Function at 0x1400060d8
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rdx, rcx
mov esi, 0x1770
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x140006114
mov r8b, 1
mov rcx, rdi
mov dl, r8b
call fcn.140005f88
test al, al
jne 0x140006348
lea rcx, [0x140030800]
mov r8d, esi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x140006154
lea rdx, [0x1400307e8]
mov rcx, rdi
call fcn.140014b40
test rax, rax
je 0x140006154
mov r8b, 1
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rcx, [0x1400307d8]
mov r8d, esi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x1400061ac
mov rcx, rdi
call fcn.140014610
mov ebx, esi
mov rcx, rdi
sub ebx, eax
call fcn.140014610
lea rcx, [0x1400307c8]
lea rdx, [rdi + rax]
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x1400061ac
mov r8b, 1
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
mov edx, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x1400061e4
lea rdx, [0x1400307c0]
mov rcx, rdi
call fcn.140014b40
test rax, rax
je 0x1400061e4
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rdx, [0x1400307b8]
mov rcx, rdi
call fcn.140014be0
test rax, rax
je 0x14000620d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rdx, [0x1400307ac]
mov rcx, rdi
call fcn.140014be0
test rax, rax
je 0x140006236
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
mov edx, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x14000625a
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rdx, [0x1400307ac]
mov rcx, rdi
call fcn.140014be0
test rax, rax
je 0x140006283
xor r8d, r8d
mov dl, 1
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
mov rdx, rdi
mov ecx, esi
mov byte [0x140047762], 1
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x1400062ae
xor r8d, r8d
mov dl, 1
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rcx, [0x140030800]
mov r8d, esi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x1400062ea
lea rdx, [0x1400307e8]
mov rcx, rdi
call fcn.140014b40
test rax, rax
je 0x1400062ea
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
lea rcx, [0x1400307d8]
mov r8d, esi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x14000633c
mov rcx, rdi
call fcn.140014610
mov rcx, rdi
sub esi, eax
call fcn.140014610
lea rcx, [0x1400307c8]
lea rdx, [rdi + rax]
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x14000633c
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140005f88
test al, al
jne 0x140006348
xor edx, edx
mov ecx, 0x3f7
call fcn.140004f50
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret