Function at 0x1402191c0
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, reloc.SHELL32.dll_IsUserAnAdmin
movaps xmmword [rsp + 0x290], xmm6
mov rbx, r9
mov rsi, r8
mov rdi, rdx
mov rax, qword [0x14040b018]
xor rax, rsp
mov qword [rsp + 0x288], rax
movabs r15, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x40], r15
movaps xmm6, xmmword [0x1403df810]
movaps xmmword [rsp + 0x30], xmm6
cmp byte [rcx + 0x17], 0
jns 0x140219227
mov rdx, qword [rcx]
mov r8, qword [rcx + 8]
lea rcx, [rsp + 0x30]
call fcn.140201fc0
jmp 0x140219238
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x30], xmm0
lea r14, [rsp + 0x80]
mov qword [r14 + 0x10], r15
movaps xmmword [r14], xmm6
lea rdx, str.SOFTWAREPolicies_
mov rcx, r14
call fcn.14036ecf0
mov rcx, rdi
xor edx, edx
mov r8, r14
call fcn.14021a300
xorps xmm0, xmm0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
cmp byte [r14 + 0x17], 0
jns 0x140219284
mov r14, qword [rsp + 0x80]
lea r12, [rsp + 0x60]
mov qword [rsp + 0x20], r12
lea r9, str.UserDataDir
mov ecx, 1
xor edx, edx
mov r8, r14
call fcn.14022f4b0
test al, al
jne 0x1402192e0
cmp byte [rsp + 0x97], 0
jns 0x1402192bc
mov r8, qword [rsp + 0x80]
jmp 0x1402192c4
lea r8, [rsp + 0x80]
mov qword [rsp + 0x20], r12
lea r9, str.UserDataDir
mov ecx, 2
xor edx, edx
call fcn.14022f4b0
test al, al
je 0x140219314
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x60]
call fcn.14022f5b0
cmp byte [rsp + 0x47], 0
jns 0x140219300
mov rcx, qword [rsp + 0x30]
call fcn.1403336f4
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rsp + 0x30], xmm0
cmp byte [rsp + 0x77], 0
jns 0x140219325
mov rcx, qword [rsp + 0x60]
call fcn.1403336f4
cmp byte [rsp + 0x97], 0
jns 0x14021933c
mov rcx, qword [rsp + 0x80]
call fcn.1403336f4
movzx edx, byte [rsp + 0x47]
test dl, dl
mov r9, qword [rsp + 0x38]
mov rax, rdx
cmovs rax, r9
test rax, rax
je 0x14021940d
mov r8d, edx
shr r8b, 7
lea rcx, [rsp + 0x30]
test r8b, 1
je 0x1402193a2
test r9, r9
je 0x14021983d
mov rdx, qword [rsp + 0x30]
movzx edx, word [rdx + r9*2 - 2]
cmp edx, 0x2f
je 0x14021938d
cmp edx, 0x5c
jne 0x1402193fb
dec rax
jmp 0x140219396
dec rax
test r8b, 1
je 0x1402193bf
mov rdx, qword [rsp + 0x30]
mov qword [rsp + 0x38], rax
jmp 0x1402193d0
test dl, dl
je 0x14021983d
movzx edx, dl
movzx edx, word [rsp + rdx*2 + 0x2e]
cmp edx, 0x2f
je 0x1402193bc
cmp edx, 0x5c
jne 0x1402193fb
dec rax
cmp rax, 0xb
jae 0x140219730
mov byte [rsp + 0x47], al
mov rdx, rcx
mov word [rdx + rax*2], 0
movzx edx, byte [rsp + 0x47]
mov r8d, edx
shr r8b, 7
test dl, dl
mov r9, qword [rsp + 0x38]
mov rax, rdx
cmovs rax, r9
test rax, rax
jne 0x140219364
jmp 0x14021940d
lea rcx, [rsp + 0x30]
call fcn.14021b0a0
test al, al
jne 0x14021951f
lea r12, [rsp + 0x30]
cmp r12, rbx
je 0x140219451
cmp byte [rbx + 0x17], 0
movzx r8d, byte [rsp + 0x47]
js 0x140219711
test r8b, r8b
jns 0x140219440
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140202a00
jmp 0x140219451
mov rax, qword [rsp + 0x40]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rbx], xmm0
call fcn.140230410
test al, al
je 0x1402194b7
mov ecx, 0x18
call fcn.1403336b8
mov rdi, rax
mov rcx, rax
call fcn.1403187c0
mov ecx, 4
mov rdx, rdi
call fcn.14020c1e0
test al, al
je 0x140219545
mov qword [rsp + 0x90], r15
movaps xmmword [rsp + 0x80], xmm6
cmp byte [rdi + 0x17], 0
jns 0x14021964f
mov rdx, qword [rdi]
mov r8, qword [rdi + 8]
lea rcx, [rsp + 0x80]
call fcn.140201fc0
jmp 0x140219666
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], r15
movaps xmmword [rbx], xmm6
lea rdx, str.LOCALAPPDATA
mov rcx, rbx
call fcn.14021aba0
movzx eax, byte [rbx + 0x17]
test al, al
jns 0x1402194e5
mov rax, qword [rsp + 0x88]
test rax, rax
jne 0x14021976c
xor r15d, r15d
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x1402195d4
cmp byte [rsp + 0x97], 0
jns 0x14021951a
mov rcx, qword [rsp + 0x80]
call fcn.1403336f4
test r15b, r15b
je 0x140219545
lea rdi, [rsp + 0x80]
mov r8d, 0x208
mov rcx, rdi
mov dl, 0xaa
call fcn.1403369a0
cmp byte [rsp + 0x47], 0
jns 0x140219549
mov rdx, qword [rsp + 0x30]
jmp 0x14021954e
xor esi, esi
jmp 0x140219598
lea rdx, [rsp + 0x30]
mov r8d, 0x104
mov rcx, rdi
call fcn.14034fc90
test rax, rax
jne 0x140219638
xorps xmm0, xmm0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
cmp byte [rsi + 0x17], 0
jns 0x140219584
mov rcx, qword [rsi]
call fcn.1403336f4
mov rax, qword [rsp + 0x70]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x60]
movups xmmword [rsi], xmm0
mov sil, 1
cmp byte [rsp + 0x47], 0
jns 0x1402195a9
mov rcx, qword [rsp + 0x30]
call fcn.1403336f4
mov rcx, qword [rsp + 0x288]
xor rcx, rsp
call fcn.140334bf0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x290]
add rsp, reloc.SHELL32.dll_IsUserAnAdmin
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov r14d, eax
inc r14d
xor r15d, r15d
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.140309970
cmp byte [rsp + 0x97], 0
jns 0x1402195fd
mov rbx, qword [rsp + 0x80]
mov ecx, r14d
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140219503
mov edx, eax
movzx eax, byte [rsp + 0x97]
test al, al
jns 0x140219627
mov rax, qword [rsp + 0x88]
cmp rax, rdx
ja 0x14021975c
xor r15d, r15d
jmp 0x140219503
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x80]
call fcn.14036ecf0
jmp 0x140219576
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm0, xmmword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x40], rcx
movaps xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x30], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rax
movzx ecx, byte [rsp + 0x47]
mov rax, rcx
test cl, cl
jns 0x1402196ab
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x140219811
test cl, cl
jns 0x1402196bf
mov rcx, qword [rsp + 0x30]
jmp 0x1402196c4
lea rcx, [rsp + 0x30]
cmp word [rcx + rax*2 - 2], 0x5c
je 0x1402196da
lea rcx, [rsp + 0x30]
mov dx, 0x5c
call fcn.140309750
lea rdx, str.User_Data
lea rcx, [rsp + 0x30]
mov r8d, 9
call fcn.140202620
cmp byte [rsp + 0x97], 0
jns 0x14021951f
mov rcx, qword [rsp + 0x80]
call fcn.1403336f4
jmp 0x14021951f
test r8b, r8b
cmovs r8, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
cmovns rdx, r12
mov rcx, rbx
call fcn.140202910
jmp 0x140219451
lea rax, str.__s_should_never_be_greater_than_or_equal_to_the_short_string_capacity
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str........._buildtools_third_partylibc_trunkinclude_string
lea r9, str.__s_____min_cap
mov r8d, 0x6c7
call fcn.14036f7d0
lea rcx, [rsp + 0x80]
xor r8d, r8d
call fcn.140309970
movaps xmm0, xmmword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x40], rcx
movaps xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x30], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rax
movzx ecx, byte [rsp + 0x47]
mov rax, rcx
test cl, cl
jns 0x1402197b1
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x140219811
test cl, cl
jns 0x1402197bf
mov r12, qword [rsp + 0x30]
cmp word [r12 + rax*2 - 2], 0x5c
je 0x1402197d6
lea rcx, [rsp + 0x30]
mov dx, 0x5c
call fcn.140309750
mov r15b, 1
lea rbx, [rsp + 0x30]
mov rcx, rdi
mov dl, 1
mov r8, rbx
call fcn.14021a300
mov rcx, rbx
mov dx, 0x5c
call fcn.140309750
lea rdx, str.User_Data
mov r8d, 9
mov rcx, rbx
call fcn.140202620
jmp 0x140219503
lea rax, str.string_index_out_of_bounds
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str........._buildtools_third_partylibc_trunkinclude_string
lea r9, str.__pos___size__
mov r8d, 0x4a1
call fcn.14036f7d0
lea rax, str.string::back__:_string_is_empty
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str........._buildtools_third_partylibc_trunkinclude_string
lea r9, str._empty__
mov r8d, 0x502
call fcn.14036f7d0
int3