Function at 0x1400f0e80
Capabilities:
Get common file path

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x670
mov rbx, rcx
test rcx, rcx
je 0x1400f0f00
call fcn.1400c7610
test eax, eax
jne 0x1400f0eb8
mov edx, 0x5c
mov rcx, rbx
call sub.msvcrt.dll_strchr
test rax, rax
je 0x1400f0f70
mov edx, 8
mov rcx, rbx
call fcn.1400c7420
test eax, eax
je 0x1400f0f2b
mov edx, 4
mov rcx, rbx
call fcn.1400c7420
test eax, eax
jne 0x1400f0f2b
mov rcx, rbx
call fcn.1400c7610
test eax, eax
je 0x1400f0f30
mov rcx, rbx
add rsp, 0x670
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp fcn.1400e4a90
lea rax, str.program___NULL
lea r9, str.inner_find_program_in_path
mov edx, 8
mov qword [rsp + 0x20], rax
lea r8, [0x1403a2dc0]
lea rcx, [0x1403a2dda]
call fcn.1400d2190
xor eax, eax
jmp 0x1400f0f58
call fcn.1400c7cc0
xor r8d, r8d
mov rdx, rbx
mov rsi, rax
mov rcx, rax
call fcn.1400cb160
mov rcx, rsi
mov qword [rsp + 0x38], rax
call fcn.14034efb0
mov rax, qword [rsp + 0x38]
add rsp, 0x670
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov edx, 0x2f
mov rcx, rbx
call sub.msvcrt.dll_strchr
mov rsi, rax
test rax, rax
jne 0x1400f0eb8
lea rcx, str.PATH
lea rbp, [rsp + 0x460]
xor r13d, r13d
call fcn.1400c71c0
mov r8d, 0x104
mov rdx, rbp
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub eax, 1
cmp eax, 0x102
jbe 0x1400f1244
lea r12, [rsp + 0x250]
mov edx, 0x104
xor ebp, ebp
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
sub eax, 1
cmp eax, 0x102
jbe 0x1400f122c
lea r12, [rsp + 0x40]
mov edx, 0x104
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
sub eax, 1
cmp eax, 0x102
jbe 0x1400f1208
test r13, r13
je 0x1400f125c
mov rcx, r13
call fcn.1400c79c0
mov rcx, r13
mov r12, rax
call fcn.14034efb0
mov rcx, rdi
call fcn.1400e4a90
mov r13, rax
test rsi, rsi
je 0x1400f12c2
xor r9d, r9d
mov r8, rax
lea rdx, [0x1403a3680]
mov rcx, rsi
call fcn.1400e4ea0
mov rcx, r13
mov rdi, rax
call fcn.14034efb0
mov rcx, rsi
call fcn.14034efb0
test rbp, rbp
je 0x1400f1091
mov r8, rdi
xor r9d, r9d
lea rdx, [0x1403a3680]
mov rcx, rbp
call fcn.1400e4ea0
mov rcx, rdi
mov rsi, rax
call fcn.14034efb0
mov rcx, rbp
mov rdi, rsi
call fcn.14034efb0
xor r8d, r8d
lea rcx, [0x1403a3682]
mov rdx, rdi
call fcn.1400e4ea0
mov rcx, rdi
mov rbp, rax
call fcn.14034efb0
test r12, r12
je 0x1400f10de
mov r8, rbp
xor r9d, r9d
lea rdx, [0x1403a3680]
mov rcx, r12
call fcn.1400e4ea0
mov rcx, rbp
mov rsi, rax
call fcn.14034efb0
mov rcx, r12
mov rbp, rsi
call fcn.14034efb0
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov rcx, rbp
lea rsi, [rax + 1]
call sub.msvcrt.dll_strlen
lea rdi, [rax + 1]
mov r13, rax
lea r14, [rsi + rdi]
mov rcx, r14
call sub.msvcrt.dll_malloc
mov r12, rax
test rax, rax
je 0x1400f12ca
add rdi, rax
mov rdx, rbx
mov r8, rsi
add r13, r12
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov byte [r13], 0x5c
mov rdx, rbp
nop dword [rax]
movzx eax, byte [rdx]
mov rbx, rdx
test al, al
je 0x1400f1200
cmp al, 0x3b
jne 0x1400f1154
jmp 0x1400f1200
cmp al, 0x3b
je 0x1400f1160
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
jne 0x1400f1150
mov rsi, rdi
cmp rdx, rbx
je 0x1400f117c
mov r8, rbx
mov rcx, r13
sub r8, rdx
sub rcx, r8
call sub.msvcrt.dll_memcpy
mov rsi, rax
mov edx, 8
mov rcx, rsi
call fcn.1400c7420
test eax, eax
jne 0x1400f11b0
cmp byte [rbx], 0
lea rdx, [rbx + 1]
jne 0x1400f1130
mov rcx, r12
call fcn.14034efb0
mov rcx, rbp
call fcn.14034efb0
xor eax, eax
jmp 0x1400f0f58
mov edx, 4
mov rcx, rsi
call fcn.1400c7420
test eax, eax
jne 0x1400f118d
mov rcx, rsi
call fcn.1400c7610
test eax, eax
je 0x1400f1295
mov rcx, rsi
call fcn.1400e4a90
mov rcx, r12
mov qword [rsp + 0x38], rax
call fcn.14034efb0
mov rcx, rbp
call fcn.14034efb0
mov rax, qword [rsp + 0x38]
jmp 0x1400f0f58
mov rsi, rdi
jmp 0x1400f117c
mov rcx, r12
xor r8d, r8d
mov edx, 0xffffffff
xor r12d, r12d
call fcn.1402b36b0
mov rsi, rax
test r13, r13
jne 0x1400f1012
jmp 0x1400f1025
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, r12
call fcn.1402b36b0
mov rbp, rax
jmp 0x1400f0fe8
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, rbp
call fcn.1402b36b0
mov r13, rax
jmp 0x1400f0fc2
mov rcx, rdi
xor r12d, r12d
call fcn.1400e4a90
mov rdi, rax
test rbp, rbp
jne 0x1400f1066
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1403a3682]
call fcn.1400e4ea0
mov rcx, rdi
mov rbp, rax
call fcn.14034efb0
jmp 0x1400f10de
call fcn.1400c7cc0
xor r8d, r8d
mov rdx, rsi
mov rdi, rax
mov rcx, rax
call fcn.1400cb160
mov rcx, rdi
mov qword [rsp + 0x38], rax
call fcn.14034efb0
mov rax, qword [rsp + 0x38]
jmp 0x1400f11d9
mov rdi, rax
jmp 0x1400f1061
mov qword [rsp + 0x20], r14
lea r9, [0x1403a2e04]
lea r8, [0x1403a2e18]
mov edx, 4
lea rcx, [0x1403a2dda]
call fcn.1400d2190
jmp 0x1400f12ee