Function at 0x14004d2e0
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140087010]
xor rax, rsp
mov qword [rbp + 0x17], rax
xor edi, edi
mov dword [rbp + 0xf], edi
lea rcx, [rbp - 0x59]
call fcn.14004cf50
mov rsi, rax
mov r14, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14004d334
mov rsi, qword [rax]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x14004d351
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x61], 7
jmp 0x14004d38b
mov rbx, r14
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.14001a7c0
mov qword [rbp - 0x79], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x61], rbx
movups xmm6, xmmword [rbp - 0x79]
mov qword [rbp - 0x69], r14
lea rcx, [0x1400880a0]
call fcn.140002b60
movups xmmword [0x1400880a0], xmm6
movups xmm0, xmmword [rbp - 0x69]
movups xmmword [0x1400880b0], xmm0
lea rcx, [rbp - 0x59]
call fcn.140002b60
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov rsi, 0xffffffffffffffff
test eax, eax
je 0x14004d4a8
lea ebx, [rax + 1]
mov ecx, ebx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.140065a30
mov r14, rax
mov qword [rbp + 0xf], rax
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004d49b
mov r8, rsi
inc r8
cmp word [r14 + r8*2], 0
jne 0x14004d405
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], di
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.14001a610
nop
mov qword [rbp - 0x19], rdi
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 7
mov word [rbp - 0x19], di
mov r8d, 4
lea rdx, str.Temp
lea rcx, [rbp - 0x19]
call fcn.14001a610
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x39]
call fcn.140002770
mov rbx, rax
lea rcx, [rbp - 0x19]
call fcn.140002b60
mov rdx, rbx
lea rcx, [rbp - 0x79]
call fcn.140018b50
nop
lea rcx, [rbp - 0x39]
call fcn.140002b60
nop
test r14, r14
je 0x14004d4c4
mov rcx, r14
call fcn.1400302a0
jmp 0x14004d4c4
test r14, r14
je 0x14004d4a8
mov rcx, r14
call fcn.1400302a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x79], rdi
movdqa xmm1, xmmword [0x140074e30]
movdqu xmmword [rbp - 0x69], xmm1
mov word [rbp - 0x79], di
lea r14, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae r14, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
cmp r15, 8
jae 0x14004d4ea
movups xmm6, xmmword [r14]
mov qword [rbp - 0x41], 7
jmp 0x14004d524
mov rbx, r15
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14001a7c0
mov qword [rbp - 0x59], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], r15
lea r12, [0x1400880c0]
mov rcx, r12
call fcn.140002b60
movups xmmword [0x1400880c0], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x1400880d0], xmm0
lea rcx, [rbp - 0x79]
call fcn.140002b60
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004d5f2
lea ebx, [rax + 1]
mov ecx, ebx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.140065a30
mov r14, rax
mov qword [rbp + 7], rax
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004d5e0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [r14 + r8*2], 0
jne 0x14004d5a0
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
mov rdx, r14
lea rcx, [rbp - 0x79]
call fcn.14001a610
nop
test r14, r14
je 0x14004d60e
mov edx, 2
mov rcx, r14
call fcn.1400302a0
jmp 0x14004d60e
test r14, r14
je 0x14004d5f2
mov edx, 2
mov rcx, r14
call fcn.1400302a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x79], rdi
movdqa xmm1, xmmword [0x140074e30]
movdqu xmmword [rbp - 0x69], xmm1
mov word [rbp - 0x79], di
lea r14, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae r14, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
cmp r15, 8
jae 0x14004d634
movups xmm6, xmmword [r14]
mov qword [rbp - 0x41], 7
jmp 0x14004d66e
mov rbx, r15
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14001a7c0
mov qword [rbp - 0x59], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], r15
lea rcx, [0x1400880e0]
call fcn.140002b60
movups xmmword [0x1400880e0], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x1400880f0], xmm0
lea rcx, [rbp - 0x79]
call fcn.140002b60
xor r8d, r8d
xor edx, edx
lea rcx, str.ProgramFiles
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14004d749
lea ebx, [rax + 1]
mov edx, ebx
mov eax, 2
mul rdx
cmovo rax, rsi
mov rcx, rax
call fcn.140065a30
mov r14, rax
mov qword [rbp + 7], rax
mov r8d, ebx
mov rdx, rax
lea rcx, str.ProgramFiles
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14004d737
nop word [rax + rax]
inc rsi
cmp word [r14 + rsi*2], 0
jne 0x14004d6f0
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x79]
call fcn.14001a610
nop
test r14, r14
je 0x14004d731
mov edx, 2
mov rcx, r14
call fcn.1400302a0
mov rdi, qword [rbp - 0x69]
jmp 0x14004d76b
test r14, r14
je 0x14004d749
mov edx, 2
mov rcx, r14
call fcn.1400302a0
lea rax, [rbp - 0x79]
mov qword [rbp + 7], rax
call fcn.14002fa50
nop
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
lea rsi, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rsi, qword [rbp - 0x79]
cmp rdi, 8
jae 0x14004d78c
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x41], 7
jmp 0x14004d7c6
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14001a7c0
mov qword [rbp - 0x59], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], rdi
lea rcx, [0x140088100]
call fcn.140002b60
movups xmmword [0x140088100], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x140088110], xmm0
lea rcx, [rbp - 0x79]
call fcn.140002b60
mov dl, 1
lea rcx, [rbp - 0x19]
call fcn.1400496d0
nop
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x19]
call fcn.140002a00
nop
lea rcx, [rbp - 0x19]
call fcn.140002b60
nop
lea rsi, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rsi, qword [rbp - 0x39]
mov rdi, qword [rbp - 0x29]
cmp rdi, 8
jae 0x14004d83a
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x41], 7
jmp 0x14004d874
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14001a7c0
mov qword [rbp - 0x59], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], rdi
lea rbx, [0x140088120]
mov rcx, rbx
call fcn.140002b60
movups xmmword [0x140088120], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x140088130], xmm0
lea rcx, [rbp - 0x39]
call fcn.140002b60
mov byte [0x14008ad34], 1
cmp qword [0x1400880d8], 8
cmovae r12, qword [0x1400880c0]
mov rcx, r12
call fcn.140053d70
test al, al
sete byte [0x14008ad35]
mov byte [0x14008ad36], 1
mov byte [0x14008ad37], 1
cmp qword [0x140088138], 8
cmovae rbx, qword [0x140088120]
mov rcx, rbx
call fcn.140053d70
test al, al
sete byte [0x14008b140]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140030280
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret