Function at 0x14000e4c0
Capabilities:
Get common file path

Disassembly:
push rdi
mov eax, 0x13c0
call fcn.1400a7480
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x13d8], rbx
mov qword [rsp + 0x13e0], rsi
mov rax, qword [0x1400e2e38]
xor rax, rsp
mov qword [rsp + 0x13b0], rax
mov rdi, rcx
xor edx, edx
lea rcx, [rsp + 0x8e0]
call fcn.14003f610
nop
xor esi, esi
mov rax, qword [0x1400ec150]
test rax, rax
jne 0x14000e543
mov ecx, 0x310
call fcn.140051b7c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000e539
mov rcx, rax
call fcn.140023810
jmp 0x14000e53c
mov rax, rsi
mov qword [0x1400ec150], rax
lea rdx, str.____SuccessStep___
mov rcx, rax
call fcn.140023be0
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140041b40
nop
xor eax, eax
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x58], eax
lea rbx, [rdi + 0x750]
mov r8, rbx
mov edx, pe_nt_image_headers64
lea rcx, [rsp + 0x180]
call fcn.14007dab0
mov r8, rbx
mov edx, pe_nt_image_headers64
lea rcx, [rsp + 0x420]
call fcn.14007dab0
mov dword [rsp + 0x50], 0xda
mov dword [rsp + 0x3c], 0x141
mov dword [rsp + 0x38], 0x140
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
neg rcx
sbb eax, eax
and eax, 0x106
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x38]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov rax, qword [rcx + 0x18]
mov qword [rdx + 0x18], rax
mov eax, dword [rcx + 0x20]
mov dword [rdx + 0x20], eax
mov dword [rsp + 0x16c], 1
mov dword [rsp + 0x620], esi
lea rcx, [rsp + 0x70]
call fcn.140056fa8
cmp dword [rsp + 0x624], 0
je 0x14000e786
mov word [rsp + 0xf90], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0xf92]
call fcn.140082240
mov word [rsp + 0x11a0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x11a2]
call fcn.140082240
mov edx, 0x104
lea rcx, [rsp + 0xf90]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea rdx, str.rundll32.exe
lea rcx, [rsp + 0xf90]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
mov r9, rbx
lea r8, str.printui.dll_PrintUIEntry__k__n___s_
mov edx, 0x104
lea rcx, [rsp + 0x11a0]
call fcn.14007d810
mov rax, qword [0x1400ec150]
test rax, rax
jne 0x14000e6fc
mov ecx, 0x310
call fcn.140051b7c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000e6f2
mov rcx, rax
call fcn.140023810
jmp 0x14000e6f5
mov rax, rsi
mov qword [0x1400ec150], rax
lea rdx, str.Printing_test_page..
mov rcx, rax
call fcn.140023be0
mov rax, qword [0x1400ec150]
test rax, rax
jne 0x14000e73f
mov ecx, 0x310
call fcn.140051b7c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000e735
mov rcx, rax
call fcn.140023810
jmp 0x14000e738
mov rax, rsi
mov qword [0x1400ec150], rax
lea r9, [rsp + 0x11a0]
lea r8, [rsp + 0xf90]
lea rdx, str.__Command_Line:__s__s
mov rcx, rax
call fcn.140023be0
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x11a0]
lea r8, str.rundll32.exe
lea rdx, [rsp + 0xf90]
mov ecx, 1
call fcn.14007dd30
jmp 0x14000e7ca
mov rax, qword [0x1400ec150]
test rax, rax
jne 0x14000e7ba
mov ecx, 0x310
call fcn.140051b7c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14000e7b0
mov rcx, rax
call fcn.140023810
jmp 0x14000e7b3
mov rax, rsi
mov qword [0x1400ec150], rax
lea rdx, str.User_chose_NOT_to_print_test_page.
mov rcx, rax
call fcn.140023be0
nop
lea rax, [0x1400bf4e8]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x830]
call fcn.14006549c
nop
lea rcx, [rsp + 0x788]
call fcn.14006549c
nop
lea rcx, [rsp + 0x6e0]
call fcn.14006549c
nop
lea rcx, [rsp + 0x638]
call fcn.14006549c
nop
lea rdi, method.CDialog.virtual_0
mov qword [rsp + 0x70], rdi
mov rcx, qword [rsp + 0x3d8]
test rcx, rcx
je 0x14000e82c
call fcn.140051bc8
mov qword [rsp + 0x3d8], rsi
mov qword [rsp + 0x3e0], rsi
mov qword [rsp + 0x3e8], rsi
mov rcx, qword [rsp + 0x3b8]
test rcx, rcx
je 0x14000e856
call fcn.140051bc8
mov qword [rsp + 0x3b8], rsi
mov qword [rsp + 0x3c0], rsi
mov qword [rsp + 0x3c8], rsi
mov rcx, qword [rsp + 0x398]
test rcx, rcx
je 0x14000e880
call fcn.140051bc8
mov qword [rsp + 0x398], rsi
mov qword [rsp + 0x3a0], rsi
mov qword [rsp + 0x3a8], rsi
lea rcx, [rsp + 0x70]
call fcn.140056490
nop
lea rax, [0x1400beff8]
mov qword [rsp + 0x8e0], rax
lea rcx, [rsp + 0xee8]
call fcn.14006549c
nop
mov qword [rsp + 0x8e0], rdi
mov rcx, qword [rsp + 0xc48]
test rcx, rcx
je 0x14000e8da
call fcn.140051bc8
mov qword [rsp + 0xc48], rsi
mov qword [rsp + 0xc50], rsi
mov qword [rsp + 0xc58], rsi
mov rcx, qword [rsp + 0xc28]
test rcx, rcx
je 0x14000e904
call fcn.140051bc8
mov qword [rsp + 0xc28], rsi
mov qword [rsp + 0xc30], rsi
mov qword [rsp + 0xc38], rsi
mov rcx, qword [rsp + 0xc08]
test rcx, rcx
je 0x14000e92e
call fcn.140051bc8
mov qword [rsp + 0xc08], rsi
mov qword [rsp + 0xc10], rsi
mov qword [rsp + 0xc18], rsi
lea rcx, [rsp + 0x8e0]
call fcn.140056490
xor eax, eax
mov rcx, qword [rsp + 0x13b0]
xor rcx, rsp
call fcn.14007d3d0
lea r11, [rsp + 0x13c0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret