Function at 0x14001357c
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x958]
sub rsp, 0xa50
xor esi, esi
cmp dword [0x1400480e0], esi
mov ebx, esi
je 0x1400135ae
lea eax, [rsi + 1]
jmp 0x140013847
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
xor eax, eax
lea rdi, [rsp + 0x20]
mov ecx, 0x410
lea rdx, [rsp + 0x20]
rep stosb byte [rdi], al
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec eax
cmp eax, 0x103
ja 0x1400137ff
lea rdx, [0x14003b64c]
lea rcx, [rsp + 0x20]
call fcn.1400013e8
lea rdi, [rsp + 0x20]
cmp word [rsp + 0x20], si
je 0x140013607
add rdi, 2
cmp word [rdi], si
jne 0x1400135fe
lea rdx, str.dbghelp.dll
mov rcx, rdi
call fcn.1400013e8
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400480e8], rax
test rax, rax
jne 0x14001363f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_load_dbghelp.dll__make_sure_it_is_in_program_directory
jmp 0x14001380c
lea rcx, str.symsrv.dll
mov eax, 0x73
sub rcx, rdi
mov word [rdi], ax
lea rdi, [rdi + 2]
movzx eax, word [rcx + rdi]
test ax, ax
jne 0x14001364e
lea rcx, [rsp + 0x20]
mov word [rdi], si
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400480d8], rax
test rax, rax
jne 0x14001368a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_load_symsrv.dll__make_sure_it_is_in_program_directory
jmp 0x14001380c
mov rcx, qword [0x1400480e8]
lea rdx, str.SymSetOptions
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1400480e8]
lea rdx, str.SymInitializeW
mov qword [0x1400480c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1400480e8]
lea rdx, str.SymLoadModuleExW
mov qword [0x1400480b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1400480e8]
lea rdx, str.SymFromName
mov qword [0x1400480a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [0x1400480c0]
mov qword [0x1400480b0], rax
test rdx, rdx
je 0x1400137ec
cmp qword [0x1400480b8], rsi
je 0x1400137ec
cmp qword [0x1400480a8], rsi
je 0x1400137ec
test rax, rax
je 0x1400137ec
mov ecx, 0x10603
call rdx
xor eax, eax
lea rdi, [rbp + 0x540]
mov ecx, 0x410
lea rdx, [rbp + 0x330]
rep stosb byte [rdi], al
lea rdi, [rbp + 0x330]
mov ecx, 0x20a
rep stosb byte [rdi], al
lea rcx, [0x14003bba8]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x102
ja 0x1400137dd
lea r9, [rbp + 0x330]
mov edx, 0x208
lea r8, str.srv_wsSymbolshttps:__msdl.microsoft.com_download_symbols
lea rcx, [rbp + 0x540]
call fcn.1400032a8
xor r8d, r8d
lea rdx, [rbp + 0x540]
or rcx, 0xffffffffffffffff
call qword [0x1400480b8]
mov ebx, eax
test eax, eax
jne 0x1400137c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____SymInitialize_failed
call fcn.140011fe4
jmp 0x1400137d1
lea rdx, str.___Symbols_initialized_r_n
mov ecx, 2
call fcn.140011090
mov dword [0x1400480e0], ebx
test ebx, ebx
jne 0x140013845
jmp 0x140013813
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_query_temp_directory
jmp 0x14001380c
lea rdx, str.____Not_all_symbol_API_pointers_resolved__abort_r_n
mov ecx, 1
call fcn.140011090
jmp 0x140013813
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Cannot_query_current_directory
mov edx, eax
call fcn.140011fe4
mov rcx, qword [0x1400480e8]
test rcx, rcx
je 0x14001382c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1400480e8], rsi
mov rcx, qword [0x1400480d8]
test rcx, rcx
je 0x140013845
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1400480d8], rsi
mov eax, ebx
lea r11, [rsp + 0xa50]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret