Function at 0x1400b3842
Capabilities:
Get common file path

Disassembly:
push rax
pushf
mov eax, 0x67d91564
pushf
not eax
add eax, 0xfba1dd93
xor eax, 0xbaeb0cc8
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf69973d8
xor eax, 0xae668774
rol eax, 0xc
popf
pushf
not eax
add eax, 0x876f49ee
xor eax, 0xdd432744
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xea852105
xor eax, 0x85bcc476
rol eax, 0x72
popf
cmp eax, 4
jne 0x1400b38a5
popf
pop rax
jmp 0x1400b3c76
cmp eax, 0
jne 0x1400b38b4
popf
pop rax
jmp 0x1400b3959
cmp eax, 3
jne 0x1400b38c3
popf
pop rax
jmp 0x1400b3c30
cmp eax, 1
jne 0x1400b38d2
popf
pop rax
jmp 0x1400b3b39
cmp eax, 0xa
jne 0x1400b38e1
popf
pop rax
jmp 0x1400b3fe6
cmp eax, 7
jne 0x1400b38f0
popf
pop rax
jmp 0x1400b3e39
cmp eax, 6
jne 0x1400b38ff
popf
pop rax
jmp 0x1400b3d81
cmp eax, 0xb
jne 0x1400b390e
popf
pop rax
jmp 0x1400b408a
cmp eax, 0xc
jne 0x1400b391d
popf
pop rax
jmp 0x1400b4143
cmp eax, 8
jne 0x1400b392c
popf
pop rax
jmp 0x1400b3e97
cmp eax, 5
jne 0x1400b393b
popf
pop rax
jmp 0x1400b3cf4
cmp eax, 2
jne 0x1400b394a
popf
pop rax
jmp 0x1400b3bec
cmp eax, 9
jne 0x1400b3959
popf
pop rax
jmp 0x1400b3eff
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rcx
mov qword [rsp + 0x20], rcx
xor esi, esi
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x48], rsi
mov ecx, 0x9de2f380
pushf
not ecx
add ecx, 0xe52714ce
xor ecx, 0x9c735086
rol ecx, 0xdf
popf
pushf
not ecx
add ecx, 0xce5c5a5c
xor ecx, 0xb84c4d0e
rol ecx, 0x42
popf
pushf
not ecx
add ecx, 0xedc26d9c
xor ecx, 0x8bcfbbba
rol ecx, 0xb2
popf
call fcn.14009b9d3
mov qword [rsp + 0x38], rax
lea rbx, [rax + 0x104]
mov qword [rsp + 0x48], rbx
xor edx, edx
mov r8d, 0xf87fd12d
pushf
not r8d
add r8d, 0xe0e02d8f
xor r8d, 0xa560b5ed
rol r8d, 0xa
popf
pushf
not r8d
add r8d, 0xa2ba96a7
xor r8d, 0xae6cfdc9
rol r8d, 0x15
popf
pushf
not r8d
add r8d, 0xa0b0090e
xor r8d, 0xc9e84150
rol r8d, 0x29
popf
pushf
not r8d
add r8d, 0xd60e5ed2
xor r8d, 0x92fd8a50
rol r8d, 0x93
popf
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x3e18fbda
pushf
not ecx
add ecx, 0x84dab319
xor ecx, 0xe69da981
rol ecx, 0x1d
popf
pushf
not ecx
add ecx, 0xbf3a7a33
xor ecx, 0xdb6ef65b
rol ecx, 0x4c
popf
jmp 0x1400b3a97
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, eax
lea eax, [rcx - 1]
cmp eax, 0x102
ja 0x1400b3b06
push rax
pushf
mov eax, 0x892359d4
pushf
not eax
add eax, 0x9072ff34
xor eax, 0xebc17ab6
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x98da24be
xor eax, 0xb4d6a27b
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xe500680e
xor eax, 0x8265c599
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x92a123b3
xor eax, 0xecc1ab26
rol eax, 0x7b
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xa389092b
pushf
not eax
add eax, 0x839714ac
xor eax, 0xeed93edf
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x9ab83159
xor eax, 0xee9e5672
rol eax, 0xed
popf
jmp 0x1400b3896
mov r8d, ecx
mov rcx, qword [rsp + 0x38]
push rcx
not rcx
sub r8, rcx
pop rcx
sub r8, 1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp rcx, r8
jne 0x1400b3bb9
push rax
pushf
mov eax, 0xbf9fbcc0
pushf
not eax
add eax, 0xd28c2232
xor eax, 0xe7662632
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe7077ecd
xor eax, 0xe3f76e86
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xc06b3664
xor eax, 0xa0cf3289
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe83610a8
xor eax, 0xf484f103
rol eax, 0x77
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xf65a29e5
pushf
not eax
add eax, 0xa71eb13f
xor eax, 0xe110c93a
rol eax, 8
popf
pushf
not eax
add eax, 0x86605ae6
xor eax, 0xb211ef94
rol eax, 0xf5
popf
jmp 0x1400b3896
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], sil
jmp 0x1400b3c76
sub r8, rcx
mov rdx, rcx
mov rcx, rdi
call fcn.140102dff
mov rcx, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x74be3857
pushf
not eax
add eax, 0xbb637a2d
xor eax, 0xc86c300a
rol eax, 0x72
popf
pushf
not eax
add eax, 0x99b522e9
xor eax, 0xc236e7c3
rol eax, 0x26
popf
jmp 0x1400b3896
test rcx, rcx
je 0x1400b3cae
push rax
pushf
mov eax, 0x56899caa
pushf
not eax
add eax, 0xd934a875
xor eax, 0xec73998a
rol eax, 0x36
popf
pushf
not eax
add eax, 0x8e34cbee
xor eax, 0xfe1c15c9
rol eax, 0x90
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xd97f72c7
pushf
not eax
add eax, 0xcfdc8882
xor eax, 0xf443a3a3
rol eax, 0x93
popf
pushf
not eax
add eax, 0xae7073e2
xor eax, 0xf9679d7c
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x9a568bcb
xor eax, 0x99229be6
rol eax, 0x37
popf
jmp 0x1400b3896
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3d3b
push rax
pushf
mov eax, 0xeb54559e
pushf
not eax
add eax, 0xc11ebfa3
xor eax, 0xcd5df193
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x83adde3e
xor eax, 0xa09aeb4b
rol eax, 0xba
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xaefe787d
pushf
not eax
add eax, 0x947815e3
xor eax, 0xd41f053a
rol eax, 0xef
popf
pushf
not eax
add eax, 0xad67ac00
xor eax, 0xef709e3a
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc4fb569e
xor eax, 0xa1457c64
rol eax, 0x89
popf
jmp 0x1400b3896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3de0
push rax
pushf
mov eax, 0x12c806
pushf
not eax
add eax, 0xec76464a
xor eax, 0xeb6b4168
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xae8f4dd4
xor eax, 0xa863b7da
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xc2f39174
xor eax, 0xc993c55c
rol eax, 0x4f
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xaf6d728e
pushf
not eax
add eax, 0x8a564357
xor eax, 0x946a4809
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd413c7be
xor eax, 0x93f2f26f
rol eax, 0xce
popf
pushf
not eax
add eax, 0xfc7e8ee5
xor eax, 0x88442b1f
rol eax, 0x19
popf
pushf
not eax
add eax, 0xb1318d9b
xor eax, 0xb4407635
rol eax, 0x35
popf
jmp 0x1400b3896
call fcn.1400c3e2f
push rax
pushf
mov eax, 0xd04ad634
pushf
not eax
add eax, 0xc4d1228a
xor eax, 0xcdc687b9
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc0a84d7d
xor eax, 0xa48b49b6
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xf56cb9a6
xor eax, 0xb2c1f2b4
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa3a67b7c
xor eax, 0xa7f48599
rol eax, 0x5b
popf
jmp 0x1400b3896
mov rax, rdi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400e25f6
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
movabs rcx, 0x21f5f8dc7f004ce4
pushf
not rcx
add rcx, 0x661855dc
xor rcx, 0x55e7c081
rol rcx, 0x7d
popf
pushf
not rcx
add rcx, 0x46d9a24a
xor rcx, 0x7294a203
rol rcx, 0x19
popf
pushf
not rcx
add rcx, 0x74956d7a
xor rcx, 0x7e162b69
rol rcx, 0x44
popf
pushf
not rcx
add rcx, 0x52be908e
xor rcx, 0x7a809642
rol rcx, 0x69
popf
mov qword [rsp + 0x20], rcx
movabs rax, 0x9ad6f77fb10db37
pushf
not rax
add rax, 0x6adbaacd
xor rax, 0x4cd376b0
rol rax, 0xeb
popf
pushf
not rax
add rax, 0x6ebaeaf5
xor rax, 0x5ac98d0c
rol rax, 0x80
popf
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400d99f7
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400b3e97
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b4057
push rax
pushf
mov eax, 0x48558c54
pushf
not eax
add eax, 0xe89fa0e8
xor eax, 0xfc05e115
rol eax, 0xee
popf
pushf
not eax
add eax, 0xf6113e6c
xor eax, 0x8e6b680e
rol eax, 0x83
popf
pushf
not eax
add eax, 0x97e78d4c
xor eax, 0xc54098cb
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xfae0b292
xor eax, 0xc2964e01
rol eax, 0x88
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0x944d0094
pushf
not eax
add eax, 0xcd2829a8
xor eax, 0x81f54901
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa018d197
xor eax, 0xb485eb94
rol eax, 0x22
popf
jmp 0x1400b3896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b40fc
push rax
pushf
mov eax, 0x5df6f444
pushf
not eax
add eax, 0xa8c06ef7
xor eax, 0xc14c06e9
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xeb76de23
xor eax, 0xc7b768ba
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa63a0355
xor eax, 0xa3bbd85c
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe88903bb
xor eax, 0xcd00e294
rol eax, 0xb2
popf
jmp 0x1400b3896
push rax
pushf
mov eax, 0xb2e4b0d9
pushf
not eax
add eax, 0x9b535f52
xor eax, 0xa5b9cb0c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xd611c8d3
xor eax, 0xf186b644
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc2637c1f
xor eax, 0xcfe0f4ad
rol eax, 0x52
popf
jmp 0x1400b3896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3