Function at 0x140001ce0
Capabilities:
Get common file path
Query environment variable

Disassembly:
push rbx
push rbp
push rdi
push r14
sub rsp, 0x838
mov rax, qword [0x14000e1e0]
xor rax, rsp
mov qword [rsp + 0x820], rax
mov rbp, rdx
mov r14, rcx
lea rdx, [rsp + 0x420]
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
jne 0x140001d6f
call qword [sym.imp.MSVCR120.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.MSVCR120.dll_strerror]
lea rcx, str.could_not_identify_current_directory:__s
mov rdi, rax
call qword [sym.imp.libintl.dll_libintl_gettext]
mov rbx, rax
call qword [sym.imp.MSVCR120.dll___iob_func]
mov r8, rdi
lea rcx, [rax + 0x60]
mov rdx, rbx
call fcn.140004360
call qword [sym.imp.MSVCR120.dll___iob_func]
mov ecx, 0xa
lea rdx, [rax + 0x60]
call qword [sym.imp.MSVCR120.dll_fputc]
or eax, 0xffffffff
jmp 0x140001fd7
mov rcx, r14
call fcn.140003150
test rax, rax
je 0x140001e14
movzx eax, byte [r14]
cmp al, 0x2f
je 0x140001dc2
cmp al, 0x5c
je 0x140001dc2
movzx ecx, al
call qword [sym.imp.MSVCR120.dll_isalpha]
test eax, eax
je 0x140001dad
cmp byte [r14 + 1], 0x3a
jne 0x140001dad
movzx eax, byte [r14 + 2]
cmp al, 0x2f
je 0x140001dc2
cmp al, 0x5c
je 0x140001dc2
lea rdx, [rsp + 0x420]
mov r8, r14
mov rcx, rbp
call fcn.140003200
jmp 0x140001ddb
mov r8d, 0x400
mov rdx, r14
mov rcx, rbp
call qword [sym.imp.MSVCR120.dll_strncpy]
mov byte [rbp + 0x3ff], 0
mov rcx, rbp
call fcn.1400032c0
mov rcx, rbp
call fcn.140002650
test eax, eax
jne 0x140001df6
xor eax, eax
jmp 0x140001fd7
lea rcx, str.invalid_binary___s_
call qword [sym.imp.libintl.dll_libintl_gettext]
mov rbx, rax
call qword [sym.imp.MSVCR120.dll___iob_func]
mov r8, rbp
jmp 0x140001d46
lea rdx, [rsp + 0x420]
mov r8, r14
mov rcx, rbp
call fcn.140003200
mov rcx, rbp
call fcn.140002650
test eax, eax
je 0x140001def
lea rcx, str.PATH
mov qword [rsp + 0x870], rsi
mov qword [rsp + 0x830], r15
call qword [sym.imp.MSVCR120.dll_getenv]
mov r15, rax
test rax, rax
je 0x140001f8a
cmp byte [rax], 0
je 0x140001f8a
xor esi, esi
mov ebx, esi
nop dword [rax]
test rsi, rsi
mov rsi, r15
je 0x140001e7c
lea rsi, [rbx + 1]
mov rcx, rsi
call fcn.1400031d0
mov rbx, rax
test rax, rax
jne 0x140001e9c
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rsi + rbx], 0
jne 0x140001e90
add rbx, rsi
mov rax, rbx
sub rax, rsi
lea rdi, [rax + 1]
cmp rdi, 0x400
jge 0x140001eb6
test rdi, rdi
je 0x140001ed1
jmp 0x140001ebb
mov edi, 0x400
lea rcx, [rsp + 0x20]
mov r8, rdi
mov rdx, rsi
call qword [sym.imp.MSVCR120.dll_strncpy]
mov byte [rsp + rdi + 0x1f], 0
movzx eax, byte [rsp + 0x20]
cmp al, 0x2f
je 0x140001f19
cmp al, 0x5c
je 0x140001f19
movzx ecx, al
call qword [sym.imp.MSVCR120.dll_isalpha]
test eax, eax
je 0x140001eff
cmp byte [rsp + 0x21], 0x3a
jne 0x140001eff
movzx eax, byte [rsp + 0x22]
cmp al, 0x2f
je 0x140001f19
cmp al, 0x5c
je 0x140001f19
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x420]
mov rcx, rbp
call fcn.140003200
mov rdx, rbp
jmp 0x140001f1e
lea rdx, [rsp + 0x20]
mov r8, r14
mov rcx, rbp
call fcn.140003200
mov rcx, rbp
call fcn.1400032c0
mov rcx, rbp
call fcn.140002650
cmp eax, 0xfffffffe
je 0x140001f47
test eax, eax
jne 0x140001f81
jmp 0x140001fc7
lea rcx, str.could_not_read_binary___s_
call qword [sym.imp.libintl.dll_libintl_gettext]
mov rdi, rax
call qword [sym.imp.MSVCR120.dll___iob_func]
mov r8, rbp
lea rcx, [rax + 0x60]
mov rdx, rdi
call fcn.140004360
call qword [sym.imp.MSVCR120.dll___iob_func]
mov ecx, 0xa
lea rdx, [rax + 0x60]
call qword [sym.imp.MSVCR120.dll_fputc]
cmp byte [rbx], 0
jne 0x140001e70
lea rcx, str.could_not_find_a___s__to_execute
call qword [sym.imp.libintl.dll_libintl_gettext]
mov rbx, rax
call qword [sym.imp.MSVCR120.dll___iob_func]
mov r8, r14
lea rcx, [rax + 0x60]
mov rdx, rbx
call fcn.140004360
call qword [sym.imp.MSVCR120.dll___iob_func]
mov ecx, 0xa
lea rdx, [rax + 0x60]
call qword [sym.imp.MSVCR120.dll_fputc]
or eax, 0xffffffff
mov rsi, qword [rsp + 0x870]
mov r15, qword [rsp + 0x830]
mov rcx, qword [rsp + 0x820]
xor rcx, rsp
call fcn.140006cd0
add rsp, 0x838
pop r14
pop rdi
pop rbp
pop rbx
ret