Function at 0x140083190
Capabilities:
Query environment variable

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov qword [r11 + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
movzx r13d, byte [rsp + 0xb8]
xor r14d, r14d
mov r12, qword [rsp + 0xa8]
mov rbx, r9
mov rdi, qword [rsp + 0xa0]
mov r9, rdx
test r13b, r13b
jne 0x1400833b7
mov rax, qword [r8]
lea r8, [r11 - 0x30]
mov r10d, dword [rbx]
mov ecx, dword [r9]
lea r9, [r11 - 0x38]
movzx ebp, byte [rsp + 0xc0]
sub ecx, r10d
mov byte [rsp + 0x30], bpl
lea rdx, [rax + r10*8]
lea rax, [0x1404bc360]
mov qword [r11 - 0x50], rax
lea rax, [0x1404bc378]
mov qword [r11 - 0x58], rax
call fcn.140082af0
add dword [rbx], eax
mov rax, qword [0x1404bc378]
test rax, rax
jne 0x14008323d
lea rcx, str.DEFAULT_GROUP_SUFFIX_ENV
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [0x1404bc378], rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083275
cmp byte [0x1404bc790], r14b
jne 0x140083275
lea rbx, [0x1404bc590]
mov rdx, rbx
call fcn.140081b20
test eax, eax
jne 0x140083500
mov rax, qword [0x1404bc378]
mov qword [0x1404bc370], rbx
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400832ad
cmp byte [0x1404bc790], r14b
jne 0x1400832ad
lea rbx, [0x1404bc390]
mov rdx, rbx
call fcn.140081b20
test eax, eax
jne 0x140083500
mov rax, qword [0x1404bc378]
mov qword [0x1404bc380], rbx
mov byte [0x1404bc790], 1
test rax, rax
je 0x1400834cb
lea rcx, [0x140082c50]
cmp rdi, rcx
jne 0x1400834cb
or rsi, 0xffffffffffffffff
mov rdi, rsi
cmp byte [rax + rdi + 1], r14b
lea rdi, [rdi + 1]
jne 0x1400832d4
mov r15, qword [r12 + 0x10]
mov rcx, qword [r12]
mov eax, dword [r15]
lea edx, [rax*2 + 1]
shl rdx, 3
call fcn.14007fa30
mov r13, rax
test rax, rax
jne 0x14008330d
mov eax, 2
jmp 0x140083500
mov ebp, r14d
cmp dword [r15], r14d
jbe 0x1400833a1
lea r9d, [rdi + 1]
mov dword [rsp + 0x40], r9d
mov eax, ebp
mov rbx, rsi
lea rcx, [rax*8]
mov rax, qword [r15 + 0x10]
lea r8, [rcx + r13]
mov qword [rsp + 0x48], r8
mov rdx, qword [rcx + rax]
mov qword [r8], rdx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140083343
mov rcx, qword [r12]
lea edx, [r9 + rbx]
call fcn.14007fa30
mov r14, rax
test rax, rax
je 0x140083303
mov ecx, dword [r15]
mov r8, rbx
mov rdx, qword [rsp + 0x48]
add ecx, ebp
mov qword [r13 + rcx*8], rax
mov rcx, rax
mov rdx, qword [rdx]
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1404bc378]
lea r8, [rdi + 1]
lea rcx, [r14 + rbx]
call sub.VCRUNTIME140.dll_memcpy
mov r9d, dword [rsp + 0x40]
inc ebp
cmp ebp, dword [r15]
jb 0x140083322
xor r14d, r14d
mov eax, dword [r15]
add eax, eax
mov qword [r15 + 0x10], r13
mov dword [r15], eax
mov qword [r13 + rax*8], r14
jmp 0x1400834b2
cmp qword [0x1404bc360], r14
je 0x1400834c3
lea rcx, [0x140082c50]
cmp rdi, rcx
jne 0x1400834c3
mov rdi, qword [r12 + 0x10]
mov rcx, qword [r12]
mov edx, dword [rdi]
add edx, 3
shl rdx, 3
call fcn.14007fa30
mov r14, rax
test rax, rax
je 0x140083303
xor ebx, ebx
cmp dword [rdi], ebx
jbe 0x14008341a
nop dword [rax]
mov rax, qword [rdi + 0x10]
lea rdx, [rbx*8]
inc ebx
mov rcx, qword [rdx + rax]
mov qword [rdx + r14], rcx
cmp ebx, dword [rdi]
jb 0x140083400
mov rcx, qword [0x1404bc360]
lea r13, [r14 + rbx*8]
mov qword [r13], rcx
mov rax, qword [0x1404bc378]
test rax, rax
je 0x14008349f
or rsi, 0xffffffffffffffff
mov rbp, rsi
nop dword [rax]
inc rbp
cmp byte [rax + rbp], 0
jne 0x140083440
nop dword [rax]
inc rsi
cmp byte [rcx + rsi], 0
jne 0x140083450
mov rcx, qword [r12]
lea edx, [rsi + 1]
add edx, ebp
call fcn.14007fa30
mov r15, rax
test rax, rax
je 0x140083303
mov rdx, qword [r13]
lea eax, [rbx + 1]
mov r8, rsi
mov qword [r14 + rax*8], r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1404bc378]
lea r8, [rbp + 1]
lea rcx, [r15 + rsi]
call sub.VCRUNTIME140.dll_memcpy
inc dword [rdi]
inc dword [rdi]
mov eax, dword [rdi]
mov qword [rdi + 0x10], r14
mov qword [r14 + rax*8], 0
xor r14d, r14d
movzx r13d, byte [rsp + 0xb8]
mov rdi, qword [rsp + 0xa0]
movzx ebp, byte [rsp + 0xc0]
mov rsi, qword [rsp + 0x80]
mov rcx, rsi
call fcn.14007ede0
test rax, rax
je 0x14008351e
mov r9, rsi
mov byte [rsp + 0x20], r13b
xor r8d, r8d
mov rdx, r12
mov rcx, rdi
call fcn.1400820b0
test eax, eax
js 0x140083600
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, qword [0x1404bc380]
test rax, rax
je 0x140083568
mov byte [rsp + 0x30], r13b
lea r9, [0x140135a5a]
mov dword [rsp + 0x28], r14d
lea r8, [0x140135a5a]
mov rdx, r12
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140082180
test eax, eax
js 0x140083600
jle 0x1400834fe
mov r8, qword [0x1404bc380]
jmp 0x1400835f2
test bpl, bpl
jne 0x1400834fe
mov rbx, qword [rsp + 0xb0]
cmp qword [rbx], 0
je 0x1400834fe
nop dword [rax + rax]
mov r8, qword [rbx]
cmp byte [r8], 0
je 0x1400835a2
mov r9, rsi
mov byte [rsp + 0x20], r13b
mov rdx, r12
mov rcx, rdi
call fcn.1400820b0
test eax, eax
js 0x140083600
jmp 0x1400835dc
mov rax, qword [0x1404bc370]
test rax, rax
je 0x1400835dc
mov byte [rsp + 0x30], r13b
lea r9, [0x140135a5a]
mov dword [rsp + 0x28], r14d
lea r8, [0x140135a5a]
mov rdx, r12
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140082180
test eax, eax
js 0x140083600
jg 0x1400835eb
add rbx, 8
cmp qword [rbx], 0
jne 0x140083580
jmp 0x1400834fe
mov r8, qword [0x1404bc370]
lea rdx, str.Could_not_open_required_defaults_file:__s
xor ecx, ecx
call fcn.14007eab0
lea rdx, str.Fatal_error_in_defaults_handling._Program_aborted_
xor ecx, ecx
call fcn.14007eab0
mov eax, 1
jmp 0x140083500