Function at 0x14000dd20
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm6
mov rbx, rdx
mov rsi, rcx
mov r12, qword [0x1400f74a8]
mov rax, qword [r12]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 0
mov rcx, qword [0x1400f8130]
lea r9, [rsp + 0x60]
mov edx, 0x5100
xor r8d, r8d
call sub.SHELL32.dll_SHGetKnownFolderPath
mov rdi, qword [rsp + 0x60]
test eax, eax
js 0x14000ddaf
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov r14, rax
movabs rax, 0x7ffffffffffffff0
cmp r14, rax
jae 0x14000dfda
cmp r14, 0xa
ja 0x14000ddd7
lea eax, [r14 + r14]
mov byte [rsp + 0x40], al
lea r15, [rsp + 0x42]
jmp 0x14000de09
mov ebp, eax
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [rsi + 0x18], 1
lea rax, str._var_tmp_build_firefox_d8b47d80163d_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsi], rax
mov dword [rsi + 8], 0x255
mov dword [rsi + 0xc], ebp
jmp 0x14000dfa8
mov r13, r14
or r13, 7
inc r13
js 0x14000dfdf
mov rcx, r13
add rcx, r13
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
mov qword [rsp + 0x50], rax
or r13, 1
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov r8, r14
add r8, r14
mov rcx, r15
mov rdx, rdi
call sub.ntdll.dll_memmove
mov word [r15 + r14*2], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
movzx edx, byte [rbx + 0x28]
test dl, 1
je 0x14000de41
mov rdx, qword [rbx + 0x30]
jmp 0x14000de44
shr rdx, 1
lea rcx, [rsp + 0x20]
call fcn.14007dc00
movzx r15d, byte [rbx + 0x28]
test r15b, 1
je 0x14000de68
mov r15, qword [rbx + 0x30]
mov rbx, qword [rbx + 0x38]
test r15, r15
jne 0x14000de74
jmp 0x14000de9d
add rbx, 0x2a
shr r15, 1
test r15, r15
je 0x14000de9d
add r15, r15
xor r13d, r13d
lea r14, [rsp + 0x20]
nop
movzx ecx, word [rbx + r13]
call sub.api_ms_win_crt_string_l1_1_0.dll_towlower
mov rcx, r14
mov edx, eax
call fcn.14007e3a0
add r13, 2
cmp r15, r13
jne 0x14000de80
test byte [rsp + 0x20], 1
je 0x14000ded1
mov rcx, qword [rsp + 0x30]
cmp word [rcx], 0
je 0x14000dedc
xor eax, eax
nop word cs:[rax + rax]
lea rdx, [rax + 2]
cmp word [rcx + rax + 2], 0
mov rax, rdx
jne 0x14000dec0
jmp 0x14000dede
lea rcx, [rsp + 0x22]
cmp word [rcx], 0
jne 0x14000deaf
xor edx, edx
call fcn.14000ad10
mov r14, rax
mov ecx, 0x22
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rbx, rax
xorps xmm6, xmm6
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
mov word [rax + 0x20], 0
mov rcx, rax
mov r9, r14
call fcn.14000b990
dec eax
cmp eax, 0x10
jae 0x14000df58
lea rdx, str.Tor_ProjectFirefox_blocklist_
lea r14, [rsp + 0x40]
mov rcx, r14
call fcn.14007f100
mov rcx, r14
mov rdx, rbx
call fcn.14007f100
mov rax, qword [rsp + 0x50]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
movaps xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0x50], 0
xor eax, eax
jmp 0x14000df72
lea rax, str._var_tmp_build_firefox_d8b47d80163d_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsi], rax
movabs rax, 0x8007000d00000262
mov qword [rsi + 8], rax
mov al, 1
mov byte [rsi + 0x18], al
test byte [rsp + 0x20], 1
je 0x14000df86
mov rcx, qword [rsp + 0x30]
call sub.mozglue.dll_free
mov rcx, rbx
call sub.mozglue.dll_free
test byte [rsp + 0x40], 1
je 0x14000df9f
mov rcx, qword [rsp + 0x50]
call sub.mozglue.dll_free
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rsp + 0x68]
xor rax, rsp
mov rcx, qword [r12]
cmp rcx, rax
jne 0x14000dfd5
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400c8850
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
call fcn.14000f700
int3