Function at 0x1400137c0
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov eax, 0x1270
call fcn.140026850
sub rsp, rax
xor r14d, r14d
xor ecx, ecx
mov ebx, r14d
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
xor eax, eax
lea rdi, [rsp + 0x250]
mov ecx, 0x410
lea rdx, [rsp + 0x250]
rep stosb byte [rdi], al
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec eax
cmp eax, 0x103
ja 0x140013c45
lea rdx, [0x140190b90]
lea rcx, [rsp + 0x250]
call fcn.140022b20
lea rcx, [rsp + 0x250]
call fcn.1400255c0
lea rdx, str.dbghelp.dll
mov rcx, rax
mov rdi, rax
call fcn.140022b20
lea rcx, [rsp + 0x250]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1401a59e8], rax
test rax, rax
jne 0x14001387c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_load_dbghelp.dll__make_sure_it_is_in_program_directory
jmp 0x140013c52
lea rdx, str.symsrv.dll
mov word [rdi], r14w
mov rcx, rdi
call fcn.140022b20
lea rcx, [rsp + 0x250]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1401a59d8], rax
test rax, rax
jne 0x1400138bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_load_symsrv.dll__make_sure_it_is_in_program_directory
jmp 0x140013c52
mov rsi, qword [0x1401a59e8]
lea rdi, [0x14019e350]
mov qword [rsp + 0x1280], rbp
lea rbp, [0x14019f0a0]
cmp rsi, 0x1337
jne 0x140013935
lea rdx, str.gProvTable
lea rcx, str.SymSetOptions
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14001390b
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gProvTable__r_n
call fcn.140001980
mov rax, rdi
jmp 0x140013945
lea rdx, str.gVersion
lea rcx, str.SymSetOptions
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013935
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gVersion__r_n
call fcn.140001980
mov rax, rbp
jmp 0x140013945
lea rdx, str.SymSetOptions
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, qword [0x1401a59e8]
mov qword [0x1401a59c0], rax
cmp rsi, 0x1337
jne 0x1400139b0
lea rdx, str.gProvTable
lea rcx, str.SymInitializeW
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013986
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gProvTable__r_n
call fcn.140001980
mov rax, rdi
jmp 0x1400139c0
lea rdx, str.gVersion
lea rcx, str.SymInitializeW
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1400139b0
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gVersion__r_n
call fcn.140001980
mov rax, rbp
jmp 0x1400139c0
lea rdx, str.SymInitializeW
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, qword [0x1401a59e8]
mov qword [0x1401a59b8], rax
cmp rsi, 0x1337
jne 0x140013a2b
lea rdx, str.gProvTable
lea rcx, str.SymLoadModuleExW
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013a01
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gProvTable__r_n
call fcn.140001980
mov rax, rdi
jmp 0x140013a3b
lea rdx, str.gVersion
lea rcx, str.SymLoadModuleExW
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013a2b
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gVersion__r_n
call fcn.140001980
mov rax, rbp
jmp 0x140013a3b
lea rdx, str.SymLoadModuleExW
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, qword [0x1401a59e8]
mov qword [0x1401a59a8], rax
cmp rsi, 0x1337
jne 0x140013aa3
lea rdx, str.gProvTable
lea rcx, str.SymFromName
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013a79
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gProvTable__r_n
call fcn.140001980
jmp 0x140013ab6
lea rdx, str.gVersion
lea rcx, str.SymFromName
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140013aa3
lea rcx, str.____Hello_from_GetProcAddress_polyfill__gVersion__r_n
call fcn.140001980
mov rdi, rbp
jmp 0x140013ab6
lea rdx, str.SymFromName
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov rax, qword [0x1401a59c0]
mov rbp, qword [rsp + 0x1280]
mov qword [0x1401a59b0], rdi
test rax, rax
je 0x140013c32
cmp qword [0x1401a59b8], rbx
je 0x140013c32
cmp qword [0x1401a59a8], rbx
je 0x140013c32
test rdi, rdi
je 0x140013c32
mov ecx, 0x10603
call rax
xor eax, eax
lea rdi, [rsp + 0x660]
mov ecx, 0x410
lea rdx, [rsp + 0x40]
rep stosb byte [rdi], al
lea rdi, [rsp + 0x40]
mov ecx, 0x20a
rep stosb byte [rdi], al
lea rcx, [0x1401918f8]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x102
ja 0x140013c23
lea r9, [rsp + 0x40]
mov edx, 0x208
lea r8, str.srv_wsSymbolshttps:__msdl.microsoft.com_download_symbols
lea rcx, [rsp + 0x660]
call fcn.140001c40
mov rax, qword [0x1401a59b8]
lea rdx, [rsp + 0x660]
xor r8d, r8d
mov rcx, 0xffffffffffffffff
call rax
mov ebx, eax
test eax, eax
jne 0x140013c06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x30], r14
lea rdi, [rsp + 0xa70]
mov esi, eax
mov dword [rsp + 0x28], 0x400
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea rax, [rsp + 0xa70]
mov ecx, 0x1200
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov r8d, esi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r9d, esi
lea r8, str.____SymInitialize_failed
mov ecx, 1
test eax, eax
je 0x140013bf8
lea rax, [rsp + 0xa70]
lea rdx, str._s__GetLastError__lu:__ws
mov qword [rsp + 0x20], rax
call fcn.140012590
jmp 0x140013c17
lea rdx, str._s__GetLastError__lu_r_n
call fcn.140012590
jmp 0x140013c17
lea rdx, str.___Symbols_initialized_r_n
mov ecx, 2
call fcn.140012590
mov dword [0x1401a59e0], ebx
test ebx, ebx
je 0x140013c59
jmp 0x140013c8b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_query_temp_directory
jmp 0x140013c52
lea rdx, str.____Not_all_symbol_API_pointers_resolved__abort_r_n
mov ecx, 1
call fcn.140012590
jmp 0x140013c59
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_query_current_directory
mov edx, eax
call fcn.1400134b0
mov rcx, qword [0x1401a59e8]
test rcx, rcx
je 0x140013c72
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401a59e8], r14
mov rcx, qword [0x1401a59d8]
test rcx, rcx
je 0x140013c8b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1401a59d8], r14
lea r11, [rsp + 0x1270]
mov eax, ebx
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret