov rcx, rax
call fcn.14006bc20
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [0x140142ba8], r14
mov rax, qword [rdi]
mov qword [rbp - 0x29], rax
mov dword [rbp - 0x21], r13d
mov rsi, qword [0x140142ba0]
mov rbx, qword [rsi + 8]
mov rdi, rsi
cmp byte [rbx + 0x19], 0
jne 0x140075599
nop dword [rax + rax]
lea rcx, [rbx + 0x20]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, [rbp - 0x29]
call fcn.1400ba7c0
test eax, eax
jns 0x14007558d
mov rbx, qword [rbx + 0x10]
jmp 0x140075593
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140075570
cmp byte [rdi + 0x19], 0
jne 0x1400755b6
lea rdx, [rdi + 0x20]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp - 0x29]
call fcn.1400ba7c0
test eax, eax
jns 0x1400755b9
mov rdi, rsi
cmp rdi, rsi
jne 0x1400757c6
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
mov ecx, gethostbyaddr
call fcn.1400b5680
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x69], rax
movsd xmm0, qword [rbp - 0x29]
movsd qword [rbp - 0x19], xmm0
mov dword [rbp - 0x11], r13d
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
mov ecx, gethostbyaddr
call fcn.1400b5680
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov r14, qword [rbp - 0x69]
mov qword [rbp - 9], r14
mov qword [rbp - 0x69], rax
mov rcx, qword [rbp - 1]
mov rax, qword [rbp - 0x61]
mov qword [rbp - 1], rax
mov qword [rbp - 0x61], rcx
mov rsi, qword [0x140142ba0]
mov rbx, qword [rsi + 8]
mov qword [rbp - 0x51], rbx
mov dword [rbp - 0x49], 0
mov rdi, rsi
cmp byte [rbx + 0x19], 0
jne 0x14007569b
nop word [rax + rax]
mov qword [rbp - 0x51], rbx
lea rcx, [rbx + 0x20]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, [rbp - 0x19]
call fcn.1400ba7c0
test eax, eax
jns 0x140075688
mov dword [rbp - 0x49], 0
mov rbx, qword [rbx + 0x10]
jmp 0x140075695
mov dword [rbp - 0x49], 1
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140075660
cmp byte [rdi + 0x19], 0
jne 0x1400756b8
lea rdx, [rdi + 0x20]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp - 0x19]
call fcn.1400ba7c0
test eax, eax
jns 0x14007572f
movabs rax, 0x3ffffffffffffff
cmp qword [0x140142ba8], rax
je 0x1400758eb
lea rdi, [0x140142ba0]
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x21], 0
mov ecx, 0x40
call fcn.1400b5680
mov rbx, rax
mov qword [rbp - 0x21], rax
lea rcx, [rax + 0x20]
lea rdx, [rbp - 0x19]
call fcn.14006beb0
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
mov word [rbx + 0x18], 0
movups xmm0, xmmword [rbp - 0x51]
movaps xmmword [rbp - 0x29], xmm0
mov r8, rbx
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.1400239d0
mov rdi, rax
mov r14, qword [rbp - 9]
mov r8, qword [r14 + 8]
lea rdx, [rbp - 9]
lea rcx, [rbp - 9]
call fcn.140023c50
mov edx, gethostbyaddr
mov rcx, qword [rbp - 9]
call fcn.1400b56bc
nop
mov rcx, qword [rbp - 0x69]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x1400757ac
nop dword [rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x69]
call fcn.140023c50
mov rsi, rbx
mov rbx, qword [rbx]
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x140075786
call fcn.1400b0810
nop
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x140075795
call fcn.1400b0810
nop
mov edx, gethostbyaddr
mov rcx, rsi
call fcn.1400b56bc
cmp byte [rbx + 0x19], 0
je 0x140075760
mov rcx, qword [rbp - 0x69]
mov edx, gethostbyaddr
call fcn.1400b56bc
lea r8, [rdi + 0x30]
mov rdx, qword [rbp - 0x59]
mov ecx, r13d
call fcn.1400795b0
mov rax, qword [rdi + 0x30]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400758be
lea rcx, [rbx + 0x20]
call fcn.1400b0850
mov r14d, eax
lea rcx, [rbx + 0x20]
call fcn.1400b0200
movzx ecx, word [r12]
cmp r14, rcx
ja 0x14007581b
mov r8d, r14d
mov rdx, r15
mov rcx, rax
call fcn.1400cef68
test eax, eax
jne 0x14007581b
lea rcx, [r15 + r14*2]
cmp word [rcx], 0x5c
je 0x140075878
movzx eax, word [r12]
cmp r14, rax
je 0x140075878
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14007584c
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140075843
nop
cmp rbx, qword [rax + 0x10]
jne 0x140075843
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140075830
mov rbx, rax
cmp rax, qword [rdi + 0x30]
jmp 0x1400757d0
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14007586f
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140075860
cmp rbx, qword [rdi + 0x30]
jmp 0x1400757d0
lea rdi, [r14 + 4]
movzx eax, word [r12]
cmp rax, rdi
jb 0x14007589e
mov r8d, 4
lea rdx, [0x140107760]
call fcn.1400cef68
test eax, eax
cmove r14, rdi
lea rcx, [rbx + 0x28]
call fcn.1400b0200
mov qword [rsp + 0x20], rax
mov r9, r14
xor r8d, r8d
mov rdx, r12
mov rcx, r15
call fcn.140074070
nop
lea rcx, [0x140142b70]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1400b5660
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140023c30
nop
call fcn.1400b5fa0
int3
lea rcx, [0x140142b98]
call fcn.1400b5b50
cmp dword [0x140142b98], 0xffffffff
jne 0x1400754f8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x1400ed520]
call fcn.1400b59b0
lea rcx, [0x140142b98]
call fcn.1400b5af0
jmp 0x1400754f8
lea rcx, [0x140142bb0]
call fcn.1400b5b50
cmp dword [0x140142bb0], 0xffffffff
jne 0x140075514
mov ecx, 0x40
call fcn.1400b5680
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [0x140142ba0], rax
lea rcx, [0x1400ed480]
call fcn.1400b59b0
nop
lea rcx, [0x140142bb0]
call fcn.1400b5af0
jmp 0x140075514