Function at 0x1400b35db
Capabilities:
Get common file path

Disassembly:
push rax
pushf
mov eax, 0x4abf085b
pushf
not eax
add eax, 0xc5e6ded0
xor eax, 0x9f0026d3
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe04c25e9
xor eax, 0xcb4fa0ea
rol eax, 0xbe
popf
cmp eax, 4
jne 0x1400b3618
popf
pop rax
jmp 0x1400b3a21
cmp eax, 0
jne 0x1400b3627
popf
pop rax
jmp 0x1400b36cc
cmp eax, 3
jne 0x1400b3636
popf
pop rax
jmp 0x1400b39db
cmp eax, 1
jne 0x1400b3645
popf
pop rax
jmp 0x1400b38d2
cmp eax, 0xa
jne 0x1400b3654
popf
pop rax
jmp 0x1400b3d5e
cmp eax, 7
jne 0x1400b3663
popf
pop rax
jmp 0x1400b3bf7
cmp eax, 6
jne 0x1400b3672
popf
pop rax
jmp 0x1400b3b65
cmp eax, 0xb
jne 0x1400b3681
popf
pop rax
jmp 0x1400b3e15
cmp eax, 0xc
jne 0x1400b3690
popf
pop rax
jmp 0x1400b3ea8
cmp eax, 8
jne 0x1400b369f
popf
pop rax
jmp 0x1400b3c2f
cmp eax, 5
jne 0x1400b36ae
popf
pop rax
jmp 0x1400b3a9f
cmp eax, 2
jne 0x1400b36bd
popf
pop rax
jmp 0x1400b3997
cmp eax, 9
jne 0x1400b36cc
popf
pop rax
jmp 0x1400b3ca9
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rcx
mov qword [rsp + 0x20], rcx
xor esi, esi
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x48], rsi
mov ecx, 0xd2f2aa23
pushf
not ecx
add ecx, 0xd1669b4f
xor ecx, 0xaff79ab1
rol ecx, 0xdb
popf
pushf
not ecx
add ecx, 0x8db555ea
xor ecx, 0xbb29369d
rol ecx, 0xbe
popf
call fcn.14009ba54
mov qword [rsp + 0x38], rax
lea rbx, [rax + 0x104]
mov qword [rsp + 0x48], rbx
xor edx, edx
mov r8d, 0xa0c07259
pushf
not r8d
add r8d, 0xf33093bb
xor r8d, 0x8c8a0ddb
rol r8d, 0x57
popf
pushf
not r8d
add r8d, 0xc02cd824
xor r8d, 0xe609fa46
rol r8d, 0x9d
popf
pushf
not r8d
add r8d, 0x8cbc91af
xor r8d, 0x9433868a
rol r8d, 0xf2
popf
pushf
not r8d
add r8d, 0xcc1a87dd
xor r8d, 0xded86783
rol r8d, 0xb0
popf
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x88dfc6a3
pushf
not ecx
add ecx, 0xe5e87843
xor ecx, 0xb4695232
rol ecx, 0xf9
popf
pushf
not ecx
add ecx, 0xea81d4f5
xor ecx, 0xcb81a099
rol ecx, 0xfa
popf
pushf
not ecx
add ecx, 0x9d4ac7be
xor ecx, 0xcc3404f7
rol ecx, 0x37
popf
jmp 0x1400b380a
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, eax
lea eax, [rcx - 1]
cmp eax, 0x102
ja 0x1400b3879
push rax
pushf
mov eax, 0x66d78bf3
pushf
not eax
add eax, 0xc7daaaad
xor eax, 0xfe12b0dd
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xbff66fde
xor eax, 0x9cf81b48
rol eax, 0xee
popf
pushf
not eax
add eax, 0x960978b0
xor eax, 0xd74bfce3
rol eax, 0xef
popf
pushf
not eax
add eax, 0xfa52fb1d
xor eax, 0xf1a86d8e
rol eax, 4
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0x5ce0d4a2
pushf
not eax
add eax, 0x83080fcf
xor eax, 0x9c65e855
rol eax, 0x83
popf
pushf
not eax
add eax, 0x8c12d5e3
xor eax, 0xc01bd3ef
rol eax, 0x59
popf
pushf
not eax
add eax, 0xbc4134a5
xor eax, 0xe5dc8f47
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xcfa92cc3
xor eax, 0xe4130a23
rol eax, 0xff
popf
jmp 0x1400b3609
mov r8d, ecx
mov rcx, qword [rsp + 0x38]
push rcx
not rcx
sub r8, rcx
pop rcx
sub r8, 1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp rcx, r8
jne 0x1400b3952
push rax
pushf
mov eax, 0x1437858d
pushf
not eax
add eax, 0xc1e33770
xor eax, 0xa8cd7506
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x85eabd7c
xor eax, 0xf26c36c9
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xb9290455
xor eax, 0xbb830f87
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xbf6633ef
xor eax, 0xb3c934c3
rol eax, 0x42
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0x1cd464b9
pushf
not eax
add eax, 0x93ce8797
xor eax, 0xac939b3a
rol eax, 1
popf
pushf
not eax
add eax, 0xdfef7f1f
xor eax, 0x9b3a9311
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xac1d3bb9
xor eax, 0xd61858ad
rol eax, 0x74
popf
jmp 0x1400b3609
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], sil
jmp 0x1400b3a21
sub r8, rcx
mov rdx, rcx
mov rcx, rdi
call fcn.140102e79
mov rcx, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x1910e6a6
pushf
not eax
add eax, 0xcdda8ae1
xor eax, 0x9c10671c
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x9f735b4a
xor eax, 0xd15a2a07
rol eax, 0
popf
jmp 0x1400b3609
test rcx, rcx
je 0x1400b3a6c
push rax
pushf
mov eax, 0x130e7ea9
pushf
not eax
add eax, 0xdfb30631
xor eax, 0x97c83971
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xa4f0947c
xor eax, 0x81c45fd2
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xca569f30
xor eax, 0x8f1df188
rol eax, 0x2b
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0x31ec3716
pushf
not eax
add eax, 0xe28e12cc
xor eax, 0xe614ffd6
rol eax, 0x17
popf
pushf
not eax
add eax, 0xfa4725a9
xor eax, 0xc89bcf16
rol eax, 0x39
popf
jmp 0x1400b3609
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3b0c
push rax
pushf
mov eax, 0x8ec26ebf
pushf
not eax
add eax, 0xfb4176af
xor eax, 0xa8ff52e5
rol eax, 0x20
popf
pushf
not eax
add eax, 0xf09d5727
xor eax, 0xc2c01073
rol eax, 0x84
popf
pushf
not eax
add eax, 0xa19c7635
xor eax, 0xca2cfc87
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xcac4a9ee
xor eax, 0xd6f4c28b
rol eax, 0xf2
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0xe74c4273
pushf
not eax
add eax, 0xd9c17890
xor eax, 0xbdef7026
rol eax, 0x62
popf
pushf
not eax
add eax, 0xfb5ee801
xor eax, 0xb32fb53d
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x82928e53
xor eax, 0x8e61f770
rol eax, 0x24
popf
pushf
not eax
add eax, 0xd0d8c9c7
xor eax, 0xfc339c1a
rol eax, 0xac
popf
jmp 0x1400b3609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3bc4
push rax
pushf
mov eax, 0x61d8674
pushf
not eax
add eax, 0x86345f14
xor eax, 0x89821153
rol eax, 0x23
popf
pushf
not eax
add eax, 0xa76915a1
xor eax, 0x9122d1ea
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xb63e0b08
xor eax, 0xa2386055
rol eax, 0x86
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0x693ed62f
pushf
not eax
add eax, 0xf38ac3ee
xor eax, 0xa884b5b3
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xa91a8875
xor eax, 0xd6f592f4
rol eax, 0xcf
popf
jmp 0x1400b3609
call fcn.1400c3971
push rax
pushf
mov eax, 0xbe706893
pushf
not eax
add eax, 0xf012fa97
xor eax, 0xf2d850a4
rol eax, 0x46
popf
pushf
not eax
add eax, 0x9db0c0f6
xor eax, 0xb7001705
rol eax, 0xc8
popf
jmp 0x1400b3609
mov rax, rdi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400e231b
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
movabs rcx, 0xdcef63d30adc07ca
pushf
not rcx
add rcx, 0x550ca183
xor rcx, 0x7f8fa1ac
rol rcx, 0xe4
popf
pushf
not rcx
add rcx, 0x4408dc1a
xor rcx, 0x48e34b71
rol rcx, 0x9b
popf
mov qword [rsp + 0x20], rcx
movabs rax, 0xc9942dfcbb959807
pushf
not rax
add rax, 0x59547cd9
xor rax, 0x4f2a88ba
rol rax, 0xf6
popf
pushf
not rax
add rax, 0x5425c3ff
xor rax, 0x63202156
rol rax, 0x31
popf
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400d995b
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400b3c2f
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3dbc
push rax
pushf
mov eax, 0x679a279f
pushf
not eax
add eax, 0xc940e9eb
xor eax, 0xb796d267
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xed702f60
xor eax, 0xd1bdbd74
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf141d103
xor eax, 0xd2d713d9
rol eax, 0x10
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0x5c9f5fc6
pushf
not eax
add eax, 0x9ccade8b
xor eax, 0xc886b953
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xc78a6221
xor eax, 0x9742b776
rol eax, 0xde
popf
pushf
not eax
add eax, 0xf0becb98
xor eax, 0x991fff13
rol eax, 0x70
popf
pushf
not eax
add eax, 0xa3b0c76d
xor eax, 0xe8994dfe
rol eax, 0xb0
popf
jmp 0x1400b3609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b3e74
push rax
pushf
mov eax, 0x966d54dd
pushf
not eax
add eax, 0xff212b48
xor eax, 0xb9cba324
rol eax, 0x76
popf
pushf
not eax
add eax, 0xfce2c828
xor eax, 0xba689bff
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x87dcfb75
xor eax, 0x9db66d89
rol eax, 0xdf
popf
jmp 0x1400b3609
push rax
pushf
mov eax, 0xfc20675
pushf
not eax
add eax, 0xae3d38dd
xor eax, 0xfa9688dd
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xd623bbd3
xor eax, 0x9abb0d39
rol eax, 0xef
popf
jmp 0x1400b3609
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3