Function at 0x140094fa4
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r15, rcx
xor r13d, r13d
xor ecx, ecx
xor edx, edx
mov ebp, r13d
mov r12d, r8d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jne 0x140095042
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x140095207
test byte [rcx + 0x1c], 1
je 0x140095207
cmp byte [rcx + 0x19], 2
jb 0x140095207
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x3e]
mov r9d, ebx
lea r8, [0x14015aaf0]
call fcn.140004c3c
jmp 0x140095207
or rbx, 0xffffffffffffffff
mov rdx, rbx
inc rdx
cmp word [r15 + rdx*2], r13w
jne 0x140095049
lea r14d, [rax + 1]
xor ecx, ecx
inc r14
add r14, rdx
lea rdx, [r14 + r14]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x140095081
mov ebx, 0x8007000e
jmp 0x140095223
mov edx, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
cmp eax, esi
ja 0x1400951b7
test eax, eax
je 0x14009519b
inc rbx
cmp word [rdi + rbx*2], r13w
jne 0x1400950a2
mov eax, 0x5c
cmp ax, word [rdi + rbx*2 - 2]
je 0x140095118
lea r8, [0x140153978]
mov rdx, r14
mov rcx, rdi
call fcn.140053464
mov ebx, eax
test eax, eax
jns 0x140095118
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x1400951f3
test byte [rcx + 0x1c], 1
je 0x1400951f3
cmp byte [rcx + 0x19], 2
jb 0x1400951f3
mov edx, 0x40
mov rcx, qword [rcx + 0x10]
lea r8, [0x14015aaf0]
mov r9d, ebx
call fcn.140004c3c
jmp 0x1400951f3
mov r8, r15
mov rdx, r14
mov rcx, rdi
call fcn.140053464
mov ebx, eax
test eax, eax
jns 0x14009515e
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x1400951f3
test byte [rcx + 0x1c], 1
je 0x1400951f3
cmp byte [rcx + 0x19], 2
jb 0x1400951f3
mov edx, 0x41
jmp 0x140095100
mov r8d, r12d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x140095196
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x1400951f3
mov ebx, r13d
jmp 0x1400951f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x1400951bc
mov ebx, 0x8007006f
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x1400951f3
test byte [rcx + 0x1c], 1
je 0x1400951f3
cmp byte [rcx + 0x19], 2
jb 0x1400951f3
mov rcx, qword [rcx + 0x10]
lea r8, [0x14015aaf0]
mov edx, 0x3f
mov r9d, ebx
call fcn.140004c3c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
test rbp, rbp
jne 0x140095231
test ebx, ebx
jne 0x140095223
lea r8, str.S_OK___hr
mov edx, 0x64c
lea rcx, str.base_stor_blbutil_blbutility.cpp
call fcn.140087b08
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x50]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret