Function at 0x1400030b0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x140121080]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rbx, qword [0x1401228a0]
test rbx, rbx
je 0x1400030f0
inc dword [rbx + 0xf4]
mov ecx, 0x5dd8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x37], rax
lea rcx, [rbp - 0x29]
mov qword [rbp + 0x2f], rcx
mov qword [rbp + 0xf], rax
xor r15d, r15d
test rax, rax
je 0x14000311f
xor edx, edx
mov rcx, rax
call fcn.14000dd50
jmp 0x140003122
mov rax, r15
mov qword [0x1401228a0], rax
call fcn.140012980
test rbx, rbx
je 0x14000313a
mov qword [0x1401228a0], rbx
xor ecx, ecx
call fcn.140034fe0
mov rax, qword [0x1401228a0]
test rax, rax
jne 0x14000316e
mov r8d, 0xb52
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401228a0]
mov dword [rax + 0x3828], 0x3f800000
mov dword [rax + 0x386c], 0x3f800000
mov dword [rax + 0x3800], 0x3f000000
mov dword [rax + 0x37e8], 0x40a00000
mov dword [rax + 0x37ec], 0x40a00000
mov dword [rax + 0x37f0], 0x40800000
mov dword [rax + 0x381c], 0x40c00000
mov dword [rax + 0x3820], 0x40c00000
mov dword [rax + 0x3824], 0x40000000
mov dword [rax + 0x382c], 0x41400000
mov dword [rax + 0x3830], 0x41000000
mov dword [rax + 0x3834], 0x41000000
mov dword [rax + 0x3838], 0x40c00000
mov dword [rax + 0x384c], 0x41c80000
mov dword [rax + 0x3854], 0x41700000
mov dword [rax + 0x3858], 0x41100000
mov dword [rax + 0x385c], 0x41a00000
mov dword [rax + 0x3860], 0x40400000
movaps xmm0, xmmword [0x14010b410]
movups xmmword [rax + 0x38a8], xmm0
movaps xmm1, xmmword [0x14010b320]
movups xmmword [rax + 0x38b8], xmm1
movaps xmm0, xmmword [0x14010b2e0]
movups xmmword [rax + 0x38c8], xmm0
movaps xmm1, xmm0
movups xmmword [rax + 0x38d8], xmm0
movups xmmword [rax + 0x38e8], xmm0
movaps xmm1, xmmword [0x14010b2a0]
movups xmmword [rax + 0x38f8], xmm1
movaps xmm0, xmmword [0x14010b070]
movups xmmword [rax + 0x3908], xmm0
movaps xmm1, xmmword [0x14010b2e0]
movups xmmword [rax + 0x3918], xmm1
movaps xmm0, xmmword [0x14010b320]
movups xmmword [rax + 0x3928], xmm0
movaps xmm1, xmmword [0x14010b350]
movups xmmword [rax + 0x3938], xmm1
movaps xmm0, xmmword [0x14010b300]
movups xmmword [rax + 0x3948], xmm0
movaps xmm1, xmmword [0x14010b380]
movups xmmword [rax + 0x3958], xmm1
movaps xmm0, xmmword [0x14010b220]
movups xmmword [rax + 0x3968], xmm0
movaps xmm1, xmmword [0x14010b300]
movups xmmword [rax + 0x3978], xmm1
movaps xmm0, xmm1
movups xmmword [rax + 0x3988], xmm1
movaps xmm1, xmmword [0x14010b1c0]
movups xmmword [rax + 0x3998], xmm1
movaps xmm0, xmmword [0x14010b3b0]
movups xmmword [rax + 0x39a8], xmm0
movaps xmm1, xmmword [0x14010b3a0]
movups xmmword [rax + 0x39b8], xmm1
movaps xmm0, xmmword [0x14010b3c0]
movups xmmword [rax + 0x39c8], xmm0
movaps xmm1, xmmword [0x14010b3b0]
movups xmmword [rax + 0x39d8], xmm1
movaps xmm0, xmmword [0x14010b370]
movups xmmword [rax + 0x39e8], xmm0
movaps xmm1, xmmword [0x14010b3a0]
movups xmmword [rax + 0x39f8], xmm1
movaps xmm0, xmmword [0x14010b3f0]
movups xmmword [rax + 0x3a08], xmm0
movaps xmm1, xmmword [0x14010b400]
movups xmmword [rax + 0x3a18], xmm1
movaps xmm0, xmmword [0x14010b300]
movups xmmword [rax + 0x3a28], xmm0
movaps xmm1, xmmword [0x14010b350]
movups xmmword [rax + 0x3a38], xmm1
movaps xmm0, xmmword [0x14010b2f0]
movups xmmword [rax + 0x3a48], xmm0
movaps xmm1, xmmword [0x14010b3d0]
movups xmmword [rax + 0x3a58], xmm1
movaps xmm0, xmmword [0x14010b360]
movups xmmword [rax + 0x3a68], xmm0
movaps xmm1, xmmword [0x14010b390]
movups xmmword [rax + 0x3a78], xmm1
movaps xmm0, xmmword [0x14010b3e0]
movups xmmword [rax + 0x3a88], xmm0
movaps xmm1, xmmword [0x14010b350]
movups xmmword [rax + 0x3a98], xmm1
movaps xmm0, xmmword [0x14010b2f0]
movups xmmword [rax + 0x3aa8], xmm0
movaps xmm1, xmmword [0x14010b280]
movups xmmword [rax + 0x3ab8], xmm1
movaps xmm0, xmmword [0x14010b240]
movups xmmword [rax + 0x3ac8], xmm0
movaps xmm1, xmmword [0x14010b270]
movups xmmword [rax + 0x3ad8], xmm1
movaps xmm0, xmmword [0x14010b250]
movups xmmword [rax + 0x3ae8], xmm0
movaps xmm1, xmmword [0x14010b260]
movups xmmword [rax + 0x3af8], xmm1
movaps xmm0, xmmword [0x14010b1f0]
movups xmmword [rax + 0x3b08], xmm0
movaps xmm1, xmmword [0x14010b2d0]
movups xmmword [rax + 0x3b18], xmm1
movups xmmword [rax + 0x3b28], xmm0
movups xmmword [rax + 0x3b38], xmm1
movaps xmm0, xmmword [0x14010b330]
movups xmmword [rax + 0x3b48], xmm0
movaps xmm1, xmmword [0x14010b340]
movups xmmword [rax + 0x3b58], xmm1
movaps xmm0, xmmword [0x14010b310]
movups xmmword [rax + 0x3b68], xmm0
xorps xmm1, xmm1
movups xmmword [rax + 0x3b78], xmm1
movaps xmm0, xmmword [0x14010b190]
movups xmmword [rax + 0x3b88], xmm0
movaps xmm1, xmmword [0x14010b1e0]
movups xmmword [rax + 0x3b98], xmm1
movaps xmm0, xmmword [0x14010b290]
movups xmmword [rax + 0x3ba8], xmm0
movaps xmm1, xmmword [0x14010b230]
movups xmmword [rax + 0x3bb8], xmm1
movaps xmm0, xmmword [0x14010b200]
movups xmmword [rax + 0x3bc8], xmm0
movaps xmm1, xmmword [0x14010b1b0]
movups xmmword [rax + 0x3bd8], xmm1
movaps xmm0, xmmword [0x14010b210]
movups xmmword [rax + 0x3be8], xmm0
mov qword [rbp + 0x17], r15
lea r9, [rbp + 0x17]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400ebf90]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov rsi, 0xffffffffffffffff
mov r9d, esi
mov r8, qword [rbp + 0x17]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov rcx, rbx
call fcn.1400e51d0
mov rdi, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8, qword [rbp + 0x17]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rbp + 0x17]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
lea rsi, [rsi + 1]
cmp byte [rdi + rsi], 0
jne 0x140003570
lea rcx, [rsi + 0x25]
call fcn.1400e51d0
mov rsi, rax
mov rdx, rax
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rdi]
mov byte [rdi + rdx], cl
lea rdi, [rdi + 1]
test cl, cl
jne 0x140003590
lea rcx, [rax - 1]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400035a2
movups xmm0, xmmword [str.AppDataLocalSodium_astriumwep.ttf]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x1400f9a60]
movups xmmword [rcx + 0x10], xmm1
mov eax, dword [0x1400f9a70]
mov dword [rcx + 0x20], eax
movzx eax, byte [0x1400f9a74]
mov byte [rcx + 0x24], al
mov rbx, qword [0x1401228a0]
test rbx, rbx
jne 0x140003600
mov r8d, 0xfc3
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1401228a0]
movss xmm2, dword [0x14010af1c]
lea rdx, str.C:WindowsFontsTahoma.ttf
mov rcx, qword [rbx + 0x58]
call fcn.14003a630
mov rcx, qword [0x140122d40]
mov qword [rcx], rax
movss xmm2, dword [0x14010af3c]
mov rdx, rsi
mov rcx, qword [rbx + 0x58]
call fcn.14003a630
mov rcx, qword [0x140122d40]
mov qword [rcx + 8], rax
mov rax, qword [0x140122d40]
mov dword [rax + 0x10], 0x41c00000
mov rsi, qword [0x140122c90]
mov rdi, qword [0x1401228a0]
test rdi, rdi
jne 0x140003683
mov r8d, 0xfc3
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x1401228a0]
cmp qword [rdi + 0x98], 0
je 0x1400036a7
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp + 0x2f]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000380a
lea rcx, [rbp + 0x37]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14000380a
mov rax, qword [0x1401228a0]
test rax, rax
je 0x1400036dd
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14000370a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov qword [rbx + 0x40], rax
jmp 0x14000370d
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_win32
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 6
mov qword [rbx], rsi
mov rax, qword [rbp + 0x2f]
mov qword [rbx + 0x20], rax
mov rax, qword [rbp + 0x37]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x28], 9
mov rdi, qword [0x1401228a0]
cmp dword [rdi + 0x4870], 0
jg 0x14000376a
mov r8d, 0x6fa
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4878]
mov rcx, qword [rax]
mov qword [rcx + 0x28], rsi
mov byte [rbx + 0x2d], 1
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x19], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x11], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 9], rax
lea rax, str.xinput1_2.dll
mov qword [rbp - 1], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 7], rax
mov rdi, r15
nop word [rax + rax]
mov rcx, qword [rbp + rdi*8 - 0x19]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x1400037de
inc rdi
cmp rdi, 5
jl 0x1400037c0
jmp 0x14000380a
mov qword [rbx + 0x30], rsi
lea rdx, str.XInputGetCapabilities
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
mov r14, qword [0x140122cf0]
mov rsi, qword [0x140122ce8]
mov rax, qword [0x1401228a0]
test rax, rax
jne 0x140003845
mov r8d, 0xfc3
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401228a0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], 0
je 0x140003874
mov r8d, 0x221
lea rdx, str.D:projects_nvidia_overlay_hijack_18775c0fcc6df97f0004cd1d0b42fcd53251a993_aio_overlaylibimguiimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401228a0]
test rax, rax
je 0x14000387f
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400038c0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400038c3
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
or dword [rdi + 4], 8
mov qword [rbp + 0x1f], r15
mov qword [rbp + 0x27], r15
mov qword [rbp + 0xf], r15
mov rax, qword [rsi]
lea r8, [rbp + 0x1f]
lea rdx, [0x140105d50]
mov rcx, rsi
call qword [rax]
test eax, eax
jne 0x140003940
mov rcx, qword [rbp + 0x1f]
mov rax, qword [rcx]
lea r8, [rbp + 0x27]
lea rdx, [0x140105d60]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140003940
mov rcx, qword [rbp + 0x27]
mov rax, qword [rcx]
lea r8, [rbp + 0xf]
lea rdx, [0x140105d70]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140003940
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0xf]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x14000394f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x14000395e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400e4d60
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret