Function at 0x1400b36b9
Capabilities:
Get common file path

Disassembly:
push rax
pushf
mov eax, 0x28af95ce
pushf
not eax
add eax, 0xd3b3fdc4
xor eax, 0xd213ae98
rol eax, 0x77
popf
pushf
not eax
add eax, 0xc8b48cbd
xor eax, 0x977c506d
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x87c90b91
xor eax, 0xb9df2209
rol eax, 0x88
popf
pushf
not eax
add eax, 0xf165361e
xor eax, 0xc391bf20
rol eax, 0x85
popf
cmp eax, 4
jne 0x1400b371c
popf
pop rax
jmp 0x1400b3b40
cmp eax, 0
jne 0x1400b372b
popf
pop rax
jmp 0x1400b37d0
cmp eax, 3
jne 0x1400b373a
popf
pop rax
jmp 0x1400b3ad4
cmp eax, 1
jne 0x1400b3749
popf
pop rax
jmp 0x1400b39b4
cmp eax, 0xa
jne 0x1400b3758
popf
pop rax
jmp 0x1400b3f04
cmp eax, 7
jne 0x1400b3767
popf
pop rax
jmp 0x1400b3d4f
cmp eax, 6
jne 0x1400b3776
popf
pop rax
jmp 0x1400b3c97
cmp eax, 0xb
jne 0x1400b3785
popf
pop rax
jmp 0x1400b3fa8
cmp eax, 0xc
jne 0x1400b3794
popf
pop rax
jmp 0x1400b404e
cmp eax, 8
jne 0x1400b37a3
popf
pop rax
jmp 0x1400b3d9a
cmp eax, 5
jne 0x1400b37b2
popf
pop rax
jmp 0x1400b3be4
cmp eax, 2
jne 0x1400b37c1
popf
pop rax
jmp 0x1400b3a7a
cmp eax, 9
jne 0x1400b37d0
popf
pop rax
jmp 0x1400b3def
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rcx
mov qword [rsp + 0x20], rcx
xor esi, esi
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x48], rsi
mov ecx, 0x63da424
pushf
not ecx
add ecx, 0xfbdfb4f0
xor ecx, 0xe41e59f3
rol ecx, 0x79
popf
pushf
not ecx
add ecx, 0xbe31ddd9
xor ecx, 0xc4ffc50c
rol ecx, 0xa0
popf
pushf
not ecx
add ecx, 0xe41a417e
xor ecx, 0x9ef4629e
rol ecx, 0x65
popf
pushf
not ecx
add ecx, 0xe0ccdb91
xor ecx, 0xe13465d9
rol ecx, 0xa8
popf
call fcn.14009ba45
mov qword [rsp + 0x38], rax
lea rbx, [rax + 0x104]
mov qword [rsp + 0x48], rbx
xor edx, edx
mov r8d, 0x582b06be
pushf
not r8d
add r8d, 0xea5d15c1
xor r8d, 0xa84f5eea
rol r8d, 0x54
popf
pushf
not r8d
add r8d, 0xb092bd07
xor r8d, 0xdab4769e
rol r8d, 0xe2
popf
pushf
not r8d
add r8d, 0xa3095691
xor r8d, 0xc9025cd6
rol r8d, 0x99
popf
pushf
not r8d
add r8d, 0xf2e18f16
xor r8d, 0xc8cf5bdf
rol r8d, 0xeb
popf
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x60af8d12
pushf
not ecx
add ecx, 0x9d30b07f
xor ecx, 0x99235079
rol ecx, 0x13
popf
pushf
not ecx
add ecx, 0xfe040ea4
xor ecx, 0xe9b12ee5
rol ecx, 0xa1
popf
pushf
not ecx
add ecx, 0xe3da7fa4
xor ecx, 0xca08e8b8
rol ecx, 0xf7
popf
jmp 0x1400b3938
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, eax
lea eax, [rcx - 1]
cmp eax, 0x102
ja 0x1400b3981
push rax
pushf
mov eax, 0xd3769097
pushf
not eax
add eax, 0xdefe91a8
xor eax, 0xb81f218d
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xbb63fd6b
xor eax, 0x83f1f38f
rol eax, 0xe7
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0xd07bad0f
pushf
not eax
add eax, 0xbc427e82
xor eax, 0xc8696929
rol eax, 0x53
popf
pushf
not eax
add eax, 0xbf3832cf
xor eax, 0xfc5f1c51
rol eax, 0x18
popf
jmp 0x1400b370d
mov r8d, ecx
mov rcx, qword [rsp + 0x38]
push rcx
not rcx
sub r8, rcx
pop rcx
sub r8, 1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp rcx, r8
jne 0x1400b3a34
push rax
pushf
mov eax, 0x558d3a46
pushf
not eax
add eax, 0xf94518ad
xor eax, 0x92f69327
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xf98fc797
xor eax, 0x8161ebea
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xf65051fa
xor eax, 0x91da0676
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xf84f8ed5
xor eax, 0xc1307d79
rol eax, 0xd4
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0x33781ebc
pushf
not eax
add eax, 0x94785f66
xor eax, 0xf15d7a48
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xb989af37
xor eax, 0xc130ee5a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xd5da1880
xor eax, 0xf46d7c84
rol eax, 0x61
popf
jmp 0x1400b370d
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], sil
jmp 0x1400b3b40
sub r8, rcx
mov rdx, rcx
mov rcx, rdi
call fcn.140100488
mov rcx, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x3eaf3a58
pushf
not eax
add eax, 0xe49133d3
xor eax, 0xb881c459
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x822a7ed6
xor eax, 0x91d1dcc9
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xd1c1bcc1
xor eax, 0xc5598af8
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xe95c145e
xor eax, 0xc5a46cfb
rol eax, 0xb1
popf
jmp 0x1400b370d
test rcx, rcx
je 0x1400b3b9e
push rax
pushf
mov eax, 0x99b9ff7f
pushf
not eax
add eax, 0xf9fe21cc
xor eax, 0x93d9dfa1
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd1f0211e
xor eax, 0xdca26624
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xb1056fe6
xor eax, 0xaf4f600e
rol eax, 0x94
popf
pushf
not eax
add eax, 0x915d49bd
xor eax, 0xd355e207
rol eax, 0xd3
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0x15240510
pushf
not eax
add eax, 0xd6970a95
xor eax, 0xdead98de
rol eax, 2
popf
pushf
not eax
add eax, 0xc0266290
xor eax, 0xa610b552
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x9b06ddec
xor eax, 0xeecbea0e
rol eax, 0xdc
popf
jmp 0x1400b370d
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3c51
push rax
pushf
mov eax, 0xffd1aa6b
pushf
not eax
add eax, 0x8134250c
xor eax, 0xdbeddbff
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xdbd427bf
xor eax, 0xacee9d09
rol eax, 0x24
popf
pushf
not eax
add eax, 0xca3b3913
xor eax, 0xae9c77e1
rol eax, 0x98
popf
pushf
not eax
add eax, 0x8e00940e
xor eax, 0xabf134ec
rol eax, 0x3c
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0x7ac436e3
pushf
not eax
add eax, 0x951d767e
xor eax, 0xb9829f9d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x9142901b
xor eax, 0xedd688a8
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xb8dbfbfe
xor eax, 0x8eeba16a
rol eax, 0x8f
popf
jmp 0x1400b370d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3cf6
push rax
pushf
mov eax, 0xdc361771
pushf
not eax
add eax, 0xf26a0206
xor eax, 0xa9a84b69
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xaf34ac16
xor eax, 0xcd293f3a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xf61e2ec1
xor eax, 0xf17de666
rol eax, 0x51
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0x8ad84541
pushf
not eax
add eax, 0xd6074950
xor eax, 0xd0a2aa89
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x87201682
xor eax, 0xcb7711d5
rol eax, 0x28
popf
pushf
not eax
add eax, 0xbf5000d2
xor eax, 0x814f6d20
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xac486271
xor eax, 0x9970d085
rol eax, 0x9c
popf
jmp 0x1400b370d
call fcn.1400c3067
push rax
pushf
mov eax, 0xc33f8eac
pushf
not eax
add eax, 0xaad26453
xor eax, 0xfac609e3
rol eax, 0x37
popf
pushf
not eax
add eax, 0xc7f1255d
xor eax, 0x8c635bc7
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xe764de9b
xor eax, 0xc344ba75
rol eax, 0xcb
popf
jmp 0x1400b370d
mov rax, rdi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400e02a0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
movabs rcx, 0x289a539b331c156c
pushf
not rcx
add rcx, 0x7042c6f8
xor rcx, 0x513a053c
rol rcx, 0xe2
popf
pushf
not rcx
add rcx, 0x4a57a64b
xor rcx, 0x67341c43
rol rcx, 0xd9
popf
pushf
not rcx
add rcx, 0x43fc97c2
xor rcx, 0x52117945
rol rcx, 0xa9
popf
pushf
not rcx
add rcx, 0x4bfd2342
xor rcx, 0x464c82f0
rol rcx, 0xce
popf
mov qword [rsp + 0x20], rcx
movabs rax, 0xf9fab3f46026e756
pushf
not rax
add rax, 0x5bde866e
xor rax, 0x4c2171f2
rol rax, 0xf2
popf
pushf
not rax
add rax, 0x62c997da
xor rax, 0x5bd1e612
rol rax, 0xa3
popf
pushf
not rax
add rax, 0x49f6e2eb
xor rax, 0x4f9ed6eb
rol rax, 0x86
popf
pushf
not rax
add rax, 0x44a0b313
xor rax, 0x73ed7c08
rol rax, 0xdc
popf
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400d786b
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400b3d9a
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3f62
push rax
pushf
mov eax, 0x1a50061a
pushf
not eax
add eax, 0x960b45a2
xor eax, 0xfb42132b
rol eax, 0xec
popf
pushf
not eax
add eax, 0xbbb13905
xor eax, 0xddaaf005
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8e7a4213
xor eax, 0xfe5c9369
rol eax, 0x54
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0xec9b9fcc
pushf
not eax
add eax, 0x8640a2a2
xor eax, 0x8651b7ae
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xa2a84c82
xor eax, 0xc9114b75
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xe704426e
xor eax, 0xd99c4b9d
rol eax, 0x32
popf
jmp 0x1400b370d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b3ff4
push rax
pushf
mov eax, 0x5b221157
pushf
not eax
add eax, 0xc775e2df
xor eax, 0xc3e817be
rol eax, 0x35
popf
pushf
not eax
add eax, 0x82874bff
xor eax, 0xbb50d486
rol eax, 0x53
popf
jmp 0x1400b370d
push rax
pushf
mov eax, 0x6c3d6a09
pushf
not eax
add eax, 0x8f36694b
xor eax, 0xa62c7200
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xcbbc0dc5
xor eax, 0x8391492e
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x99dedd76
xor eax, 0x8c0c35d6
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x8f2bfda5
xor eax, 0xa15ecc27
rol eax, 0x5e
popf
jmp 0x1400b370d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3