Function at 0x140029320
Capabilities:
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4b8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x430], 0xfffffffffffffffe
mov rsi, rcx
lea rcx, [rbp - 0x60]
call fcn.1400262f0
mov r14, qword [rbp - 0x58]
test r14, r14
je 0x1400294e3
mov qword [rbp + 0x410], rsi
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rbp + 0x3f0], rcx
mov qword [rbp + 0x3b8], rcx
mov qword [rbp + 0x3c0], r14
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x400], 2
mov qword [rbp + 0x408], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x428], rax
xor eax, eax
mov qword [rbp + 0x420], rax
xor esi, esi
xor edi, edi
cmp r8, 0x201
jae 0x140029410
jmp 0x1400293f2
mov r14, rbx
jae 0x14002955e
cmp r8, 0x201
jae 0x140029410
lea r13, [rbp - 0x60]
mov r15d, 0x200
mov r12, r8
jmp 0x140029472
sub r8, rdi
sub rsi, rdi
cmp rsi, r8
jae 0x140029446
lea rcx, [rbp + 0x3f8]
mov rdx, rdi
call fcn.140052840
mov rax, qword [rbp + 0x3f8]
mov qword [rbp + 0x420], rax
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x428], rax
mov rsi, qword [rbp + 0x420]
mov eax, 0xffffffff
cmp rsi, rax
mov edi, 0xffffffff
cmovb rdi, rsi
mov qword [rbp + 0x408], rdi
mov r13, qword [rbp + 0x428]
mov r15, rdi
mov r12, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbx, r14
mov rcx, r14
mov rdx, r13
mov r8d, r12d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r14d, eax
test eax, eax
jne 0x1400294a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400296ab
mov r8d, r14d
cmp r12, r8
jne 0x1400293e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400296d4
mov r14, rbx
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jb 0x1400293f2
jmp 0x140029410
mov rdx, qword [rbp - 0x60]
mov eax, edx
and eax, 3
cmp eax, 1
jne 0x140029555
lea rax, [rdx - 1]
mov qword [rbp + 0x420], rax
mov rcx, qword [rdx - 1]
mov qword [rbp + 0x428], rdx
mov rax, qword [rdx + 7]
call qword [rax]
mov rax, qword [rbp + 0x428]
mov rax, qword [rax + 7]
cmp qword [rax + 8], 0
mov rdi, qword [rbp + 0x420]
je 0x140029543
mov r8, qword [rdi]
cmp qword [rax + 0x10], 0x11
jb 0x140029534
mov r8, qword [r8 - 8]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rsi + 0x18], 2
jmp 0x140029696
cmp r15, r8
jb 0x1400296ee
lea rcx, [rbp + 0x3d0]
mov rdx, r13
call fcn.140027530
mov rdi, qword [rbp + 0x3d0]
movups xmm0, xmmword [rbp + 0x3d8]
movaps xmmword [rbp + 0x3a0], xmm0
movzx esi, byte [rbp + 0x3e8]
mov eax, dword [rbp + 0x3e9]
mov dword [rbp + 0x418], eax
mov eax, dword [rbp + 0x3ec]
mov dword [rbp + 0x41b], eax
cmp qword [rbp + 0x420], 0
je 0x1400295ca
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, qword [rbp + 0x428]
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp sil, 2
jne 0x14002964f
mov rax, qword [rbp + 0x410]
mov byte [rax + 0x18], 2
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14002967a
lea rax, [rdi - 1]
mov qword [rbp + 0x420], rax
mov rcx, qword [rdi - 1]
mov rax, qword [rdi + 7]
mov qword [rbp + 0x428], rdi
call qword [rax]
mov rax, qword [rbp + 0x428]
mov rax, qword [rax + 7]
cmp qword [rax + 8], 0
mov rsi, qword [rbp + 0x420]
je 0x14002963b
mov r8, qword [rsi]
cmp qword [rax + 0x10], 0x11
jb 0x14002962c
mov r8, qword [r8 - 8]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14002967a
movaps xmm0, xmmword [rbp + 0x3a0]
mov rdx, qword [rbp + 0x410]
movups xmmword [rdx + 8], xmm0
mov eax, dword [rbp + 0x418]
mov ecx, dword [rbp + 0x41b]
mov dword [rdx + 0x19], eax
mov dword [rdx + 0x1c], ecx
mov qword [rdx], rdi
mov byte [rdx + 0x18], sil
cmp qword [rbp + 0x3f0], 0
je 0x140029696
mov rcx, qword [0x1412e4bb0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
add rsp, 0x4b8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov sil, 2
mov r14, rbx
cmp qword [rbp + 0x420], 0
jne 0x1400295b4
jmp 0x1400295ca
lea rcx, [0x1412d15c8]
lea r8, [0x1412d3c48]
mov edx, 0x28
call fcn.140051970
jmp 0x140029703
lea rax, [0x1412d3c60]
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.140051960
ud2