Function at 0x1400de850
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x10], edx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x250
mov rsi, rcx
lea rcx, [fcn.1400d6410]
mov rbx, r9
mov rbp, r8
mov r12d, edx
call fcn.1400eeeb4
mov qword [rsp + 0x28], rax
or r9, 0xffffffffffffffff
nop
inc r9
cmp word [rbp + r9*2], 0
jne 0x1400de890
inc r9d
mov edx, 2
mov ecx, r9d
mov r14d, r9d
call fcn.1400eeef0
mov r15, rax
mov qword [rsp + 0x20], rax
test rax, rax
jne 0x1400de8c6
xor ebp, ebp
mov word [rsi], bp
jmp 0x1400debb3
mov r8, rbp
mov rdx, r14
mov rcx, rax
mov edi, 1
call fcn.1400e57d4
mov rdx, r14
mov rcx, r15
call fcn.1400e5b68
test rbx, rbx
je 0x1400deb95
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1400de8f1
test rax, rax
je 0x1400deb95
mov rdx, rbx
mov rcx, rbp
call fcn.1400e60d4
test rax, rax
je 0x1400deb95
lea rdx, str.http:__
mov rcx, r15
call fcn.1400e60d4
test rax, rax
jne 0x1400deb95
lea rdx, str.https:__
mov rcx, r15
call fcn.1400e60d4
test rax, rax
jne 0x1400deb95
lea rdx, str.ftp:__
mov rcx, r15
call fcn.1400e60d4
test rax, rax
jne 0x1400deb95
mov r8, rbp
mov rdx, r14
mov rcx, r15
mov qword [rsp + 0x280], r13
call fcn.1400e57d4
mov rdx, rbx
mov rcx, r15
mov r14, r15
call fcn.1400e60d4
xor ebp, ebp
mov r15, rax
mov word [rsi], bp
test rax, rax
je 0x1400deb3f
mov r13, r12
nop dword [rax + rax]
mov r8, r14
mov rdx, r13
mov rcx, rsi
mov word [r15], bp
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
test edi, edi
je 0x1400deb5b
or rax, 0xffffffffffffffff
nop word [rax + rax]
cmp word [rbx + rax*2 + 2], bp
lea rax, [rax + 1]
jne 0x1400de9d0
lea r12, [r15 + rax*2]
mov rdx, rbx
mov rcx, r12
call fcn.1400e60d4
mov r15, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400deb73
mov word [rax], bp
lea rdx, [rsp + 0x40]
mov r8d, 0x104
mov rcx, r12
mov word [rsp + 0x40], bp
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea r14d, [rax + 1]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp r14d, 1
jne 0x1400dea8d
cmp eax, 0xcb
jne 0x1400dea8d
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
test edi, edi
je 0x1400deb5b
mov r8, r12
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
test edi, edi
je 0x1400deb5b
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
test edi, edi
je 0x1400deb5b
jmp 0x1400deb0d
mov ecx, r14d
or rax, 0xffffffffffffffff
inc rax
cmp word [rsi + rax*2], bp
jne 0x1400dea94
inc rax
add rax, rcx
cmp rax, r13
ja 0x1400deb6f
cmp r14d, 1
jbe 0x1400deb0d
cmp r14d, 0x104
ja 0x1400deacd
lea r8, [rsp + 0x40]
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
jmp 0x1400deb0d
mov edx, 2
call fcn.1400eeef0
mov r15, rax
test rax, rax
je 0x1400deb6f
mov r8d, r14d
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r8, r15
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
mov rcx, r15
call fcn.1400e9bf0
mov r15, qword [rsp + 0x30]
or rax, 0xffffffffffffffff
cmp word [rbx + rax*2 + 2], bp
lea rax, [rax + 1]
jne 0x1400deb11
lea r14, [r15 + rax*2]
mov rdx, rbx
mov rcx, r14
call fcn.1400e60d4
mov r15, rax
test rax, rax
jne 0x1400de9a0
mov r12d, dword [rsp + 0x288]
cmp word [r14], bp
je 0x1400deb5b
mov edx, r12d
mov r8, r14
mov rcx, rsi
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
mov rcx, qword [rsp + 0x20]
call fcn.1400e9bf0
mov r13, qword [rsp + 0x280]
jmp 0x1400debb5
mov edi, ebp
jmp 0x1400deb5b
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call fcn.1400e5d4c
mov edi, ebp
test eax, eax
sete dil
test edi, edi
je 0x1400deb5b
mov r8, r12
mov rdx, r13
jmp 0x1400deb4b
mov rcx, r15
call fcn.1400e9bf0
mov rdx, r12
mov r8, rbp
mov rcx, rsi
call fcn.1400e57d4
xor ebp, ebp
test eax, eax
sete bpl
mov edi, ebp
mov rcx, qword [rsp + 0x28]
call fcn.1400eeeb4
lea r11, [rsp + 0x250]
mov eax, edi
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret