Function at 0x140008013
Capabilities:
Get common file path

Disassembly:
push rbp
push r15
mov rax, recv
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x14000801d
sub rsp, 0x28
call fcn.140027f80
mov rcx, qword [rsp + 0xc0]
call fcn.140018e88
mov rdx, rsp
mov rcx, gethostbyname
call fcn.140028f00
mov rcx, 0x200290
call fcn.140018bda
mov rcx, 0x200291
call fcn.140018bda
sub rsp, 0x18
mov rdx, 1
mov rcx, rdx
call fcn.140018d02
lea rax, [rsp + 0x40]
push rax
xor r9, r9
mov r8, reloc.WS2_32.dll_inet_addr
mov rcx, 2
sub rsp, 0x20
call fcn.140026bd4
add rsp, 0x40
mov qword [rsp + 0x28], rax
mov rcx, 0x200292
call fcn.140018bda
push 0
push 0
pop rcx
pop rdx
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov rcx, 0x200292
call fcn.140018dbc
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x200293
call fcn.140018bda
movsxd r15, dword [rsp + 0x78]
and r15, r15
jne 0x140008132
mov rcx, 0x200294
call fcn.140018bda
movabs rcx, 0x1400661c0
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
pop rax
push rax
call fcn.140028120
pop rdx
add rax, rdx
jmp 0x14000848f
mov rcx, 0x200295
call fcn.140018bda
mov rcx, 0x200296
call fcn.140018bda
movsxd r15, dword [rsp + 0x78]
shl r15, 2
mov rax, r15
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x200297
call fcn.140018bda
movsxd rax, dword [rsp + 0x78]
inc rax
lea rdx, [rsp + 0x28]
mov rcx, rax
call fcn.140018d02
call fcn.140026d90
mov rcx, 0x200298
call fcn.140018bda
movsxd r15, dword [rsp + 0x78]
add r15, r15
mov rax, r15
push rax
mov rax, 0
mov rdx, qword [rsp + 0x30]
mov rdx, qword [rdx - 0x10]
call fcn.140018d15
mov rbp, qword [rsp + 0x30]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
movabs r10, 0x140027560
mov r11, 0
call fcn.140018dda
call fcn.140027af0
mov rcx, 0x200299
call fcn.140018bda
movsxd rax, dword [rsp + 0x78]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0x30]
mov rdx, qword [rdx - 0x10]
call fcn.140018d15
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.KERNEL32.dll_GetWindowsDirectoryW
mov rcx, 0x200299
call fcn.140018dbc
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x78], eax
mov rcx, 0x20029a
call fcn.140018bda
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rax, 0
mov rdx, qword [rsp + 0x50]
mov rdx, qword [rdx - 0x10]
call fcn.140018d15
mov rbp, qword [rsp + 0x50]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x1400277b0
mov r11, 0
call fcn.140018dda
call fcn.140027be0
add rsp, 0x28
movabs rcx, 0x1400662a8
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400281e0
mov rcx, 0x20029b
call fcn.140018bda
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x14006627e
push rax
push 1
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x14001a660
mov r11, 0
call fcn.140018dda
call fcn.14001b180
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400281e0
mov rcx, 0x20029c
call fcn.140018bda
call fcn.14001e3a8
mov r15, rax
cmp r15, 0x32
jne 0x1400083cd
mov rcx, 0x20029d
call fcn.140018bda
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
movabs rcx, str.:winnt_
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400281e0
mov rcx, 0x20029e
call fcn.140018bda
jmp 0x14000842f
mov rcx, 0x20029e
call fcn.140018bda
mov rcx, 0x20029f
call fcn.140018bda
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
movabs rcx, str.:windows_
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400281e0
mov rcx, 0x2002a0
call fcn.140018bda
mov rcx, 0x2002a1
call fcn.140018bda
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140028060
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400280b0
add rsp, 0x28
pop rax
push rax
call fcn.140028120
pop rdx
add rax, rdx
jmp 0x14000848f
push rax
push rax
sub rsp, 0x20
call fcn.140029170
add rsp, 0x20
pop rax
mov rcx, qword [rsp + 0x88]
sub rsp, 0x28
call fcn.1400281b0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.140026eb8
add rsp, 0x28
pop rax
add rsp, 0x88
pop r15
pop rbp
ret