Function at 0x14008da90
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x3f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14012f0c0]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r15d, r15d
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0x10], xmm6
movups xmmword [rbp + 0x20], xmm6
movups xmmword [rbp + 0x30], xmm6
movups xmmword [rbp + 0x50], xmm6
movups xmmword [rbp + 0x60], xmm6
mov qword [rbp + 0x90], rax
mov byte [rbp + 0x1c], 1
mov dword [rbp + 0x54], 0x7f7fffff
mov dword [rbp + 0x60], 0x3f800000
mov r12d, 0xffff
mov word [rbp + 0x64], r12w
mov dword [rbp + 0x2c], 3
mov dword [rbp + 0x28], 3
mov byte [rbp + 0x30], al
lea edx, [rax + 0x40]
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
movabs rax, 0x3997ad04b169553
mov qword [rbp - 0x30], rax
movabs rax, 0x15fe74a4485ca0c5
mov qword [rbp - 0x28], rax
movabs rax, 0x29ba091a1c5678c7
mov qword [rbp - 0x20], rax
movabs rcx, 0x61f4701bc9137cf6
mov qword [rbp - 0x18], rcx
movabs rax, 0x57c509a42579d30f
mov qword [rbp + 0x1e0], rax
movabs rax, 0x618a5ac52533c8a4
mov qword [rbp + 0x1e8], rax
movabs rax, 0x29ba091a1c5678a1
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], rcx
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp - 0x20], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
lea rax, [rbp + 0x200]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x14008dc20
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x10]
call fcn.140007890
nop
lea rax, [rbp - 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14008dc41
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x10]
call fcn.1400137c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp - 0x10]
call fcn.1400075d0
mov rax, qword [0x1401fe910]
movups xmm12, xmmword [rbp + 0x10]
movups xmmword [rbp + 0x150], xmm12
movups xmm13, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x160], xmm13
movups xmm14, xmmword [rbp + 0x30]
movups xmmword [rbp + 0x170], xmm14
movups xmmword [rbp + 0x180], xmm6
movups xmm15, xmmword [rbp + 0x50]
movups xmmword [rbp + 0x190], xmm15
movups xmm11, xmmword [rbp + 0x60]
movups xmmword [rbp + 0x1a0], xmm11
movups xmmword [rbp + 0x1b0], xmm6
movups xmmword [rbp + 0x1c0], xmm6
movsd xmm0, qword [rbp + 0x90]
movsd qword [rbp + 0x1d0], xmm0
lea rcx, [0x1401c6620]
mov qword [rbp + 0x150], rcx
mov dword [rbp + 0x158], 0x36d50
mov dword [rbp + 0x164], 0x41900000
lea r13, [0x14011a8f8]
mov qword [rbp + 0x188], r13
lea rdx, [rbp + 0x150]
mov rcx, qword [rax + 0x50]
call fcn.140056100
mov rax, qword [0x1401fe910]
mov r14, qword [rax + 0x50]
lea rdi, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
cmovae rdi, qword [rbp + 0x130]
mov qword [rsp + 0x30], r15
lea r8, [rsp + 0x30]
mov rcx, rdi
call fcn.140033930
mov rsi, rax
test rax, rax
jne 0x14008dd8b
mov rax, r15
jmp 0x14008def7
movaps xmm2, xmm12
movups xmmword [rbp + 0x150], xmm2
movaps xmm3, xmm13
movups xmmword [rbp + 0x160], xmm3
movaps xmm4, xmm14
movups xmmword [rbp + 0x170], xmm4
movaps xmm5, xmm6
movups xmmword [rbp + 0x180], xmm6
movaps xmm7, xmm15
movups xmmword [rbp + 0x190], xmm7
movaps xmm8, xmm11
movups xmmword [rbp + 0x1a0], xmm11
movaps xmm9, xmm6
movups xmmword [rbp + 0x1b0], xmm6
movaps xmm10, xmm6
movups xmmword [rbp + 0x1c0], xmm6
movsd xmm0, qword [rbp + 0x90]
movsd qword [rbp + 0x1d0], xmm0
movdqa xmm1, xmm11
psrldq xmm1, 6
movd eax, xmm1
test al, al
jne 0x14008dea4
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14008de10
add rbx, rdi
cmp rbx, rdi
jbe 0x14008de38
lea rcx, [rbx - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x14008de38
cmp al, 0x5c
je 0x14008de38
mov rbx, rcx
cmp rcx, rdi
ja 0x14008de21
movsd xmm0, qword [0x14011acd0]
movsd qword [rsp + 0x20], xmm0
mov r9, rbx
lea r8, str._s___.0fpx
mov edx, Ordinal_41
lea rcx, [rbp + 0x1a6]
call fcn.140033610
movsd xmm0, qword [rbp + 0x1d0]
movups xmm10, xmmword [rbp + 0x1c0]
movups xmm9, xmmword [rbp + 0x1b0]
movups xmm8, xmmword [rbp + 0x1a0]
movups xmm7, xmmword [rbp + 0x190]
movups xmm5, xmmword [rbp + 0x180]
movups xmm4, xmmword [rbp + 0x170]
movups xmm3, xmmword [rbp + 0x160]
movups xmm2, xmmword [rbp + 0x150]
movups xmmword [rsp + 0x40], xmm2
movups xmmword [rsp + 0x50], xmm3
movups xmmword [rsp + 0x60], xmm4
movups xmmword [rsp + 0x70], xmm5
movups xmmword [rbp - 0x80], xmm7
movups xmmword [rbp - 0x70], xmm8
movups xmmword [rbp - 0x60], xmm9
movups xmmword [rbp - 0x50], xmm10
movsd qword [rbp - 0x40], xmm0
mov qword [rsp + 0x40], rsi
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x54], 0x41900000
mov qword [rsp + 0x78], r13
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.140056100
mov qword [0x1401fea10], rax
mov rax, qword [0x1401fe910]
movups xmmword [rsp + 0x40], xmm12
movups xmmword [rsp + 0x50], xmm13
movups xmmword [rsp + 0x60], xmm14
movups xmmword [rsp + 0x70], xmm6
movups xmmword [rbp - 0x80], xmm15
movups xmmword [rbp - 0x70], xmm11
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm6
movsd xmm0, qword [rbp + 0x90]
movsd qword [rbp - 0x40], xmm0
lea rcx, [0x1401c6620]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x48], 0x36d50
mov dword [rsp + 0x54], 0x41700000
mov qword [rsp + 0x78], r13
lea rdx, [rsp + 0x40]
mov rcx, qword [rax + 0x50]
call fcn.140056100
mov rax, qword [0x1401fe910]
mov qword [rsp + 0x20], r15
xor r9d, r9d
movss xmm2, dword [0x14011ad40]
lea rdx, str.7___qNZi____0rC_Q6_T___CWt7HjO_._JAo_fY_99_e0__m__v_01qZn42G6QHp___9_01aNVBo2sejb5YY_gRU.a_HMY__Z_:__r_5_0_JJ1g6k4G:__4gHo__d_BhIvnAVs.__Q_pV_TT__SlZKE3RA_FqEn____FHjF__wI_hLED_Yuo6Q_B_o_5VcJ2rsBKM0iR_GS7nc2s_5Q_B__qmnUCg5M_1iZ_RBSEb_CGH_MjJ__kEZiCANS___5CsLn5wsalVP9wnU.7e_goI_lO1_PFWkZsLiK1_TVnOMYY0_WhNR3O_bv7MNT86_5LbW3M_DT__q__U._E___IMX___92__CsHeXZV_jA2T_Do0__5LF_5___8JFgL6SgV_w_n_BBr_9:5Dt_u_SMd.h_SQrMM1VY8._9_s_Dt__UofL__gV_WhVe_6YXN_6pexbQd_aY_gLlgDgCw_Hd_V_IgLuP7peb52:_dcU__5l____D_o_C3D_xteu_Z________ppY_dnO41J_8JCsxdr__C8_wJeq0:oer___ao_O4t1BeIYG_14QBQf_o_5R5Rbtu.C_8_i_h9WBYI8Y_7_nLi_BnLt___qV4oLg_uX9_w_Z_DE9B_4___d__ODI2lFI__Y_ic_0VceJ_dB.r5_KM7__L_hpLVSsC__vw___qpL_hl___uoL2e_AOt_gfL_J5s_nlRfLP:_q5FGMm8SaFoLg_a__4__:W_11_1Ur_BwF:v:Hk7_C9FmCDmL_fmMB_sUmsIxOfgc_7ef8aPU_1__7_F7_JYU._M5_Vp._v2H_v2__n8_I3TQ_6N_oa0_nFI__u_c8hi__HZO__XM6W.i_sp_NdsjL_UY313_L2Cpf3Scc_5dUIA6tH0Z7UVKa_45b__w__53x__niP_1tnjYcW_w6___JW6o5ldoS__cnYb__HXKumZiq8_W_agDk2q8oQT1IPlCB__Q__fWY1a4NSp4m_m_5__NVeWsn3_J_c2IX___bY_.nt___Rpgo1_jp___a_Jk_AD_Hl_T._2_5x_e2Y:ik_tcV4P.__RF_Sd_KiBm___lm8_c7C3.Gb_C:_8.d._9_ZMOgMmoq__Aw9Y_tg34_CF.J__1__QP_7I.lLTrWJ17QCD3hS___N_SF4tFE_cqX__e__Mfv__U:_R_q.2ZWI__rHReDG3LaLt:_Ob:2_FYC42_TGr.Hg____QgLbM_4Ke_4eJ_i1g2vRkR___lYI.2J5Y3_c_5_aP_c_5n_u9_hW4k08vV84f:vWu_BXsYR_iEonuJB__d7hgbp__xqV_F_Xt_k7b_6gR_YHq___7W_7i1__pKM2nBX_IWCf__JUW5Ck9_:dx9Rj5Ewa9_tD______2JuY3JP_8s_O_eq9_7F_p__UNT__wZwcWAIXscjirHj:adxm2_4NSY1ZH___1G__qRfpH.MvYIVS_bCEp_OnW_4r_8_0f1__7.W_Pv__KDsC_C_FX_BIw8_.cCZDcY3_L__WH_DO_NbYio6YP_Q__K_iO4A_7sFxfL.0pS__Iv__5b___mmr_5f1v2P_vGc_YjAI_vuRfLQTfLWT___dYL_ZCe8_Ctwq.JuYA0hP_XUhLN2de5_5a_Mk_Z6JPsS__UVm__aJh_.MTWjL9Vd8_3fWhGb_dMjh_6u1K__a7Dt_.uoMqq0PW3__Owkj1D_7O.SiB.k_s_3_:8._3m_.2m_d_AoL_B__4__j:9_RvR_MNBwa.L___iF_.7QCD3m_TG268Zx6Rh.KG_c4dbLg34g__aKpTacO0M4_F4Paj____1F1M_3Q__M.pYD3J8_0Ee3E4p_l_Q_Z8_ZYs.Z_H_____.W8f3f_v5UD_V_j7F1F1q6N_6a_5X_U96__40H1.__Ma1K_f4t_Dhxia_et_Me_t_84Rs_2AP_E99U_A_c___IT_Dk9_GFVZ_GlY1r_vCeap_Q0p2K5h19_eS_DY_FnNp_rU4gLIq_W_KQPjd_.H_VB_KLO4_iLZ0_1v_e6X_1_j_qn4gL_TQjRs_5f_ZruU_H_.s_MNl__cn3T_5Vu__tjX._V__R___Aha5Q6G___wj9_ENLg_hb50i_s__:M__Ows_f5049_FApK0Za.qruqAjPlFEvbs_9bAmVhNp_E05N_I__W:_0_N:2__CW_J_p8WRW__VL__Csb59e96.ih__2rL_1_lY_2Gb_cGcY0c_V___L__0AG_4VuYJT_3__wK__vZ_Fqxi1_R8_qSN_P_ZX5Fw___Y_4V_v_nGe6Rf:vwkDj__E__LWo_s_hwZt__8Qt1Z_j__fx.loh.__J6YJ_OEC____nJ_B_94Aonsiln__Q_IA8_:0Ew_3H:u_5F_8.sdJe_2H_u_xU.L_s_Q_q.6qQ_T4X_P_A_a_158fg_.t_756_dW_WF_Hs_o79puA_3U_bX__K_3hncl_e:I_0_:_40FODX_Kk__rSfL1F3_rLt:DCeD4S_VN___IMU1LA1_Y90_Z_2b______m_A8_NEUA__3a_gl_h2xAUQ2_Dv5r6s__cY0_L___c_s____V_.fhV_0_u_dJ:CYBT__spQL_wu6D1qr0bpwcX_D11S_uE_:_VgGV_EJPp_S8_EJ_U__YNaNX.X_eEKB_OteW_rl01of_5Knns_TV_xeFmCRn8_N_TQJ99U_DcY_UUw_FF_W_ER_W_GBcjEhEX_GwoM0cCZ:_e8_W_X_U.m5p_GB6_Y1vJ_w_Fkjp_8SWB4lZMcF.40B_mCKBP_D7___P_M_URq__PCV_M_wS_4f1Z3Yj5Su_.PcYV_ffLwi_NQFQ__h___QC_3O9VL_BC.:Z_JN7_8_ri_:3.p__na9_k1._2pnd_Nke__C.W_0_U__0cLvKm___Pi:v_F_w7:WPAOi__RjP67R8__IjPP3Bq__VG_djdp_ee_h_WrL__uA__dTiCv_NWhO__V_vhMI7kvV__x9r__L___Np_Wnl_2I2NaPC__.:S_r_UEPjh6bM3Yc_nJ_wp_2psaZ.hZv_kRP__1_s_e_ls_C4_58H9pvV_W___T5qE_9___d5_Ib_T_OPmb___GX_1__EPadjO9XZ__oMs_eoGdNCW_IMhl8wo__4FjE.3:PAHIH.____X_Kk_Bic_eRjv_KvX__1fgL7e_Z_lcQI_jb_JNTaPL5_7BF7s_XVsa_i__8XWT_G_sP__r48f__E5OEA:____UNT___ET_4.___XT_Aq_Q97____3kn__nAm7_iZGg9s..__ZB3Lvc9_we_54_YI_Wi4C_T_Y11s_KX__H4t_Kv_L_Q_4t_a_i1emnhxNEhZ__G_qG7KBpM_hlBAw_vnaU:_VewZTx0_AY_1fC__6LjPN_xY_q6q__O_G_5SWB_ua_g21Qb9D_5u_k6fCvXE_nbOkQg_Yo____S_2PcY:__Qn8_P:_mcZ3_9_47___QbT__11OdVcY8SuY4_:v5o:v____fP_Cclh__6__s_2PP_x6W_2_C___gV6NPOmY9I_T_L7rV_PC___LRwRDDs__rWoxqL__7iLvDGW_PIe8_Q
mov rcx, qword [rax + 0x50]
call fcn.140056650
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0xa0], xmm6
movups xmmword [rbp + 0xb0], xmm6
movups xmmword [rbp + 0xe0], xmm6
movups xmmword [rbp + 0xf0], xmm6
mov qword [rbp + 0x120], rax
mov byte [rbp + 0xac], 1
mov dword [rbp + 0xb8], 3
mov dword [rbp + 0xbc], 1
mov dword [rbp + 0xe4], 0x7f7fffff
mov dword [rbp + 0xf0], 0x3f800000
mov word [rbp + 0xf4], r12w
mov byte [rbp + 0xe8], 1
mov dword [rbp + 0xe0], 0x41500000
mov rax, qword [0x1401fe910]
mov r14, qword [rax + 0x50]
test rax, rax
je 0x14008e017
inc dword [rax + 0xec]
mov ecx, 0x286ac
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
lea rax, [0x1400facd0]
mov qword [0x1401feb00], rax
lea rdi, [rsi + 0x286ac]
mov qword [0x1401feb08], rdi
mov qword [0x1401feb10], rsi
mov qword [0x1401feb18], rsi
lea rbx, [0x1400face0]
mov rcx, rbx
call fcn.140059ea0
cmp rax, rbx
je 0x14008e07c
cmp qword [0x1401feb18], rdi
ja 0x14008e07c
mov rbx, rax
mov rcx, rax
call fcn.140059ea0
cmp rax, rbx
jne 0x14008e063
movups xmm0, xmmword [rbp + 0xa0]
movups xmmword [rsp + 0x40], xmm0
movups xmm2, xmmword [rbp + 0xb0]
movups xmm3, xmmword [rbp + 0xe0]
movups xmm4, xmmword [rbp + 0xf0]
movsd xmm1, qword [rbp + 0x120]
mov byte [rsp + 0x4c], 1
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x70], xmm6
movups xmmword [rbp - 0x80], xmm3
movups xmmword [rbp - 0x70], xmm4
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm6
movsd qword [rbp - 0x40], xmm1
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x48], 0x286ac
mov dword [rsp + 0x54], 0x41500000
lea rax, [0x14011a928]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.140056100
nop
lea rcx, [rbp + 0x130]
call fcn.1400075d0
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1400d4e20
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret