Function at 0x1400030a0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x14005a080]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xor ebx, ebx
mov rcx, qword [0x1403b1430]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400030e9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rsi, [0x1403b13a0]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rsi + r8], bl
jne 0x140003110
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.14000ab60
nop
lea rcx, [rsp + 0x30]
call fcn.140012db0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000316f
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000316a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003535
call fcn.1400164f0
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0xb0]
call fcn.14003aa70
lea rdx, [rbp + 0xb0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rcx, [rbp + 0xb0]
mov rax, rdi
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x1400031a0
cmp byte [rbp + rax + 0xaf], 0x5c
jne 0x1400031ca
dec rax
cmp rax, 0x104
jae 0x140003541
mov byte [rbp + rax + 0xb0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400031e6
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.14000ab60
nop
mov r8d, 1
lea rdx, [0x1400489b4]
lea rcx, [rsp + 0x30]
call fcn.1400085f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
nop dword [rax + rax]
inc rdi
cmp byte [rsi + rdi], 0
jne 0x140003250
mov r8, rdi
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400085f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400032d3
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000353b
call fcn.1400164f0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140003323
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000331e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003547
call fcn.1400164f0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x60]
call fcn.14003aa70
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400066c0
nop
call fcn.140020de0
movsxd rcx, eax
movabs rax, 0x1c926b9d39431d5f
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0x23d6df
sub rcx, rax
add ecx, 0x1649d
movsxd rdi, ecx
mov rcx, rdi
call fcn.140016b38
mov rsi, rax
test rdi, rdi
je 0x1400033d7
call fcn.140020de0
mov r9d, eax
mov eax, 0x80808081
imul r9d
add edx, r9d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r9d, ecx
mov byte [rbx + rsi], r9b
inc rbx
cmp rbx, rdi
jb 0x1400033a5
mov r8, rdi
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.140006860
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
je 0x14000340f
lea rdx, str.____Error_dumping_shit_inside_the_disk
lea rcx, [0x1403afb80]
call fcn.140009520
mov rcx, rax
call fcn.1400097d0
lea rcx, [rbp - 0x58]
call fcn.140008220
test rax, rax
jne 0x14000344d
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov eax, 6
mov edx, 2
cmp qword [rbp + rcx - 0x18], 0
cmovne eax, edx
or eax, dword [rbp + rcx - 0x50]
and eax, 0x17
mov dword [rbp + rcx - 0x50], eax
and eax, dword [rbp + rcx - 0x4c]
jne 0x14000354d
mov rcx, rsi
call fcn.1400164f0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call fcn.140020cfc
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x58]
call fcn.140006410
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x64], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.1400156b8
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140003507
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003502
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000352f
call fcn.1400164f0
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1400164d0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.1400202a0
int3
call fcn.1400202a0
nop
call fcn.1400202a0
nop
call fcn.140016728
nop
call fcn.1400202a0
nop
test al, 4
je 0x14000355a
lea rbx, str.ios_base::badbit_set
jmp 0x14000356e
test dl, al
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x58]
call fcn.140001b40
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140002a80
lea rdx, [0x1400587f8]
lea rcx, [rsp + 0x30]
call fcn.140018468
int3