Function at 0x140094b64
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r15, rcx
xor r13d, r13d
xor ecx, ecx
xor edx, edx
mov ebp, r13d
mov r12d, r8d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jne 0x140094c02
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140094dc7
test byte [rcx + 0x1c], 1
je 0x140094dc7
cmp byte [rcx + 0x19], 2
jb 0x140094dc7
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x3e]
mov r9d, ebx
lea r8, [0x140159980]
call fcn.140004b9c
jmp 0x140094dc7
or rbx, 0xffffffffffffffff
mov rdx, rbx
inc rdx
cmp word [r15 + rdx*2], r13w
jne 0x140094c09
lea r14d, [rax + 1]
xor ecx, ecx
inc r14
add r14, rdx
lea rdx, [r14 + r14]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x140094c41
mov ebx, 0x8007000e
jmp 0x140094de3
mov edx, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
cmp eax, esi
ja 0x140094d77
test eax, eax
je 0x140094d5b
inc rbx
cmp word [rdi + rbx*2], r13w
jne 0x140094c62
mov eax, 0x5c
cmp ax, word [rdi + rbx*2 - 2]
je 0x140094cd8
lea r8, [0x140152808]
mov rdx, r14
mov rcx, rdi
call fcn.140053064
mov ebx, eax
test eax, eax
jns 0x140094cd8
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140094db3
test byte [rcx + 0x1c], 1
je 0x140094db3
cmp byte [rcx + 0x19], 2
jb 0x140094db3
mov edx, 0x40
mov rcx, qword [rcx + 0x10]
lea r8, [0x140159980]
mov r9d, ebx
call fcn.140004b9c
jmp 0x140094db3
mov r8, r15
mov rdx, r14
mov rcx, rdi
call fcn.140053064
mov ebx, eax
test eax, eax
jns 0x140094d1e
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140094db3
test byte [rcx + 0x1c], 1
je 0x140094db3
cmp byte [rcx + 0x19], 2
jb 0x140094db3
mov edx, 0x41
jmp 0x140094cc0
mov r8d, r12d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x140094d56
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x140094db3
mov ebx, r13d
jmp 0x140094db3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x140094d7c
mov ebx, 0x8007006f
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140094db3
test byte [rcx + 0x1c], 1
je 0x140094db3
cmp byte [rcx + 0x19], 2
jb 0x140094db3
mov rcx, qword [rcx + 0x10]
lea r8, [0x140159980]
mov edx, 0x3f
mov r9d, ebx
call fcn.140004b9c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
test rbp, rbp
jne 0x140094df1
test ebx, ebx
jne 0x140094de3
lea r8, str.S_OK___hr
mov edx, 0x64c
lea rcx, str.base_stor_blbutil_blbutility.cpp
call fcn.1400876c8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x50]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret