Function at 0x140117d76
Capabilities:
Get common file path

Disassembly:
push rax
pushf
mov eax, 0xa3932e0a
pushf
not eax
add eax, 0xc13688bb
xor eax, 0xe8d7adf0
rol eax, 0x60
popf
pushf
not eax
add eax, 0xae155920
xor eax, 0x8e493e9f
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xb368dc29
xor eax, 0xaffa4634
rol eax, 0xe
popf
cmp eax, 4
jne 0x140117dc6
popf
pop rax
jmp 0x1401181ef
cmp eax, 0
jne 0x140117dd5
popf
pop rax
jmp 0x140117e98
cmp eax, 3
jne 0x140117de4
popf
pop rax
jmp 0x140118196
cmp eax, 1
jne 0x140117df3
popf
pop rax
jmp 0x14011809c
cmp eax, 0xd
jne 0x140117e02
popf
pop rax
jmp 0x1401186ee
cmp eax, 7
jne 0x140117e11
popf
pop rax
jmp 0x140118313
cmp eax, 0xe
jne 0x140117e20
popf
pop rax
jmp 0x140118781
cmp eax, 0xb
jne 0x140117e2f
popf
pop rax
jmp 0x1401185a2
cmp eax, 0xc
jne 0x140117e3e
popf
pop rax
jmp 0x140118637
cmp eax, 8
jne 0x140117e4d
popf
pop rax
jmp 0x14011835e
cmp eax, 5
jne 0x140117e5c
popf
pop rax
jmp 0x14011825a
cmp eax, 2
jne 0x140117e6b
popf
pop rax
jmp 0x14011814f
cmp eax, 9
jne 0x140117e7a
popf
pop rax
jmp 0x1401183b3
cmp eax, 0xa
jne 0x140117e89
popf
pop rax
jmp 0x14011851f
cmp eax, 6
jne 0x140117e98
popf
pop rax
jmp 0x1401182fa
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140083080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rdi, rcx
mov qword [rsp + 0x20], rcx
xor esi, esi
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x48], rsi
mov ecx, 0xab562d5c
pushf
not ecx
add ecx, 0x9eca4a14
xor ecx, 0xe8353c21
rol ecx, 0xa3
popf
pushf
not ecx
add ecx, 0xa21edc88
xor ecx, 0xbaeae66b
rol ecx, 0x73
popf
pushf
not ecx
add ecx, 0xb278f35c
xor ecx, 0xb5757e01
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0xfde52c04
xor ecx, 0xaa336313
rol ecx, 0x6a
popf
call fcn.14010a164
mov qword [rsp + 0x38], rax
lea rbx, [rax + 0x104]
mov qword [rsp + 0x48], rbx
xor edx, edx
mov r8d, 0x5c7de3e1
pushf
not r8d
add r8d, 0xefea70fa
xor r8d, 0x9d13d1a6
rol r8d, 0x24
popf
pushf
not r8d
add r8d, 0xce233489
xor r8d, 0x90851b11
rol r8d, 0xfa
popf
pushf
not r8d
add r8d, 0xb7d6975c
xor r8d, 0xd9dbf58d
rol r8d, 0xad
popf
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x40], rbx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x9e55ad30
pushf
not ecx
add ecx, 0x9b84d49b
xor ecx, 0xc884f9f7
rol ecx, 0x13
popf
pushf
not ecx
add ecx, 0x91fbc6a4
xor ecx, 0xdb938a6b
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0xb6b56501
xor ecx, 0x845fdc30
rol ecx, 0xd4
popf
jmp 0x140117fe7
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, eax
lea eax, [rcx - 1]
cmp eax, 0x102
ja 0x140118056
push rax
pushf
mov eax, 0x5852a25d
pushf
not eax
add eax, 0xb3c8efbe
xor eax, 0x985adb52
rol eax, 0x30
popf
pushf
not eax
add eax, 0xc848e41f
xor eax, 0xac1eb1fd
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xbb4d7222
xor eax, 0xbf370592
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe2cedd13
xor eax, 0xa3ad7b4b
rol eax, 0x81
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x496adb34
pushf
not eax
add eax, 0x86460052
xor eax, 0xe2c72c42
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa6c9fcd3
xor eax, 0xe67d61db
rol eax, 0xca
popf
pushf
not eax
add eax, 0x8845fb06
xor eax, 0xfac2a766
rol eax, 0xdc
popf
jmp 0x140117db7
mov r8d, ecx
mov rcx, qword [rsp + 0x38]
push rcx
not rcx
sub r8, rcx
pop rcx
sub r8, 1
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp rcx, r8
jne 0x140118109
push rax
pushf
mov eax, 0xb724ae53
pushf
not eax
add eax, 0xf67a0ebc
xor eax, 0x88f7206d
rol eax, 0x78
popf
pushf
not eax
add eax, 0x8f6c1a12
xor eax, 0xb9597cdd
rol eax, 0x68
popf
pushf
not eax
add eax, 0x85ba32d7
xor eax, 0xd8af26a6
rol eax, 0x83
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x38d3ce90
pushf
not eax
add eax, 0xfb1ccc0b
xor eax, 0xf3abc55e
rol eax, 0x43
popf
pushf
not eax
add eax, 0xa27998ad
xor eax, 0xdafa3986
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf1f58c86
xor eax, 0xc75dd44e
rol eax, 0x46
popf
jmp 0x140117db7
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], sil
jmp 0x1401181ef
sub r8, rcx
mov rdx, rcx
mov rcx, rdi
call fcn.140121a84
mov rcx, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xf3ed2f9
pushf
not eax
add eax, 0xda6ba6a7
xor eax, 0xd0b756a5
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd82b6dac
xor eax, 0xca101ac6
rol eax, 0x98
popf
pushf
not eax
add eax, 0xf2b94d7e
xor eax, 0xad5aeef2
rol eax, 0x52
popf
jmp 0x140117db7
test rcx, rcx
je 0x140118227
push rax
pushf
mov eax, 0xe56de44
pushf
not eax
add eax, 0xbffc297c
xor eax, 0xfd6b2f86
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xce6d779a
xor eax, 0xe22262cd
rol eax, 0x27
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x2897aff3
pushf
not eax
add eax, 0x811ed902
xor eax, 0xfd6ecc23
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9af2724c
xor eax, 0xe6b535a6
rol eax, 0xac
popf
jmp 0x140117db7
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401182b4
push rax
pushf
mov eax, 0xcf4fb559
pushf
not eax
add eax, 0xbddee2d5
xor eax, 0xca9847b5
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xb2ebe12e
xor eax, 0xf0fd02ea
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb2f0264b
xor eax, 0xe8a71798
rol eax, 0x2f
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0xb8d5c75e
pushf
not eax
add eax, 0xd692fef5
xor eax, 0x898fa0c5
rol eax, 0x93
popf
pushf
not eax
add eax, 0xaaeb0f6a
xor eax, 0xf1dcaa8d
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcf39f745
xor eax, 0x9479eab2
rol eax, 0x7e
popf
jmp 0x140117db7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140118781
call fcn.14011ca1a
push rax
pushf
mov eax, 0x3519b2f3
pushf
not eax
add eax, 0x967e776c
xor eax, 0x9293c6c9
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xc43c8da6
xor eax, 0x882b39c1
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xb75c54e1
xor eax, 0xa4febe65
rol eax, 0x9f
popf
jmp 0x140117db7
mov rax, rdi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401278d0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
movabs rcx, 0xde55a3cd53c0d20f
pushf
not rcx
add rcx, 0x4da0f474
xor rcx, 0x5541d64c
rol rcx, 0xe2
popf
pushf
not rcx
add rcx, 0x588c3352
xor rcx, 0x738ea948
rol rcx, 0x66
popf
pushf
not rcx
add rcx, 0x4d7909c2
xor rcx, 0x56697e0f
rol rcx, 0xe3
popf
pushf
not rcx
add rcx, 0x481e39bc
xor rcx, 0x6e38148a
rol rcx, 0x1a
popf
mov qword [rsp + 0x20], rcx
movabs rax, 0x9a17169a10c9e7b6
pushf
not rax
add rax, 0x7f019650
xor rax, 0x6f6495e9
rol rax, 0xb1
popf
pushf
not rax
add rax, 0x7133acbb
xor rax, 0x42297e8e
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x65a4bd75
xor rax, 0x5b6f15a0
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x6a9e5b8b
xor rax, 0x7ea6d447
rol rax, 0xd7
popf
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
lea rax, [rsp + 0x20]
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0xd8b931d8
pushf
not eax
add eax, 0x9308a260
xor eax, 0xde148a92
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8f96252f
xor eax, 0xbeb35172
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x948fd3e9
xor eax, 0xeb7f6932
rol eax, 0xec
popf
pushf
not eax
add eax, 0xb006feb6
xor eax, 0xc17f6588
rol eax, 0x69
popf
jmp 0x140117db7
inc r8
cmp byte [rax + r8], 0
jne 0x14011856f
push rax
pushf
mov eax, 0xfa9ef24a
pushf
not eax
add eax, 0x817b93be
xor eax, 0xe8f7cfa1
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xda05d576
xor eax, 0xe138613f
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc84ffb8d
xor eax, 0xc6c00d98
rol eax, 0xe5
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x383dbdd0
pushf
not eax
add eax, 0xfc3374b7
xor eax, 0xdeb3a464
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xb1780b51
xor eax, 0x8c7380c4
rol eax, 0x55
popf
jmp 0x140117db7
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.140121a84
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140118604
push rax
pushf
mov eax, 0xd76199c7
pushf
not eax
add eax, 0xbf8fe831
xor eax, 0x8cbf6c4e
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xd31d7427
xor eax, 0xaa7b8beb
rol eax, 0xc
popf
pushf
not eax
add eax, 0xd08430d2
xor eax, 0xabecd24a
rol eax, 0x30
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x3a3d3aaa
pushf
not eax
add eax, 0xc8e812d3
xor eax, 0x87e53ce4
rol eax, 0xac
popf
pushf
not eax
add eax, 0xf40af49b
xor eax, 0xe5be3406
rol eax, 0x27
popf
jmp 0x140117db7
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140118695
push rax
pushf
mov eax, 0x6c197042
pushf
not eax
add eax, 0xdd355afc
xor eax, 0xeff202e6
rol eax, 0x30
popf
pushf
not eax
add eax, 0x82421384
xor eax, 0xc1d5919c
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb1c1978e
xor eax, 0xab68ffa8
rol eax, 0x53
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0x584bf7e6
pushf
not eax
add eax, 0xd6e20178
xor eax, 0xf57fae5a
rol eax, 0x76
popf
pushf
not eax
add eax, 0xf9e45544
xor eax, 0xd970e57c
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xc8ad8522
xor eax, 0x86b3482e
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd1721b54
xor eax, 0xc0115d3d
rol eax, 0x82
popf
jmp 0x140117db7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14011874d
push rax
pushf
mov eax, 0x1ecfdb14
pushf
not eax
add eax, 0xd479fce6
xor eax, 0xfec98b57
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xe8ceb2ec
xor eax, 0x9a016a1c
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe871e800
xor eax, 0xd9675150
rol eax, 0x75
popf
jmp 0x140117db7
push rax
pushf
mov eax, 0xa16d8b8a
pushf
not eax
add eax, 0xfbeaa638
xor eax, 0xd0dfb0d5
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf9f32707
xor eax, 0xb4a1d12a
rol eax, 0x5b
popf
jmp 0x140117db7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3