Function at 0x140094978
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x5120
call fcn.1400fe810
sub rsp, rax
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x5110], rax
xor r15d, r15d
mov r13b, r8b
mov rbx, rdx
mov rbp, rcx
cmp byte [0x1401561c5], r15b
jne 0x1400949eb
cmp word [rdx], 0x2e
jne 0x1400949eb
movzx ecx, word [rbx + 2]
call fcn.140050460
cmp al, r15b
je 0x1400949da
add rbx, 4
cmp word [rbx], 0x2e
je 0x1400949c2
cmp word [rbx], 0x2e
jne 0x1400949eb
cmp word [rbx + 2], r15w
je 0x140094e79
lea rdx, [rsp + 0x3040]
mov r8d, 0x800
mov rcx, rbx
call fcn.14005165c
lea rdi, [0x14010adf4]
mov rsi, rbx
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
mov rcx, rbx
sete r14b
call fcn.140050408
movzx ecx, word [rax]
mov rsi, rax
call fcn.140050460
cmp al, r15b
je 0x140094a5e
cmp r14b, r15b
jne 0x140094a5e
lea rdi, [rsp + 0x3040]
mov rcx, rbx
sub rdi, rbx
movzx eax, word [rcx]
movzx edx, word [rcx + rdi]
sub eax, edx
jne 0x140094a55
add rcx, 2
test edx, edx
jne 0x140094a42
cmp eax, r15d
je 0x140094a5e
mov word [rsi], r15w
mov r12d, r15d
mov rdi, rbx
cmp word [rbx], r15w
je 0x140094aa7
cmp word [rdi], 0x2e
jne 0x140094aa7
cmp word [rdi + 2], 0x2e
jne 0x140094aa7
movzx ecx, word [rdi + 4]
call fcn.140050460
cmp al, r15b
jne 0x140094a8c
cmp word [rdi + 4], r15w
jne 0x140094aa7
movzx eax, word [rdi + 4]
neg ax
sbb rcx, rcx
inc r12d
neg rcx
lea rdi, [rdi + rcx*2 + 4]
cmp word [rdi], r15w
jne 0x140094a6a
cmp byte [0x1401561c5], r15b
je 0x140094aca
cmp r13b, r15b
je 0x140094aca
mov rcx, rbx
call fcn.1400508c0
cmp al, r15b
je 0x140094aca
mov rcx, rbp
call fcn.140091528
cmp byte [rbp + 0x107a], r15b
je 0x140094aff
mov eax, dword [rbp + 0x2280]
cmp r12d, eax
mov edx, eax
cmovl edx, r12d
cmp r14b, r15b
cmovne edx, eax
cmp edx, r15d
je 0x140094aff
xor r8d, r8d
mov rcx, rbp
call fcn.14008f960
xor edx, edx
jmp 0x140094e71
mov byte [rbp + 0x107a], r15b
cmp byte [0x1401561c5], r15b
je 0x140094bf3
lea rdx, str.FlatView
lea rcx, str.FileList
xor r8d, r8d
call fcn.14009b908
cmp eax, r15d
je 0x140094b37
cmp r12d, r15d
je 0x140094e79
lea r14, [0x140164e70]
mov r13d, 0x800
lea rdx, [rsp + 0x1040]
mov rcx, r14
mov r8, r13
call fcn.14007856c
lea rdi, [0x14010adf4]
mov rsi, rbx
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x140094b97
mov rdx, rbx
mov rcx, r14
call fcn.14007844c
cmp al, r15b
je 0x140094b97
cmp r12d, r15d
lea rdx, [rsp + 0x1040]
mov rcx, rbp
cmovle rdx, r15
call fcn.140092f40
jmp 0x140094e79
lea rdx, [rsp + 0x2040]
mov r8, r13
mov rcx, r14
call fcn.14007858c
lea rdx, [rsp + 0x2040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d00
lea rcx, [rbp + 0x107c]
call fcn.140050fc8
mov rcx, rbp
call fcn.140091528
cmp al, r15b
je 0x140094e79
lea rcx, [rsp + 0x2040]
call fcn.140050ce8
mov rdx, rax
jmp 0x140094e71
mov r13d, 0x800
lea rdx, [rbp + 0x107c]
lea rcx, [rsp + 0x1040]
mov r8, r13
call fcn.140065d00
mov word [rsp + 0x2040], r15w
jmp 0x140094cfc
cmp byte [rbp + 0x107a], r15b
jne 0x140094d05
lea rcx, [rbp + 0x107c]
call fcn.14005047c
cmp al, r15b
je 0x140094cb1
movzx ecx, word [rbp + 0x1080]
call fcn.140050460
cmp al, r15b
je 0x140094cb1
cmp word [rbp + 0x1082], r15w
jne 0x140094cb1
cmp dword [rbp + 0x2280], r15d
jle 0x140094c69
mov byte [rbp + 0x107a], 1
jmp 0x140094cdc
mov rcx, qword [rbp + 0x50]
xor r9d, r9d
lea rax, [rsp + 0x30]
lea edx, [r9 + 0x11]
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
mov rdx, qword [rsp + 0x30]
lea rcx, [0x140162be0]
call fcn.140090784
mov rcx, qword [0x14018c440]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x28]
jmp 0x140094cdc
lea rcx, [rbp + 0x107c]
call fcn.140050ce8
lea rcx, [rsp + 0x2040]
mov r8, r13
mov rdx, rax
call fcn.140065d00
lea rcx, [rbp + 0x107c]
call fcn.140050fc8
dec r12d
jmp 0x140094ce5
add rbx, 2
cmp word [rbx], 0x2e
je 0x140094ce1
movzx ecx, word [rbx]
call fcn.140050460
cmp al, r15b
je 0x140094cfc
add rbx, 2
cmp r12d, r15d
jg 0x140094c1e
cmp r14b, r15b
je 0x140094d25
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.14005165c
lea rdx, [rsp + 0x40]
jmp 0x140094d35
mov rcx, rbx
call fcn.1400508c0
cmp al, r15b
je 0x140094d46
mov rdx, rbx
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d00
jmp 0x140094d6d
cmp word [rbx], r15w
je 0x140094d6d
lea rcx, [rbp + 0x107c]
mov rdx, r13
call fcn.1400504dc
lea rcx, [rbp + 0x107c]
mov r8, r13
mov rdx, rbx
call fcn.140065d80
lea rcx, [rbp + 0x107c]
call fcn.1400504b0
mov esi, eax
cmp eax, 0xffffffff
je 0x140094da6
call fcn.1400b5324
bt eax, esi
jb 0x140094da6
lea rdx, [rsp + 0x1040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d00
jmp 0x140094e79
cmp byte [rbp + 0x107a], r15b
jne 0x140094e58
lea rcx, [rbp + 0x107c]
call fcn.14004258c
cmp al, r15b
jne 0x140094e58
lea rdx, [rsp + 0x40]
mov r8d, r13d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r15d
je 0x140094df4
lea rcx, [rsp + 0x40]
call fcn.14004258c
cmp al, r15b
je 0x140094df4
lea rdx, [rsp + 0x40]
jmp 0x140094e49
mov ecx, 0x6c
call fcn.14005fad8
lea r9, [rbp + 0x107c]
lea rcx, [rsp + 0x4040]
mov r8, rax
mov edx, 0x864
call fcn.1400e0c0c
mov ecx, 0x66
call fcn.14005fad8
mov rcx, qword [0x140158350]
lea rdx, [rsp + 0x4040]
mov r8, rax
mov r9d, 0x10
call fcn.1400b6df8
lea rdx, [rsp + 0x1040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d00
movzx eax, word [rsp + 0x2040]
neg ax
lea rax, [rsp + 0x2040]
sbb rdx, rdx
and rdx, rax
mov rcx, rbp
call fcn.140093bdc
mov rcx, qword [rsp + 0x5110]
xor rcx, rsp
call fcn.1400e9d80
mov rbx, qword [rsp + 0x5170]
add rsp, 0x5120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret