Function at 0x140004430
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov qword [0x140101fd0], rcx
lea rcx, [0x140101fa8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rbp, [0x140101d30]
mov ecx, 0x104
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xor edi, edi
test eax, eax
jne 0x140004591
mov word [0x140101d30], di
lea rsi, [0x1400ccf5c]
mov qword [0x140101fa0], rsi
xor r13b, r13b
xor r12b, r12b
mov r15d, 1
call fcn.1400a9098
mov esi, r15d
mov ebp, dword [rax]
mov dword [rsp + 0x30], ebp
call fcn.1400a9098
cmp dword [rax], r15d
jle 0x140004696
lea r14d, [r15 + 7]
nop
mov ebp, esi
call fcn.1400a90a0
mov rcx, qword [rax]
mov rbx, qword [r14 + rcx]
test r12b, r12b
je 0x1400045fc
mov r8d, r15d
lea rdx, [0x1400ccfe8]
lea rcx, [rsp + 0x40]
call fcn.140004b70
cmp word [rsp + 0x40], 0
movsxd rbp, eax
je 0x140004b36
lea rax, [rsp + 0xb0]
mov r8, rbp
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x20], 3
lea rcx, [0x1401044f0]
call fcn.140026f90
test rax, rax
jne 0x140004572
cmp byte [rsp + 0xb0], 0
lea rdx, [rsp + 0x40]
mov r9d, dword [rsp + 0x34]
lea rcx, [0x1401044f0]
mov eax, edi
mov r8, rbp
setne al
inc eax
mov dword [rsp + 0x20], eax
call fcn.140027280
test rax, rax
je 0x140004b36
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14008c5a0
inc r15d
jmp 0x14000467f
cmp word [0x140101d30], di
je 0x140004494
or rbx, 0xffffffffffffffff
inc rbx
cmp word [rbp + rbx*2], di
jne 0x1400045a2
lea r14, [rbx + rbx]
lea rcx, [r14 + 2]
call fcn.140086210
mov rsi, rax
test rax, rax
jne 0x1400045df
mov r8, rbp
lea rdx, [0x1400e08d0]
lea rcx, [0x1401044f0]
call fcn.140036f10
mov rsi, rdi
jmp 0x14000449b
test rbx, rbx
je 0x1400045f2
mov r8, r14
mov rdx, rbp
mov rcx, rsi
call fcn.1400a7030
mov word [r14 + rsi], di
jmp 0x14000449b
lea rdx, [0x1400ccff0]
mov rcx, rbx
call fcn.1400a8ef0
test eax, eax
je 0x14000467c
lea rdx, [0x1400ccff8]
mov rcx, rbx
call fcn.1400a8ef0
test eax, eax
je 0x14000467c
lea rdx, [0x1400cd00c]
mov rcx, rbx
call fcn.1400a8ef0
test eax, eax
je 0x140004673
lea rdx, [0x1400cd018]
mov rcx, rbx
call fcn.1400a8ef0
test eax, eax
je 0x140004673
lea rdx, [0x1400cd028]
mov rcx, rbx
call fcn.1400a8ef0
test eax, eax
jne 0x140004664
mov byte [0x14010509b], 1
jmp 0x14000467f
dec esi
mov dword [rsp + 0x30], ebp
sub r14, 8
mov r12b, 1
jmp 0x140004683
mov byte [0x140101f7e], 1
jmp 0x14000467f
mov r13b, 1
mov ebp, dword [rsp + 0x30]
inc esi
add r14, 8
call fcn.1400a9098
cmp esi, dword [rax]
jl 0x1400044d0
lea rax, [rsp + 0xb0]
xor r8d, r8d
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rdx, [0x1400ccfe4]
mov dword [rsp + 0x20], 3
lea rcx, [0x1401044f0]
call fcn.140026f90
mov rcx, rax
test rax, rax
jne 0x1400046fe
cmp byte [rsp + 0xb0], cl
lea rdx, [0x1400ccfe4]
mov r9d, dword [rsp + 0x34]
lea rcx, [0x1401044f0]
mov eax, edi
setne al
xor r8d, r8d
inc eax
mov dword [rsp + 0x20], eax
call fcn.140027280
mov rcx, rax
test rcx, rcx
je 0x140004b36
lea eax, [r15 - 1]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.1400012a0
lea rax, [rsp + 0xb0]
mov r8d, 6
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
lea rdx, [0x1400cd048]
mov dword [rsp + 0x20], 0xc1
lea rcx, [0x1401044f0]
call fcn.140026f90
mov rsi, rax
test rax, rax
jne 0x140004788
cmp byte [rsp + 0xb0], sil
lea r8d, [rsi + 6]
mov r9d, dword [rsp + 0x34]
lea rdx, [0x1400cd048]
mov eax, edi
lea rcx, [0x1401044f0]
setne al
inc eax
or eax, 0xc0
mov dword [rsp + 0x20], eax
call fcn.140027280
mov rsi, rax
test rsi, rsi
je 0x140004b36
call fcn.1400a9098
mov rbx, rax
call fcn.1400a90a0
mov edx, dword [rbx]
movsxd r8, ebp
sub edx, ebp
mov rcx, qword [rax]
lea rcx, [rcx + r8*8]
call fcn.140081b30
test rax, rax
je 0x140004b36
mov rdx, rax
mov rcx, rsi
call fcn.14008c920
call fcn.1400042a0
lea rcx, [0x1401044f0]
movzx r9d, r13b
call fcn.1400191a0
cmp eax, 1
jne 0x140004b36
mov rax, qword [0x1400fda58]
lea rcx, [0x140101bd0]
mov edx, 2
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1400047f6
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
lea rcx, [0x1401044f0]
call fcn.14001a590
cmp eax, 0xffffffff
je 0x140004b36
test eax, eax
je 0x140004b32
mov eax, dword [0x140101f98]
test eax, eax
jne 0x1400048ce
cmp word [0x140102ed4], ax
jne 0x1400048c3
cmp dword [0x140102eb8], eax
jne 0x1400048c3
cmp qword [0x140101f90], 0
jne 0x1400048c3
cmp qword [0x140101f88], 0
jne 0x1400048c3
cmp byte [0x140101f7d], al
je 0x1400048ce
mov eax, 1
mov dword [0x140101f98], eax
test eax, 0xfffffffb
je 0x14000494b
test r13b, r13b
jne 0x140004954
cmp byte [0x140101f7e], r13b
jne 0x1400049f5
mov rdx, qword [0x140105090]
lea rcx, [0x1400cd058]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
test rax, rax
je 0x1400049f5
mov eax, dword [0x140101f98]
cmp eax, 3
je 0x140004b32
cmp eax, 2
je 0x140004944
mov r8, qword [0x140105078]
lea rcx, [0x1400cd070]
xorps xmm3, xmm3
mov qword [rsp + 0x20], rdi
mov edx, 4
call fcn.14008e7d0
cmp eax, 7
je 0x140004b32
mov eax, 0x407
jmp 0x140004979
test r13b, r13b
je 0x1400049f5
mov rdx, qword [0x140105090]
lea rcx, [0x1400cd058]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rsi, rax
test rax, rax
je 0x1400049f5
mov eax, 0x406
xor r9d, r9d
mov r8d, eax
mov rcx, rsi
lea edx, [r9 + 0x44]
call qword [sym.imp.USER32.dll_PostMessageW]
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400049ea
cmp ebx, 0x64
jne 0x1400049d0
xorps xmm3, xmm3
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea edx, [rbx - 0x60]
lea rcx, [0x1400cd1a0]
call fcn.14008e7d0
cmp eax, 7
je 0x140004b36
mov ebx, edi
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
inc ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1400049a6
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8, [0x140101fe8]
xor edx, edx
mov ecx, 0x2000
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x140004a2f
cmp dword [0x140101fe8], 0
je 0x140004a2f
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov ecx, 0x2001
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
lea rcx, [0x1401044f0]
call fcn.1400194b0
cmp eax, 1
jne 0x140004b36
mov ecx, eax
call fcn.1400ab450
xor r9d, r9d
mov rcx, rax
xor edx, edx
lea r8d, [r9 + 4]
call fcn.1400ab290
movsxd rax, dword [0x1400fda60]
test eax, eax
je 0x140004a97
imul rcx, rax, 0xd4
call fcn.1400a9068
mov qword [0x140101f80], rax
test rax, rax
je 0x140004a97
movsxd rcx, dword [0x1400fda60]
xor edx, edx
imul r8, rcx, 0xd4
mov rcx, rax
call fcn.1400a7e80
call fcn.14000b510
lea rax, [rsp + 0xb0]
mov byte [0x140105098], 1
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
mov dword [rsp + 0x20], 3
lea rdx, [0x1400cd230]
mov byte [0x140101f7c], 0
lea rcx, [0x1401044f0]
call fcn.140026f90
test rax, rax
jne 0x140004b10
cmp byte [rsp + 0xb0], al
lea rdx, [0x1400cd230]
mov r9d, dword [rsp + 0x34]
lea rcx, [0x1401044f0]
setne dil
xor r8d, r8d
inc edi
mov dword [rsp + 0x20], edi
call fcn.140027280
test rax, rax
je 0x140004b18
mov rcx, rax
call fcn.1400043f0
lea rcx, [0x1401044f0]
call fcn.140019db0
test eax, eax
je 0x140004b36
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.140001710
xor eax, eax
jmp 0x140004b3b
mov eax, 2
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret