Function at 0x140020587
Capabilities:
Get common file path
Query environment variable

Disassembly:
jmp 0x140058f00
push rbp
push rdi
sub rsp, 0xf98
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x2be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
lea rcx, [0x140097e46]
call fcn.140021040
mov dword [rbp + 0x24], 0
cmp dword [0x14008b718], 0
je 0x140058f46
mov eax, 1
jmp 0x140059231
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov edx, 0x410
lea rcx, [rbp + 0x50]
call fcn.140020b7c
lea rdx, [rbp + 0x50]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x140058f7d
cmp dword [rbp + 4], 0x104
jbe 0x140058f96
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_current_directory
call fcn.140020c49
jmp 0x1400591e4
lea rdx, [0x14006ede8]
lea rcx, [rbp + 0x50]
call fcn.140020f96
lea rcx, [rbp + 0x50]
call fcn.1400210e5
mov qword [rbp + 0x478], rax
lea rdx, str.dbghelp.dll
mov rcx, qword [rbp + 0x478]
call fcn.140020f96
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14008b708], rax
cmp qword [0x14008b708], 0
jne 0x140058ffd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_dbghelp.dll__make_sure_it_is_in_program_directory
call fcn.140020c49
jmp 0x1400591e4
xor eax, eax
mov rcx, qword [rbp + 0x478]
mov word [rcx], ax
lea rdx, str.symsrv.dll
mov rcx, qword [rbp + 0x478]
call fcn.140020f96
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14008b710], rax
cmp qword [0x14008b710], 0
jne 0x140059050
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_symsrv.dll__make_sure_it_is_in_program_directory
call fcn.140020c49
jmp 0x1400591e4
lea rdx, str.SymSetOptions
mov rcx, qword [0x14008b708]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b6e8], rax
lea rdx, str.SymInitializeW
mov rcx, qword [0x14008b708]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b6f0], rax
lea rdx, str.SymLoadModuleExW
mov rcx, qword [0x14008b708]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b6f8], rax
lea rdx, str.SymFromName
mov rcx, qword [0x14008b708]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b700], rax
cmp qword [0x14008b6e8], 0
je 0x1400590e4
cmp qword [0x14008b6f0], 0
je 0x1400590e4
cmp qword [0x14008b6f8], 0
je 0x1400590e4
cmp qword [0x14008b700], 0
jne 0x1400590fa
lea rdx, str.____Not_all_symbol_API_pointers_resolved__abort_r_n
mov ecx, 1
call fcn.1400204b0
jmp 0x1400591e4
mov ecx, 0x10603
call qword [0x14008b6e8]
mov edx, 0x410
lea rcx, [rbp + 0x4a0]
call fcn.140020b7c
mov edx, 0x20a
lea rcx, [rbp + 0x8d0]
call fcn.140020b7c
mov r8d, 0x104
lea rdx, [rbp + 0x8d0]
lea rcx, [0x140070628]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
jbe 0x140059174
cmp dword [rbp + 4], 0x104
jae 0x140059174
lea r9, [rbp + 0x8d0]
lea r8, str.srv_wsSymbolshttps:__msdl.microsoft.com_download_symbols
mov edx, 0x208
lea rcx, [rbp + 0x4a0]
call fcn.140020aa5
jmp 0x14005918a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_temp_directory
call fcn.140020c49
jmp 0x1400591e4
xor r8d, r8d
lea rdx, [rbp + 0x4a0]
mov rcx, 0xffffffffffffffff
call qword [0x14008b6f0]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jne 0x1400591c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____SymInitialize_failed
call fcn.140020c49
jmp 0x1400591d1
lea rdx, str.___Symbols_initialized_r_n
mov ecx, 2
call fcn.1400204b0
mov eax, dword [rbp + 0x24]
mov dword [0x14008b718], eax
xor eax, eax
test eax, eax
jne 0x140058f4e
cmp dword [rbp + 0x24], 0
jne 0x14005922e
cmp qword [0x14008b708], 0
je 0x14005920c
mov rcx, qword [0x14008b708]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14008b708], 0
cmp qword [0x14008b710], 0
je 0x14005922e
mov rcx, qword [0x14008b710]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14008b710], 0
mov eax, dword [rbp + 0x24]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140080090]
call fcn.140020d66
mov rax, rdi
lea rsp, [rbp + 0xf78]
pop rdi
pop rbp
ret