Function at 0x140006c70
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov edi, 0x1770
mov rcx, rdi
call fcn.14001b160
xor r15d, r15d
mov ecx, 0x2ee0
mov qword [0x140059bf0], rax
mov byte [rax], r15b
call fcn.14001b160
mov qword [0x140059bf8], rax
mov ecx, 0x2719
mov word [rax], r15w
call fcn.14000468c
mov rdx, qword [0x140059bf0]
mov ecx, edi
cmp eax, r15d
setne r14b
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, r15d
jbe 0x140006dd7
mov rsi, qword [0x140059bf0]
mov rcx, rsi
call fcn.14001bd50
cmp rax, r15
jbe 0x140006da0
mov rcx, rsi
call fcn.14001e340
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
mov r12d, eax
jle 0x140006d96
lea ebx, [rax + 0xa]
movsxd rcx, ebx
call fcn.14001b160
mov r8d, ebx
mov rcx, rsi
mov rdx, rax
mov rbp, rax
mov r13b, 1
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
jbe 0x140006d89
lea edx, [r15 + 0x3f]
mov rcx, rbp
call fcn.14001bd20
cmp rax, r15
je 0x140006d55
mov r13b, r15b
jmp 0x140006d89
cmp r14b, r15b
je 0x140006d89
cmp r12d, edi
jge 0x140006d89
mov rdx, rbp
mov rcx, rsi
call fcn.14001e290
cmp eax, r15d
je 0x140006d89
lea rcx, str.using_long_path__S
mov rdx, rbp
call fcn.140016394
mov rdx, rbp
mov rcx, rsi
call fcn.14001c3c0
mov rcx, rbp
call fcn.14001c17c
cmp r13b, r15b
je 0x140006dd7
mov rcx, rsi
call fcn.1400067fc
jmp 0x140006da3
mov al, r15b
cmp al, r15b
je 0x140006dd7
mov rdx, qword [0x140059bf8]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, r15d
jbe 0x140006dd7
mov rcx, qword [0x140059bf8]
mov r8b, 1
mov dl, r8b
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rdx, qword [0x140059bf0]
lea rcx, str.USERPROFILE
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x140006f1e
mov rcx, qword [0x140059bf0]
lea rdx, str.AppDataLocalTemp
call fcn.14001c320
cmp rax, r15
je 0x140006f1e
mov rsi, qword [0x140059bf0]
mov rcx, rsi
call fcn.14001bd50
cmp rax, r15
jbe 0x140006ec8
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
mov r12d, eax
jle 0x140006ebe
lea ebx, [rax + 0xa]
movsxd rcx, ebx
call fcn.14001b160
mov r8d, ebx
mov rcx, rsi
mov rdx, rax
mov rbp, rax
mov r13b, 1
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
jbe 0x140006eb1
mov edx, 0x3f
mov rcx, rbp
call fcn.14001bd20
cmp rax, r15
je 0x140006e7d
mov r13b, r15b
jmp 0x140006eb1
cmp r14b, r15b
je 0x140006eb1
cmp r12d, edi
jge 0x140006eb1
mov rdx, rbp
mov rcx, rsi
call fcn.14001e290
cmp eax, r15d
je 0x140006eb1
lea rcx, str.using_long_path__S
mov rdx, rbp
call fcn.140016394
mov rdx, rbp
mov rcx, rsi
call fcn.14001c3c0
mov rcx, rbp
call fcn.14001c17c
cmp r13b, r15b
je 0x140006f1e
mov rcx, rsi
call fcn.1400067fc
jmp 0x140006ecb
mov al, r15b
cmp al, r15b
je 0x140006f1e
mov rdx, qword [0x140059bf8]
lea rcx, [0x14003ea50]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x140006f1e
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003ea28]
call fcn.14001cf20
cmp rax, r15
je 0x140006f1e
mov rcx, qword [0x140059bf8]
mov r8b, 1
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rdx, qword [0x140059bf0]
lea rcx, str.HOMEDRIVE
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x1400070b4
mov rcx, qword [0x140059bf0]
call fcn.14001bd50
mov rcx, qword [0x140059bf0]
mov ebx, edi
sub ebx, eax
call fcn.14001bd50
lea rcx, str.HOMEPATH
add rax, qword [0x140059bf0]
mov r8d, ebx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x1400070b4
mov rsi, qword [0x140059bf0]
mov rcx, rsi
call fcn.14001bd50
cmp rax, r15
jbe 0x14000703a
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
mov r12d, eax
jle 0x140007030
lea ebx, [rax + 0xa]
movsxd rcx, ebx
call fcn.14001b160
mov r8d, ebx
mov rcx, rsi
mov rdx, rax
mov rbp, rax
mov r13b, 1
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
jbe 0x14000701f
mov edx, 0x3f
mov rcx, rbp
call fcn.14001bd20
cmp rax, r15
je 0x140006feb
mov r13b, r15b
jmp 0x14000701f
cmp r14b, r15b
je 0x14000701f
cmp r12d, edi
jge 0x14000701f
mov rdx, rbp
mov rcx, rsi
call fcn.14001e290
cmp eax, r15d
je 0x14000701f
lea rcx, str.using_long_path__S
mov rdx, rbp
call fcn.140016394
mov rdx, rbp
mov rcx, rsi
call fcn.14001c3c0
mov rcx, rbp
call fcn.14001c17c
cmp r13b, r15b
je 0x1400070b4
mov rcx, rsi
call fcn.1400067fc
jmp 0x14000703d
mov al, r15b
cmp al, r15b
je 0x1400070b4
mov rdx, qword [0x140059bf8]
lea rcx, [0x14003e9f0]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x1400070b4
mov rcx, qword [0x140059bf8]
call fcn.14001c868
mov rcx, qword [0x140059bf8]
mov ebx, edi
sub ebx, eax
call fcn.14001c868
mov rcx, qword [0x140059bf8]
lea rdx, [rcx + rax*2]
lea rcx, [0x14003e9d8]
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x1400070b4
mov rcx, qword [0x140059bf8]
mov r8b, 1
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
call fcn.1400064bc
mov r10, qword [0x1400526a0]
cmp r10, r15
je 0x14000728f
mov rax, qword [0x140059bf0]
xor r9d, r9d
xor r8d, r8d
lea ebx, [r9 + 0x23]
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov edx, ebx
call r10
cmp eax, r15d
jne 0x14000728f
mov rcx, qword [0x140059bf0]
call fcn.14001bd50
cmp rax, r15
jbe 0x14000728f
mov r10, qword [0x1400526a8]
cmp r10, r15
je 0x14000728f
mov rax, qword [0x140059bf8]
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call r10
cmp eax, r15d
jne 0x14000728f
mov rcx, qword [0x140059bf8]
call fcn.14001c868
cmp rax, r15
jbe 0x14000728f
mov rcx, qword [0x140059bf0]
lea rdx, [0x14003e9c8]
call fcn.14001c320
mov rcx, qword [0x140059bf0]
call fcn.14001e340
mov rcx, qword [0x140059bf0]
lea rdx, [0x14003e9c0]
call fcn.14001c320
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e9a8]
call fcn.14001cf20
mov rcx, qword [0x140059bf8]
call fcn.14001e3e8
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e998]
call fcn.14001cf20
mov rbp, qword [0x140059bf0]
mov rcx, rbp
call fcn.14001bd50
cmp rax, r15
jbe 0x14000726c
mov rcx, rbp
call fcn.14001e340
xor r8d, r8d
xor edx, edx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
mov r12d, eax
jle 0x140007262
lea ebx, [rax + 0xa]
movsxd rcx, ebx
call fcn.14001b160
mov r8d, ebx
mov rcx, rbp
mov rdx, rax
mov rsi, rax
mov r13b, 1
call qword [sym.imp.KERNEL32.dll_GetLongPathNameA]
cmp eax, r15d
jbe 0x140007255
mov edx, 0x3f
mov rcx, rsi
call fcn.14001bd20
cmp rax, r15
je 0x140007221
mov r13b, r15b
jmp 0x140007255
cmp r14b, r15b
je 0x140007255
cmp r12d, edi
jge 0x140007255
mov rdx, rsi
mov rcx, rbp
call fcn.14001e290
cmp eax, r15d
je 0x140007255
lea rcx, str.using_long_path__S
mov rdx, rsi
call fcn.140016394
mov rdx, rsi
mov rcx, rbp
call fcn.14001c3c0
mov rcx, rsi
call fcn.14001c17c
cmp r13b, r15b
je 0x14000728f
mov rcx, rbp
call fcn.1400067fc
jmp 0x14000726f
mov al, r15b
cmp al, r15b
je 0x14000728f
mov rcx, qword [0x140059bf8]
mov r8b, 1
mov dl, r8b
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp eax, r15d
jbe 0x14000732b
mov rcx, qword [0x140059bf0]
lea rdx, [0x14003e9c0]
call fcn.14001c320
cmp rax, r15
je 0x14000732b
mov rbx, qword [0x140059bf0]
mov rcx, rbx
call fcn.14001bd50
cmp rax, r15
jbe 0x1400072dd
mov rcx, rbx
call fcn.1400067fc
jmp 0x1400072e0
mov al, r15b
cmp al, r15b
je 0x14000732b
mov rcx, qword [0x140059bf8]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp eax, r15d
jbe 0x14000732b
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e998]
call fcn.14001cf20
cmp rax, r15
je 0x14000732b
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
lea rdx, str.c:_temp
call fcn.14001c3c0
cmp rax, r15
je 0x14000739b
mov rbx, qword [0x140059bf0]
mov rcx, rbx
call fcn.14001bd50
cmp rax, r15
jbe 0x140007361
mov rcx, rbx
call fcn.1400067fc
jmp 0x140007364
mov al, r15b
cmp al, r15b
je 0x14000739b
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e980]
call fcn.14001cf4c
cmp rax, r15
je 0x14000739b
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
lea rdx, str.c:_tmp
call fcn.14001c3c0
cmp rax, r15
je 0x14000740b
mov rbx, qword [0x140059bf0]
mov rcx, rbx
call fcn.14001bd50
cmp rax, r15
jbe 0x1400073d1
mov rcx, rbx
call fcn.1400067fc
jmp 0x1400073d4
mov al, r15b
cmp al, r15b
je 0x14000740b
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e968]
call fcn.14001cf4c
cmp rax, r15
je 0x14000740b
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp eax, r15d
jbe 0x140007473
mov rbx, qword [0x140059bf0]
mov rcx, rbx
call fcn.14001bd50
cmp rax, r15
jbe 0x14000743d
mov rcx, rbx
call fcn.1400067fc
jmp 0x140007440
mov al, r15b
cmp al, r15b
je 0x140007473
mov rcx, qword [0x140059bf8]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp eax, r15d
jbe 0x140007473
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
lea rdx, str.c:_tmp
call fcn.14001c3c0
cmp rax, r15
je 0x1400074eb
mov rbx, qword [0x140059bf0]
mov rcx, rbx
call fcn.14001bd50
cmp rax, r15
jbe 0x1400074b1
mov rcx, rbx
call fcn.14001e340
mov rcx, rbx
call fcn.1400067fc
jmp 0x1400074b4
mov al, r15b
cmp al, r15b
je 0x1400074eb
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003e968]
call fcn.14001cf4c
cmp rax, r15
je 0x1400074eb
mov rcx, qword [0x140059bf8]
xor r8d, r8d
mov dl, 1
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rdx, qword [0x140059bf0]
mov ecx, edi
mov byte [0x140059be2], 1
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, r15d
jbe 0x14000754d
mov rcx, qword [0x140059bf0]
mov r9b, r14b
xor r8d, r8d
mov dl, 1
call fcn.14000698c
cmp al, r15b
je 0x14000754d
mov rdx, qword [0x140059bf8]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, r15d
jbe 0x14000754d
mov rcx, qword [0x140059bf8]
xor r8d, r8d
mov dl, 1
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rdx, qword [0x140059bf0]
lea rcx, str.USERPROFILE
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x1400075e8
mov rcx, qword [0x140059bf0]
lea rdx, str.AppDataLocalTemp
call fcn.14001c320
cmp rax, r15
je 0x1400075e8
mov rcx, qword [0x140059bf0]
mov r9b, r14b
xor r8d, r8d
xor edx, edx
call fcn.14000698c
cmp al, r15b
je 0x1400075e8
mov rdx, qword [0x140059bf8]
lea rcx, [0x14003ea50]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x1400075e8
mov rcx, qword [0x140059bf8]
lea rdx, [0x14003ea28]
call fcn.14001cf20
cmp rax, r15
je 0x1400075e8
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rdx, qword [0x140059bf0]
lea rcx, str.HOMEDRIVE
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x1400076cc
mov rcx, qword [0x140059bf0]
call fcn.14001bd50
mov rcx, qword [0x140059bf0]
mov ebx, edi
sub ebx, eax
call fcn.14001bd50
lea rcx, str.HOMEPATH
add rax, qword [0x140059bf0]
mov r8d, ebx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, r15d
jbe 0x1400076cc
mov rcx, qword [0x140059bf0]
mov r9b, r14b
xor r8d, r8d
xor edx, edx
call fcn.14000698c
cmp al, r15b
je 0x1400076cc
mov rdx, qword [0x140059bf8]
lea rcx, [0x14003e9f0]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x1400076cc
mov rcx, qword [0x140059bf8]
call fcn.14001c868
mov rcx, qword [0x140059bf8]
sub edi, eax
call fcn.14001c868
mov rdx, qword [0x140059bf8]
lea rcx, [0x14003e9d8]
lea rdx, [rdx + rax*2]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, r15d
jbe 0x1400076cc
mov rcx, qword [0x140059bf8]
xor r8d, r8d
xor edx, edx
call fcn.140006aa4
cmp al, r15b
jne 0x1400076f2
mov rcx, qword [0x140059bf0]
call fcn.14001e44c
mov rcx, qword [0x140059bf8]
mov qword [0x140059bf0], r15
call fcn.14001e44c
mov qword [0x140059bf8], r15
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret