Function at 0x14009c134
Capabilities:
Get common file path
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x750]
sub rsp, 0x850
bt qword [0x14009f2d0], 0
mov rdi, rdx
mov rbx, rcx
lea rdx, str.LoadLibraryExW
lea rcx, [0x1400a1058]
mov r14d, r8d
call fcn.14009cacc
xor r12d, r12d
mov qword [rsp + 0x28], rax
mov rsi, rax
test rax, rax
jne 0x14009c19f
mov ecx, 0x65b
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x14009c5c7
test r14d, r14d
je 0x14009c5bc
bt qword [0x14009f2c8], 0
lea rdx, str.AddDllDirectory
lea rcx, [0x1400a1050]
call fcn.14009cacc
test rax, rax
jne 0x14009c5bc
mov esi, r14d
and esi, 0xffffff00
je 0x14009c26a
test r14d, 0xffffe00c
jne 0x14009c5b2
test rbx, rbx
je 0x14009c5b2
test rdi, rdi
jne 0x14009c5b2
movzx r14d, r14b
mov eax, 0xe00
bt esi, 0xc
jae 0x14009c210
btr esi, 0xc
or esi, eax
cmp esi, eax
je 0x14009c26a
bt qword [0x14009f2b8], 0
lea rdx, str.RtlDetermineDosPathNameType_U
lea rcx, [0x1400a1040]
call fcn.14009cacc
test rax, rax
je 0x14009c23c
mov rcx, rbx
call rax
jmp 0x14009c23f
mov eax, r12d
mov r13d, esi
mov ecx, 0x29
and r13d, 0x100
je 0x14009c27c
cmp eax, 5
ja 0x14009c25e
bt ecx, eax
jb 0x14009c5b2
cmp esi, 0xf00
jne 0x14009c27c
or r14d, 8
mov r8d, r14d
mov rdx, rdi
mov rcx, rbx
call qword [rsp + 0x28]
jmp 0x14009c5a7
mov r15d, 0x400
test r15d, esi
jne 0x14009c5b2
test r14b, 0x62
je 0x14009c3b8
cmp eax, 5
ja 0x14009c26a
bt ecx, eax
jae 0x14009c26a
or edi, 0xffffffff
mov r12d, 0x5c
bt esi, 9
jae 0x14009c342
mov r8d, r15d
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, eax
lea ecx, [rdx - 1]
cmp ecx, 0x3fe
ja 0x14009c18d
xor r13d, r13d
movzx eax, word [rsp + rdx*2 + 0x50]
cmp ax, r12w
je 0x14009c2f3
cmp ax, 0x2f
je 0x14009c2f3
test edx, edx
je 0x14009c18d
add edx, edi
jmp 0x14009c2d6
inc edx
mov r8, rbx
cmp word [rbx], r13w
je 0x14009c31c
cmp edx, r15d
jae 0x14009c18d
movzx eax, word [r8]
add r8, 2
mov word [rsp + rdx*2 + 0x50], ax
inc edx
cmp word [r8], r13w
jne 0x14009c2fe
lea rcx, [rsp + 0x50]
mov word [rsp + rdx*2 + 0x50], r13w
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, edi
je 0x14009c342
mov rdi, qword [rbp + 0x798]
lea rbx, [rsp + 0x50]
jmp 0x14009c26a
bt esi, 0xb
jae 0x14009c3ae
mov edx, r15d
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edx, eax
lea ecx, [rdx - 1]
cmp ecx, 0x3fe
ja 0x14009c18d
cmp word [rsp + rdx*2 + 0x50], r12w
je 0x14009c377
inc edx
mov word [rsp + rdx*2 + 0x50], r12w
xor r12d, r12d
jmp 0x14009c393
cmp edx, r15d
jae 0x14009c18d
movzx eax, word [rbx]
add rbx, 2
mov word [rsp + rdx*2 + 0x50], ax
inc edx
cmp word [rbx], r12w
jne 0x14009c37c
lea rcx, [rsp + 0x50]
mov word [rsp + rdx*2 + 0x50], r12w
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, edi
jne 0x14009c331
mov ecx, 0x7e
jmp 0x14009c192
bt qword [0x14009f2c0], 0
lea rdx, str.LdrLoadDll
lea rcx, [0x1400a1048]
call fcn.14009cacc
xor r9d, r9d
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14009c18d
lea r12d, [r9 + 0x5c]
mov edi, r9d
lea r10d, [r9 + 0x3b]
test r13d, r13d
je 0x14009c45b
mov rdx, rbx
cmp word [rbx], r9w
je 0x14009c18d
lea r13d, [r9 + 2]
mov r8d, edi
cmp edi, r15d
jae 0x14009c18d
movzx ecx, word [rdx]
add rdx, r13
mov eax, edi
inc edi
mov word [rsp + rax*2 + 0x50], cx
cmp word [rdx], r9w
jne 0x14009c406
test edi, edi
je 0x14009c18d
mov edi, r8d
jmp 0x14009c449
cmp cx, 0x2f
je 0x14009c44f
test edi, edi
je 0x14009c18d
dec edi
movzx ecx, word [rsp + rdi*2 + 0x50]
cmp cx, r12w
jne 0x14009c434
inc edi
mov word [rsp + rdi*2 + 0x50], r10w
inc edi
jmp 0x14009c461
mov r13d, 2
bt esi, 9
jae 0x14009c4ca
mov ecx, r15d
mov eax, edi
sub ecx, edi
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x20], ecx
mov r8d, ecx
xor ecx, ecx
lea rdx, [rdx + rax*2]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r9d, r9d
test eax, eax
je 0x14009c18d
cmp eax, dword [rsp + 0x20]
jae 0x14009c18d
dec edi
add edi, eax
jmp 0x14009c4b1
cmp cx, 0x2f
je 0x14009c4bc
test edi, edi
je 0x14009c18d
dec edi
movzx ecx, word [rsp + rdi*2 + 0x50]
cmp cx, r12w
jne 0x14009c4a1
inc edi
mov ecx, 0x3b
mov word [rsp + rdi*2 + 0x50], cx
inc edi
bt esi, 0xb
jae 0x14009c4fd
mov eax, edi
lea rcx, [rsp + 0x50]
sub r15d, edi
mov edx, r15d
lea rcx, [rcx + rax*2]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor r9d, r9d
test eax, eax
je 0x14009c18d
cmp eax, r15d
jae 0x14009c18d
add edi, eax
mov eax, edi
mov qword [rsp + 0x40], rbx
mov word [rsp + rax*2 + 0x50], r9w
mov rax, rbx
jmp 0x14009c512
add rbx, r13
cmp word [rbx], r9w
jne 0x14009c50f
sub rbx, rax
sar rbx, 1
add rbx, rbx
lea rax, [rbx + 2]
cmp rax, 0xffff
ja 0x14009c5b2
mov word [rsp + 0x38], bx
mov eax, r9d
add bx, r13w
mov qword [rsp + 0x30], r9
mov word [rsp + 0x3a], bx
mov dword [rbp + 0x7a8], r9d
test r14b, 1
je 0x14009c55e
mov dword [rbp + 0x7a8], r13d
mov eax, r13d
test r14b, 0x10
je 0x14009c56e
bts eax, 0xc
mov dword [rbp + 0x7a8], eax
test r14b, r14b
jns 0x14009c57d
bts eax, 0x17
mov dword [rbp + 0x7a8], eax
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x7a8]
lea rcx, [rsp + 0x50]
call qword [rsp + 0x28]
test eax, eax
jns 0x14009c5a2
mov ecx, eax
call fcn.14009c86c
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14009c198
jmp 0x14009c5c7
mov ecx, 0x57
jmp 0x14009c192
mov r8d, r14d
mov rdx, rdi
mov rcx, rbx
call rsi
mov rbx, qword [rsp + 0x890]
add rsp, 0x850
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret