Function at 0x14003c270
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140150a10]
xor rax, rsp
mov qword [rbp + 0xd8], rax
mov r14, rdx
mov qword [rsp + 0x38], rdx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rax
movdqu xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm0
movdqu xmmword [rbp], xmm0
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x10]
lea rdx, [rbp]
lea rcx, [rbp + 0xb8]
call fcn.140078a20
nop
xor r15d, r15d
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], 7
mov word [rbp + 0x98], r15w
lea r8d, [r15 + 0x18]
lea rdx, str.__ModuleCore.InstallDir_
lea rcx, [rbp + 0x98]
call fcn.14000de60
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xb8]
call fcn.14007b9c0
test al, al
jne 0x14003c550
mov qword [rbp + 0x90], r15
lea r9, [rbp + 0x90]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140105f00]
call sub.SHELL32.dll_SHGetKnownFolderPath
mov rbx, qword [rbp + 0x90]
mov qword [rbp + 0xd0], rbx
test eax, eax
js 0x14003c4e3
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
lea r8d, [r15 + 0x12]
lea rdx, str.McAfeeModuleCore
lea rcx, [rsp + 0x60]
call fcn.14000de60
nop
lea r8, [rsp + 0x60]
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x10]
call fcn.14001f7c0
mov rdi, rax
lea rax, [rbp + 0x98]
cmp rax, rdi
je 0x14003c450
mov rdx, qword [rbp + 0xb0]
cmp rdx, 8
jb 0x14003c410
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c40b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9a5
call fcn.1400ab6e0
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], 7
mov word [rbp + 0x98], r15w
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003c490
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c48b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9a5
call fcn.1400ab6e0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14003c4e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c4de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9ab
call fcn.1400ab6e0
mov ecx, 6
call fcn.14009c140
test eax, eax
je 0x14003c542
lea rax, [rbp + 0x98]
cmp qword [rbp + 0xb0], 8
cmovae rax, qword [rbp + 0x98]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rax, str.Got_ModuleCore_Path_by_force_from_path:__s
mov qword [rsp + 0x20], rax
mov r9d, 0x1c3
lea r8, str.Intel::ProcessHosting::GetModCoreFullPath
lea rdx, str.E:BT84f93cf4_3aa9_4a85_9be2_79e782bf7724WSSModularizationCore_srcModuleCoreServiceModuleCoreServiceImplProcessHostingProcessHosting.cpp
mov ecx, 6
call fcn.14000aaa0
nop
test rbx, rbx
je 0x14003c550
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov r8d, 1
lea rdx, [0x1401261c4]
lea rcx, [rbp - 0x40]
call fcn.14000de60
nop
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov r8d, 0x15
lea rdx, [0x14011a198]
lea rcx, [rbp - 0x60]
call fcn.14000de60
nop
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov r8d, 1
lea rdx, [0x1401252d8]
lea rcx, [rbp - 0x80]
call fcn.14000de60
nop
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
mov r8d, 1
lea rdx, [0x1401261c4]
lea rcx, [rsp + 0x40]
call fcn.14000de60
nop
mov rdi, qword [rbp + 0xa8]
lea r9, [rbp + 0x98]
cmp qword [rbp + 0xb0], 8
cmovae r9, qword [rbp + 0x98]
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14003c670
lea rax, [rsi + rdi]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x40]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.1400ada20
lea rax, [rdi + rsi]
mov word [rbx + rax*2], r15w
lea rax, [rsp + 0x40]
jmp 0x14003c688
mov qword [rsp + 0x20], rdi
movzx r8d, byte [rsp + 0x30]
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.14000fc90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea r9, [rbp - 0x80]
lea r8, [rbp + 0x30]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x70]
call fcn.14003ca80
nop
lea r9, [rbp - 0x60]
lea r8, [rbp + 0x70]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.14003ca80
nop
lea r9, [rbp - 0x40]
lea r8, [rbp + 0x50]
movzx edx, byte [rsp + 0x30]
mov rcx, r14
call fcn.14003ca80
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 8
jb 0x14003c72c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c726
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9b1
call fcn.1400ab6e0
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x14003c770
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c76a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9b7
call fcn.1400ab6e0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x14003c7b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c7ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9bd
call fcn.1400ab6e0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003c7f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c7ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9c3
call fcn.1400ab6e0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14003c848
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c842
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9c9
call fcn.1400ab6e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14003c889
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c883
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9cf
call fcn.1400ab6e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14003c8ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c8c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c9d5
call fcn.1400ab6e0
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 8
jb 0x14003c910
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c90b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c99f
call fcn.1400ab6e0
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], 7
mov word [rbp + 0x98], r15w
mov rbx, qword [rbp + 0xc8]
test rbx, rbx
je 0x14003c970
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14003c970
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14005c601.0]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14003c970
mov rdx, qword [rbx]
mov rcx, rbx
mov rax, qword [rdx + 8]
call qword [case.0x14005c601.0]
mov rax, r14
mov rcx, qword [rbp + 0xd8]
xor rcx, rsp
call fcn.1400ab6c0
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
nop
call fcn.1400b2bb8
int3