Function at 0x140094900
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x5120
call fcn.1400fe810
sub rsp, rax
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x5110], rax
xor r15d, r15d
mov r13b, r8b
mov rbx, rdx
mov rbp, rcx
cmp byte [0x1401561a5], r15b
jne 0x140094973
cmp word [rdx], 0x2e
jne 0x140094973
movzx ecx, word [rbx + 2]
call fcn.140050458
cmp al, r15b
je 0x140094962
add rbx, 4
cmp word [rbx], 0x2e
je 0x14009494a
cmp word [rbx], 0x2e
jne 0x140094973
cmp word [rbx + 2], r15w
je 0x140094e02
lea rdx, [rsp + 0x3040]
mov r8d, 0x800
mov rcx, rbx
call fcn.140051654
lea rdi, [0x14010adf4]
mov rsi, rbx
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
mov rcx, rbx
sete r14b
call fcn.140050400
movzx ecx, word [rax]
mov rsi, rax
call fcn.140050458
cmp al, r15b
je 0x1400949e6
cmp r14b, r15b
jne 0x1400949e6
lea rdi, [rsp + 0x3040]
mov rcx, rbx
sub rdi, rbx
movzx eax, word [rcx]
movzx edx, word [rcx + rdi]
sub eax, edx
jne 0x1400949dd
add rcx, 2
test edx, edx
jne 0x1400949ca
cmp eax, r15d
je 0x1400949e6
mov word [rsi], r15w
mov r12d, r15d
mov rdi, rbx
cmp word [rbx], r15w
je 0x140094a2f
cmp word [rdi], 0x2e
jne 0x140094a2f
cmp word [rdi + 2], 0x2e
jne 0x140094a2f
movzx ecx, word [rdi + 4]
call fcn.140050458
cmp al, r15b
jne 0x140094a14
cmp word [rdi + 4], r15w
jne 0x140094a2f
movzx eax, word [rdi + 4]
neg ax
sbb rcx, rcx
inc r12d
neg rcx
lea rdi, [rdi + rcx*2 + 4]
cmp word [rdi], r15w
jne 0x1400949f2
cmp byte [0x1401561a5], r15b
je 0x140094a52
cmp r13b, r15b
je 0x140094a52
mov rcx, rbx
call fcn.1400508b8
cmp al, r15b
je 0x140094a52
mov rcx, rbp
call fcn.1400914ac
cmp byte [rbp + 0x107a], r15b
je 0x140094a87
mov eax, dword [rbp + 0x2280]
cmp r12d, eax
mov edx, eax
cmovl edx, r12d
cmp r14b, r15b
cmovne edx, eax
cmp edx, r15d
je 0x140094a87
xor r8d, r8d
mov rcx, rbp
call fcn.14008f8e4
xor edx, edx
jmp 0x140094dfa
mov byte [rbp + 0x107a], r15b
cmp byte [0x1401561a5], r15b
je 0x140094b7b
lea rdx, str.FlatView
lea rcx, str.FileList
xor r8d, r8d
call fcn.14009b870
cmp eax, r15d
je 0x140094abf
cmp r12d, r15d
je 0x140094e02
lea r14, [0x140164e50]
mov r13d, 0x800
lea rdx, [rsp + 0x1040]
mov rcx, r14
mov r8, r13
call fcn.140078514
lea rdi, [0x14010adf4]
mov rsi, rbx
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x140094b1f
mov rdx, rbx
mov rcx, r14
call fcn.1400783f4
cmp al, r15b
je 0x140094b1f
cmp r12d, r15d
lea rdx, [rsp + 0x1040]
mov rcx, rbp
cmovle rdx, r15
call fcn.140092ec8
jmp 0x140094e02
lea rdx, [rsp + 0x2040]
mov r8, r13
mov rcx, r14
call fcn.140078534
lea rdx, [rsp + 0x2040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d2c
lea rcx, [rbp + 0x107c]
call fcn.140050fc0
mov rcx, rbp
call fcn.1400914ac
cmp al, r15b
je 0x140094e02
lea rcx, [rsp + 0x2040]
call fcn.140050ce0
mov rdx, rax
jmp 0x140094dfa
mov r13d, 0x800
lea rdx, [rbp + 0x107c]
lea rcx, [rsp + 0x1040]
mov r8, r13
call fcn.140065d2c
mov word [rsp + 0x2040], r15w
jmp 0x140094c84
cmp byte [rbp + 0x107a], r15b
jne 0x140094c8d
lea rcx, [rbp + 0x107c]
call fcn.140050474
cmp al, r15b
je 0x140094c39
movzx ecx, word [rbp + 0x1080]
call fcn.140050458
cmp al, r15b
je 0x140094c39
cmp word [rbp + 0x1082], r15w
jne 0x140094c39
cmp dword [rbp + 0x2280], r15d
jle 0x140094bf1
mov byte [rbp + 0x107a], 1
jmp 0x140094c64
mov rcx, qword [rbp + 0x50]
xor r9d, r9d
lea rax, [rsp + 0x30]
lea edx, [r9 + 0x11]
xor r8d, r8d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderLocation]
mov rdx, qword [rsp + 0x30]
lea rcx, [0x140162bc0]
call fcn.140090708
mov rcx, qword [0x14018c420]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x28]
jmp 0x140094c64
lea rcx, [rbp + 0x107c]
call fcn.140050ce0
lea rcx, [rsp + 0x2040]
mov r8, r13
mov rdx, rax
call fcn.140065d2c
lea rcx, [rbp + 0x107c]
call fcn.140050fc0
dec r12d
jmp 0x140094c6d
add rbx, 2
cmp word [rbx], 0x2e
je 0x140094c69
movzx ecx, word [rbx]
call fcn.140050458
cmp al, r15b
je 0x140094c84
add rbx, 2
cmp r12d, r15d
jg 0x140094ba6
cmp r14b, r15b
je 0x140094cad
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140051654
lea rdx, [rsp + 0x40]
jmp 0x140094cbd
mov rcx, rbx
call fcn.1400508b8
cmp al, r15b
je 0x140094cce
mov rdx, rbx
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d2c
jmp 0x140094cf5
cmp word [rbx], r15w
je 0x140094cf5
lea rcx, [rbp + 0x107c]
mov rdx, r13
call fcn.1400504d4
lea rcx, [rbp + 0x107c]
mov r8, r13
mov rdx, rbx
call fcn.140065dac
lea rcx, [rbp + 0x107c]
call fcn.1400504a8
mov esi, eax
cmp eax, 0xffffffff
je 0x140094d2e
call fcn.1400b530c
bt eax, esi
jb 0x140094d2e
lea rdx, [rsp + 0x1040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d2c
jmp 0x140094e02
cmp byte [rbp + 0x107a], r15b
jne 0x140094de1
lea rcx, [rbp + 0x107c]
call fcn.140042584
cmp al, r15b
jne 0x140094de1
lea rdx, [rsp + 0x40]
mov r8d, r13d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r15d
je 0x140094d7c
lea rcx, [rsp + 0x40]
call fcn.140042584
cmp al, r15b
je 0x140094d7c
lea rdx, [rsp + 0x40]
jmp 0x140094dd2
mov ecx, 0x6c
call fcn.14005fad0
lea r9, [rbp + 0x107c]
lea rcx, [rsp + 0x4040]
mov r8, rax
mov edx, 0x864
call fcn.140057264
mov ecx, 0x66
call fcn.14005fad0
mov rcx, qword [0x140158330]
lea rdx, [rsp + 0x4040]
mov r8, rax
mov r9d, 0x10
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [rsp + 0x1040]
lea rcx, [rbp + 0x107c]
mov r8, r13
call fcn.140065d2c
movzx eax, word [rsp + 0x2040]
neg ax
lea rax, [rsp + 0x2040]
sbb rdx, rdx
and rdx, rax
mov rcx, rbp
call fcn.140093b64
mov rcx, qword [rsp + 0x5110]
xor rcx, rsp
call fcn.1400e9d00
mov rbx, qword [rsp + 0x5170]
add rsp, 0x5120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret