Function at 0x40be50
Capabilities:
Query environment variable

Disassembly:
push r15
mov eax, 0x4388
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.0067cdd0
sub rsp, rax
lea rdx, str.State::getsysinfo_fast_n
xor ebx, ebx
lea rbp, [rsp + 0x30]
mov rsi, rcx
mov rcx, qword [0x00826910]
lea r15, [rsi + 0x828]
lea rdi, [rsp + 0x2380]
lea r14, [rsp + 0x2c]
call fcn.0041e210
mov rcx, qword [0x00826910]
lea r13, [rbp + 4]
lea rdx, str.State::getsysinfo_fast::GetSystemPowerStatus_n
call fcn.0041e210
mov edx, 0xc
mov rcx, r15
call fcn.00403070
mov dword [rsi + 0x134], eax
mov eax, eax
add rax, qword [rsi + 0x860]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
mov rcx, qword [0x00826910]
lea rdx, str.State::getsysinfo_fast::Monitors_n
call fcn.0041e210
mov rcx, rbp
mov r8d, 0x348
xor edx, edx
call sub.msvcrt.dll_memset
xor ecx, ecx
mov dword [rsp + 0x30], 0x348
mov r12, qword [sym.imp.USER32.dll_EnumDisplayDevicesW]
mov word [rsp + 0x380], cx
jmp 0x40bf61
mov r8, rdi
mov rdx, r14
mov rcx, r13
call fcn.0040b980
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x40bf5e
mov edx, dword [rsp + 0x2380]
test edx, edx
je 0x40bf5e
movzx ecx, word [rsp + 0x380]
mov word [rsp + rcx*4 + 0x382], ax
movzx eax, word [rsp + 0x380]
mov word [rsp + rax*4 + 0x384], dx
add word [rsp + 0x380], 1
add ebx, 1
xor r9d, r9d
xor ecx, ecx
mov r8, rbp
mov edx, ebx
call r12
test eax, eax
jne 0x40bf14
movzx eax, word [rsp + 0x380]
lea rbx, [rsp + 0x380]
mov rcx, r15
mov rdx, rbx
lea r8, [rax*4 + 2]
call fcn.00402c70
mov rcx, qword [0x00826910]
lea rdx, str.State::getsysinfo_fast::Windows_n
mov dword [rsi + 0x130], eax
call fcn.0041e210
mov dword [rsi], 0x11c
mov rcx, rsi
mov rbp, qword [sym.imp.KERNEL32.dll_GetVersionExW]
call rbp
test eax, eax
je 0x40c1e0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov rcx, qword [0x00826910]
lea rdx, str.State::getsysinfo_fast::Environment_n
mov dword [rsi + 0x11c], eax
call fcn.0041e210
mov r8d, 0x1000
mov rdx, rbx
mov rbp, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea rcx, str.windir
call rbp
lea rdx, str.inf_
mov rcx, rbx
call fcn.0068bb68
mov rdx, rbx
mov rcx, r15
call fcn.00402af0
xor edx, edx
mov r8d, 0x2000
mov rcx, rdi
mov dword [rsi + 0x138], eax
call sub.msvcrt.dll_memset
mov r8d, 0x1000
mov rdx, rdi
lea rcx, [0x007f7928]
call rbp
lea rdx, [0x007f7940]
mov rcx, rdi
call fcn.0068bb68
mov r8d, 0x1000
mov rdx, rbx
lea rcx, [0x007f794c]
call rbp
mov rcx, rbx
call sub.msvcrt.dll_wcslen
test rax, rax
je 0x40c1d0
mov rdx, rbx
mov rcx, r15
call fcn.00402af0
mov rcx, qword [0x00826910]
lea rdx, str.State::getsysinfo_fast::Architecture_n
mov dword [rsi + 0x13c], eax
call fcn.0041e210
xor edx, edx
mov r8d, 0x1000
mov dword [rsi + 0x120], 0
mov word [rsp + 0x380], dx
lea rcx, str.PROCESSOR_ARCHITECTURE
mov rdx, rbx
call rbp
lea rdx, str.AMD64
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40c0dc
mov dword [rsi + 0x120], 1
xor eax, eax
mov r8d, 0x1000
mov rdx, rbx
mov word [rsp + 0x380], ax
lea rcx, str.PROCESSOR_ARCHITEW6432
call rbp
cmp word [rsp + 0x380], 0
je 0x40c10d
mov dword [rsi + 0x120], 1
mov rax, qword [0x00826960]
mov edx, dword [rax + 0x1c02c]
cmp edx, 0x20
je 0x40c213
cmp edx, 0x40
je 0x40c1c0
mov eax, dword [rax + 0x1c028]
test eax, eax
je 0x40c183
sub eax, 0x3e8
cmp eax, 0xf
ja 0x40c1a0
lea rdx, [0x007f8040]
cdqe
shl rax, 4
add rax, rdx
mov edx, 0x66666667
mov ecx, dword [rax]
movzx r8d, byte [rax + 4]
mov eax, ecx
imul edx
mov eax, ecx
sar eax, 0x1f
sar edx, 2
sub edx, eax
lea eax, [rdx + rdx*4]
mov dword [rsi + 4], edx
add eax, eax
sub ecx, eax
test r8b, r8b
mov dword [rsi + 8], ecx
je 0x40c1ae
mov byte [rsi + 0x11a], 3
add rsp, 0x4388
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi + 4], 0
mov dword [rsi + 8], 0xffffffff
mov byte [rsi + 0x11a], 1
jmp 0x40c183
mov dword [rsi + 0x120], 1
jmp 0x40c12c
mov rdx, rdi
mov rcx, rbx
call fcn.0068bb48
jmp 0x40c074
mov dword [rsi], 0x114
mov rcx, rsi
call rbp
test eax, eax
jne 0x40bfc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x00826910]
lea r8, str.GetVersionEx__
mov edx, eax
call fcn.0041e530
jmp 0x40bfc8
mov dword [rsi + 0x120], 0
jmp 0x40c12c