Function at 0x140007e24
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x778]
sub rsp, 0x860
mov rax, qword [0x14006f5c0]
xor rax, rsp
mov qword [rbp + 0x750], rax
xor eax, eax
mov rsi, rcx
lea r15d, [rax + 1]
lock cmpxchg qword [0x1400707e0], r15
cmp rax, 2
je 0x140007e96
xor ebx, ebx
cmp rax, r15
jne 0x140007e80
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007e85
test rax, rax
je 0x140007ec9
xor eax, eax
lock cmpxchg qword [0x1400707e0], r15
cmp rax, 2
jne 0x140007e71
mov ebx, 0xb7
mov eax, ebx
mov rcx, qword [rbp + 0x750]
xor rcx, rsp
call fcn.1400408d0
lea r11, [rsp + 0x860]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
cmp qword [0x1400707e8], rbx
jne 0x140007fa2
lea rcx, str.dbghelp.dll
call fcn.140041bf4
mov rdi, rax
test rax, rax
jne 0x140007ef7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140008111
lea rdx, str.MiniDumpWriteDump
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400707e8], rax
test rax, rax
jne 0x140007f29
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x140008111
lea r8, [rsp + 0x40]
mov rdx, rdi
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140007ad0
test eax, eax
jne 0x140007fa2
mov eax, dword [rsp + 0x3c]
mov ecx, 0x60000
cmp eax, ecx
jae 0x140007f66
mov dword [0x14006f5d4], 0x7ff
jmp 0x140007fa2
je 0x140007f98
cmp eax, 0x60001
je 0x140007f8c
add eax, 0xfff9fffe
mov ecx, 0x7fffff
cmp eax, r15d
mov edx, 0x1fffff
cmovbe ecx, edx
mov dword [0x14006f5d4], ecx
jmp 0x140007fa2
mov dword [0x14006f5d4], 0x7ffff
jmp 0x140007fa2
mov dword [0x14006f5d4], 0xffff
lea rcx, str.kernel32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, [0x14005b3c8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x140007fd1
mov ebx, 0x65b
jmp 0x140008111
mov r8, rsi
lea rcx, [0x1400717f0]
mov esi, 0x200
mov edx, esi
call fcn.140050560
test eax, eax
jne 0x140007fc7
lea rdx, [rsp + 0x50]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140007eea
cmp eax, esi
jae 0x140007fc7
mov r8d, esi
lea rdx, [rbp + 0x350]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140007eea
cmp eax, esi
jae 0x140007fc7
mov rsi, qword [0x14006f5c0]
lea rax, [rsp + 0x50]
xor rsi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r9, rsi
lea r8, [rsp + 0x50]
lea rdx, str._s_p__d_full.dmp
mov dword [rsp + 0x20], eax
lea rcx, [0x140070ff0]
mov r14d, eax
call fcn.140011858
test eax, eax
jle 0x140007fc7
mov r9, rsi
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
lea rdx, str._s_p__d.dmp
lea rcx, [0x1400713f0]
call fcn.140011858
test eax, eax
jle 0x140007fc7
lea rax, [rbp + 0x350]
mov dword [rsp + 0x28], r15d
lea r9, [0x1400713f0]
mov qword [rsp + 0x20], rax
lea r8, [0x1400717f0]
lea rdx, str.__s____s____s____d_
lea rcx, [0x1400707f0]
call fcn.1400118ac
test eax, eax
jle 0x140007fc7
lea rcx, [0x140007be0]
call rdi
mov esi, 3
lea r9, [rsp + 0x30]
mov edx, esi
mov rcx, rdi
lea r8d, [rsi + 0x3d]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140008111
movzx eax, word [0x14005d630]
lea r9, [rsp + 0x34]
mov word [rdi], ax
mov edx, esi
mov al, byte [0x14005d632]
mov rcx, rdi
mov byte [rdi + 2], al
mov r8d, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, ebx
neg eax
sbb rcx, rcx
not rcx
and ecx, 2
xchg qword [0x1400707e0], rcx
jmp 0x140007e9b