Function at 0x140001c30
Capabilities:
Check if file exists
Get file attributes
Query environment variable

Disassembly:
push rdi
sub rsp, 0x460
mov rdi, rsp
mov ecx, 0x118
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov qword [rsp + 0x3c0], 0xfffffffffffffffe
mov rax, qword [0x140011090]
xor rax, rsp
mov qword [rsp + 0x458], rax
mov r8d, 0x104
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [rsp + 0x244], eax
cmp dword [rsp + 0x244], 0
jne 0x140001ca4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14000b518]
mov ecx, 0xdc
call fcn.1400018f0
movzx eax, byte [section..data]
test eax, eax
je 0x140001d07
lea r8, [rsp + 0x30]
lea rdx, str.EXE_containing_current_process_is__S
lea rcx, [rsp + 0x320]
call fcn.1400048c0
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x3d0], rax
mov rcx, qword [rsp + 0x3d0]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x320]
call fcn.140004a50
jmp 0x140001d07
lea rcx, [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x140001d4f
lea rax, str.PathRemoveFileSpec_failed
mov qword [rsp + 0x348], rax
lea rdx, [rsp + 0x348]
lea rcx, [rsp + 0x330]
call qword [sym.imp.MSVCR100.dll_public:_void___cdecl_std::exception::constructor_char_const__const___ptr64_const____ptr64____ptr64]
lea rdx, [0x14000fe48]
lea rcx, [rsp + 0x330]
call sub.MSVCR100.dll__CxxThrowException
movzx eax, byte [section..data]
test eax, eax
je 0x140001db2
lea r8, [rsp + 0x30]
lea rdx, str.parent_of_EXE_containing_current_process_is__S
lea rcx, [rsp + 0x350]
call fcn.1400048c0
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0x3e0], rax
mov rcx, qword [rsp + 0x3e0]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x350]
call fcn.140004a50
jmp 0x140001db2
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x248]
call fcn.140004650
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0x3f0], rax
lea r8, str.AppleVersions
mov rdx, qword [rsp + 0x3f0]
lea rcx, [rsp + 0x278]
call fcn.140006800
nop
lea rcx, [rsp + 0x248]
call fcn.140004710
lea rdx, str..dll
lea rcx, [rsp + 0x278]
call fcn.1400047a0
movzx eax, byte [section..data]
test eax, eax
je 0x140001e88
lea rcx, [rsp + 0x278]
call fcn.1400047e0
mov r8, rax
lea rdx, str.potential_path_to_AppleVersions_DLL_is__S
lea rcx, [rsp + 0x360]
call fcn.1400048c0
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x400], rax
mov rcx, qword [rsp + 0x400]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x360]
call fcn.140004a50
jmp 0x140001e88
lea rcx, [rsp + 0x278]
call fcn.1400047e0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [rsp + 0x2a4], eax
cmp dword [rsp + 0x2a4], 0xffffffff
jne 0x140001efa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x2a8], eax
cmp dword [rsp + 0x2a8], 2
je 0x140001edf
mov r8d, dword [rsp + 0x2a8]
lea rdx, [0x14000b600]
mov ecx, 0xed
call fcn.1400018f0
movzx eax, byte [section..data]
test eax, eax
je 0x140001efa
lea rcx, str.found_no_file_system_object_along_path_to_AppleVersions_DLL
call fcn.1400010f0
jmp 0x140001efa
mov eax, dword [rsp + 0x2a4]
and eax, 0x10
test eax, eax
jne 0x140001ffb
movzx eax, byte [section..data]
test eax, eax
je 0x140001f6a
lea rdx, str.found_file_along_path_to_AppleVersions_DLL
lea rcx, [rsp + 0x370]
call fcn.1400048c0
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x410], rax
mov rcx, qword [rsp + 0x410]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x370]
call fcn.140004a50
jmp 0x140001f6a
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
test eax, eax
jne 0x140001f93
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14000b680]
mov ecx, 0x105
call fcn.1400018f0
movzx eax, byte [section..data]
test eax, eax
je 0x140001ff6
lea r8, [rsp + 0x30]
lea rdx, [0x14000b690]
lea rcx, [rsp + 0x380]
call fcn.1400048c0
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x420], rax
mov rcx, qword [rsp + 0x420]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x380]
call fcn.140004a50
jmp 0x140001ff6
jmp 0x14000225f
mov r8d, 0x104
lea rdx, [rsp + 0x30]
lea rcx, str.AppleApplicationSupportSDK
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [rsp + 0x2ac], eax
cmp dword [rsp + 0x2ac], 0
je 0x140002111
movzx eax, byte [section..data]
test eax, eax
je 0x140002043
lea rcx, str.environment_variable_AppleApplicationSupportSDK_is_defined
call fcn.1400010f0
jmp 0x140002043
lea r8, [rsp + 0x30]
lea rdx, str._s_bin
lea rcx, [rsp + 0x2b8]
call fcn.140004af0
nop
lea rcx, [rsp + 0x2b8]
call fcn.140004cf0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
test eax, eax
jne 0x140002091
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14000b750]
mov ecx, 0x118
call fcn.1400018f0
movzx eax, byte [section..data]
test eax, eax
je 0x1400020ff
lea rcx, [rsp + 0x2b8]
call fcn.140004cf0
mov r8, rax
lea rdx, [0x14000b760]
lea rcx, [rsp + 0x390]
call fcn.1400048c0
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x430], rax
mov rcx, qword [rsp + 0x430]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x390]
call fcn.140004a50
jmp 0x1400020ff
lea rcx, [rsp + 0x2b8]
call fcn.140004a50
jmp 0x14000225f
movzx eax, byte [section..data]
test eax, eax
je 0x14000212c
lea rcx, str.environment_variable_AppleApplicationSupportSDK_NOT_defined__falling_back_to_customer_installation
call fcn.1400010f0
jmp 0x14000212c
lea rdx, str.Apple_Application_Support
lea rcx, [rsp + 0x2e8]
call fcn.1400022a0
nop
movzx eax, byte [section..data]
test eax, eax
je 0x1400021af
lea rcx, [rsp + 0x2e8]
call fcn.1400047e0
mov r8, rax
lea rdx, str.AAS_path_is__S
lea rcx, [rsp + 0x3a0]
call fcn.1400048c0
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x440], rax
mov rcx, qword [rsp + 0x440]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x3a0]
call fcn.140004a50
jmp 0x1400021af
lea rcx, [rsp + 0x2e8]
call fcn.1400047e0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
test eax, eax
jne 0x1400021e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14000b848]
mov ecx, 0x123
call fcn.1400018f0
movzx eax, byte [section..data]
test eax, eax
je 0x140002251
lea rcx, [rsp + 0x2e8]
call fcn.1400047e0
mov r8, rax
lea rdx, str.called_SetDllDirectoryW_successfully_with_path__S
lea rcx, [rsp + 0x3b0]
call fcn.1400048c0
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x450], rax
mov rcx, qword [rsp + 0x450]
call fcn.140004cf0
mov rcx, rax
call fcn.1400010f0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140004a50
jmp 0x140002251
lea rcx, [rsp + 0x2e8]
call fcn.140004710
nop
lea rcx, [rsp + 0x278]
call fcn.140004710
mov rcx, rsp
lea rdx, [0x14000d050]
call fcn.140008050
mov rcx, qword [rsp + 0x458]
xor rcx, rsp
call fcn.140008030
add rsp, 0x460
pop rdi
ret