Function at 0x140009200
Capabilities:
Check if file exists
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x840]
sub rsp, 0x940
mov rax, qword [0x1400e6010]
xor rax, rsp
mov qword [rbp + 0x830], rax
xor r12d, r12d
xor edx, edx
mov r8d, 0x820
lea rcx, [rbp + 0x10]
call sub.VCRUNTIME140.dll_memset
lea r9, [rbp + 0x10]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400ca8d0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov rdx, qword [rbp + 0x10]
lea rcx, [rbp - 0x70]
call fcn.140004820
nop
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
mov rcx, qword [rbp - 0x60]
sub rax, rcx
cmp rax, 0xa
jb 0x14000984b
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r9, qword [rbp - 0x70]
mov eax, 0xa
mov qword [rsp + 0x30], rax
lea rax, str.FileZilla
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x10]
call fcn.140005e60
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140009305
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400092ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
nop
mov rax, rbx
mov rcx, qword [rbp]
sub rax, rcx
cmp rax, 1
jb 0x140009851
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], 1
lea rdi, [0x1400caabc]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x70]
call fcn.140005e60
nop
mov r8d, 0x11
lea rdx, str.recentservers.xml
lea rcx, [rbp - 0x70]
call fcn.140005040
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400093d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400093cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400093cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
movdqa xmm0, xmmword [0x1400d71c0]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], r12w
mov rax, rbx
mov rcx, qword [rbp]
sub rax, rcx
cmp rax, 1
jb 0x140009857
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x50]
call fcn.140005e60
nop
mov r8d, 0xf
lea rdx, str.sitemanager.xml
lea rcx, [rsp + 0x50]
call fcn.140005040
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400094ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400094a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
movdqa xmm0, xmmword [0x1400d71c0]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r12w
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000972a
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
lea rdx, str.__FileZilla3_RecentServers_Server
lea rcx, [rsp + 0x70]
call fcn.140004820
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
lea r14, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae r14, qword [rbp - 0x30]
mov rsi, qword [rbp - 0x20]
cmp rsi, rbx
ja 0x14000985d
movabs r13, 0x7fffffffffffffff
mov qword [rbp - 0x58], 7
cmp rsi, 8
jae 0x14000954f
mov qword [rbp - 0x60], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x70], xmm0
jmp 0x1400095ef
mov rdi, rsi
or rdi, 7
cmp rdi, rbx
jbe 0x140009568
mov rdi, rbx
lea rcx, [r13*2]
jmp 0x14000958e
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, r13
ja 0x140009845
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400095c0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009845
mov rcx, rax
call fcn.1400c69f0
mov rcx, rax
test rax, rax
je 0x1400095b9
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400095cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400095cc
call fcn.1400c69f0
jmp 0x1400095cf
mov rax, r12
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov rdx, r15
lea rcx, [rbp - 0x70]
call fcn.1400084a0
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000972a
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rdx, str.__FileZilla3_Servers_Server
lea rcx, [rsp + 0x70]
call fcn.140004820
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
lea rsi, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rsi, qword [rbp - 0x50]
mov rdi, qword [rbp - 0x40]
cmp rdi, rbx
ja 0x140009863
mov qword [rbp - 0x58], 7
cmp rdi, 8
jae 0x14000967d
mov qword [rbp - 0x60], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x70], xmm0
jmp 0x14000971d
mov rax, rdi
or rax, 7
cmp rax, rbx
jbe 0x140009693
lea rcx, [r13*2]
jmp 0x1400096bc
mov rbx, rax
cmp rax, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r13
ja 0x140009869
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400096ee
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009869
mov rcx, rax
call fcn.1400c69f0
mov rcx, rax
test rax, rax
je 0x1400096e7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400096fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400096fa
call fcn.1400c69f0
jmp 0x1400096fd
mov rax, r12
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rbx
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.1400084a0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14000976d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009768
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009768
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400097c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400097bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140009815
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009810
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6a2c
mov rcx, qword [rbp + 0x830]
xor rcx, rsp
call fcn.1400c69d0
lea r11, [rsp + 0x940]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001120
nop
call fcn.1400011c0
nop
call fcn.1400011c0
nop
call fcn.1400011c0
nop
call fcn.1400011c0
nop
call fcn.1400011c0
int3
call fcn.140001120
int3