Function at 0x1400604a0
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x318
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r12, rcx
mov rbx, qword [rsp + 0x3b0]
mov r15, qword [rsp + 0x3a0]
mov r13, qword [0x1401054a8]
mov rax, qword [r13]
xor rax, rsp
mov qword [rsp + 0x310], rax
call fcn.1400683e0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rcx, rax
call fcn.140071390
test al, al
je 0x14006055c
mov rax, qword [rsp + 0x3a8]
mov rcx, qword [rsp + 0x398]
mov edx, dword [rsp + 0x390]
mov r8d, dword [rsp + 0x388]
mov r9, qword [rsp + 0x380]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r8d
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call r12
mov edi, 1
test eax, eax
jne 0x14006077e
lea rcx, str.CreateProcessA
mov rdx, rsi
call fcn.14001f980
call fcn.1400683e0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rcx, rax
call fcn.140071370
xor edi, edi
test al, al
je 0x14006077e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x18
mov rcx, rbx
mov r8d, 1
call fcn.1400687c0
test al, al
je 0x140060776
call fcn.140068500
test rax, rax
je 0x140060776
mov r12, rax
test r14, r14
je 0x1400605ef
mov rcx, r14
call fcn.140068f60
mov r14, rax
test rax, rax
je 0x140060776
test rsi, rsi
je 0x1400605f7
mov rcx, rsi
call fcn.140068f60
test rax, rax
jne 0x1400605f9
mov rcx, r14
jmp 0x14006061f
xor r14d, r14d
test rsi, rsi
jne 0x1400605dd
xor eax, eax
mov qword [rsp + 0x50], rax
test r15, r15
je 0x14006062b
mov rcx, r15
call fcn.140068f60
test rax, rax
jne 0x14006062d
mov rcx, r14
xor edx, edx
call fcn.140069080
mov rcx, qword [rsp + 0x50]
xor edx, edx
call fcn.140069080
jmp 0x140060776
xor eax, eax
test r14, r14
je 0x140060638
mov rdx, qword [r14 + 8]
jmp 0x14006063a
xor edx, edx
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x98], rdx
test rcx, rcx
je 0x140060652
mov rcx, qword [rcx + 8]
jmp 0x140060654
xor ecx, ecx
mov qword [rsp + 0x90], rcx
test rax, rax
mov qword [rsp + 0x58], rax
je 0x14006066c
mov rax, qword [rax + 8]
jmp 0x14006066e
xor eax, eax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], 0
lea r15, [rsp + 0x100]
mov ecx, 0x104
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec eax
cmp eax, 0x102
ja 0x1400606a9
mov qword [rsp + 0x80], r15
lea r15, [rsp + 0x70]
mov rcx, r15
mov rdx, r12
call fcn.14006c460
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xf0], 0
mov dword [rsp + 0x60], 0x18
mov qword [rsp + 0x68], rbx
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x90]
lea r9, [rsp + 0x98]
mov rcx, r15
mov edx, 0xd
call fcn.1400607e0
mov ebx, eax
xor r15d, r15d
mov rcx, r14
xor edx, edx
call fcn.140069080
mov rcx, qword [rsp + 0x50]
xor edx, edx
call fcn.140069080
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.140069080
test ebx, ebx
je 0x1400607a8
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x310]
xor rax, rsp
mov rcx, qword [r13]
cmp rcx, rax
jne 0x1400607d9
mov eax, edi
add rsp, 0x318
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [rsp + 0xa8], 0
jne 0x1400607d4
lea rcx, str.CreateProcessA
mov rdx, rsi
call fcn.14001fbe0
mov r15d, 1
mov edi, r15d
jmp 0x14006077e
call fcn.1400d58e0
int3