Function at 0x14004f080
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14008b180]
xor rax, rsp
mov qword [rbp + 0x17], rax
xor edi, edi
mov dword [rbp + 0xf], edi
lea rcx, [rbp - 0x59]
call fcn.14004ecf0
mov rsi, rax
mov r14, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14004f0d4
mov rsi, qword [rax]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x14004f0f1
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x61], 7
jmp 0x14004f12b
mov rbx, r14
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.14002d740
mov qword [rbp - 0x79], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x61], rbx
movups xmm6, xmmword [rbp - 0x79]
mov qword [rbp - 0x69], r14
lea rcx, [0x14008b060]
call fcn.140003670
movups xmmword [0x14008b060], xmm6
movups xmm0, xmmword [rbp - 0x69]
movups xmmword [0x14008b070], xmm0
lea rcx, [rbp - 0x59]
call fcn.140003670
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov rsi, 0xffffffffffffffff
test eax, eax
je 0x14004f248
lea ebx, [rax + 1]
mov ecx, ebx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.140067d70
mov r14, rax
mov qword [rbp + 0xf], rax
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004f23b
mov r8, rsi
inc r8
cmp word [r14 + r8*2], 0
jne 0x14004f1a5
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], di
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.14002d2e0
nop
mov qword [rbp - 0x19], rdi
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 7
mov word [rbp - 0x19], di
mov r8d, 4
lea rdx, str.Temp
lea rcx, [rbp - 0x19]
call fcn.14002d2e0
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x39]
call fcn.140003290
mov rbx, rax
lea rcx, [rbp - 0x19]
call fcn.140003670
mov rdx, rbx
lea rcx, [rbp - 0x79]
call fcn.140018480
nop
lea rcx, [rbp - 0x39]
call fcn.140003670
nop
test r14, r14
je 0x14004f264
mov rcx, r14
call fcn.140067440
jmp 0x14004f264
test r14, r14
je 0x14004f248
mov rcx, r14
call fcn.140067440
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x79], rdi
movdqa xmm1, xmmword [0x1400772e0]
movdqu xmmword [rbp - 0x69], xmm1
mov word [rbp - 0x79], di
lea r14, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae r14, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
cmp r15, 8
jae 0x14004f28a
movups xmm6, xmmword [r14]
mov qword [rbp - 0x41], 7
jmp 0x14004f2c4
mov rbx, r15
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14002d740
mov qword [rbp - 0x59], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], r15
lea r12, [0x14008b080]
mov rcx, r12
call fcn.140003670
movups xmmword [0x14008b080], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x14008b090], xmm0
lea rcx, [rbp - 0x79]
call fcn.140003670
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004f392
lea ebx, [rax + 1]
mov ecx, ebx
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.140067d70
mov r14, rax
mov qword [rbp + 7], rax
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14004f380
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [r14 + r8*2], 0
jne 0x14004f340
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
mov rdx, r14
lea rcx, [rbp - 0x79]
call fcn.14002d2e0
nop
test r14, r14
je 0x14004f3ae
mov edx, 2
mov rcx, r14
call fcn.140067440
jmp 0x14004f3ae
test r14, r14
je 0x14004f392
mov edx, 2
mov rcx, r14
call fcn.140067440
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x79], rdi
movdqa xmm1, xmmword [0x1400772e0]
movdqu xmmword [rbp - 0x69], xmm1
mov word [rbp - 0x79], di
lea r14, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae r14, qword [rbp - 0x79]
mov r15, qword [rbp - 0x69]
cmp r15, 8
jae 0x14004f3d4
movups xmm6, xmmword [r14]
mov qword [rbp - 0x41], 7
jmp 0x14004f40e
mov rbx, r15
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14002d740
mov qword [rbp - 0x59], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], r15
lea rcx, [0x14008b0a0]
call fcn.140003670
movups xmmword [0x14008b0a0], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x14008b0b0], xmm0
lea rcx, [rbp - 0x79]
call fcn.140003670
xor r8d, r8d
xor edx, edx
lea rcx, str.ProgramFiles
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14004f4e9
lea ebx, [rax + 1]
mov edx, ebx
mov eax, 2
mul rdx
cmovo rax, rsi
mov rcx, rax
call fcn.140067d70
mov r14, rax
mov qword [rbp + 7], rax
mov r8d, ebx
mov rdx, rax
lea rcx, str.ProgramFiles
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14004f4d7
nop word [rax + rax]
inc rsi
cmp word [r14 + rsi*2], 0
jne 0x14004f490
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
mov r8, rsi
mov rdx, r14
lea rcx, [rbp - 0x79]
call fcn.14002d2e0
nop
test r14, r14
je 0x14004f4d1
mov edx, 2
mov rcx, r14
call fcn.140067440
mov rdi, qword [rbp - 0x69]
jmp 0x14004f50b
test r14, r14
je 0x14004f4e9
mov edx, 2
mov rcx, r14
call fcn.140067440
lea rax, [rbp - 0x79]
mov qword [rbp + 7], rax
call fcn.140032c40
nop
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], di
lea rsi, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rsi, qword [rbp - 0x79]
cmp rdi, 8
jae 0x14004f52c
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x41], 7
jmp 0x14004f566
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14002d740
mov qword [rbp - 0x59], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], rdi
lea rcx, [0x14008b0c0]
call fcn.140003670
movups xmmword [0x14008b0c0], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x14008b0d0], xmm0
lea rcx, [rbp - 0x79]
call fcn.140003670
mov dl, 1
lea rcx, [rbp - 0x19]
call fcn.14004b470
nop
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x19]
call fcn.140003440
nop
lea rcx, [rbp - 0x19]
call fcn.140003670
nop
lea rsi, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rsi, qword [rbp - 0x39]
mov rdi, qword [rbp - 0x29]
cmp rdi, 8
jae 0x14004f5da
movups xmm6, xmmword [rsi]
mov qword [rbp - 0x41], 7
jmp 0x14004f614
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x59]
call fcn.14002d740
mov qword [rbp - 0x59], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x41], rbx
movups xmm6, xmmword [rbp - 0x59]
mov qword [rbp - 0x49], rdi
lea rbx, [0x14008b0e0]
mov rcx, rbx
call fcn.140003670
movups xmmword [0x14008b0e0], xmm6
movups xmm0, xmmword [rbp - 0x49]
movups xmmword [0x14008b0f0], xmm0
lea rcx, [rbp - 0x39]
call fcn.140003670
mov byte [0x14008d6ac], 1
cmp qword [0x14008b098], 8
cmovae r12, qword [0x14008b080]
mov rcx, r12
call fcn.140055b00
test al, al
sete byte [0x14008d6ad]
mov byte [0x14008d6ae], 1
mov byte [0x14008d6af], 1
cmp qword [0x14008b0f8], 8
cmovae rbx, qword [0x14008b0e0]
mov rcx, rbx
call fcn.140055b00
test al, al
sete byte [0x14008da10]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400673e0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret