Function at 0x1400a53f0
Capabilities:
Get common file path

Disassembly:
xchg rsp, rdx
mov r11, rdx
xchg rdx, rsp
nop
sub rsp, 8
mov qword [rsp], rbp
lea rbp, [r11 - 0x3f8]
jmp 0x1400a546c
xchg r10, rdi
mov r10, rdx
xchg rdi, r10
xor r14d, r14d
mov dword [rsp - 0x10], 0x2af19362
jmp 0x1400a5552
xchg rdx, rdx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x14011e2e8]
lea rcx, [rbp - 0x24]
mov dword [rbp - 0x24], eax
jmp 0x1400a54c2
sub edx, 0x373baad6
mov dword [rsp + 0x54], eax
mov dword [rsp - 0x18], 0x1b403c37
mov dword [rsp + 0x50], r9d
test r8b, r8b
je 0x1400a557d
jmp 0x1400a5427
jmp 0x1400a55de
mov dword [rsp - 0x20], 0x340118f
sub rsp, 0x5edd433c
add rsp, 0x5edd3e4c
jmp 0x1400a54fb
nop dword [rax + rax]
xchg r11, r11
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
jne 0x1400a548f
mov dword [rsp - 0x2c], ebx
jmp 0x1400a54d7
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
mov dword [rsp - 0x38], 0x45acbd93
test al, al
jne 0x1400a54f1
jmp 0x1400a5467
mov rdx, rdx
dec rcx
movzx eax, byte [0x14011e2ec]
mov byte [rbp - 0x20], al
jmp 0x1400a5487
lea r8, [rbp + 0x120]
xor edx, edx
nop dword [rax]
mov dword [rsp - 0x28], ecx
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
jmp 0x1400a54a6
mov rax, qword [0x1402567f0]
xor rax, rsp
xchg r11, r11
xchg rsp, rax
mov qword [rbp + 0x3c0], rsp
xchg rsp, rax
xchg rcx, rsi
jmp 0x1400a551b
mov qword [r11 - 0x18], rcx
xchg rcx, rsi
xchg rsi, rbp
mov rbp, rcx
xchg rsi, rbp
xchg rdi, rcx
jmp 0x1400a5533
mov qword [r11 - 0x20], rcx
xchg rdi, rcx
lea rcx, [rbp + 0x120]
mov dword [rsp - 0x2c], 0x7860d299
mov qword [r11 - 0x28], r14
jmp 0x1400a540e
movzx eax, r8b
mov dword [rsp + 0x48], r14d
mov edx, 0x7705c502
sub edx, 0x41a3ba04
xor edx, 0x69c3ddd5
sub edx, 0x31575377
add edx, 0xbf127a2
jmp 0x1400a5442
call qword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryA]
mov dword [rsp - 0x18], esp
mov eax, dword [0x14011e2e8]
lea rcx, [rbp - 0x24]
jmp 0x1400a5596
mov dword [rbp - 0x24], eax
dec rcx
xchg r8, r8
movzx eax, byte [0x14011e2ec]
jmp 0x1400a5630
mov word [rcx], ax
mov eax, dword [rbp + 0x438]
cmp eax, 0xffffffff
jmp 0x1400a55c1
jmp 0x1400a5752
xchg rbx, rbx
je 0x1400a566b
mov dword [rbp + 0xd0], eax
jmp 0x1400a55bc
mov rcx, rcx
jne 0x1400a55e7
lea rcx, [rbp - 0x24]
jmp 0x1400a55fa
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jmp 0x1400a55d5
dec rcx
nop word [rax + rax]
mov dword [rsp - 0x34], ebp
jmp 0x1400a564e
lea r8, [rbp + 0x120]
xor edx, edx
nop word [rax + rax]
mov dword [rsp - 0x40], 0x53a0e360
jmp 0x1400a55e7
mov byte [rbp - 0x20], al
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
mov dword [rsp - 0x24], 0x2e2c6253
jne 0x1400a5633
jmp 0x1400a560f
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
jne 0x1400a564e
movzx eax, word [0x14011e2f0]
mov rbx, rbx
jmp 0x1400a55ab
xchg rbx, r13
mov qword [rsp + 0x4e8], r13
xchg r13, rbx
nop
movabs rbx, 0xffffffff3aa55f18
sub rbx, 0x2f68caca
jmp 0x1400a5690
xor rbx, 0x661a859a
sub rbx, 0x23582d53
add rbx, 0xaffce38
sub rbx, 0x38c95749
add rbx, 0x7fffffff
jmp 0x1400a5a60
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x30], rdx
mov edx, 0x3a75be9b
add edx, 0x259bfb87
xor edx, 0x79cbdf45
xor edx, 0x5834d6ef
jmp 0x1400a5889
mov r12, r12
xor byte [rsp + 0x43], 0x35
mov word [rsp + 0x44], ax
jmp 0x1400a57ef
sub r8d, 0x17e7d5e5
sub r8d, 0x168555e1
add r8d, 0x3e3fd96
add r8d, 0x1bf28f65
xor r8d, 0x619d03a4
jmp 0x1400a5a0f
sub byte [rbp + 0xc8], 0x6e
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov r15, r15
movzx ecx, byte [rbp + 0x1a0]
lea rdx, [rbp + 0x2b0]
mov r8d, 0x615f1f03
sub r8d, 0x1afe4cc4
jmp 0x1400a56f0
add dword [rbp + 0xd0], 0xbfadc4c3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r10, r10
mov ecx, eax
lea rdx, [rbp + 0xcc]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
mov dword [rsp - 0x1c], 0x340d0999
jmp 0x1400a5839
xchg r14, rcx
mov r14, qword [rax + 0x98]
xchg r14, rcx
jmp 0x1400a5ae3
mov dword [rsp - 0x34], esi
jne 0x1400a5a54
mov dword [rbp - 0x28], ebx
mov rbx, qword [rsp + 0x4e8]
mov dword [rbp + 0xd0], 0x1a7212cd
add dword [rbp + 0xd0], 0x526b2dbc
jmp 0x1400a59d8
add r9d, 0x3732a735
sub r9d, 0x6ad41740
sub r9d, 0x137800a9
jmp 0x1400a5777
movzx eax, word [0x14011e2e4]
mov dword [rsp - 0x38], esi
lea rcx, [rbp + 0x28]
xor byte [rsp + 0x41], 0x33
xor byte [rsp + 0x42], 0x34
jmp 0x1400a56de
movzx eax, byte [0x14011e2e6]
mov dword [rsp - 0x30], ebx
xor byte [rsp + 0x44], 0x36
xor al, 0x38
xor byte [rsp + 0x45], 0x37
mov dword [rsp - 0x10], 0x2929ae8b
mov byte [rsp + 0x46], al
jmp 0x1400a5944
sub edx, 0x6571e2b
sub edx, 0x27394ac5
sub edx, 0x26a4525b
mov dword [rbp + 0x114], eax
call fcn.1400eaa38
jmp 0x1400a5973
movsxd rax, dword [rbp + 0x428]
lea rdx, [rbp + 0x1a0]
mov ecx, 0x1bf9efa6
sub ecx, 0x1a807a04
jmp 0x1400a5a80
movabs rdx, 0x9024ae7f1955839c
xor rdx, 0x6c6b73fd
sub rdx, 0x3cb29299
add rdx, 0x1e5515ea
xor rdx, 0x1c887f3c
sub rdx, 0x65d5e58
jmp 0x1400a5ab3
sub edx, 0x321b88be
add edx, 0xa773c10
xor edx, 0x2ed733e0
add edx, 0x8b646ec6
mov dword [rsp + 0x28], r14d
jmp 0x1400a5991
mov edx, 0x2bbbd0
add edx, 0x1115fac7
add edx, 0x42f304e2
jmp 0x1400a5817
xor byte [rbp + 0xc8], 0x68
xor byte [rbp + 0xc8], 0x41
sub byte [rbp + 0xc8], 0x37
add byte [rbp + 0xc8], 0x54
jmp 0x1400a5718
sub byte [rsp + 0x40], 0xb
xor byte [rsp + 0x40], 0x38
add byte [rsp + 0x40], 4
call fcn.14000ec40
jmp 0x1400a59bb
xchg r13, r13
jne 0x1400a5a74
inc r8
lea rcx, [rsp + 0x58]
mov dword [rsp - 0x2c], ebx
xchg r10, rdx
jmp 0x1400a5a3e
jne 0x1400a5af6
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400a5af8
mov dword [rsp - 0x34], edx
call fcn.1400a31a0
mov eax, dword [0x140258c30]
lea rcx, [rbp + 0xd4]
jmp 0x1400a58ab
mov byte [rsp + 0x40], 0x7e
sub byte [rsp + 0x40], 0x53
add byte [rsp + 0x40], 0x40
jmp 0x1400a58e2
je 0x1400a5965
mov word [rax], r14w
mov r8, r8
mov rax, qword [rsi + 0x30]
lea r8, [rsp + 0x50]
jmp 0x1400a5ad3
mov dword [rsp - 0x28], 0x2c73e403
xchg rbp, rdi
mov rbp, qword [rsp + 0x4d8]
xchg rbp, rdi
test rax, rax
jmp 0x1400a5958
mov qword [rsp + 0x20], r14
call rax
mov dword [rsp - 0x24], ecx
mov r14, qword [rsp + 0x4d0]
mov rsi, qword [rsp + 0x4e0]
test eax, eax
mov dword [rsp - 0x1c], 0xbca39a1
jmp 0x1400a5918
mov r8, r8
lea r8, [0x140258c10]
lea rdx, [0x14011e2d8]
lea rcx, [rbp + 0xd4]
jmp 0x1400a5929
xor dword [rbp + 0xd0], 0x5ab55b4c
add dword [rbp + 0xd0], 0x3ad65788
xor dword [rbp + 0xd0], 0x73a5998c
xor dword [rbp + 0xd0], 0x4f4641a4
sub dword [rbp + 0xd0], 0xd8b7029
jmp 0x1400a5748
xor r8d, 0x565731d4
call fcn.1400afc70
mov eax, dword [str.n_f_vi]
jmp 0x1400a5a26
lea r8, [rbp + 0x2b3]
mov r13, r13
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
jmp 0x1400a57d1
mov r10, rdi
xchg r10, rdx
call fcn.1400f6fc0
mov dword [rsp - 0x24], esi
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], r14b
jmp 0x1400a5789
add rbx, 0x63fba490
mov r8, rbx
xchg rcx, rcx
nop dword [rax]
inc r8
cmp byte [rdi + r8], r14b
jmp 0x1400a58fb
add ecx, 0x1f9c6d8a
add ecx, 0xe26d926
add ecx, 0x10cdf686
xor ecx, 0xb209e47
jmp 0x1400a5a9d
sub ecx, 0x4b2a2b9b
mov qword [rbp + 0x20], rax
mov byte [rbp + 0xc8], 0x7b
jmp 0x1400a58c1
add rdx, 0x69b88bbe
mov r9d, 0x24f8ff16
sub r9d, 0x7a145ea
xor r9d, 0x5a4ecb50
jmp 0x1400a57b7
xchg rdi, r14
mov qword [rsp + 0x38], rdi
xchg rdi, r14
jmp 0x1400a5857
mov rax, qword [0x1402595a0]
xor rax, rdx
mov dword [rsp - 0x14], ebx
jmp 0x1400a56b8
xor eax, eax
xchg rdx, rcx
mov rdx, qword [rbp + 0x3c0]
xchg rcx, rdx
xor rcx, rsp
jmp 0x1400a5b19
add rsp, 0x5d51a5f7
pop rbp
xchg r10, r10
ret
xchg r15, r15
call fcn.1400e9870
sub rsp, 0x5d51a107
jmp 0x1400a5b0d