Function at 0x180055a54
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rbx, rcx
lea rcx, [rsp + 0x70]
call fcn.18003751c
mov rax, qword [rbx + 0x68]
lea rcx, [rbp]
mov rbx, qword [0x18010ebd0]
mov edx, 0x104
mov dword [rbp - 0x74], 1
mov dword [rbp - 0x78], 1
mov byte [rbp - 0x70], 1
mov dword [rbp - 0x7c], 0x41800000
mov qword [rbp - 0x58], rax
and qword [rbx + 0x20], 0
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea rcx, [rbp]
call qword [sym.imp.msvcrt.dll_strlen]
mov byte [rsp + 0x54], 0x5f
xor ecx, ecx
mov byte [rsp + 0x55], 0x49
mov rdi, rax
mov byte [rsp + 0x56], WSACleanup
mov byte [rsp + 0x57], WSACleanup
mov byte [rsp + 0x58], 0x77
mov byte [rsp + 0x59], 0x76
mov byte [rsp + 0x5a], 0x5f
mov byte [rsp + 0x5b], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x5c], WSASetLastError
mov byte [rsp + 0x5d], 0x66
mov byte [rsp + 0x5e], 0x75
mov byte [rsp + 0x5f], WSACleanup
mov byte [rsp + 0x60], 0x76
mov byte [rsp + 0x61], 0x76
mov byte [rsp + 0x62], 0x31
mov byte [rsp + 0x63], 0x77
mov byte [rsp + 0x64], 0x77
mov byte [rsp + 0x65], 0x69
mov byte [rsp + 0x66], 0
mov al, byte [rsp + 0x54]
mov al, byte [rsp + rcx + 0x54]
sub al, 3
mov byte [rsp + rcx + 0x54], al
inc rcx
cmp rcx, 0x12
jb 0x180055b29
lea rdx, [rsp + 0x54]
lea rcx, [rbp]
call qword [sym.imp.msvcrt.dll_strcat]
movss xmm2, dword [rbp - 0x7c]
lea r9, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
lea rdx, [rbp]
call fcn.180037d40
mov byte [rbp - 0x48], 1
xor ecx, ecx
mov byte [rbp + rdi], 0
mov byte [rsp + 0x30], 0x5d
mov byte [rsp + 0x31], 0x47
mov byte [rsp + 0x32], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x33], WSASetLastError
mov byte [rsp + 0x34], 0x75
mov byte [rsp + 0x35], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x36], 0x5d
mov byte [rsp + 0x37], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x38], 0x6a
mov byte [rsp + 0x39], WSASetLastError
mov byte [rsp + 0x3a], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x3b], 0x76
mov byte [rsp + 0x3c], WSASetLastError
mov byte [rsp + 0x3d], 0x2f
mov byte [rsp + 0x3e], 0x75
mov byte [rsp + 0x3f], 0x75
mov byte [rsp + 0x40], 0x64
mov byte [rsp + 0x41], 0
mov al, byte [rsp + 0x30]
mov al, byte [rsp + rcx + 0x30]
dec al
mov byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x180055bcb
lea rdx, [rsp + 0x30]
lea rcx, [rbp]
call qword [sym.imp.msvcrt.dll_strcat]
movss xmm2, dword [rbp - 0x7c]
lea r9, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
lea rdx, [rbp]
call fcn.180037d40
mov byte [rbp + rdi], 0
xor ecx, ecx
mov byte [rsp + 0x42], 0x64
mov byte [rsp + 0x43], 0x4e
mov byte [rsp + 0x44], 0x77
mov byte [rsp + 0x45], 0x76
mov byte [rsp + 0x46], 0x7c
mov byte [rsp + 0x47], 0x7b
mov byte [rsp + 0x48], 0x64
mov byte [rsp + 0x49], 0x75
mov byte [rsp + 0x4a], 0x69
mov byte [rsp + 0x4b], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x4c], WSASetLastError
mov byte [rsp + 0x4d], 0x7d
mov byte [rsp + 0x4e], 0x76
mov byte [rsp + 0x4f], 0x36
mov byte [rsp + 0x50], 0x7c
mov byte [rsp + 0x51], 0x7c
mov byte [rsp + 0x52], WSASetLastError
mov byte [rsp + 0x53], 0
mov al, byte [rsp + 0x42]
mov al, byte [rsp + rcx + 0x42]
sub al, 8
mov byte [rsp + rcx + 0x42], al
inc rcx
cmp rcx, 0x11
jb 0x180055c69
lea rdx, [rsp + 0x42]
lea rcx, [rbp]
call qword [sym.imp.msvcrt.dll_strcat]
movss xmm2, dword [rbp - 0x7c]
lea r9, [rsp + 0x70]
mov rcx, qword [rbx + 0x58]
lea rdx, [rbp]
call fcn.180037d40
mov rbx, qword [rbx + 0x58]
cmp dword [rbx + 0x78], 0
jne 0x180055cb4
mov rcx, rbx
call fcn.180037ae8
mov rax, qword [rbx + 0x488]
test rax, rax
jne 0x180055cd5
lea rax, [0x1800382ac]
mov qword [0x18010f990], rax
lea rax, [0x18010f990]
mov rcx, rbx
call qword [rax]
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret