Function at 0x1400016b0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x830]
sub rsp, 0x930
mov rax, qword [0x140021008]
xor rax, rsp
mov qword [rbp + 0x820], rax
mov r13, rdx
lea rcx, [rbp + 0x420]
mov edx, 0x1e0
mov r15d, r9d
mov rsi, r8
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x1400019a0
lea r8, str.Npcap
mov edx, 0x200
lea rcx, [rbp + 0x420]
call fcn.140007ea4
lea rcx, [rbp + 0x420]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
test eax, eax
je 0x1400019a0
mov rcx, qword [0x1400243a0]
mov edx, 0x3e8
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 8
ja 0x1400019a0
cdqe
lea rdi, [0x140022da0]
imul rbx, rax, 0x2c0
lea r8, [rdi + 0xc]
add r8, rbx
lea rdx, str.DeviceNPF__s
lea rcx, [rbp + 0x320]
call fcn.140001fd0
lea rcx, [rbp + 0x320]
call qword [sym.imp.packet.dll_PacketOpenAdapter]
mov r12, rax
test rax, rax
je 0x1400019a0
cmp qword [rax], 0xffffffffffffffff
je 0x1400019a0
call qword [sym.imp.packet.dll_PacketAllocatePacket]
mov r14, rax
test rax, rax
je 0x1400019a0
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x400
call fcn.140003180
mov eax, dword [rbx + rdi + 0x198]
mov rcx, 0xffffffffffffffff
mov dword [rsp + 0x26], eax
movzx eax, word [rbx + rdi + 0x19c]
mov word [rsp + 0x2a], ax
mov dword [rsp + 0x20], ecx
mov word [rsp + 0x24], cx
mov word [rsp + 0x2c], 0x99c1
mov dword [rsp + 0x30], 0x4f525446
test r15d, r15d
je 0x140001821
mov word [rsp + 0x2e], 0xeeee
mov dword [rsp + 0x34], ecx
jmp 0x140001828
mov word [rsp + 0x2e], 0xdddd
xor ebx, ebx
mov edi, ebx
nop dword [rax]
call fcn.140007e60
mov byte [rsp + rdi + 0x38], al
inc rdi
cmp rdi, 0xc
jl 0x140001830
call fcn.140007e60
mov byte [rsp + rbx + 0x50], al
test r15d, r15d
jne 0x140001859
call fcn.140007e60
mov byte [rsp + rbx + 0x58], al
inc rbx
cmp rbx, 8
jl 0x140001842
movzx eax, byte [rsp + 0x43]
xor al, byte [r13]
mov byte [rsp + 0x44], al
movzx eax, byte [rsp + 0x42]
xor al, byte [r13 + 1]
mov byte [rsp + 0x45], al
movzx eax, byte [rsp + 0x41]
xor al, byte [r13 + 2]
mov byte [rsp + 0x46], al
movzx eax, byte [rsp + 0x40]
xor al, byte [r13 + 3]
mov byte [rsp + 0x47], al
movzx eax, byte [rsp + 0x3f]
xor al, byte [r13 + 4]
mov byte [rsp + 0x48], al
movzx eax, byte [rsp + 0x3e]
xor al, byte [r13 + 5]
mov byte [rsp + 0x49], al
movzx eax, byte [rsp + 0x3d]
xor al, byte [r13 + 6]
mov byte [rsp + 0x4a], al
movzx eax, byte [rsp + 0x3c]
xor al, byte [r13 + 7]
mov byte [rsp + 0x4b], al
movzx eax, byte [rsp + 0x3b]
xor al, byte [r13 + 8]
mov byte [rsp + 0x4c], al
movzx eax, byte [rsp + 0x3a]
xor al, byte [r13 + 9]
mov byte [rsp + 0x4d], al
movzx eax, byte [rsp + 0x39]
xor al, byte [r13 + 0xa]
mov byte [rsp + 0x4e], al
movzx eax, byte [rsp + 0x38]
xor al, byte [r13 + 0xb]
mov byte [rsp + 0x4f], al
test r15d, r15d
je 0x140001962
movzx eax, byte [rsp + 0x57]
xor al, byte [rsi]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x56]
xor al, byte [rsi + 1]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x55]
xor al, byte [rsi + 2]
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x54]
xor al, byte [rsi + 3]
mov byte [rsp + 0x5b], al
movzx eax, byte [rsp + 0x53]
xor al, byte [rsi + 4]
mov byte [rsp + 0x5c], al
movzx eax, byte [rsp + 0x52]
xor al, byte [rsi + 5]
mov byte [rsp + 0x5d], al
movzx eax, byte [rsp + 0x51]
xor al, byte [rsi + 6]
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x50]
xor al, byte [rsi + 7]
mov byte [rsp + 0x5f], al
mov r8d, 0x40
lea rdx, [rsp + 0x20]
mov rcx, r14
call qword [sym.imp.packet.dll_PacketInitPacket]
mov edx, 1
mov rcx, r12
call qword [sym.imp.packet.dll_PacketSetNumWrites]
mov r8b, 1
mov rdx, r14
mov rcx, r12
call qword [sym.imp.packet.dll_PacketSendPacket]
mov rcx, r14
test al, al
jne 0x1400019d2
call qword [sym.imp.packet.dll_PacketFreePacket]
xor eax, eax
mov rcx, qword [rbp + 0x820]
xor rcx, rsp
call fcn.140002180
lea r11, [rsp + 0x930]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.packet.dll_PacketFreePacket]
mov rcx, r12
call qword [sym.imp.packet.dll_PacketCloseAdapter]
mov eax, 1
jmp 0x1400019a2