Function at 0x1400780d0
Capabilities:
Get common file path

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb0
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x20], xmm6
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov r14, rcx
mov qword [rbp + 0x10], 0
lea rcx, section..rdata
lea r9, [rbp + 0x10]
xor edx, edx
xor r8d, r8d
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
jne 0x140078408
mov qword [rbp - 8], 0
mov qword [rbp], 6
mov qword [rbp + 8], 7
mov rax, qword [str.trackd]
mov qword [rbp - 0x10], rax
mov eax, dword [0x14013e428]
mov dword [rbp - 8], eax
mov rdi, qword [rbp + 0x10]
mov rcx, rdi
call fcn.1400ed29c
xorps xmm6, xmm6
movaps xmmword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x40], xmm6
lea rsi, [rbp - 0x50]
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.140047960
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x30], xmm6
mov rdi, qword [rbp - 0x40]
cmp qword [rbp - 0x38], 8
jb 0x140078185
mov rsi, qword [rbp - 0x50]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jae 0x140078438
cmp rdi, 7
ja 0x1400781b6
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 7
movups xmm0, xmmword [rsi]
movaps xmmword [rbp - 0x30], xmm0
jmp 0x140078247
mov qword [rbp - 0x18], 7
mov rax, rdi
or rax, 7
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x140078442
cmp rax, 0xb
mov ebx, 0xa
cmovae rbx, rax
lea rcx, [rbx + rbx]
cmp rbx, 0x7ff
jb 0x14007821f
movabs rax, 0x7fffffffffffffec
cmp rbx, rax
jae 0x140078442
add rcx, 0x29
call fcn.1400cd3b4
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14007822b
add rcx, 2
call fcn.1400cd3b4
mov rcx, rax
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rbx
lea r8, [rdi + rdi]
add r8, 2
mov rdx, rsi
call fcn.1401022e0
lea rsi, [rbp - 0x30]
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.14007dda0
mov rax, qword [rbp - 0x38]
cmp rax, 8
jb 0x14007829d
mov rcx, qword [rbp - 0x50]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140078298
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14007843d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400cd44c
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x1400782e3
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400782de
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14007843d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400cd44c
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rbp - 8], 0
mov ecx, 0x20
call fcn.1400cd3b4
mov qword [rbp - 0x10], rax
mov qword [rbp], inet_ntoa
mov qword [rbp + 8], 0xf
movups xmm0, xmmword [str.trackd.json]
movups xmmword [rax], xmm0
movabs rcx, 0x6e006f0073006a
mov qword [rax + 0xe], rcx
mov word [rax + 0x16], 0
xorps xmm0, xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14], xmm0
mov r8, qword [rbp - 0x20]
cmp qword [rbp - 0x18], 8
jb 0x14007834c
mov rsi, qword [rbp - 0x30]
mov rcx, r14
mov rdx, rsi
call fcn.1400153a0
lea rdx, [rbp - 0x10]
mov qword [rbp - 0x58], r14
mov rcx, r14
call fcn.14007dda0
mov rax, qword [rbp + 8]
cmp rax, 8
mov rsi, qword [rbp - 0x58]
jb 0x1400783b1
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400783ac
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14007843d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400cd44c
mov rax, qword [rbp - 0x18]
cmp rax, 8
jb 0x1400783f3
mov rcx, qword [rbp - 0x30]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400783ee
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14007843d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400cd44c
mov rax, rsi
movaps xmm6, xmmword [rbp + 0x20]
add rsp, 0xb0
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
lea rax, str.Could_not_resolve_program_data_directory
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 0x28
lea rcx, [rbp - 0x10]
lea rdx, [rbp - 0x50]
call fcn.14003dfc0
lea rdx, [0x140149408]
lea rcx, [rbp - 0x10]
call fcn.1400d37ac
call fcn.140002640
call fcn.1400e193c
call fcn.140002660
int3