Function at 0x1800408a0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x480
mov rax, qword [0x1801d0100]
xor rax, rsp
mov qword [rsp + 0x470], rax
mov r15, rcx
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x70], rcx
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x150], xmm1
mov r8d, 9
lea rdx, str.All_Users
lea rcx, [rsp + 0x140]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x170], xmm1
mov r8d, 7
lea rdx, str.Default
lea rcx, [rsp + 0x160]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x190], xmm1
mov r8d, Ordinal_15
lea rdx, str.Default_User
lea rcx, [rsp + 0x180]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x1b0], xmm1
mov r8d, 6
lea rdx, str.Public
lea rcx, [rsp + 0x1a0]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x1d0], xmm1
mov r8d, 7
lea rdx, str.AppData
lea rcx, [rsp + 0x1c0]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x1f0], xmm1
mov r8d, Ordinal_15
lea rdx, str.defaultuser0
lea rcx, [rsp + 0x1e0]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x210], xmm1
mov r8d, Ordinal_15
lea rdx, str.defaultuser1
lea rcx, [rsp + 0x200]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x230], xmm1
mov r8d, Ordinal_21
lea rdx, str.defaultuser100000
lea rcx, [rsp + 0x220]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x250], xmm1
mov r8d, reloc.LIBPQ.dll_Ordinal_14
lea rdx, str.DefaultAppPool
lea rcx, [rsp + 0x240]
call fcn.180007ce0
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x260]
call fcn.1800aba60
mov edx, 0x104
lea rcx, [rsp + 0x260]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov r8d, 3
lea rcx, [rsp + 0x30]
movups xmmword [rsp + 0x30], xmm0
movdqu xmmword [rsp + 0x40], xmm1
cmp eax, r8d
lea rdx, [rsp + 0x260]
jae 0x180040af6
lea rdx, [0x1801b7ff8]
call fcn.180007ce0
nop
lea rax, [0x1801b7178]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 7
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xa8], rax
movups xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsp + 0x58], xmm0
movabs rax, 0xc000000000000000
mov qword [rsp + 0x50], rax
mov qword [rsp + 0xa0], 1
lea rax, [rsp + 0x50]
mov qword [rsp + 0xa8], rax
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xc0], xmm0
movaps xmm1, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0xa0], xmm1
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xe0]
call fcn.1800093a0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x180040bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040bef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041403
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r13w
lea rdx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 7
cmova rdx, qword [rsp + 0xe0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
mov r8, qword [rsp + 0xf0]
lea rcx, [rsp + 0xc0]
call fcn.180007ce0
nop
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xa0], xmm0
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xa0]
call fcn.180024da0
test eax, eax
jne 0x180041409
mov rdx, qword [rsp + 0xd8]
cmp rdx, 7
jbe 0x180040cc4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040cbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041420
call fcn.18007bb20
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov rdi, qword [rsp + 0xa8]
test rdi, rdi
je 0x180040ce0
lock inc dword [rdi + 8]
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xb0], xmm0
test rdi, rdi
je 0x180040cfa
lock inc dword [rdi + 8]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
test rdi, rdi
je 0x180040d3a
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180040d3a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, esi
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x180040d3a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
nop
mov r12, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xb0]
cmp rbx, r12
je 0x1800412b6
mov r8d, 3
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.18001ff70
mov edx, dword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
test edx, edx
je 0x180040d82
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180041426
cmp eax, 3
jne 0x18004129c
lea rdx, [rbx + 0x20]
lea rcx, [rsp + 0x100]
call fcn.180005380
nop
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rcx, qword [rsp + 0x100]
mov rax, qword [rsp + 0x110]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18001f030
cmp rax, rdx
je 0x180040e0c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180040ddf
cmp cx, 0x2f
jne 0x180040de8
add rax, 2
cmp rax, rdx
jne 0x180040dd0
cmp rax, rdx
je 0x180040e0c
nop dword [rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x180040e0c
cmp cx, 0x2f
je 0x180040e0c
mov rbx, r8
cmp rax, r8
jne 0x180040df0
mov r8d, 0x3a
mov rcx, rbx
call fcn.180078de0
mov r8, rax
cmp rbx, rax
je 0x180040e47
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x180040e47
cmp word [rax], 0x2e
jne 0x180040fc7
lea rcx, [rax - 2]
cmp rbx, rcx
jne 0x180040e44
cmp word [rcx], 0x2e
je 0x180040e47
mov r8, rax
sub r8, rbx
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x90], r13
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.180007ce0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x120]
call fcn.180005380
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 7
jbe 0x180040ecb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040ec6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041446
call fcn.18007bb20
lea r9, [rsp + 0x140]
mov r14, qword [rsp + 0x138]
mov rbx, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x120]
nop dword [rax + rax]
mov rax, r9
cmp qword [r9 + 0x18], 7
jbe 0x180040efd
mov rax, qword [r9]
lea r8, [rsp + 0x120]
cmp r14, 7
cmova r8, rsi
cmp rbx, qword [r9 + 0x10]
jne 0x180040fec
test rbx, rbx
je 0x180040f3a
mov rdx, rbx
sub r8, rax
movzx ecx, word [rax]
cmp word [r8 + rax], cx
jne 0x180040fec
add rax, 2
sub rdx, 1
jne 0x180040f22
cmp r14, 7
jbe 0x180040f76
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180040f6d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004144c
mov rcx, rsi
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18004129c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180040fbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041452
call fcn.18007bb20
jmp 0x18004129c
sub rax, 2
cmp rbx, rax
je 0x180040e47
cmp word [rax], 0x2e
je 0x180040e44
sub rax, 2
cmp rbx, rax
jne 0x180040fd4
jmp 0x180040e47
add r9, 0x20
lea rax, [rsp + 0x260]
cmp r9, rax
jne 0x180040ef0
xorps xmm0, xmm0
mov rdx, qword [rsp + 0x20]
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
lea r12, [rsp + 0x120]
cmp r14, 7
cmova r12, rsi
movabs r15, 0x7ffffffffffffffe
cmp rbx, r15
ja 0x180041437
cmp rbx, 7
ja 0x180041056
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], 7
movups xmm0, xmmword [r12]
movups xmmword [rdx], xmm0
jmp 0x180041103
mov rax, rbx
or rax, 7
cmp rax, r15
jbe 0x180041088
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x1800410da
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004143c
jmp 0x1800410b8
mov ecx, 0xa
cmp rax, rcx
cmovb rax, rcx
mov r15, rax
lea rcx, [rax + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x180041441
add rcx, rcx
jne 0x180041070
mov rax, r13
jmp 0x1800410e4
mov rcx, rax
call fcn.18007bb28
mov rcx, rax
test rax, rax
je 0x180041446
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800410df
call fcn.18007bb28
mov rdx, qword [rsp + 0x20]
mov qword [rdx], rax
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], r15
lea r8, [rbx*2 + 2]
mov rdx, r12
mov rcx, rax
call fcn.1800ab3c0
nop
cmp r14, 7
jbe 0x18004113f
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180041136
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004144c
mov rcx, rsi
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x180041187
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180041182
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041452
call fcn.18007bb20
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], r13w
mov rbx, qword [rsp + 0xb8]
mov esi, 0xffffffff
test rbx, rbx
je 0x1800411e0
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1800411e0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1800411e0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
nop
test rdi, rdi
je 0x18004120d
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x18004120d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x18004120d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 7
jbe 0x180041255
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180041250
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041458
call fcn.18007bb20
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], r13w
lea r9, [fcn.1800052d0]
mov edx, Ordinal_34
mov r8d, 9
lea rcx, [rsp + 0x140]
call fcn.18007bf2c
nop
mov rax, qword [rsp + 0x20]
jmp 0x1800413d6
lea rcx, [rsp + 0xb0]
call fcn.1800200d0
test eax, eax
jne 0x18004145e
jmp 0x180040d42
mov rbx, qword [rsp + 0xb8]
mov esi, 0xffffffff
test rbx, rbx
je 0x1800412f2
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1800412f2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1800412f2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
nop
test rdi, rdi
je 0x18004131f
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x18004131f
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x18004131f
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
nop
jmp 0x180041329
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], r13
mov r8d, 3
lea rdx, [0x1801b6bc0]
mov rcx, r15
call fcn.180007ce0
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 7
jbe 0x180041396
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180041391
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180041466
call fcn.18007bb20
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], r13w
lea r9, [fcn.1800052d0]
mov edx, Ordinal_34
mov r8d, 9
lea rcx, [rsp + 0x140]
call fcn.18007bf2c
nop
mov rax, r15
mov rcx, qword [rsp + 0x470]
xor rcx, rsp
call fcn.18007bb00
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.18008a6e4
nop
lea r8, [rsp + 0xc0]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.18003d900
nop
call fcn.18008a6e4
nop
lea r8, [rbx + 0x20]
lea rcx, str.directory_entry::status
call fcn.18003d900
nop
call fcn.1800019f0
call fcn.180001950
call fcn.180001950
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
mov edx, eax
call fcn.18003d8a0
nop
call fcn.18008a6e4
int3