Function at 0x1000bf848
Capabilities:
Get common file path

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x20], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x300
mov rax, qword [0x10010f190]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov edi, dword [0x10011c8f4]
xor r14d, r14d
mov rbp, rcx
mov esi, reloc.certcli.dll_Ordinal_260
lea rdx, [r11 - 0x298]
mov ebx, r8d
mov ecx, esi
mov qword [rsp + 0x30], r14
mov r13, r14
mov r12, r14
mov word [r11 - 0x298], r14w
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, r14d
je 0x1000bf8b3
cmp eax, esi
jb 0x1000bf8df
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
cmp eax, r14d
je 0x1000bf8d6
xor r9d, r9d
mov r8d, eax
mov edx, 0xcaf01a3
xor ecx, ecx
call fcn.1000b51b8
mov word [rsp + 0x90], r14w
mov esi, 0x12d
lea rcx, [rsp + 0x90]
mov rax, rsi
cmp word [rcx], r14w
je 0x1000bf8ff
add rcx, 2
sub rax, 1
jne 0x1000bf8ef
cmp rax, r14
je 0x1000bfb31
mov rcx, rsi
sub rcx, rax
cmp rcx, r14
je 0x1000bf922
mov eax, 0x5c
cmp ax, word [rsp + rcx*2 + 0x8e]
je 0x1000bf94b
lea r8, [0x100014f4c]
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.100038a50
cmp eax, r14d
je 0x1000bf94b
mov r8d, eax
mov edx, 0xcbd01a3
jmp 0x1000bfb3c
lea r8, str.Chain_d__d.txt
lea rcx, [rsp + 0x40]
mov r9d, edi
mov edx, Ordinal_41
mov dword [rsp + 0x20], ebx
call fcn.100038358
cmp eax, r14d
je 0x1000bf97a
mov r8d, eax
mov edx, 0xcc501a3
jmp 0x1000bfb3c
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.100038a50
cmp eax, r14d
je 0x1000bf9a1
mov r8d, eax
mov edx, 0xcc801a3
jmp 0x1000bfb3c
lea r8, [0x100029c40]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x30]
call qword [sym.imp.msvcrt.dll__wfopen_s]
cmp eax, r14d
je 0x1000bf9e8
lea rcx, [rsp + 0x90]
xor r9d, r9d
mov r8d, eax
mov edx, 0xcd001a3
call fcn.1000b51b8
mov edx, 0xcd201a3
mov r8d, 0x80070002
jmp 0x1000bfb3c
mov ebx, r14d
cmp dword [rbp + 0xc], r14d
jbe 0x1000bfb46
mov rsi, r14
mov rax, qword [rbp + 0x10]
mov rdi, qword [rsi + rax]
cmp ebx, r14d
jbe 0x1000bfa17
mov rdx, qword [rsp + 0x30]
lea rcx, [0x10000d4c8]
call qword [sym.imp.msvcrt.dll_fputws]
mov rcx, qword [rsp + 0x30]
lea rdx, [0x100029c60]
mov r8d, ebx
call qword [sym.imp.msvcrt.dll_fwprintf]
mov rdx, qword [rdi + 8]
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rdx + 0x10]
mov rdx, qword [rdx + 8]
xor r9d, r9d
call fcn.1000bf6a8
cmp eax, r14d
jne 0x1000bfb27
mov rax, qword [rdi + 0x18]
cmp rax, r14
je 0x1000bfb03
cmp dword [rax], 0x28
jb 0x1000bfb03
mov rdi, qword [rax + 0x20]
cmp rdi, r14
je 0x1000bfb03
mov rdx, qword [rdi + 8]
cmp rdx, r14
je 0x1000bfaba
xor ecx, ecx
call fcn.1000bf748
mov rcx, qword [rsp + 0x30]
lea rdx, [0x100029c88]
mov r8, rax
mov r13, rax
call qword [sym.imp.msvcrt.dll_fwprintf]
mov rdx, qword [rdi + 8]
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rdx + 0x10]
mov rdx, qword [rdx + 8]
mov r9d, 9
call fcn.1000bf6a8
cmp eax, r14d
jne 0x1000bfb13
mov rdx, qword [rdi + 0x10]
cmp rdx, r14
je 0x1000bfb03
xor ecx, ecx
call fcn.1000bf748
mov rcx, qword [rsp + 0x30]
lea rdx, [0x100029ca0]
mov r8, rax
mov r12, rax
call qword [sym.imp.msvcrt.dll_fwprintf]
mov rdx, qword [rdi + 0x10]
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rdx + 0x10]
mov rdx, qword [rdx + 8]
mov r9d, 9
call fcn.1000bf6a8
cmp eax, r14d
jne 0x1000bfb1d
inc ebx
add rsi, 8
cmp ebx, dword [rbp + 0xc]
jae 0x1000bfb46
jmp 0x1000bf9f8
mov r8d, eax
mov edx, 0xcfe01a3
jmp 0x1000bfb3c
mov r8d, eax
mov edx, 0xd0b01a3
jmp 0x1000bfb3c
mov r8d, eax
mov edx, 0xce501a3
jmp 0x1000bfb3c
mov edx, 0xcb701a3
mov r8d, 0x80070057
xor r9d, r9d
xor ecx, ecx
call fcn.1000b51b8
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x30]
cmp rcx, r14
je 0x1000bfb68
call qword [sym.imp.msvcrt.dll_fclose]
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.1000ef870
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret