Function at 0x140150777
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xe25c1912
pushf
not eax
add eax, 0x381d2920
xor eax, 0x67bcc1cb
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x7f402a7b
xor eax, 0x3e8dd86b
rol eax, 0x84
popf
pushf
not eax
add eax, 0x5d416070
xor eax, 0x51e9a58b
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x54843d7d
xor eax, 0x58de6b4e
rol eax, 0x1b
popf
cmp eax, 6
jne 0x1401507da
popf
pop rax
jmp 0x140150b62
cmp eax, 7
jne 0x1401507e9
popf
pop rax
jmp 0x140150bb9
cmp eax, 4
jne 0x1401507f8
popf
pop rax
jmp 0x140150a3d
cmp eax, 0
jne 0x140150807
popf
pop rax
jmp 0x140150852
cmp eax, 3
jne 0x140150816
popf
pop rax
jmp 0x1401509bb
cmp eax, 2
jne 0x140150825
popf
pop rax
jmp 0x140150984
cmp eax, 1
jne 0x140150834
popf
pop rax
jmp 0x140150903
cmp eax, 8
jne 0x140150843
popf
pop rax
jmp 0x140150c00
cmp eax, 5
jne 0x140150852
popf
pop rax
jmp 0x140150ad6
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
jmp 0x140150867
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor ebp, ebp
mov rbx, rax
test rax, rax
je 0x1401508d0
push rax
pushf
mov eax, 0xe098466f
pushf
not eax
add eax, 0x5434974a
xor eax, 0x645e4539
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x69583627
xor eax, 0x7b9b6268
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x273e3dc
xor eax, 0x5bca2c69
rol eax, 0x74
popf
pushf
not eax
add eax, 0x186bc337
xor eax, 0x50a00658
rol eax, 0x32
popf
jmp 0x1401507cb
push rax
pushf
mov eax, 0x8624d731
pushf
not eax
add eax, 0x5667faf5
xor eax, 0x60620951
rol eax, 0x25
popf
pushf
not eax
add eax, 0x38eeae35
xor eax, 0x34cb5bde
rol eax, 0xd2
popf
jmp 0x1401507cb
mov rsi, rbx
cmp word [rax], bp
je 0x140150951
push rax
pushf
mov eax, 0x88071b03
pushf
not eax
add eax, 0x6aa35c67
xor eax, 0x33b073ad
rol eax, 0x78
popf
pushf
not eax
add eax, 0x5484696e
xor eax, 0x7094d8e5
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x4a7dde4c
xor eax, 0x53062102
rol eax, 0x88
popf
jmp 0x1401507cb
push rax
pushf
mov eax, 0x954d7145
pushf
not eax
add eax, 0x681b2ba
xor eax, 0x1bc4ba37
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x76bb7951
xor eax, 0x5a23f176
rol eax, 0xa
popf
jmp 0x1401507cb
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xf79ff61a
pushf
not eax
add eax, 0x5ae95cf4
xor eax, 0x5835847
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x4e87e47b
xor eax, 0x1ae9ca6
rol eax, 0x21
popf
jmp 0x1401507cb
inc rax
cmp word [rsi + rax*2], bp
jne 0x140150a0a
push rax
pushf
mov eax, 0xb2fc906f
pushf
not eax
add eax, 0x74b5ce41
xor eax, 0x29b06476
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x4129da32
xor eax, 0x730a4342
rol eax, 0x85
popf
pushf
not eax
add eax, 0xb48a077
xor eax, 0x6b74d22a
rol eax, 0xe4
popf
jmp 0x1401507cb
push rax
pushf
mov eax, 0x843904cd
pushf
not eax
add eax, 0x1fd37c98
xor eax, 0x734f75a2
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x6a963ab2
xor eax, 0x3060fc17
rol eax, 0xf7
popf
jmp 0x1401507cb
lea rsi, [rsi + rax*2]
add rsi, 2
cmp word [rsi], bp
jne 0x140150aa3
push rax
pushf
mov eax, 0xff2d6675
pushf
not eax
add eax, 0x2f9f22ed
xor eax, 0x79dc5a6c
rol eax, 0x30
popf
pushf
not eax
add eax, 0x1b29a9ae
xor eax, 0x13fa5717
rol eax, 0x30
popf
pushf
not eax
add eax, 0x26eb1bd6
xor eax, 0x227c71df
rol eax, 0xed
popf
pushf
not eax
add eax, 0x300a4ab5
xor eax, 0x3fc270ff
rol eax, 0xcb
popf
jmp 0x1401507cb
push rax
pushf
mov eax, 0x813bf73d
pushf
not eax
add eax, 0x236be946
xor eax, 0x417377b8
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x388903ce
xor eax, 0x6a533b72
rol eax, 0xe3
popf
jmp 0x1401507cb
push rbx
not rbx
add rsi, rbx
pop rbx
add rsi, 1
add rsi, 2
sar rsi, 1
add rsi, rsi
mov rcx, rsi
call fcn.140129d30
mov rdi, rax
test rax, rax
je 0x140150b2f
push rax
pushf
mov eax, 0x85946866
pushf
not eax
add eax, 0x4ade8e1
xor eax, 0x1c0502c6
rol eax, 0xef
popf
pushf
not eax
add eax, 0x7586e340
xor eax, 0x3828b1b1
rol eax, 7
popf
jmp 0x1401507cb
push rax
pushf
mov eax, 0x865b49ff
pushf
not eax
add eax, 0x362f11c4
xor eax, 0x6c62d69b
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x24f92d7f
xor eax, 0x2c8308d3
rol eax, 0x19
popf
jmp 0x1401507cb
mov r8, rsi
mov rdx, rbx
mov rcx, rax
call fcn.140029ea0
mov rbp, rdi
push rax
pushf
mov eax, 0xfd403a36
pushf
not eax
add eax, 0xda4a342
xor eax, 0x50c84a03
rol eax, 0x43
popf
pushf
not eax
add eax, 0x2ebcc442
xor eax, 0xaf9fb4a
rol eax, 0xe
popf
pushf
not eax
add eax, 0x36262dc
xor eax, 0x6f351a73
rol eax, 0x99
popf
jmp 0x1401507cb
xor ecx, ecx
call fcn.14011705c
mov rcx, rbx
jmp 0x140150bc4
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rbp
push rax
pushf
mov eax, 0xe4d713b1
pushf
not eax
add eax, 0x7f780b58
xor eax, 0x4fbf3198
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x31679056
xor eax, 0x186c39d6
rol eax, 0x1a
popf
jmp 0x1401507cb
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret