Function at 0x1400134f0
Capabilities:
Get common file path

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x140074040]
xor rax, rsp
mov qword [rbp + 0x17], rax
movzx r8d, byte [rsp + 0x40]
xor r13d, r13d
xorps xmm0, xmm0
mov qword [rbp - 0x79], rdx
mov r9d, 0x104
mov qword [rsp + 0x58], rcx
mov r14, rcx
mov qword [rbp - 0x59], r13
movups xmmword [rbp - 0x69], xmm0
mov edx, r9d
mov word [rbp - 0x69], r13w
lea rcx, [rbp - 0x69]
mov qword [rbp - 0x51], 7
mov word [rsp + 0x20], r13w
call fcn.1400141d0
cmp qword [rbp - 0x51], 7
lea rcx, [rbp - 0x69]
mov edx, 0x104
cmova rcx, qword [rbp - 0x69]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp eax, 1
jbe 0x1400135fe
mov r8, qword [rbp - 0x59]
mov ecx, eax
cmp rcx, r8
ja 0x1400135a0
cmp qword [rbp - 0x51], 7
lea rax, [rbp - 0x69]
mov qword [rbp - 0x59], rcx
cmova rax, qword [rbp - 0x69]
mov word [rax + rcx*2], r13w
jmp 0x140013614
mov rdi, qword [rbp - 0x51]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x1400135e4
cmp rdi, 7
mov qword [rbp - 0x59], rcx
lea r9, [rbp - 0x69]
cmova r9, qword [rbp - 0x69]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x1400135d9
movzx eax, r13w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [rdx + r8]
mov word [r9 + rax*2], r13w
jmp 0x140013614
movzx r8d, byte [rsp + 0x40]
lea rcx, [rbp - 0x69]
mov r9, rdx
mov word [rsp + 0x20], r13w
call fcn.1400141d0
jmp 0x140013614
mov r8d, 0xa
lea rdx, [0x140069f08]
lea rcx, [rbp - 0x69]
call fcn.14000f6f0
cmp qword [rbp - 0x51], 7
lea rcx, [rbp - 0x69]
mov r8, qword [rbp - 0x69]
lea rbx, [rbp - 0x69]
mov rax, qword [rbp - 0x59]
lea rsi, [rbp - 0x69]
cmova rcx, r8
cmova rbx, r8
cmova rsi, r8
lea rdi, [rcx + rax*2]
cmp rbx, rdi
je 0x14001365a
sub rsi, rbx
movzx ecx, word [rbx]
call fcn.14003be60
mov word [rsi + rbx], ax
add rbx, 2
cmp rbx, rdi
jne 0x140013645
mov ebx, 0x10000
mov ecx, ebx
call fcn.140034a9c
mov qword [rsp + 0x48], rax
mov r15, rax
test rax, rax
jne 0x1400136d1
mov rdx, qword [rbp - 0x51]
cmp rdx, 7
jbe 0x1400136b3
mov rcx, qword [rbp - 0x69]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d89
call fcn.14002d030
mov rcx, r14
mov qword [rbp - 0x59], r13
mov qword [rbp - 0x51], 7
mov word [rbp - 0x69], r13w
call fcn.14000e850
jmp 0x14001389e
mov rax, qword [0x140077668]
xor r9d, r9d
mov r8d, ebx
mov qword [rsp + 0x150], r12
mov rdx, r15
lea ecx, [r9 + 0x10]
call rax
cmp eax, 0xc0000004
jne 0x14001373d
nop word [rax + rax]
lea eax, [rbx + rbx]
mov rcx, r15
mov edx, eax
mov ebx, eax
call fcn.140034a80
test rax, rax
je 0x140013835
mov rdi, qword [0x140077668]
xor r9d, r9d
mov r8d, ebx
mov qword [rsp + 0x48], rax
mov rdx, rax
mov r15, rax
lea ecx, [r9 + 0x10]
call rdi
cmp eax, 0xc0000004
je 0x140013700
test eax, eax
js 0x140013835
xorps xmm0, xmm0
mov qword [rbp - 0x19], r13
mov edx, 0x2000
lea rcx, [rbp - 0x29]
movdqu xmmword [rbp - 0x29], xmm0
call fcn.140014500
mov r12d, r13d
mov dword [rsp + 0x44], r13d
cmp dword [r15], r13d
jbe 0x140013cfb
movzx esi, byte [rsp + 0x40]
movzx ebx, byte [rsp + 0x40]
nop word [rax + rax]
mov eax, r12d
lea r13, [rax*2 + 1]
add r13, rax
cmp dword [r15 + r13*8], 0xa
lea r13, [r15 + r13*8]
mov qword [rsp + 0x50], r13
jb 0x140013ce2
mov r8, qword [rbp - 0x21]
xor edx, edx
mov rcx, qword [rbp - 0x29]
sub r8, rcx
call fcn.140051d20
mov r8d, dword [r13]
xor edi, edi
xor edx, edx
mov qword [rbp - 0x71], rdi
lea ecx, [rdi + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140013ce2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
movzx edx, word [r13 + 6]
lea r9, [rbp - 0x71]
mov dword [rsp + 0x30], 2
mov r8, rax
mov dword [rsp + 0x28], edi
mov rcx, r14
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov rcx, r14
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x140013ce2
mov rcx, qword [rbp - 0x71]
call qword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
je 0x1400138bc
mov rcx, qword [rbp - 0x71]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140013ce2
mov rcx, r15
call fcn.140034a88
mov rdx, qword [rbp - 0x51]
cmp rdx, 7
jbe 0x14001387d
mov rcx, qword [rbp - 0x69]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013878
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d8f
call fcn.14002d030
mov rcx, r14
mov qword [rbp - 0x59], r13
mov qword [rbp - 0x51], 7
mov word [rbp - 0x69], r13w
call fcn.14000e850
mov r12, qword [rsp + 0x150]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14002cd30
add rsp, 0x100
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rdx, qword [rbp - 0x71]
lea rcx, [rbp - 0x11]
call fcn.140005770
cmp byte [rbp + 0xf], 0
je 0x140013ccf
mov r11, qword [rbp + 7]
lea rdi, [rbp - 0x11]
mov r10, qword [rbp - 0x11]
cmp r11, 7
mov r14, qword [rbp - 1]
cmova rdi, r10
test r14, r14
je 0x140013967
xor edx, edx
mov rax, r14
mov rcx, rdi
test r14, r14
je 0x140013919
cmp word [rdi], 0x3a
je 0x140013916
cmp rax, 1
je 0x140013919
add rcx, 2
dec rax
cmp word [rcx], 0x3a
jne 0x140013903
mov rdx, rcx
test rdx, rdx
je 0x140013967
sub rdx, rdi
sar rdx, 1
cmp rdx, 1
jbe 0x140013967
cmp rdx, 0xffffffffffffffff
je 0x140013967
lea rax, [rdx - 1]
cmp r14, rax
lea rcx, [rbp - 0x11]
cmovb rax, r14
cmp r11, 7
cmova rcx, r10
sub r14, rax
lea r8, [r14*2 + 2]
lea rdx, [rcx + rax*2]
call fcn.1400520e0
mov r11, qword [rbp + 7]
mov r10, qword [rbp - 0x11]
mov qword [rbp - 1], r14
mov rax, qword [rsp + 0x58]
mov r9, qword [rax + 8]
mov r8, qword [rax]
cmp r8, r9
je 0x140013ccf
nop dword [rax]
mov rdx, qword [r8 + 0x10]
lea rcx, [rbp - 0x11]
cmp r11, 7
mov rdi, r8
cmova rcx, r10
cmp qword [r8 + 0x18], 7
jbe 0x14001399d
mov rdi, qword [r8]
cmp rdx, r14
jne 0x1400139c5
test rdx, rdx
je 0x1400139ce
sub rdi, rcx
nop word [rax + rax]
movzx eax, word [rdi + rcx]
cmp ax, word [rcx]
jne 0x1400139c5
add rcx, 2
sub rdx, 1
jne 0x1400139b0
jmp 0x1400139ce
add r8, 0x20
cmp r8, r9
jne 0x140013980
cmp r8, r9
je 0x140013ccf
mov r8d, dword [r13]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xor r14d, r14d
mov qword [rbp - 0x31], 7
xorps xmm0, xmm0
mov qword [rbp - 0x39], r14
mov r9d, 0x104
mov word [rsp + 0x20], r14w
movups xmmword [rbp - 0x49], xmm0
mov edx, r9d
mov word [rbp - 0x49], r14w
movzx r8d, sil
lea rcx, [rbp - 0x49]
mov rdi, rax
call fcn.1400141d0
test rdi, rdi
jne 0x140013a70
mov rdx, qword [rbp - 0x31]
cmp rdx, 7
jbe 0x140013ccf
mov rcx, qword [rbp - 0x49]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a66
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d95
call fcn.14002d030
jmp 0x140013ccf
cmp qword [rbp - 0x31], 7
lea r8, [rbp - 0x49]
mov r9d, 0x104
mov rcx, rdi
cmova r8, qword [rbp - 0x49]
xor edx, edx
call qword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
test eax, eax
je 0x140013a27
mov r8, qword [rbp - 0x39]
mov ecx, eax
cmp rcx, r8
ja 0x140013ab7
cmp qword [rbp - 0x31], 7
lea rax, [rbp - 0x49]
mov qword [rbp - 0x39], rcx
cmova rax, qword [rbp - 0x49]
mov word [rax + rcx*2], r14w
jmp 0x140013b11
mov rdi, qword [rbp - 0x31]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x140013afb
cmp rdi, 7
mov qword [rbp - 0x39], rcx
lea r9, [rbp - 0x49]
cmova r9, qword [rbp - 0x49]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140013af0
movzx eax, r14w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [rdx + r8]
mov word [r9 + rax*2], r14w
jmp 0x140013b11
mov r9, rdx
mov word [rsp + 0x20], r14w
movzx r8d, bl
lea rcx, [rbp - 0x49]
call fcn.1400141d0
mov r11, qword [rbp - 0x49]
lea rax, [rbp - 0x49]
mov r12, qword [rbp - 0x31]
lea r14, [rbp - 0x49]
mov rcx, qword [rbp - 0x39]
lea r15, [rbp - 0x49]
cmp r12, 7
cmova rax, r11
cmova r14, r11
cmova r15, r11
lea rdi, [rax + rcx*2]
cmp r14, rdi
je 0x140013b68
sub r15, r14
movzx ecx, word [r14]
call fcn.14003be60
mov word [r15 + r14], ax
add r14, 2
cmp r14, rdi
jne 0x140013b45
mov r12, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
mov r11, qword [rbp - 0x49]
cmp qword [rbp - 0x51], 7
lea r10, [rbp - 0x69]
mov r14, qword [rbp - 0x59]
lea r15, [rbp - 0x49]
cmova r10, qword [rbp - 0x69]
cmp r12, 7
cmova r15, r11
cmp r14, rcx
ja 0x140013c5f
sub rcx, r14
test r14, r14
je 0x140013c15
movzx r9d, word [r10]
lea r13, [rcx + 1]
lea r13, [r15 + r13*2]
mov rax, r15
nop word [rax + rax]
mov rcx, r13
mov edx, 0
sub rcx, rax
sar rcx, 1
je 0x140013bdc
cmp word [rax], r9w
je 0x140013bd9
cmp rcx, 1
je 0x140013bdc
add rax, 2
dec rcx
cmp word [rax], r9w
jne 0x140013bc6
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x140013c5a
mov rdi, r14
mov rdx, r10
test r14, r14
je 0x140013c09
mov r8, rax
sub r8, r10
movzx ecx, word [r8 + rdx]
cmp cx, word [rdx]
jne 0x140013c51
add rdx, 2
sub rdi, 1
jne 0x140013bf5
sub rax, r15
sar rax, 1
cmp rax, 0xffffffffffffffff
je 0x140013c5a
cmp r12, 7
jbe 0x140013cc5
lea rdx, [r12*2 + 2]
mov rax, r11
cmp rdx, 0x1000
jb 0x140013c4c
mov r11, qword [r11 - 8]
add rdx, 0x27
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d95
mov rcx, r11
jmp 0x140013cc0
add rax, 2
jmp 0x140013bb0
mov r13, qword [rsp + 0x50]
mov r14, qword [rbp - 0x79]
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x140013c7a
mov eax, dword [r13]
mov dword [rdx], eax
add qword [r14 + 8], 4
jmp 0x140013c85
mov r8, r13
mov rcx, r14
call fcn.140014330
mov rdx, qword [rbp - 0x31]
cmp rdx, 7
jbe 0x140013cc5
mov rcx, qword [rbp - 0x49]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013cc0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d95
call fcn.14002d030
mov r12d, dword [rsp + 0x44]
mov r15, qword [rsp + 0x48]
mov rcx, qword [rbp - 0x71]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x11]
call fcn.140005b60
inc r12d
mov dword [rsp + 0x44], r12d
cmp r12d, dword [r15]
jb 0x140013780
mov r14, qword [rsp + 0x58]
xor r13d, r13d
mov rcx, r15
call fcn.140034a88
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x140013d45
mov rdx, qword [rbp - 0x19]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140013d34
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d8f
call fcn.14002d030
xorps xmm0, xmm0
mov qword [rbp - 0x19], r13
movdqu xmmword [rbp - 0x29], xmm0
mov rdx, qword [rbp - 0x51]
cmp rdx, 7
jbe 0x14001387d
mov rcx, qword [rbp - 0x69]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013878
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013d8f
jmp 0x140013878
call fcn.14003a96c
int3
call fcn.14003a96c
int3
call fcn.14003a96c
int3