Function at 0x1400043a0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140086080]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rsi, rdx
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x40]
call fcn.14003a810
lea rdx, [rbp - 0x40]
mov ecx, 0x103
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
xor r14d, r14d
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r14w
lea rax, [rbp - 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r14w
jne 0x140004414
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x68]
call fcn.140004f60
nop
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0x17
jb 0x140004472
lea rdi, [rcx + 0x17]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 0x2e
lea rdx, str.WondershareNativePush_
call fcn.14003a160
mov word [rbx + rdi*2], r14w
jmp 0x140004490
mov qword [rsp + 0x20], 0x17
lea r9, str.WondershareNativePush_
mov edx, 0x17
lea rcx, [rbp - 0x68]
call fcn.140005b20
lea rcx, [rbp - 0x68]
call fcn.1400073b0
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0xb
jb 0x1400044df
lea rdi, [rcx + 0xb]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 0x16
lea rdx, str.service.log
call fcn.14003a160
mov word [rbx + rdi*2], r14w
jmp 0x1400044fd
mov qword [rsp + 0x20], 0xb
lea r9, str.service.log
mov edx, 0xb
lea rcx, [rbp - 0x68]
call fcn.140005b20
lea rcx, [rbp - 0x68]
call fcn.14000c830
mov rbx, qword [0x14008a328]
test rbx, rbx
je 0x140004533
mov rbx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r9d, eax
lea r8, str._INFO___d___service_begin.
mov edx, 3
mov rcx, qword [0x14008a328]
call qword [rbx]
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r14w
mov r8d, 0x20
lea rdx, str.Wondershare_Native_Push_Service.
lea rcx, [rsp + 0x78]
call fcn.140004f60
nop
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov r8d, 0x1f
lea rdx, str.Wondershare_Native_Push_Service
lea rcx, [rsp + 0x58]
call fcn.140004f60
nop
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r14w
mov r8d, 0x11
lea rdx, str.NativePushService
lea rcx, [rsp + 0x38]
call fcn.140004f60
nop
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.140004780
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140004625
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004620
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004769
call fcn.140038090
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r14w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14000467b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000476f
call fcn.140038090
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r14w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400046d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004775
call fcn.140038090
mov rbx, qword [0x14008a328]
test rbx, rbx
je 0x1400046fe
mov rbx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r9d, eax
lea r8, str._INFO___d___service_end.
mov edx, 3
mov rcx, qword [0x14008a328]
call qword [rbx]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14000473a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004735
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004763
call fcn.140038090
xor eax, eax
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.140038070
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14003eae4
nop
call fcn.14003eae4
nop
call fcn.14003eae4
nop
call fcn.14003eae4
int3