Function at 0x14001d546
Capabilities:
Get common file path
Query environment variable

Disassembly:
jmp 0x14004ecf0
push rbp
push rdi
sub rsp, 0xf98
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x2be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
lea rcx, [0x1400856f0]
call fcn.14001df69
mov dword [rbp + 0x24], 0
cmp dword [0x1400799c8], 0
je 0x14004ed36
mov eax, 1
jmp 0x14004f021
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov edx, 0x410
lea rcx, [rbp + 0x50]
call fcn.14001dad2
lea rdx, [rbp + 0x50]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x14004ed6d
cmp dword [rbp + 4], 0x104
jbe 0x14004ed86
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_current_directory
call fcn.14001db9f
jmp 0x14004efd4
lea rdx, [0x14005fb28]
lea rcx, [rbp + 0x50]
call fcn.14001dec9
lea rcx, [rbp + 0x50]
call fcn.14001dffa
mov qword [rbp + 0x478], rax
lea rdx, str.dbghelp.dll
mov rcx, qword [rbp + 0x478]
call fcn.14001dec9
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400799b8], rax
cmp qword [0x1400799b8], 0
jne 0x14004eded
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_dbghelp.dll__make_sure_it_is_in_program_directory
call fcn.14001db9f
jmp 0x14004efd4
xor eax, eax
mov rcx, qword [rbp + 0x478]
mov word [rcx], ax
lea rdx, str.symsrv.dll
mov rcx, qword [rbp + 0x478]
call fcn.14001dec9
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400799c0], rax
cmp qword [0x1400799c0], 0
jne 0x14004ee40
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_symsrv.dll__make_sure_it_is_in_program_directory
call fcn.14001db9f
jmp 0x14004efd4
lea rdx, str.SymSetOptions
mov rcx, qword [0x1400799b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140079998], rax
lea rdx, str.SymInitializeW
mov rcx, qword [0x1400799b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400799a0], rax
lea rdx, str.SymLoadModuleExW
mov rcx, qword [0x1400799b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400799a8], rax
lea rdx, str.SymFromName
mov rcx, qword [0x1400799b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400799b0], rax
cmp qword [0x140079998], 0
je 0x14004eed4
cmp qword [0x1400799a0], 0
je 0x14004eed4
cmp qword [0x1400799a8], 0
je 0x14004eed4
cmp qword [0x1400799b0], 0
jne 0x14004eeea
lea rdx, str.____Not_all_symbol_API_pointers_resolved__abort_r_n
mov ecx, 1
call fcn.14001d46f
jmp 0x14004efd4
mov ecx, 0x10603
call qword [0x140079998]
mov edx, 0x410
lea rcx, [rbp + 0x4a0]
call fcn.14001dad2
mov edx, 0x20a
lea rcx, [rbp + 0x8d0]
call fcn.14001dad2
mov r8d, 0x104
lea rdx, [rbp + 0x8d0]
lea rcx, str._temp_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
jbe 0x14004ef64
cmp dword [rbp + 4], 0x104
jae 0x14004ef64
lea r9, [rbp + 0x8d0]
lea r8, str.srv_wsSymbolshttps:__msdl.microsoft.com_download_symbols
mov edx, 0x208
lea rcx, [rbp + 0x4a0]
call fcn.14001da14
jmp 0x14004ef7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_temp_directory
call fcn.14001db9f
jmp 0x14004efd4
xor r8d, r8d
lea rdx, [rbp + 0x4a0]
mov rcx, 0xffffffffffffffff
call qword [0x1400799a0]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jne 0x14004efb0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____SymInitialize_failed
call fcn.14001db9f
jmp 0x14004efc1
lea rdx, str.___Symbols_initialized_r_n
mov ecx, 2
call fcn.14001d46f
mov eax, dword [rbp + 0x24]
mov dword [0x1400799c8], eax
xor eax, eax
test eax, eax
jne 0x14004ed3e
cmp dword [rbp + 0x24], 0
jne 0x14004f01e
cmp qword [0x1400799b8], 0
je 0x14004effc
mov rcx, qword [0x1400799b8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1400799b8], 0
cmp qword [0x1400799c0], 0
je 0x14004f01e
mov rcx, qword [0x1400799c0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1400799c0], 0
mov eax, dword [rbp + 0x24]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14006f600]
call fcn.14001dcb2
mov rax, rdi
lea rsp, [rbp + 0xf78]
pop rdi
pop rbp
ret