Function at 0x140005610
Capabilities:
Get common file path
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], r14
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [section..data]
lea r14, [0x1400d1010]
mov qword [0x1400d1130], r8
xor edx, edx
mov dword [rbp - 0x18], 0xf23
mov ebx, 0x11bf
mov dword [rbp - 0x1c], edx
mov dword [rbp - 0xc], edx
lea ecx, [rdx + 1]
mov dword [0x1400d1018], edx
mov dword [0x1400d1024], ecx
mov dword [0x1400d1030], ecx
mov dword [0x1400d1034], ecx
mov dword [0x1400d104c], ecx
mov dword [0x1400d1020], edx
mov dword [rbp - 0x20], 0xf23
mov dword [rbp - 0x10], edx
mov dword [0x1400d102c], 0xf
mov dword [0x1400d1044], 0x4e
mov dword [0x1400d1064], 0xc
mov dword [rax + 0x58], ecx
mov rax, qword [section..data]
mov dword [0x1400d1070], ecx
mov dword [rbp + 0x20], 0xf23
mov dword [rbp - 0x14], ebx
mov dword [rax + 0x68], 0x27
mov rax, qword [section..data]
mov dword [0x1400d1084], edx
mov dword [0x1400d10d4], edx
mov dword [0x1400d1090], 0x26
mov dword [0x1400d1094], 7
mov dword [0x1400d109c], 0x5e
mov dword [0x1400d10a8], 0x2b
mov dword [rax + 0xc8], 0x10
mov rax, qword [section..data]
mov dword [0x1400d10e0], ecx
mov dword [0x1400d10f8], edx
mov qword [0x1400d10fc], rcx
mov dword [rax + 0xf4], edx
mov rax, qword [section..data]
mov qword [r11 - 0x38], r14
mov dword [rax + 0xfc], ecx
mov rax, qword [section..data]
mov dword [rax + 0x100], 0x52
mov dword [0x1400d1118], ecx
mov ecx, dword [rbp + 0x20]
mov dword [0x1400d1128], edx
add ecx, 0x4a4
mov edx, dword [rbp - 0x1c]
mov r8d, dword [rbp - 0x14]
xor edx, 0xfc3
mov r9d, dword [rbp - 0xc]
sub r8d, 0x1d5
mov r10d, dword [rbp - 0x10]
add r9d, 0x13a3
mov eax, dword [rbp + 0x20]
add r10d, 0x1640
add eax, 0x3af
mov dword [rsp + 0x28], eax
mov dword [r11 - 0x48], r10d
call fcn.140004744
cmp dword [0x1400d1034], 0x182ed
mov dword [rbp - 0x18], eax
je 0x1400057b6
mov rcx, qword [section..data]
mov eax, dword [rcx + 4]
add dword [rcx + 0xe0], eax
add dword [rbp - 0x1c], 0x155e
mov r8, r14
mov ecx, dword [rbp - 0x10]
mov edx, dword [rbp - 0x14]
add ecx, 0x1768
mov r9d, dword [rbp - 0xc]
mov eax, dword [rbp - 0x1c]
add r9d, 0x12d2
xor eax, 0x51e
mov dword [rsp + 0x20], eax
call fcn.1400011d8
mov dword [rbp - 0x10], eax
add dword [rbp + 0x20], 0x70c
add dword [rbp - 0x14], 0x470
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffffa38
cmp eax, ecx
je 0x140005aa4
add dword [rbp - 0x20], 0x63b
add dword [rbp - 0x10], 0xfffffc06
add dword [rbp - 0x18], 0xfffffa96
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
xor ecx, 0x4fd
cmp eax, ecx
je 0x140005aa4
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff597
cmp eax, ecx
jl 0x14000585f
mov eax, 0x12baaa
sub eax, dword [0x1400d1078]
add dword [0x1400d10a4], eax
add dword [rbp - 0xc], ebx
jmp 0x140005aa4
mov rcx, qword [section..data]
mov eax, dword [0x1400d1070]
add eax, 0x1fef
cmp dword [rcx + 0x68], eax
ja 0x140005a1c
mov ebx, dword [rbp - 0x14]
mov edx, dword [rbp + 0x20]
or ebx, 0x12c6
mov r9d, dword [rbp - 0x14]
mov rax, qword [section..data]
mov ecx, dword [0x1400d1020]
sub ecx, dword [rax + 0xfc]
mov eax, dword [rbp - 0x10]
or r9d, eax
mov r11d, dword [rbp + 0x20]
mov rax, qword [section..data]
add r11d, 0x95b
mov r10d, dword [0x1400d107c]
xor r11d, 0x13c7
imul edx, ecx
add r10d, 0xa20
mov ecx, ebx
mov r8d, dword [rax + 0x70]
or r8d, dword [0x1400d103c]
or r8d, dword [0x1400d1020]
mov dword [rsp + 0x30], r8d
mov r8, r14
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.140005f50
mov rcx, qword [section..data]
mov dword [rbp - 0x14], eax
mov eax, dword [rbp - 0x20]
mov edx, dword [rbp - 0x20]
mov r8d, dword [rbp - 0x10]
mov ecx, dword [rcx + 0x20]
or r8d, 0x155e
sub edx, dword [0x1400d1104]
sub ecx, eax
mov eax, dword [rbp - 0x14]
mov r9d, dword [rbp - 0xc]
imul eax, r8d
movsxd r8, eax
mov eax, dword [0x1400d1068]
xor r9, rax
mov eax, dword [rbp - 0x18]
imul eax, dword [0x1400d1100]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov ecx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x20]
or ecx, eax
mov rax, qword [section..data]
and ecx, dword [0x1400d1020]
imul edx, dword [rax + 0xfc], 0x132d
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov edx, dword [0x1400d1038]
add edx, dword [0x1400d10fc]
add edx, dword [0x1400d10f8]
xor dword [rbp + 0x20], edx
mov ecx, dword [rbp - 0x20]
mov r9d, dword [rbp - 0x1c]
mov ebx, dword [rbp - 0x10]
mov rax, qword [section..data]
imul ebx, dword [0x1400d1070]
imul ecx, dword [0x1400d101c]
mov edx, dword [0x1400d1114]
sub r9d, dword [rax + 0xc4]
mov eax, dword [rbp + 0x20]
mov r11d, dword [rbp - 0x1c]
movsxd r10, dword [rbp + 0x20]
sub r11d, eax
imul edx, dword [0x1400d1018]
or r10, 0x132d
mov eax, dword [rbp - 0x20]
sub ecx, 0x15cf
and eax, dword [0x1400d1088]
add ebx, dword [0x1400d10dc]
mov r8d, dword [0x1400d1070]
imul edx, dword [0x1400d1128]
xor r8, 0x1768
sub eax, 0x132d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r10
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [section..data]
mov eax, dword [rbp + 0x20]
mov ecx, dword [rcx + 0x7c]
sub ecx, eax
imul ecx, dword [0x1400d1028]
or dword [rbp - 0x1c], ecx
mov eax, dword [0x1400d103c]
mov r8d, dword [0x1400d1070]
add eax, 0xffffec39
mov edx, dword [0x1400d1084]
xor r8d, 0xf23
mov r9, qword [section..data]
xor edx, 0x162f
imul ecx, eax, 0xfa1
add r8d, 0x15cf
mov eax, dword [rbp - 0x14]
mov r11d, dword [rbp - 0x10]
mov r10d, dword [rbp - 0xc]
sub r11d, eax
mov eax, dword [0x1400d103c]
or r10d, dword [0x1400d1104]
add eax, 0x11bf
xor r10d, dword [0x1400d1090]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.140001424
mov dword [rbp - 0x1c], eax
mov ecx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x1c54
cmp eax, ecx
jle 0x140005bae
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffff256
cmp eax, ecx
jl 0x140005bae
xor dword [rbp - 0x18], 0x1b9f
add dword [rbp + 0x20], 0xfffff44c
add dword [rbp - 0x18], 0x39f
mov ecx, dword [rbp + 0x20]
mov edx, dword [rbp - 0x1c]
add ecx, 0x4a8
mov r9d, dword [rbp - 0x20]
sub edx, 0x5d4
mov r11d, dword [rbp - 0x1c]
sub r9d, 0x59b
mov r10d, dword [rbp + 0x20]
sub r11d, 0x298
mov eax, dword [rbp - 0x20]
add r10d, 0x94c
mov r8, qword [section..data]
xor eax, 0x1c9d
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.140005bc0
mov dword [rbp - 0x1c], eax
mov r9, r14
xor dword [rbp - 0x18], 0x699
add dword [rbp + 0x20], 0x744
mov ecx, dword [rbp - 0x20]
mov edx, dword [rbp - 0x1c]
sub ecx, 0x51e
mov r8d, dword [rbp - 0x14]
add edx, 0x1f5
mov r10d, dword [rbp + 0x20]
sub r8d, 0xe7b
mov eax, dword [rbp - 0x18]
xor r10d, 0x6d7
xor eax, 0x1c2d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r10d
call fcn.1400060fc
mov dword [rbp - 0x20], eax
mov rax, qword [section..data]
mov rdx, qword [rax + 0x120]
mov rcx, qword [rax + 0x110]
call qword [rax + 0xa8]
mov dword [0x1400d1108], eax
jmp 0x140005bb4
mov eax, dword [0x1400d1108]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]