Function at 0x140004dd0
Capabilities:
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4b8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x430], 0xfffffffffffffffe
mov rsi, rcx
lea rcx, [rbp - 0x60]
call fcn.14000cb20
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x140004f96
mov qword [rbp + 0x410], rsi
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rbp + 0x3f0], rcx
mov qword [rbp + 0x3b8], rcx
mov qword [rbp + 0x3c0], rdi
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x400], 2
mov qword [rbp + 0x408], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x420], rax
xor eax, eax
mov qword [rbp + 0x428], rax
xor ebx, ebx
xor r13d, r13d
cmp r8, 0x201
jae 0x140004ec0
jmp 0x140004ea2
mov rdi, rsi
jae 0x140005003
cmp r8, 0x201
jae 0x140004ec0
lea r12, [rbp - 0x60]
mov r15d, 0x200
mov r14, r8
jmp 0x140004f26
sub r8, r13
sub rbx, r13
cmp rbx, r8
mov rbx, qword [rbp + 0x428]
jae 0x140004ef6
lea rcx, [rbp + 0x3f8]
mov rdx, r13
call fcn.14001b860
mov rbx, qword [rbp + 0x3f8]
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x420], rax
mov eax, 0xffffffff
cmp rbx, rax
mov r13d, 0xffffffff
cmovb r13, rbx
mov qword [rbp + 0x408], r13
mov rax, rbx
mov qword [rbp + 0x428], rbx
mov r12, qword [rbp + 0x420]
mov r15, r13
mov r14, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rsi, rdi
mov rcx, rdi
mov rdx, r12
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edi, eax
test eax, eax
jne 0x140004f54
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140005147
mov r8d, edi
cmp r14, r8
jne 0x140004e90
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140005172
mov rdi, rsi
add r14, r14
mov eax, 0xffffffff
cmp r14, rax
cmovae r14, rax
mov r8, r14
cmp r8, 0x201
jb 0x140004ea2
jmp 0x140004ec0
mov rdx, qword [rbp - 0x60]
mov eax, edx
and eax, 3
cmp eax, 1
jne 0x140004ffa
lea rax, [rdx - 1]
mov qword [rbp + 0x428], rax
mov rcx, qword [rdx - 1]
mov qword [rbp + 0x420], rdx
mov rax, qword [rdx + 7]
call qword [rax]
mov rax, qword [rbp + 0x420]
mov rax, qword [rax + 7]
mov rdx, qword [rax + 8]
test rdx, rdx
mov rdi, qword [rbp + 0x428]
je 0x140004fe7
mov r8, qword [rax + 0x10]
mov rcx, qword [rdi]
call fcn.1400020f0
mov edx, 0x18
mov r8d, 8
mov rcx, rdi
call fcn.1400020f0
mov byte [rsi + 0x18], 2
jmp 0x140005130
cmp r15, r8
jb 0x14000518c
lea rcx, [rbp + 0x3d0]
mov rdx, r12
call fcn.140006430
mov rbx, qword [rbp + 0x3d0]
movups xmm0, xmmword [rbp + 0x3d8]
movaps xmmword [rbp + 0x3a0], xmm0
movzx r14d, byte [rbp + 0x3e8]
mov eax, dword [rbp + 0x3e9]
mov dword [rbp + 0x418], eax
mov eax, dword [rbp + 0x3ec]
mov dword [rbp + 0x41b], eax
mov rdx, qword [rbp + 0x428]
test rdx, rdx
je 0x140005071
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x420]
call fcn.1400020f0
cmp r14b, 2
jne 0x1400050e8
mov rsi, qword [rbp + 0x410]
mov byte [rsi + 0x18], 2
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x140005113
lea rax, [rbx - 1]
mov qword [rbp + 0x428], rax
mov rcx, qword [rbx - 1]
mov rax, qword [rbx + 7]
mov qword [rbp + 0x420], rbx
call qword [rax]
mov rax, qword [rbp + 0x420]
mov rax, qword [rax + 7]
mov rdx, qword [rax + 8]
test rdx, rdx
mov rbx, qword [rbp + 0x428]
je 0x1400050d3
mov r8, qword [rax + 0x10]
mov rcx, qword [rbx]
call fcn.1400020f0
mov edx, 0x18
mov r8d, 8
mov rcx, rbx
call fcn.1400020f0
jmp 0x140005113
movaps xmm0, xmmword [rbp + 0x3a0]
mov rsi, qword [rbp + 0x410]
movups xmmword [rsi + 8], xmm0
mov eax, dword [rbp + 0x418]
mov ecx, dword [rbp + 0x41b]
mov dword [rsi + 0x19], eax
mov dword [rsi + 0x1c], ecx
mov qword [rsi], rbx
mov byte [rsi + 0x18], r14b
mov rdx, qword [rbp + 0x3f0]
test rdx, rdx
je 0x140005130
add rdx, rdx
mov r8d, 2
mov rcx, rdi
call fcn.1400020f0
mov rax, rsi
add rsp, 0x4b8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
shl rbx, 0x20
or rbx, 2
mov r14b, 2
mov rdi, rsi
mov rdx, qword [rbp + 0x428]
test rdx, rdx
jne 0x14000505c
jmp 0x140005071
lea rcx, [0x14001d88b]
lea r8, str.library_std_src_syswindowsmod.rs
mov edx, 0x28
call fcn.14001c310
jmp 0x1400051a1
lea rax, str.library_std_src_syswindowsmod.rs
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.14001c6a0
ud2