Function at 0x14002d0c0
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140131088]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov r15, rcx
cmp qword [rcx + 0x18], 8
jb 0x14002d10f
mov rdx, qword [rcx]
jmp 0x14002d112
mov rdx, r15
lea rcx, [rbp - 0x78]
call fcn.140029d00
nop
xor edx, edx
mov r8d, 0x105
lea rcx, [rbp + 0x90]
call fcn.1400a1560
lea rdx, [rbp + 0x90]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov qword [rbp], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rbp - 8], r13
mov byte [rbp - 0x18], r13b
or rbx, 0xffffffffffffffff
cmp byte [rbp + 0x90], r13b
jne 0x14002d167
mov r8d, r13d
jmp 0x14002d17a
lea rax, [rbp + 0x90]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x14002d171
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x18]
call fcn.140009260
nop
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.check_sign_test.log
lea rcx, [rbp - 0x18]
call fcn.14000c010
lea rcx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rcx, qword [rbp - 0x18]
lea rdx, [0x1400ee664]
call fcn.1400aff84
mov r14, rax
test rax, rax
je 0x14002d21c
cmp qword [r15 + 0x18], 8
jb 0x14002d1cf
mov r9, qword [r15]
jmp 0x14002d1d2
mov r9, r15
mov dword [rsp + 0x20], 0x1bb1
lea r8, [0x1400ee650]
lea rdx, str.__s__file_path_:__s____d_n
mov rcx, r14
call fcn.1400297a0
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r9, qword [rbp - 0x78]
mov dword [rsp + 0x20], 0x1bb2
lea r8, [0x1400ee650]
lea rdx, [0x1400ee668]
mov rcx, r14
call fcn.1400297a0
cmp qword [rbp - 0x68], 0
je 0x14002d6c3
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], r13
mov word [rsp + 0x48], r13w
mov r8d, recv
lea rdx, [0x1400ebbe8]
lea rcx, [rsp + 0x48]
call fcn.140008a20
nop
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rdx, qword [rbp - 0x78]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
call fcn.1400a2848
test eax, eax
je 0x14002d678
lea rdi, [rbp - 0x78]
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
cmovae rdi, r8
lea rcx, [rbp - 0x78]
cmovae rcx, r8
mov rax, qword [rbp - 0x68]
lea rax, [rcx + rax*2]
lea r12, [rbp - 0x78]
cmovae r12, r8
mov rsi, r13
mov r13, rax
sub r13, r12
inc r13
shr r13, 1
cmp r12, rax
mov rax, rsi
cmova r13, rax
test r13, r13
je 0x14002d2e9
sub r12, rdi
nop dword [rax]
movzx ecx, word [r12 + rdi]
call fcn.1400a2478
mov word [rdi], ax
lea rdi, [rdi + 2]
inc rsi
cmp rsi, r13
jne 0x14002d2d0
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
xor r13d, r13d
mov qword [rsp + 0x78], r13
mov byte [rsp + 0x68], r13b
lea r8d, [r13 + 9]
lea rdx, str.CERT_NAME
lea rcx, [rsp + 0x68]
call fcn.140009260
nop
lea rcx, [rsp + 0x68]
call fcn.140025db0
cmp qword [rax + 0x18], 0x10
jb 0x14002d328
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140085920
nop
cmp qword [rax + 0x18], 8
jb 0x14002d33f
mov rax, qword [rax]
mov qword [rbp - 0x20], 7
mov qword [rbp - 0x28], r13
mov word [rbp - 0x38], r13w
cmp word [rax], 0
jne 0x14002d35b
mov r8, r13
jmp 0x14002d36b
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14002d360
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140008a20
nop
mov r8, qword [rbp - 0x40]
cmp r8, 8
jb 0x14002d392
inc r8
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x58]
call fcn.140008b70
mov qword [rbp - 0x40], 7
mov qword [rbp - 0x48], r13
mov word [rbp - 0x58], r13w
mov rax, qword [rbp - 0x80]
cmp rax, 0x10
jb 0x14002d3fa
inc rax
mov rcx, qword [rsp + 0x68]
cmp rax, 0x1000
jb 0x14002d3f5
test cl, 0x1f
je 0x14002d3c8
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002d3d7
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002d3e6
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002d3f2
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
lea rdx, [rbp - 0x38]
mov r12, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x20]
cmp rdi, 8
cmovae rdx, r12
mov r9, qword [rbp - 0x28]
xor r8d, r8d
lea rcx, [rbp - 0x78]
call fcn.140008900
mov rsi, rax
test r14, r14
je 0x14002d481
lea rdx, [rbp - 0x38]
cmp rdi, 8
cmovae rdx, r12
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
mov dword [rsp + 0x30], 0x1bd1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea r8, [0x1400ee650]
lea rdx, str.__s__oray_cert_name:__s__cert_name:__s__cert_index:__s____d_n
mov rcx, r14
call fcn.1400297a0
mov rdi, qword [rbp - 0x20]
mov r12, qword [rbp - 0x38]
cmp rsi, 0xffffffffffffffff
je 0x14002d4c6
test r14, r14
je 0x14002d4be
lea r9, [rbp - 0x38]
cmp rdi, 8
cmovae r9, r12
mov dword [rsp + 0x20], 0x1bd7
lea r8, [0x1400ee650]
lea rdx, str.__s__find_cert_name__s____d_n
mov rcx, r14
call fcn.1400297a0
mov rdi, qword [rbp - 0x20]
mov r12, qword [rbp - 0x38]
mov sil, 1
jmp 0x14002d660
xor sil, sil
mov qword [rbp + 0x28], 7
mov qword [rbp + 0x20], r13
mov word [rbp + 0x10], r13w
mov qword [rbp + 0x48], 7
mov qword [rbp + 0x40], r13
mov word [rbp + 0x30], r13w
mov qword [rbp + 0x68], 7
mov qword [rbp + 0x60], r13
mov word [rbp + 0x50], r13w
mov rdx, r15
lea rcx, [rbp + 0x10]
call fcn.140024f60
lea rcx, [rbp + 0x10]
call fcn.140025b30
test eax, eax
jne 0x14002d62f
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x80], r13
mov byte [rbp + 0x70], al
lea r8d, [rax + 9]
lea rdx, str.CERT_NAME
lea rcx, [rbp + 0x70]
call fcn.140009260
nop
lea rcx, [rbp + 0x70]
call fcn.140025db0
cmp qword [rax + 0x18], 0x10
jb 0x14002d556
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140085920
nop
cmp qword [rax + 0x18], 8
jb 0x14002d56d
mov rax, qword [rax]
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
cmp word [rax], 0
jne 0x14002d590
mov rbx, r13
jmp 0x14002d59a
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14002d590
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140008a20
nop
mov r8, qword [rbp - 0x40]
cmp r8, 8
jb 0x14002d5c5
inc r8
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x58]
call fcn.140008b70
mov qword [rbp - 0x40], 7
mov qword [rbp - 0x48], r13
mov word [rbp - 0x58], r13w
lea rcx, [rbp + 0x70]
call fcn.140009040
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x10]
call fcn.140025be0
test eax, eax
je 0x14002d611
mov sil, 1
mov r9d, 0x1be5
lea r8, [0x1400ee650]
lea rdx, str.__s__verify_cert_name_succeed____d_n
mov rcx, r14
call fcn.1400297a0
nop
mov r8, qword [rbp - 0x80]
cmp r8, 8
jb 0x14002d64f
inc r8
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.140008b70
jmp 0x14002d64f
mov sil, 1
mov r9d, 0x1bea
lea r8, [0x1400ee650]
lea rdx, str.__s__find_cert_name_succeed____d_n
mov rcx, r14
call fcn.1400297a0
nop
lea rcx, [rbp + 0x10]
call fcn.14002d980
mov rdi, qword [rbp - 0x20]
mov r12, qword [rbp - 0x38]
cmp rdi, 8
jb 0x14002d69d
lea r8, [rdi + 1]
mov rdx, r12
lea rcx, [rbp - 0x38]
call fcn.140008b70
jmp 0x14002d69d
mov sil, 1
test r14, r14
je 0x14002d69d
mov r9d, 0x1bf3
lea r8, str.CheckSign
lea rdx, str.__s__call_at__d
mov rcx, r14
call fcn.1400225f0
nop
mov r8, qword [rsp + 0x60]
cmp r8, 8
jb 0x14002d8ba
inc r8
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.140008b70
jmp 0x14002d8ba
xor sil, sil
mov qword [rbp + 0x28], 7
mov qword [rbp + 0x20], r13
mov word [rbp + 0x10], r13w
mov qword [rbp + 0x48], 7
mov qword [rbp + 0x40], r13
mov word [rbp + 0x30], r13w
mov qword [rbp + 0x68], 7
mov qword [rbp + 0x60], r13
mov word [rbp + 0x50], r13w
mov rdx, r15
lea rcx, [rbp + 0x10]
call fcn.140024f60
lea rcx, [rbp + 0x10]
call fcn.140025b30
test eax, eax
jne 0x14002d891
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x48], al
lea r8d, [rax + 9]
lea rdx, str.CERT_NAME
lea rcx, [rsp + 0x48]
call fcn.140009260
nop
lea rcx, [rsp + 0x48]
call fcn.140025db0
cmp qword [rax + 0x18], 0x10
jb 0x14002d752
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140085920
nop
cmp qword [rax + 0x18], 8
jb 0x14002d769
mov rax, qword [rax]
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
cmp word [rax], 0
jne 0x14002d790
mov rbx, r13
jmp 0x14002d79a
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14002d790
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140008a20
nop
mov r8, qword [rbp - 0x40]
cmp r8, 8
jb 0x14002d7c5
inc r8
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x58]
call fcn.140008b70
mov qword [rbp - 0x40], 7
mov qword [rbp - 0x48], r13
mov word [rbp - 0x58], r13w
mov rax, qword [rsp + 0x60]
cmp rax, 0x10
jb 0x14002d82e
inc rax
mov rcx, qword [rsp + 0x48]
cmp rax, 0x1000
jb 0x14002d829
test cl, 0x1f
je 0x14002d7fc
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002d80b
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002d81a
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002d826
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x48], 0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x10]
call fcn.140025be0
test eax, eax
je 0x14002d873
mov sil, 1
mov r9d, 0x1c01
lea r8, [0x1400ee650]
lea rdx, str.__s__verify_cert_name_succeed____d_n
mov rcx, r14
call fcn.1400297a0
nop
mov r8, qword [rbp - 0x80]
cmp r8, 8
jb 0x14002d8b1
inc r8
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.140008b70
jmp 0x14002d8b1
mov sil, 1
mov r9d, 0x1c06
lea r8, [0x1400ee650]
lea rdx, str.__s__verify_cert_name_succeed____d_n
mov rcx, r14
call fcn.1400297a0
nop
lea rcx, [rbp + 0x10]
call fcn.14002d980
test r14, r14
je 0x14002d8c8
mov rcx, r14
call fcn.1400b006c
nop
mov rax, qword [rbp]
cmp rax, 0x10
jb 0x14002d91e
inc rax
mov rcx, qword [rbp - 0x18]
cmp rax, 0x1000
jb 0x14002d919
test cl, 0x1f
je 0x14002d8ec
call fcn.1400a26d8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14002d8fb
call fcn.1400a26d8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14002d90a
call fcn.1400a26d8
int3
cmp rcx, 0x27
jbe 0x14002d916
call fcn.1400a26d8
int3
mov rcx, rax
call fcn.14009d844
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov qword [rbp - 8], r13
mov byte [rbp - 0x18], 0
mov r8, qword [rbp - 0x60]
cmp r8, 8
jb 0x14002d948
inc r8
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.140008b70
movzx eax, sil
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14009d860
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret