Function at 0x140066774
Capabilities:
Get common file path
Set current directory

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2240
call fcn.1400fe810
sub rsp, rax
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0x2290], rbx
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x2230], rax
mov rax, rdx
mov r15, rcx
xor r12d, r12d
cmp rdx, r12
jne 0x1400667c6
mov rbx, r12
jmp 0x1400667e4
mov r8d, 0x400
lea rdx, [rsp + 0xe30]
mov rcx, rax
call fcn.14006885c
lea rbx, [rsp + 0xe30]
lea rcx, str.MAPI32.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbp, rax
mov qword [rsp + 0x48], rax
cmp rax, r12
jne 0x140066805
xor al, al
jmp 0x140066be6
lea rdx, str.MAPISendMail
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [rsp + 0x50], rax
lea rdx, str.MAPIResolveName
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [rsp + 0x38], rax
lea rdx, str.MAPIFreeBuffer
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
cmp rsi, r12
je 0x140066bdb
cmp rdi, r12
je 0x140066bdb
cmp rax, r12
je 0x140066bdb
cmp rbx, r12
je 0x140066881
cmp byte [rbx], 0x2e
jne 0x140066881
mov byte [rsp + 0x30], 1
inc rbx
mov al, byte [rbx]
neg al
sbb rcx, rcx
and rbx, rcx
jmp 0x140066886
mov byte [rsp + 0x30], r12b
xor ecx, ecx
call fcn.1400665ac
lea rdx, [rsp + 0x1230]
mov edi, 0x800
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov r8, rdi
lea rdx, [rsp + 0x630]
mov rcx, r15
call fcn.14006885c
mov dl, 1
lea rcx, [rsp + 0x630]
call fcn.14005141c
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x110]
mov edx, 0x104
lea rcx, [rsp + 0x630]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rsp + 0x78]
call fcn.1400ea880
or dword [rsp + 0x80], 0xffffffff
lea rax, [rsp + 0x110]
mov qword [rsp + 0x88], rax
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x90], rdi
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rsp + 0xb0]
call fcn.1400ea880
mov dword [rsp + 0x100], 1
lea rax, [rsp + 0x78]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xb8], rdi
mov r13, r12
mov qword [rsp + 0x58], r12
mov rsi, r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
cmp rbx, r12
je 0x140066b23
mov rsi, rbx
mov rbp, qword [rsp + 0x38]
mov edx, 1
lea rcx, [rsp + 0x58]
call fcn.140066640
mov edx, dword [rsp + 0xf0]
lea rax, [rdx + rdx*4]
mov r13, qword [rsp + 0x58]
lea r12, [r13 + rax*8]
xor edx, edx
lea r8d, [rdx + 0x28]
mov rcx, r12
call fcn.1400ea880
lea rdx, [rsp + 0x220]
mov eax, dword [str.SMTP:]
mov dword [rdx], eax
movzx eax, word [0x14010e3d8]
mov word [rdx + 4], ax
lea rdi, [rsp + 0x220]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor ecx, ecx
mov al, byte [rsi + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x1400669de
lea rdx, [0x14010e3d0]
mov rcx, rsi
call fcn.1400eea6c
mov rsi, rax
xor edi, edi
cmp rax, rdi
je 0x140066a15
inc rsi
movsx ecx, byte [rsi]
call fcn.140065a14
cmp al, dil
jne 0x140066a05
lea rdx, [0x14010e3d0]
lea rcx, [rsp + 0x220]
call fcn.1400eea6c
cmp rax, rdi
je 0x140066a31
mov byte [rax], dil
mov dword [r12 + 4], 1
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9d, 1
lea r8, [rsp + 0x225]
xor edx, edx
xor ecx, ecx
call rbp
cmp eax, edi
jne 0x140066aec
mov rax, qword [rsp + 0x38]
mov ecx, dword [rax]
mov dword [r12], ecx
mov rax, qword [rsp + 0x38]
cmp qword [rax + 8], rdi
je 0x140066a8d
mov rcx, qword [rax + 8]
call fcn.1400fc280
mov qword [r12 + 8], rax
mov rax, qword [rsp + 0x38]
cmp qword [rax + 0x10], rdi
je 0x140066aa6
mov rcx, qword [rax + 0x10]
call fcn.1400fc280
mov qword [r12 + 0x10], rax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x18]
mov dword [r12 + 0x18], eax
mov rcx, qword [rsp + 0x38]
cmp qword [rcx + 0x20], rdi
je 0x140066ae7
mov eax, dword [rcx + 0x18]
cmp eax, edi
je 0x140066ae7
mov rcx, rax
call fcn.1400ea464
mov qword [r12 + 0x20], rax
mov rdx, qword [rsp + 0x38]
mov r8d, dword [rdx + 0x18]
mov rdx, qword [rdx + 0x20]
mov rcx, rax
call fcn.1400ea530
mov rcx, qword [rsp + 0x38]
call r14
jmp 0x140066afe
lea rcx, [rsp + 0x220]
call fcn.1400fc280
mov qword [r12 + 0x10], rax
inc dword [rsp + 0xf0]
xor r12d, r12d
cmp rsi, r12
jne 0x14006697f
mov qword [rsp + 0xf8], r13
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x48]
neg rbx
sbb r9d, r9d
and r9d, 0xfffffff8
add r9d, 9
mov dword [rsp + 0x20], r12d
lea r8, [rsp + 0xb0]
xor edx, edx
xor ecx, ecx
call qword [rsp + 0x50]
cmp eax, r12d
sete bl
cmp rsi, r12
jbe 0x140066b88
lea rdi, [r13 + 0x10]
mov rcx, qword [rdi - 8]
cmp rcx, r12
je 0x140066b63
call fcn.1400e9aa4
mov rcx, qword [rdi]
cmp rcx, r12
je 0x140066b70
call fcn.1400e9aa4
mov rcx, qword [rdi + 0x10]
cmp rcx, r12
je 0x140066b7e
call fcn.1400e9aa4
add rdi, 0x28
sub rsi, 1
jne 0x140066b55
lea rcx, [rsp + 0x1230]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov cl, 1
call fcn.1400665ac
cmp bl, r12b
je 0x140066bbc
cmp byte [rsp + 0x30], r12b
je 0x140066bca
mov rcx, r15
call fcn.140042188
jmp 0x140066bca
mov rdx, r15
mov ecx, 0x4b
call fcn.140023e28
nop
cmp r13, r12
je 0x140066bd7
mov rcx, r13
call fcn.1400e9aa4
mov al, bl
jmp 0x140066be6
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor al, al
mov rcx, qword [rsp + 0x2230]
xor rcx, rsp
call fcn.1400e9d00
mov rbx, qword [rsp + 0x2290]
add rsp, 0x2240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret