Function at 0x1000fc750
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x460
mov rax, qword [0x100152198]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rsi, rcx
mov rdi, r8
mov ebp, edx
mov ebx, 0x206
lea rcx, [rsp + 0x242]
xor r13d, r13d
xor edx, edx
mov r8, rbx
mov r12, r9
mov word [rsp + 0x240], r13w
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x32]
mov r8, rbx
xor edx, edx
mov word [rsp + 0x30], r13w
call sub.msvcrt.dll_memset
mov ebx, 0x80070057
cmp rsi, r13
jne 0x1000fc7e8
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
lea edx, [r13 + 0x11]
jmp 0x1000fc813
cmp rdi, r13
jne 0x1000fc828
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x12
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
call fcn.100034784
jmp 0x1000fcaed
mov r14d, 0x104
cmp dword [rdi], r13d
jne 0x1000fc8f8
lea r8, [0x100027380]
lea rcx, [rsp + 0x240]
mov r9, rsi
mov rdx, r14
call fcn.1000f1d78
cmp eax, r13d
mov ebx, eax
jge 0x1000fc883
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x13
jmp 0x1000fcab2
mov eax, ebp
lea r8, [0x100027420]
lea rdx, [rsp + 0x240]
neg eax
mov r9, rdi
sbb rcx, rcx
neg rcx
add rcx, 0xffffffff80000001
call fcn.1000f48d8
cmp eax, r13d
jne 0x1000fc8b5
cmp dword [rdi], r13d
jne 0x1000fc8f8
mov ebx, 0x90070a02
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 4
je 0x1000fcaed
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
mov edx, 0x14
mov r9, rsi
call fcn.1000347a8
jmp 0x1000fcaed
cmp r12, r13
je 0x1000fcac7
mov r8d, r14d
lea rdx, [rsp + 0x30]
cmp ebp, r13d
je 0x1000fc94c
lea rcx, [0x1000270e0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r13d
je 0x1000fc925
cmp eax, r14d
jbe 0x1000fc96b
call sub.KERNEL32.dll_GetLastError
movzx ebx, ax
or ebx, 0x80070000
cmp eax, r13d
cmovle ebx, eax
cmp ebx, r13d
jl 0x1000fcaed
mov ebx, 0x80004005
jmp 0x1000fcaed
lea rcx, [0x100027430]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r13d
je 0x1000fcacc
cmp eax, r14d
ja 0x1000fcacc
lea rdx, [0x100022d60]
lea rcx, [rsp + 0x30]
call fcn.1000fc50c
cmp eax, r13d
mov ebx, eax
jge 0x1000fc9ae
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x15
jmp 0x1000fcab2
lea rcx, [rsp + 0x30]
mov rdx, rsi
call fcn.1000fc50c
cmp eax, r13d
mov ebx, eax
jge 0x1000fc9ed
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x16
jmp 0x1000fcab2
lea rdx, [0x100027450]
lea rcx, [rsp + 0x30]
call fcn.1000fc50c
cmp eax, r13d
mov ebx, eax
jge 0x1000fca30
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x17
jmp 0x1000fcab2
lea rdx, [0x100027458]
lea rcx, [rsp + 0x30]
call fcn.1000fc50c
cmp eax, r13d
mov ebx, eax
jge 0x1000fca70
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x18
jmp 0x1000fcab2
mov eax, dword [rdi]
lea r9, [rsp + 0x30]
lea r8, [0x100027470]
mov rdx, r14
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.1000f1d78
cmp eax, r13d
mov ebx, eax
jge 0x1000fcac7
mov rcx, qword [0x100153eb8]
lea rax, [0x100153eb8]
cmp rcx, rax
je 0x1000fcaed
test byte [rcx + 0x1c], 1
je 0x1000fcaed
mov edx, 0x19
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
mov r9d, ebx
call fcn.100036510
jmp 0x1000fcaed
mov ebx, r13d
jmp 0x1000fcaed
call sub.KERNEL32.dll_GetLastError
mov ebx, 0x80004005
movzx ecx, ax
or ecx, 0x80070000
cmp eax, r13d
cmovle ecx, eax
cmp ecx, r13d
cmovge ecx, ebx
mov ebx, ecx
mov eax, ebx
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.10011be80
add rsp, 0x460
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret