Function at 0x10009db4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
push ebx
push esi
push edi
push 0x200
push 0x10148390
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x1009a964
push 0x10148390
call fcn.1001bc40
add esp, 8
cmp dword [ebp + 0xc], 0x2000000
jne 0x10009e08
push 0x1009a970
lea eax, [ebp - 0x84]
push eax
call fcn.1001bc30
add esp, 8
jmp 0x10009e1c
push 0x1009a978
lea eax, [ebp - 0x84]
push eax
call fcn.1001bc30
add esp, 8
mov dword [0x10144f70], 0
jmp 0x10009e31
inc dword [0x10144f70]
cmp dword [0x10144f70], 0x3000
jge 0x10009e5e
mov eax, dword [0x10144f70]
mov byte [eax + 0x101487b0], 0
mov eax, dword [0x10144f70]
mov byte [eax + 0x10144f80], 0
jmp 0x10009e2b
push 0x1014b7b0
push 0x10144f80
push 0x10148390
call fcn.10009a07
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10009e88
mov eax, 0xffffffff
jmp 0x1000a0c1
push 0x10148594
mov ax, word [0x1014b7b0]
push eax
push 0x10144f80
lea eax, [ebp - 0x84]
push eax
call fcn.100073c8
add esp, 0x10
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x10009ed2
push 0x80002
call fcn.100042e2
add esp, 4
mov eax, 0xffffffff
jmp 0x1000a0c1
push 0x1014ba20
xor eax, eax
mov ax, word [0x1014b7b0]
xor ecx, ecx
mov cx, word [0x10148594]
sub eax, ecx
push eax
mov eax, dword [ebp - 0x88]
inc eax
push eax
push 0x1009a984
call fcn.100073c8
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10009f22
mov ax, word [0x1014ba20]
mov word [ebp - 4], ax
jmp 0x10009f39
xor eax, eax
mov ax, word [0x1014b7b0]
xor ecx, ecx
mov cx, word [0x10148594]
sub eax, ecx
mov word [ebp - 4], ax
push 0x10148596
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.100073c8
add esp, 0x10
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x1000a0ba
push 0x10148386
push 0x50
mov eax, dword [ebp + 8]
push eax
call fcn.1001bd20
add esp, 4
xor ecx, ecx
mov cx, word [0x10148596]
add eax, ecx
add eax, dword [ebp - 0x88]
inc eax
push eax
push 0x1009a158
call fcn.100073c8
add esp, 0x10
xor ebx, ebx
mov bx, word [0x1014b7b0]
mov eax, dword [ebp + 8]
push eax
call fcn.1001bd20
add esp, 4
xor ecx, ecx
mov cx, word [0x10148596]
xor edx, edx
mov dx, word [0x10148594]
add ecx, edx
add eax, ecx
xor ecx, ecx
mov cx, word [0x10148386]
add eax, ecx
inc eax
sub ebx, eax
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.1001bd20
add esp, 4
xor ecx, ecx
mov cx, word [0x10148386]
add eax, ecx
xor ecx, ecx
mov cx, word [0x10148596]
add eax, ecx
add eax, dword [ebp - 0x88]
add eax, 3
push eax
push 0x101487b0
call fcn.1001c290
add esp, 0xc
xor ebx, ebx
mov bx, word [0x1014b7b0]
mov eax, dword [ebp + 8]
push eax
call fcn.1001bd20
add esp, 4
xor ecx, ecx
mov cx, word [0x10148596]
xor edx, edx
mov dx, word [0x10148594]
add ecx, edx
add eax, ecx
xor ecx, ecx
mov cx, word [0x10148386]
add eax, ecx
inc eax
sub ebx, eax
push ebx
push 0x101487b0
xor eax, eax
mov ax, word [0x10148596]
add eax, dword [ebp - 0x88]
push eax
call fcn.1001c290
add esp, 0xc
xor ebx, ebx
mov bx, word [0x1014b7b0]
mov eax, dword [ebp + 8]
push eax
call fcn.1001bd20
add esp, 4
xor ecx, ecx
mov cx, word [0x10148386]
add eax, ecx
add eax, 3
sub ebx, eax
mov word [0x1014b7b0], bx
push 0x1014b7b0
push 0x10144f80
push 0x10148390
call fcn.10009b50
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1000a0ba
mov eax, 0xffffffff
jmp 0x1000a0c1
xor eax, eax
jmp 0x1000a0c1
pop edi
pop esi
pop ebx
leave
ret