Function at 0x140156b90
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4a8
mov rsi, rcx
lea rdx, str.HOMEUSERPROFILE_library_std_src_syswindowspath.rs
lea rcx, [rsp + 0xa8]
mov r8d, 4
call fcn.140155310
cmp byte [rsp + 0xc0], 2
jne 0x140156be3
lea rdx, [0x14032a74c]
lea rcx, [rsp + 0x30]
mov r8d, 0xb
call fcn.140155310
jmp 0x140156bfd
movups xmm0, xmmword [rsp + 0xa8]
movups xmm1, xmmword [rsp + 0xb8]
movaps xmmword [rsp + 0x40], xmm1
movaps xmmword [rsp + 0x30], xmm0
movzx eax, byte [rsp + 0x48]
cmp al, 2
jne 0x140156d98
call sub.KERNEL32.dll_GetCurrentProcess
mov qword [rsp + 0x60], 0
lea r8, [rsp + 0x60]
mov rcx, rax
mov edx, 0x20008
call sub.ADVAPI32.dll_OpenProcessToken
test eax, eax
je 0x140156dbf
mov qword [rsp + 0x58], rsi
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x68], 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
xor r12d, r12d
mov edi, 0xffffffff
xor r14d, r14d
xor r13d, r13d
cmp r8, 0x201
jae 0x140156cb0
jmp 0x140156c8f
jae 0x140156dc8
cmp r8, 0x201
jae 0x140156cb0
mov ebx, 0x200
lea r15, [rsp + 0xa8]
mov rbp, r8
jmp 0x140156cf7
sub r8, r13
sub r14, r13
cmp r14, r8
jae 0x140156cd7
lea rcx, [rsp + 0x68]
mov rdx, r13
call fcn.140138030
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov r12, qword [rsp + 0x70]
cmp r12, rdi
mov r13d, 0xffffffff
cmovb r13, r12
mov qword [rsp + 0x78], r13
mov r14, r12
mov rbx, r13
mov r15, qword [rsp + 0x28]
mov rbp, r13
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov dword [rsp + 0x30], ebp
mov rcx, rsi
mov rdx, r15
lea r8, [rsp + 0x30]
call sub.userenv.dll_GetUserProfileDirectoryW
test eax, eax
je 0x140156d30
mov ecx, dword [rsp + 0x30]
dec ecx
test ecx, ecx
jne 0x140156d5f
jmp 0x140156d50
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140156d50
mov ecx, dword [rsp + 0x30]
test ecx, ecx
jne 0x140156d5f
nop word cs:[rax + rax]
call sub.KERNEL32.dll_GetLastError
xor ecx, ecx
test eax, eax
jne 0x140156e67
mov r8d, ecx
cmp rbp, r8
jne 0x140156c80
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140156e92
add rbp, rbp
cmp rbp, rdi
cmovae rbp, rdi
mov r8, rbp
cmp r8, 0x201
jb 0x140156c8f
jmp 0x140156cb0
mov rcx, qword [rsp + 0x40]
mov qword [rsi + 0x10], rcx
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rsi], xmm0
mov ecx, dword [rsp + 0x49]
mov edx, dword [rsp + 0x4c]
mov dword [rsi + 0x19], ecx
mov dword [rsi + 0x1c], edx
mov byte [rsi + 0x18], al
jmp 0x140156e52
mov byte [rsi + 0x18], 2
jmp 0x140156e52
cmp rbx, r8
jb 0x140156eac
lea rcx, [rsp + 0x30]
mov rdx, r15
call fcn.14013a160
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
test r12, r12
je 0x140156e0c
mov edx, 2
mov rcx, qword [rsp + 0x28]
call fcn.14001c120
cmp byte [rsp + 0x98], 2
jne 0x140156e2e
mov rax, qword [rsp + 0x58]
mov byte [rax + 0x18], 2
lea rcx, [rsp + 0x80]
call fcn.14013a0b0
jmp 0x140156e4a
movaps xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
mov rax, qword [rsp + 0x58]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov rcx, rsi
call fcn.14018750c
nop
add rsp, 0x4a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x80], rax
mov byte [rsp + 0x98], 2
test r12, r12
jne 0x140156dfd
jmp 0x140156e0c
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.14003cdd0
jmp 0x140156ec1
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, rbx
mov r8, rax
call fcn.14003ca30
ud2