Function at 0x14009e3b0
Capabilities:
Get common file path

Disassembly:
mov r11, rsp
nop
mov qword [rsp - 8], rbp
sub rsp, 8
lea rbp, [r11 - 0x3f8]
jmp 0x14009e4ef
sub edx, 0x2135af11
xor edx, 0x55a0444f
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x50], r9d
test r8b, r8b
jmp 0x14009e427
test al, al
jne 0x14009e4c8
mov r9, r9
jmp 0x14009e585
mov dword [rbp - 0x24], eax
dec rcx
movzx eax, byte [0x140116dcc]
jmp 0x14009e494
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
xchg r11, r11
jne 0x14009e408
lea r8, [rbp + 0x120]
xor edx, edx
jmp 0x14009e4b8
xchg rbx, rbx
je 0x14009e517
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x140116dc8]
xchg rsp, rsp
lea rcx, [rbp - 0x24]
jmp 0x14009e3f6
mov rdx, rdx
movzx eax, r8b
mov dword [rsp + 0x48], r14d
mov edx, 0x4c4019ac
jmp 0x14009e471
xchg r10, rdi
lea rcx, [rbp + 0x120]
mov qword [r11 - 0x28], r14
jmp 0x14009e4a4
sub edx, 0x19a8b3b5
sub edx, 0x238f5a12
sub edx, 0x988616b
add edx, 0x102949a2
add edx, 0x612cffc4
jmp 0x14009e3c9
xchg r11, r11
mov byte [rbp - 0x20], al
nop dword [rax + rax]
jmp 0x14009e408
xchg r9, r9
xchg rsp, rdx
mov rdi, rsp
xchg rsp, rdx
xor r14d, r14d
jmp 0x14009e448
xchg r14, r14
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov rdi, rdi
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
jmp 0x14009e3e6
mov qword [rbp + 0x3c0], rax
xchg r8, r8
mov qword [r11 - 0x18], rsi
jmp 0x14009e508
mov r9, r9
add rsp, 0xfffffffffffffb10
mov rax, qword [0x14024e2e0]
xor rax, rsp
jmp 0x14009e4dc
mov rsi, rcx
xchg rdi, r10
mov qword [r11 - 0x20], r10
jmp 0x14009e45e
call qword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryA]
mov eax, dword [0x140116dc8]
lea rcx, [rbp - 0x24]
mov dword [rsp - 0x20], edx
mov dword [rbp - 0x24], eax
dec rcx
jmp 0x14009e5cf
mov dword [rsp - 0x24], esi
xor edx, edx
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
jmp 0x14009e5b0
jne 0x14009e598
mov dword [rsp - 0x28], 0x3ab202ee
movzx eax, word [0x140116dd0]
jmp 0x14009e56b
mov word [rcx], ax
mov eax, dword [rbp + 0x438]
cmp eax, 0xffffffff
mov rsp, rsp
je 0x14009e5f6
jmp 0x14009e5a5
lea rcx, [rbp - 0x24]
dec rcx
nop word [rax + rax]
xchg rsp, rsp
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
jmp 0x14009e551
mov dword [rbp + 0xd0], eax
jmp 0x14009e6c1
xchg rbx, rbx
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
mov dword [rsp - 0x2c], 0x3f645d5b
jne 0x14009e547
jmp 0x14009e585
movzx eax, byte [0x140116dcc]
mov byte [rbp - 0x20], al
xchg rbx, rbx
cmp byte [rcx + 1], r14b
lea rcx, [rcx + 1]
jne 0x14009e5dc
lea r8, [rbp + 0x120]
jmp 0x14009e536
xchg rdi, rbx
mov qword [rsp + 0x4e8], rdi
xchg rdi, rbx
nop
movabs rbx, 0xffffffff33ed9d48
jmp 0x14009e7ce
sub edx, 0x1deb8f1b
add edx, 0x8e2d0786
mov dword [rsp + 0x28], r14d
mov dword [rsp - 0x44], 0x628cb724
mov qword [rsp + 0x20], r14
jmp 0x14009e873
inc r8
mov dword [rsp - 0x3c], ebp
cmp byte [rdi + r8], r14b
jmp 0x14009e8b6
lea r8, [rsp + 0x50]
xchg r14, rcx
mov qword [rsp + 0x38], rcx
xchg r14, rcx
jmp 0x14009e672
xchg r12, rdi
mov r12, qword [rsp + 0x4d8]
xchg r12, rdi
test rax, rax
jmp 0x14009e9ca
movabs rdx, 0x9024ae7f53a329b2
sub rdx, 0x514ea248
xor rdx, 0x70f5d58f
sub rdx, 0x6790818e
jmp 0x14009e90b
mov qword [rsp + 0x30], r10
xchg r10, rdx
mov edx, 0x1e13f2b0
jmp 0x14009e9a1
movzx ecx, byte [rbp + 0x1a0]
lea rdx, [rbp + 0x2b0]
mov r8d, 0x22a59774
jmp 0x14009e933
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
mov dword [rsp - 0x2c], 0x31b8316c
lea rdx, [rbp + 0xcc]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
movsxd rax, dword [rbp + 0x428]
jmp 0x14009e7ef
xchg rcx, r13
mov rax, qword [0x140251090]
mov r11, r11
xor rax, rdx
lea rdx, [rsp + 0x48]
xchg rdx, r10
jmp 0x14009e696
xor ecx, 0x5541cb36
add ecx, 0x5d5e111a
xor ecx, 0x6b0c2648
add ecx, 0x729eccc4
sub ecx, 0x592aac53
add ecx, 0x1529d558
sub ecx, 0x3a4a8ea6
jmp 0x14009eaa2
mov byte [rsp + 0x40], 0x4c
add byte [rsp + 0x40], 0x1e
sub byte [rsp + 0x40], 0x1a
add byte [rsp + 0x40], 0x10
sub byte [rsp + 0x40], 0x17
sub byte [rsp + 0x40], 0x41
add byte [rsp + 0x40], 0x4d
jmp 0x14009e7b7
nop dword [rax]
inc rbx
mov r14, r14
cmp byte [rdi + rbx], r14b
jne 0x14009e765
mov dword [rbp - 0x28], ebx
mov rbx, qword [rsp + 0x4e8]
jmp 0x14009ea12
xor byte [rsp + 0x42], 0x34
mov r9, r9
xor byte [rsp + 0x43], 0x35
jmp 0x14009e986
add rdx, 0x2c1cbb08
mov r9d, 0x94a98
add r9d, 0x79701044
sub r9d, 0x1e08c3f8
jmp 0x14009e8d9
xor byte [rsp + 0x40], 0x74
add byte [rsp + 0x40], 0x3b
call fcn.14000ec50
mov rcx, rcx
jmp 0x14009e826
add rbx, 0x2e707adb
xor rbx, 0x51f25f9c
xor rbx, 0x7c6823c0
sub rbx, 0x7cf5cb8
jmp 0x14009e893
mov dword [rsp - 0x24], ebp
lea rdx, [rbp + 0x1a0]
mov ecx, 0x560365b9
jmp 0x14009e707
lea rdx, [rsp + 0x40]
mov dword [rsp - 0x10], 0x614e064d
movzx eax, word [0x140116dc4]
lea rcx, [rbp + 0x28]
xor byte [rsp + 0x41], 0x33
jmp 0x14009e785
lea r8, [0x140250700]
lea rdx, [0x140116db8]
lea rcx, [rbp + 0xd4]
mov dword [rsp - 0x44], esp
call fcn.14009c130
jmp 0x14009e9e9
sub byte [rbp + 0xc8], 0x58
add byte [rbp + 0xc8], 1
xor byte [rbp + 0xc8], 0x3e
sub byte [rbp + 0xc8], 0x37
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xchg r8, r8
jmp 0x14009e6a8
call rax
xchg r12, r14
mov r12, qword [rsp + 0x4d0]
xchg r14, r12
xchg rdx, rsi
mov rdx, qword [rsp + 0x4e0]
jmp 0x14009ea79
add rbx, 0x7fffffff
add rbx, 0x380af839
xchg rbx, rsp
mov r8, rsp
xchg rsp, rbx
nop dword [rax]
jmp 0x14009e637
jne 0x14009e637
inc r8
lea rcx, [rsp + 0x58]
mov dword [rsp - 0x40], 0x266e6678
mov rdx, rdi
call fcn.1400f00d0
jmp 0x14009e75e
sub r9d, 0x58434bfa
add r9d, 0xc1e0c9f
add r9d, 0x40c3067a
xor r9d, 0x61cead1a
sub r9d, 0x31c0f151
xchg r13, rcx
mov r13, qword [rax + 0x98]
jmp 0x14009e6ea
add rdx, 0x20959740
add rdx, 0x147a3c97
xor rdx, 0x4e3694ed
xor rdx, 0xfb14f2e
add rdx, 0x7fffffff
jmp 0x14009e797
add r8d, 0x54f1b116
sub r8d, 0x6a4e165c
add r8d, 0x8c0d2f2
jmp 0x14009ead1
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14009eb07
xor edx, 0x7f7a5bcd
add edx, 0x25a4fc84
xor edx, 0x35664381
sub edx, 0x1cf0eaab
xor edx, 0x3d80a770
mov dword [rbp + 0x114], eax
call fcn.1400e3b48
jmp 0x14009e65c
mov word [rsp + 0x44], ax
movzx eax, byte [0x140116dc6]
mov r12, r12
xor byte [rsp + 0x44], 0x36
xor al, 0x38
jmp 0x14009ea8c
add edx, 0x430a965a
sub edx, 0x2e62864b
xor edx, 0x5ab95431
sub edx, 0x2e97e830
sub edx, 0xcf076ef
xor edx, 0x63bcbcfa
jmp 0x14009e614
mov dword [rsp - 0x40], edx
je 0x14009e9d8
mov word [rax], r14w
mov rax, qword [rsi + 0x30]
mov dword [rsp - 0x44], 0x6b5b7d48
jmp 0x14009e647
mov eax, dword [0x140250720]
lea rcx, [rbp + 0xd4]
mov edx, 0x2c235eca
add edx, 0x8091bdc
sub edx, 0xc016ea6
xor edx, 0x1e2382c9
jmp 0x14009e958
xchg r8, r8
mov dword [rbp + 0xd0], 0x6de9f1d7
sub dword [rbp + 0xd0], 0x2613af83
jmp 0x14009ea2e
sub dword [rbp + 0xd0], 0x4748de43
add dword [rbp + 0xd0], 0x64b01a20
xor dword [rbp + 0xd0], 0x5353b4e5
add dword [rbp + 0xd0], 0x55e1129
add dword [rbp + 0xd0], 0x2a15e215
sub dword [rbp + 0xd0], 0x4a22fe7a
add dword [rbp + 0xd0], 0xe4404067
jmp 0x14009e6c1
xchg rdx, rsi
test eax, eax
jne 0x14009eb02
mov rcx, rcx
jmp 0x14009e94d
xor byte [rsp + 0x45], 0x37
mov dword [rsp - 0x1c], 0x7cade86e
mov byte [rsp + 0x46], al
jmp 0x14009e736
mov qword [rbp + 0x20], rax
mov r15, r15
mov byte [rbp + 0xc8], 0x4b
xor byte [rbp + 0xc8], 0x5a
sub byte [rbp + 0xc8], 0xb
xor byte [rbp + 0xc8], 4
xor byte [rbp + 0xc8], 0x5f
jmp 0x14009e849
add r8d, 0x3500137d
sub r8d, 0x4b0a1799
call fcn.1400a8d90
mov eax, dword [str.n_f_vi]
mov dword [rsp - 0x3c], 0x5d1e5d74
lea r8, [rbp + 0x2b3]
mov dword [rsp + 0x40], eax
jmp 0x14009e804
xor eax, eax
xchg rdi, rdi
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.1400e2980
sub rsp, 0xfffffffffffffb10
xchg r11, r11
jmp 0x14009eb25
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret