Function at 0x14005fca0
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x318
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r12, rcx
mov rbx, qword [rsp + 0x3b0]
mov r15, qword [rsp + 0x3a0]
mov r13, qword [0x1400f74a8]
mov rax, qword [r13]
xor rax, rsp
mov qword [rsp + 0x310], rax
call fcn.140067be0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rcx, rax
call fcn.140070b90
test al, al
je 0x14005fd5c
mov rax, qword [rsp + 0x3a8]
mov rcx, qword [rsp + 0x398]
mov edx, dword [rsp + 0x390]
mov r8d, dword [rsp + 0x388]
mov r9, qword [rsp + 0x380]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r8d
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call r12
mov edi, 1
test eax, eax
jne 0x14005ff7e
lea rcx, str.CreateProcessA
mov rdx, rsi
call fcn.14001f180
call fcn.140067be0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rcx, rax
call fcn.140070b70
xor edi, edi
test al, al
je 0x14005ff7e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x18
mov rcx, rbx
mov r8d, 1
call fcn.140067fc0
test al, al
je 0x14005ff76
call fcn.140067d00
test rax, rax
je 0x14005ff76
mov r12, rax
test r14, r14
je 0x14005fdef
mov rcx, r14
call fcn.140068760
mov r14, rax
test rax, rax
je 0x14005ff76
test rsi, rsi
je 0x14005fdf7
mov rcx, rsi
call fcn.140068760
test rax, rax
jne 0x14005fdf9
mov rcx, r14
jmp 0x14005fe1f
xor r14d, r14d
test rsi, rsi
jne 0x14005fddd
xor eax, eax
mov qword [rsp + 0x50], rax
test r15, r15
je 0x14005fe2b
mov rcx, r15
call fcn.140068760
test rax, rax
jne 0x14005fe2d
mov rcx, r14
xor edx, edx
call fcn.140068880
mov rcx, qword [rsp + 0x50]
xor edx, edx
call fcn.140068880
jmp 0x14005ff76
xor eax, eax
test r14, r14
je 0x14005fe38
mov rdx, qword [r14 + 8]
jmp 0x14005fe3a
xor edx, edx
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x98], rdx
test rcx, rcx
je 0x14005fe52
mov rcx, qword [rcx + 8]
jmp 0x14005fe54
xor ecx, ecx
mov qword [rsp + 0x90], rcx
test rax, rax
mov qword [rsp + 0x58], rax
je 0x14005fe6c
mov rax, qword [rax + 8]
jmp 0x14005fe6e
xor eax, eax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], 0
lea r15, [rsp + 0x100]
mov ecx, 0x104
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec eax
cmp eax, 0x102
ja 0x14005fea9
mov qword [rsp + 0x80], r15
lea r15, [rsp + 0x70]
mov rcx, r15
mov rdx, r12
call fcn.14006bc60
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xf0], 0
mov dword [rsp + 0x60], 0x18
mov qword [rsp + 0x68], rbx
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x90]
lea r9, [rsp + 0x98]
mov rcx, r15
mov edx, 0xd
call fcn.14005ffe0
mov ebx, eax
xor r15d, r15d
mov rcx, r14
xor edx, edx
call fcn.140068880
mov rcx, qword [rsp + 0x50]
xor edx, edx
call fcn.140068880
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.140068880
test ebx, ebx
je 0x14005ffa8
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x310]
xor rax, rsp
mov rcx, qword [r13]
cmp rcx, rax
jne 0x14005ffd9
mov eax, edi
add rsp, 0x318
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [rsp + 0xa8], 0
jne 0x14005ffd4
lea rcx, str.CreateProcessA
mov rdx, rsi
call fcn.14001f3e0
mov r15d, 1
mov edi, r15d
jmp 0x14005ff7e
call fcn.1400c8850
int3