Function at 0x14002159b
Capabilities:
Get common file path
Query environment variable

Disassembly:
jmp 0x14005b250
push rbp
push rdi
sub rsp, 0xf98
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x2be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
lea rcx, [0x14009ae46]
call fcn.140022068
nop
mov dword [rbp + 0x24], 0
cmp dword [0x14008e798], 0
je 0x14005b297
mov eax, 1
jmp 0x14005b594
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
nop
mov edx, 0x410
lea rcx, [rbp + 0x50]
call fcn.140021b9f
nop
lea rdx, [rbp + 0x50]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x14005b2d0
cmp dword [rbp + 4], 0x104
jbe 0x14005b2ea
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_current_directory
call fcn.140021c6c
nop
jmp 0x14005b545
lea rdx, [0x140071de8]
lea rcx, [rbp + 0x50]
call fcn.140021fbe
nop
lea rcx, [rbp + 0x50]
call fcn.14002210d
mov qword [rbp + 0x478], rax
lea rdx, str.dbghelp.dll
mov rcx, qword [rbp + 0x478]
call fcn.140021fbe
nop
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14008e788], rax
cmp qword [0x14008e788], 0
jne 0x14005b354
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_dbghelp.dll__make_sure_it_is_in_program_directory
call fcn.140021c6c
nop
jmp 0x14005b545
xor eax, eax
mov rcx, qword [rbp + 0x478]
mov word [rcx], ax
lea rdx, str.symsrv.dll
mov rcx, qword [rbp + 0x478]
call fcn.140021fbe
nop
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14008e790], rax
cmp qword [0x14008e790], 0
jne 0x14005b3a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_load_symsrv.dll__make_sure_it_is_in_program_directory
call fcn.140021c6c
nop
jmp 0x14005b545
lea rdx, str.SymSetOptions
mov rcx, qword [0x14008e788]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008e768], rax
lea rdx, str.SymInitializeW
mov rcx, qword [0x14008e788]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008e770], rax
lea rdx, str.SymLoadModuleExW
mov rcx, qword [0x14008e788]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008e778], rax
lea rdx, str.SymFromName
mov rcx, qword [0x14008e788]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008e780], rax
cmp qword [0x14008e768], 0
je 0x14005b43d
cmp qword [0x14008e770], 0
je 0x14005b43d
cmp qword [0x14008e778], 0
je 0x14005b43d
cmp qword [0x14008e780], 0
jne 0x14005b454
lea rdx, str.____Not_all_symbol_API_pointers_resolved__abort_r_n
mov ecx, 1
call fcn.1400214bf
nop
jmp 0x14005b545
mov ecx, 0x10603
call qword [0x14008e768]
nop
mov edx, 0x410
lea rcx, [rbp + 0x4a0]
call fcn.140021b9f
nop
mov edx, 0x20a
lea rcx, [rbp + 0x8d0]
call fcn.140021b9f
nop
mov r8d, 0x104
lea rdx, [rbp + 0x8d0]
lea rcx, [0x140073628]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
jbe 0x14005b4d2
cmp dword [rbp + 4], 0x104
jae 0x14005b4d2
lea r9, [rbp + 0x8d0]
lea r8, str.srv_wsSymbolshttps:__msdl.microsoft.com_download_symbols
mov edx, 0x208
lea rcx, [rbp + 0x4a0]
call fcn.140021ac3
nop
jmp 0x14005b4e9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Cannot_query_temp_directory
call fcn.140021c6c
nop
jmp 0x14005b545
xor r8d, r8d
lea rdx, [rbp + 0x4a0]
mov rcx, 0xffffffffffffffff
call qword [0x14008e770]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jne 0x14005b520
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____SymInitialize_failed
call fcn.140021c6c
nop
jmp 0x14005b532
lea rdx, str.___Symbols_initialized_r_n
mov ecx, 2
call fcn.1400214bf
nop
mov eax, dword [rbp + 0x24]
mov dword [0x14008e798], eax
xor eax, eax
test eax, eax
jne 0x14005b2a0
cmp dword [rbp + 0x24], 0
jne 0x14005b591
cmp qword [0x14008e788], 0
je 0x14005b56e
mov rcx, qword [0x14008e788]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov qword [0x14008e788], 0
cmp qword [0x14008e790], 0
je 0x14005b591
mov rcx, qword [0x14008e790]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov qword [0x14008e790], 0
mov eax, dword [rbp + 0x24]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140083480]
call fcn.140021d8e
mov rax, rdi
lea rsp, [rbp + 0xf78]
pop rdi
pop rbp
ret