Function at 0x140009870
Capabilities:
Get common file path
Identify system language via api

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x14027c920]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rdi, rdx
mov qword [rsp + 0x60], rdx
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x70]
call fcn.1401b17b0
lea rcx, [rsp + 0x70]
call fcn.14000b810
nop
lea rdx, [rbp + 0x70]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.14000ef10
nop
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov esi, 7
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], r14w
mov dword [rsp + 0x20], 4
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov rcx, qword [rbp - 8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009942
mov rax, qword [rbp - 0x38]
mov r8, qword [rax]
test r8, r8
je 0x140009942
mov rax, qword [rbp - 0x58]
mov rdx, qword [rax]
cmp r8, qword [rbp - 0x10]
cmovb r8, qword [rbp - 0x10]
sub r8, rdx
sar r8, 1
jmp 0x140009979
test cl, 4
jne 0x14000996f
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
test rcx, rcx
je 0x14000996f
mov rax, qword [rbp - 0x60]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x28]
movsxd r8, dword [rax]
add r8, r8
sub r8, rdx
add r8, rcx
sar r8, 1
jmp 0x140009979
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x14000998d
lea rcx, [rsp + 0x40]
call fcn.140003e40
mov rsi, qword [rsp + 0x58]
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x40]
mov rbx, qword [rsp + 0x40]
cmp rsi, 8
cmovae rcx, rbx
mov rax, 0xffffffffffffffff
nop
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x1400099b0
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x2f
je 0x1400099d3
cmp dx, 0x5c
lea rdx, [0x140244c58]
jne 0x1400099da
lea rdx, [0x140244338]
lea rcx, [rbp - 0x80]
call fcn.14000ef10
nop
cmp rsi, 8
jb 0x140009a1f
lea rdx, [rsi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140009a17
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c2f
mov rcx, rbx
call fcn.1400042e0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ecx, ax
cmp ecx, 0x804
ja case.0x140009a5d.1033
je 0x140009b28
add ecx, 0xfffffbfc
cmp ecx, 0x1b
ja case.0x140009a5d.1033
movsxd rax, ecx
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x9c38]
add rcx, rdx
jmp rcx
lea rdx, str.CHT.xml
jmp 0x140009b38
lea rdx, str.CZE.xml
jmp 0x140009b38
lea rdx, str.DAN.xml
jmp 0x140009b38
lea rdx, str.DEU.xml
jmp 0x140009b38
lea rdx, str.ELL.xml
jmp 0x140009b38
lea rdx, str.ESLA.xml
jmp 0x140009b38
lea rdx, str.FIN.xml
jmp 0x140009b38
lea rdx, str.FRA.xml
jmp 0x140009b38
lea rdx, str.HUN.xml
jmp 0x140009b38
lea rdx, str.ITA.xml
jmp 0x140009b38
lea rdx, str.JPN.xml
jmp 0x140009b38
lea rdx, str.KOR.xml
jmp 0x140009b38
lea rdx, str.NLD.xml
jmp 0x140009b38
lea rdx, str.NOR.xml
jmp 0x140009b38
lea rdx, str.POL.xml
jmp 0x140009b38
lea rdx, str.POR.xml
jmp 0x140009b38
lea rdx, str.RUS.xml
jmp 0x140009b38
lea rdx, str.SWE.xml
jmp 0x140009b38
lea rdx, str.THA.xml
jmp 0x140009b38
lea rdx, str.TUR.xml
jmp 0x140009b38
lea rdx, str.CHS.xml
jmp 0x140009b38
lea rdx, str.ENU.xml
lea rcx, [rbp - 0x80]
call fcn.14000ef10
nop
mov qword [rdi], r14
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
mov dword [rsp + 0x20], 0x12
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov rcx, qword [rbp - 8]
test cl, 2
je 0x140009b73
test cl, 0x20
je 0x140009b97
mov rax, qword [rbp - 0x38]
mov r8, qword [rax]
test r8, r8
je 0x140009b97
mov rax, qword [rbp - 0x58]
mov rdx, qword [rax]
cmp r8, qword [rbp - 0x10]
cmovb r8, qword [rbp - 0x10]
sub r8, rdx
sar r8, 1
jmp 0x140009bce
test cl, 4
jne 0x140009bc4
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
test rcx, rcx
je 0x140009bc4
mov rax, qword [rbp - 0x60]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x28]
movsxd r8, dword [rax]
add r8, r8
sub r8, rdx
add r8, rcx
sar r8, 1
jmp 0x140009bce
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x140009bdc
mov rcx, rdi
call fcn.140003e40
nop
mov dword [rsp + 0x20], SafeArrayGetDim
lea r9, [0x140244c58]
lea r8, [0x140245318]
mov rdx, rdi
call fcn.140009cb0
nop
lea rcx, [rsp + 0x70]
call fcn.1400068c0
mov rax, rdi
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.1401ad490
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1401b488c
int3