Function at 0x14001e1e4
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x250
mov rax, qword [0x14003e060]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov rax, qword [0x140042e50]
xor r15d, r15d
mov ebp, r15d
mov qword [rsp + 0x20], r15
test rax, rax
jne 0x14001e5a4
lea rax, [0x140041290]
mov qword [0x140042e50], rax
lea rax, [rsp + 0x20]
test rax, rax
jne 0x14001e251
lea ecx, [rax + 0x57]
jmp 0x14001e583
lea rcx, [rsp + 0x20]
call fcn.140016560
test eax, eax
je 0x14001e589
mov r14, r15
mov r12d, 0x104
mov rbx, qword [0x140042e50]
mov eax, ebp
add rbx, 8
add rbx, r14
test ebp, ebp
je 0x14001e4c4
dec eax
je 0x14001e420
dec eax
je 0x14001e3ea
dec eax
je 0x14001e361
dec eax
je 0x14001e330
dec eax
jne 0x14001e2f8
lea rcx, [0x14000b880]
call fcn.1400353c0
mov rcx, rbx
test rax, rax
je 0x14001e2cb
mov r9, rax
lea r8, [0x140009fe0]
jmp 0x14001e3d5
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
je 0x14001e3fe
mov rcx, rbx
call fcn.140035758
lea rdx, [0x14000b898]
mov rcx, rbx
call fcn.140028bd4
test rax, rax
jne 0x14001e358
mov rax, qword [0x140042e40]
mov ebx, 0x32
test rax, rax
je 0x14001e31b
mov r8, qword [0x140042e38]
lea rdx, [0x14000b7a0]
mov ecx, ebx
call rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14001e589
mov ecx, ebx
jmp 0x14001e583
mov rdx, rbx
call fcn.140016860
test eax, eax
je 0x14001e527
lea rdx, [0x14000b870]
mov rcx, rbx
call fcn.140028bd4
test rax, rax
je 0x14001e4d4
mov word [rax], r15w
jmp 0x14001e4d4
lea rcx, [0x14000b778]
call fcn.1400353c0
test rax, rax
je 0x14001e3b4
mov rdx, r12
mov r8d, r15d
sub rax, rbx
lea rcx, [rdx + 0x7ffffefa]
test rcx, rcx
je 0x14001e39c
movzx ecx, word [rax + rbx]
test cx, cx
je 0x14001e39c
mov word [rbx], cx
add rbx, 2
dec rdx
jne 0x14001e37b
test rdx, rdx
jne 0x14001e3ab
sub rbx, 2
mov r8d, 0x8007007a
mov word [rbx], r15w
test r8d, r8d
jmp 0x14001e3df
lea rdx, [rsp + 0x30]
call fcn.140016860
test eax, eax
je 0x14001e527
lea r9, [rsp + 0x30]
lea r8, [0x14000b858]
mov rcx, rbx
mov rdx, r12
call fcn.140011a88
test eax, eax
js 0x14001e2f8
jmp 0x14001e4d4
mov edx, r12d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
test eax, eax
jne 0x14001e4d4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, qword [0x140042e40]
test r9, r9
je 0x14001e567
lea rdx, [0x14000b700]
jmp 0x14001e55b
lea rax, [rsp + 0x28]
mov esi, r15d
test rax, rax
jne 0x14001e438
lea ecx, [rax + 0x57]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001e497
lea rcx, [0x140009910]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x14001e497
lea rdx, [0x140009970]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14001e46d
lea ecx, [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001e48a
mov edx, r12d
mov rcx, rbx
call rax
test eax, eax
je 0x14001e48a
cmp eax, r12d
jbe 0x14001e485
mov ecx, 0x7a
jmp 0x14001e465
mov esi, 1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
jne 0x14001e4d4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
je 0x14001e4d4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, qword [0x140042e40]
test r9, r9
je 0x14001e567
lea rdx, [0x14000b680]
jmp 0x14001e55b
mov edx, r12d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x14001e542
inc ebp
add r14, 0x218
cmp ebp, 6
jb 0x14001e26c
mov rcx, qword [rsp + 0x20]
call fcn.1400165e4
mov eax, 1
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.140028130
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, qword [0x140042e40]
test r9, r9
je 0x14001e567
lea rdx, [0x14000b7e0]
jmp 0x14001e55b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, qword [0x140042e40]
test r9, r9
je 0x14001e567
lea rdx, [0x14000b600]
mov r8, qword [0x140042e38]
mov ecx, eax
call r9
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001e589
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14001e589
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x140042e50]
or rcx, 0xffffffffffffffff
test rax, rax
cmovne rax, rcx
mov qword [0x140042e50], rax
jmp 0x14001e5e4
or rcx, 0xffffffffffffffff
cmp rax, rcx
jne 0x14001e4f0
mov rax, qword [0x140042e40]
lea ebx, [rcx + 0x33]
test rax, rax
je 0x14001e5d2
mov r8, qword [0x140042e38]
lea rdx, [0x14000b7a0]
mov ecx, ebx
call rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14001e5e4
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x14001e4f5