Function at 0x140042e50
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x650]
sub rsp, 0x750
mov rax, qword [0x14012bc80]
xor rax, rsp
mov qword [rbp + 0x640], rax
mov rdi, rcx
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0xfe
mov byte [rsp + 0x40], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x341]
xor edx, edx
mov r8d, 0xfe
mov byte [rbp + 0x340], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x41]
xor edx, edx
mov r8d, 0xfe
mov byte [rbp + 0x40], 0
call fcn.14000cbf0
lea rcx, [rbp + 0x142]
xor ebx, ebx
xor edx, edx
mov r8d, 0x1fc
mov word [rbp + 0x140], bx
call fcn.14000cbf0
lea rcx, [rbp + 0x442]
xor edx, edx
mov r8d, 0x1fc
mov word [rbp + 0x440], bx
call fcn.14000cbf0
lea rcx, [rbp + 0x40]
mov edx, 0xff
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, str.FLEXID_LIBRARY_PATH
call fcn.140044d6c
mov r8, rax
test rax, rax
je 0x14004301c
mov qword [rsp + 0x30], rbx
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], bx
jne 0x140042f32
cmp rcx, 0xff
jbe 0x140042f71
test rdi, rdi
je 0x140043174
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x140043174
mov r9d, 0x2eb
lea r8, str.The__FLEXID_LIBRARY_PATH__path_for_Wibu_exceeded_the_max_limit_of_255_characters_
mov edx, reloc.WS2_32.dll_inet_addr
jmp 0x14004316f
lea rcx, [rbp + 0x440]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], bx
lea rcx, [rcx + 2]
jne 0x140042f80
xor edx, edx
nop dword [rax]
movzx eax, word [r8 + rdx*2]
lea rdx, [rdx + 1]
mov word [rcx + rdx*2 - 2], ax
test ax, ax
jne 0x140042f90
lea r8, [rsp + 0x30]
lea rdx, [0x14011a7a4]
lea rcx, [rbp + 0x440]
call fcn.14000f250
test rax, rax
je 0x14004307c
lea rsi, str.wkwin64.dll
nop dword [rax + rax]
lea r8, str._ls_ls
lea rcx, [rbp + 0x140]
mov r9, rax
mov edx, 0xff
mov qword [rsp + 0x20], rsi
call fcn.140044920
lea rcx, [rbp + 0x140]
call fcn.1400449e0
lea r8, [rsp + 0x30]
lea rdx, [0x14011a7a4]
xor ecx, ecx
mov ebx, eax
call fcn.14000f250
test ebx, ebx
jne 0x140043090
test rax, rax
jne 0x140042fd0
jmp 0x14004307c
lea rax, [rbp + 0x140]
lea r8, [rbp + 0x40]
or r9, 0xffffffffffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], 0xff
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, [rbp + 0x140]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], bx
lea rcx, [rcx + 2]
jne 0x140043050
movups xmm0, xmmword [str.wkwin64.dll]
movsd xmm1, qword [0x14011a7c0]
movzx eax, word [0x14011a7c8]
movups xmmword [rcx], xmm0
movsd qword [rcx + 0x10], xmm1
mov word [rcx + 0x18], ax
lea rcx, [rbp + 0x140]
call fcn.1400449e0
test eax, eax
je 0x14004314f
lea r8, [rbp + 0x340]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x140]
call fcn.140044ad0
test eax, eax
jne 0x1400430d9
test rdi, rdi
je 0x140043174
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x140043174
mov r9d, 0x315
lea r8, str.Unable_to_get_WIBU_DLL_certificate_information_
mov edx, 3
jmp 0x14004316f
lea rdx, str.VeriSign
lea rcx, [rsp + 0x40]
mov r8, rdi
call fcn.14002ae90
test rax, rax
jne 0x14004310b
lea rdx, str.Symantec
lea rcx, [rsp + 0x40]
mov r8, rdi
call fcn.14002ae90
test rax, rax
je 0x14004312d
lea rdx, str.WIBU_SYSTEMS_AG
lea rcx, [rbp + 0x340]
mov r8, rdi
call fcn.14002ae90
test rax, rax
je 0x14004312d
mov eax, 1
jmp 0x140043176
test rdi, rdi
je 0x140043174
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x140043174
mov r9d, 0x321
lea r8, str.WIBU_DLL_Signature_not_matched_
mov edx, 8
jmp 0x14004316f
test rdi, rdi
je 0x140043174
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x140043174
mov r9d, 0x328
lea r8, str.WIBU_DLL_not_found_
mov edx, 7
mov rcx, qword [rdi]
call rax
xor eax, eax
mov rcx, qword [rbp + 0x640]
xor rcx, rsp
call fcn.14000c9f0
lea r11, [rsp + 0x750]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret