Function at 0x14009c964
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r15, rcx
xor r13d, r13d
xor ecx, ecx
xor edx, edx
mov ebp, r13d
mov r12d, r8d
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jne 0x14009ca02
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov rcx, qword [0x140183048]
lea rax, [0x140183048]
cmp rcx, rax
je 0x14009cbc7
test byte [rcx + 0x1c], 1
je 0x14009cbc7
cmp byte [rcx + 0x19], 2
jb 0x14009cbc7
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x3e]
mov r9d, ebx
lea r8, [0x1401621a0]
call fcn.140004e7c
jmp 0x14009cbc7
or rbx, 0xffffffffffffffff
mov rdx, rbx
inc rdx
cmp word [r15 + rdx*2], r13w
jne 0x14009ca09
lea r14d, [rax + 1]
xor ecx, ecx
inc r14
add r14, rdx
lea rdx, [r14 + r14]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14009ca41
mov ebx, 0x8007000e
jmp 0x14009cbe3
mov edx, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
nop dword [rax + rax]
cmp eax, esi
ja 0x14009cb77
test eax, eax
je 0x14009cb5b
inc rbx
cmp word [rdi + rbx*2], r13w
jne 0x14009ca62
mov eax, 0x5c
cmp ax, word [rdi + rbx*2 - 2]
je 0x14009cad8
lea r8, [0x14015ab98]
mov rdx, r14
mov rcx, rdi
call fcn.1400536a4
mov ebx, eax
test eax, eax
jns 0x14009cad8
mov rcx, qword [0x140183048]
lea rax, [0x140183048]
cmp rcx, rax
je 0x14009cbb3
test byte [rcx + 0x1c], 1
je 0x14009cbb3
cmp byte [rcx + 0x19], 2
jb 0x14009cbb3
mov edx, 0x40
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401621a0]
mov r9d, ebx
call fcn.140004e7c
jmp 0x14009cbb3
mov r8, r15
mov rdx, r14
mov rcx, rdi
call fcn.1400536a4
mov ebx, eax
test eax, eax
jns 0x14009cb1e
mov rcx, qword [0x140183048]
lea rax, [0x140183048]
cmp rcx, rax
je 0x14009cbb3
test byte [rcx + 0x1c], 1
je 0x14009cbb3
cmp byte [rcx + 0x19], 2
jb 0x14009cbb3
mov edx, 0x41
jmp 0x14009cac0
mov r8d, r12d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x14009cb56
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x14009cbb3
mov ebx, r13d
jmp 0x14009cbb3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x14009cb7c
mov ebx, 0x8007006f
mov rcx, qword [0x140183048]
lea rax, [0x140183048]
cmp rcx, rax
je 0x14009cbb3
test byte [rcx + 0x1c], 1
je 0x14009cbb3
cmp byte [rcx + 0x19], 2
jb 0x14009cbb3
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401621a0]
mov edx, 0x3f
mov r9d, ebx
call fcn.140004e7c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
test rbp, rbp
jne 0x14009cbf1
test ebx, ebx
jne 0x14009cbe3
lea r8, str.S_OK___hr
mov edx, 0x64c
lea rcx, str.base_stor_blbutil_blbutility.cpp
call fcn.14008f4c8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x50]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret