Function at 0x1400f3830
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rax, qword [0x1401bb548]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r13, rdx
mov r15, rcx
mov qword [rbp - 0x61], rcx
lea rax, [0x140075e20]
mov qword [rbp - 0x11], rax
lea rcx, [0x140075e28]
mov qword [rbp - 9], rcx
lea rcx, [0x140075e38]
mov qword [rbp - 1], rcx
lea rcx, [0x140075e58]
mov qword [rbp + 7], rcx
xor r14d, r14d
mov qword [rbp + 0xf], r14
mov qword [rbp - 0x41], r14
mov r12d, 7
mov qword [rbp - 0x39], r12
mov word [rbp - 0x51], r14w
mov ebx, r14d
nop dword [rax]
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.1400f3ca0
nop
mov r8, qword [rbp - 0x21]
test r8, r8
je 0x1400f3956
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
lea rcx, [rbp - 0x51]
call fcn.1400d9ea0
cmp rbx, 2
jl 0x1400f38f7
lea rdx, [0x140075e70]
lea rcx, [rbp - 0x51]
call fcn.1400ef0d0
mov dword [rbp - 0x79], r14d
call fcn.1400ee340
mov qword [rbp - 0x71], rax
lea r8, [rbp - 0x79]
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x61]
call fcn.1400f3650
cmp dword [rax], 1
jbe 0x1400f3940
cmp dword [rbp - 0x79], 0
jne 0x1400f3940
lea r8, [rbp - 0x79]
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x59]
call fcn.1400f3650
cmp dword [rax], 3
jne 0x1400f3940
cmp dword [rbp - 0x79], 0
je 0x1400f3a0e
mov qword [rbp - 0x41], r14
lea rax, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rax, qword [rbp - 0x51]
mov word [rax], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400f3997
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3991
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3c7c
call fcn.140172530
nop
inc rbx
mov rax, qword [rbp + rbx*8 - 0x11]
test rax, rax
jne 0x1400f38b0
cmp qword [rbp - 0x41], 0
jne 0x1400f3b22
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r14
mov rbx, r14
mov rdi, r14
test eax, eax
je 0x1400f3a8b
add rsi, rsi
cmp rsi, 0x1000
jb 0x1400f3a54
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x1400f3c70
call fcn.1401724f0
test rax, rax
je 0x1400f3c82
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400f3a69
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400f39a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3a49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3c76
call fcn.140172530
nop
jmp 0x1400f39a8
test rsi, rsi
je 0x1400f3a66
mov rcx, rsi
call fcn.1401724f0
mov rbx, rax
jmp 0x1400f3a69
mov rbx, r14
mov r14, rbx
mov qword [rbp - 0x79], rbx
lea rdi, [rsi + rbx]
mov qword [rbp - 0x69], rdi
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.140174eb0
mov qword [rbp - 0x71], rdi
jmp 0x1400f3a8f
mov r14, qword [rbp - 0x79]
cmp rbx, rdi
je 0x1400f3b5e
sub rdi, rbx
mov rsi, rdi
sar rsi, 1
mov edx, esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x1400f3b61
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [r14 + r8*2], 0
jne 0x1400f3ac0
mov rdx, r14
lea rcx, [rbp - 0x51]
call fcn.1400d9ea0
lea rdx, [0x140075e70]
lea rcx, [rbp - 0x51]
call fcn.1400ef0d0
nop
test rbx, rbx
je 0x1400f3b1f
lea rdx, [rsi + rsi]
cmp rdx, 0x1000
jb 0x1400f3b16
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x1400f3c88
mov rbx, rcx
mov rcx, rbx
call fcn.140172530
nop
xor r14d, r14d
mov qword [r15 + 0x10], r14
mov qword [r15 + 0x18], r12
mov word [r15], r14w
lea rax, [rbp - 0x51]
cmp r15, rax
je 0x1400f3c03
movups xmm0, xmmword [rbp - 0x51]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbp - 0x41]
movups xmmword [r15 + 0x10], xmm1
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], r12
mov word [rbp - 0x51], r14w
jmp 0x1400f3c07
sub rdi, rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea r8, [0x140075e80]
mov rdx, r13
call fcn.1400f2c00
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], r12
mov word [r15], ax
test rbx, rbx
je 0x1400f3bc0
sar rdi, 1
lea rdx, [rdi + rdi]
cmp rdx, 0x1000
jb 0x1400f3bb7
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x1400f3c94
mov rbx, rcx
mov rcx, rbx
call fcn.140172530
nop
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x1400f3c40
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3bfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3c8e
call fcn.140172530
nop
jmp 0x1400f3c40
mov r12, qword [rbp - 0x39]
cmp r12, 8
jb 0x1400f3c40
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3c3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3c6a
call fcn.140172530
nop
mov rax, r15
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140172c20
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14010d210
nop
call fcn.14009dbf0
nop
call fcn.14010d210
nop
call fcn.14010d210
nop
call fcn.14010d210
nop
call fcn.14010d210
nop
call fcn.14010d210
nop
call fcn.14010d210
int3