Function at 0x1400100a0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x470
mov rax, qword [0x14011c018]
xor rax, rsp
mov qword [rsp + 0x460], rax
mov rsi, rdx
mov ebx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x30], rdx
mov rcx, rdx
call fcn.140002db8
mov ecx, ebx
call fcn.140010380
movzx edi, al
mov byte [rsp + 0x20], al
jmp 0x140010103
test dil, dil
jne 0x14001033a
cmp ebx, 0x1a
jne 0x14001033a
mov rcx, rsi
call fcn.140002db8
xor edx, edx
mov r8d, 0x410
lea rcx, [rsp + 0x50]
call fcn.1400a2390
mov r8d, 0x207
lea rdx, [rsp + 0x50]
lea rcx, str.APPDATA
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea rcx, [rsp + 0x50]
call fcn.140001de4
mov r12, rax
mov rcx, rsi
call fcn.140001ca0
mov r14, rax
mov r13, qword [rax + 0x18]
cmp r12, r13
ja 0x1400101a4
mov rbx, rax
cmp r13, 8
jb 0x140010174
mov rbx, qword [rax]
mov qword [rax + 0x10], r12
mov r8, r12
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140001ddc
xor r15d, r15d
mov word [rsp + 0x28], r15w
lea rcx, [rbx + r12*2]
lea rdx, [rsp + 0x28]
call fcn.140001dd4
jmp 0x140010324
mov rcx, rsi
call fcn.140001f74
cmp r12, rax
ja 0x14001036b
mov rcx, rsi
call fcn.140001f74
mov rbx, rax
mov rcx, r12
or rcx, 7
mov qword [rsp + 0x40], rcx
cmp rcx, rax
ja 0x140010209
mov rcx, rsi
call fcn.140001ca0
mov rdx, qword [rax + 0x18]
mov rcx, rdx
shr rcx, 1
mov rax, rbx
sub rax, rcx
cmp rdx, rax
ja 0x140010209
lea rax, [rcx + rdx]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.140001d84
mov rbx, qword [rax]
lea rax, [rbx + 1]
lea rdx, [rax + rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x14001022c
mov rax, 0xffffffffffffffff
mov rdx, rax
jmp 0x14001023c
cmp rdx, 0x1000
jb 0x140010269
mov rax, 0xffffffffffffffff
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, rax
call fcn.1400a08c4
mov rcx, rax
test rax, rax
je 0x140010371
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
xor r15d, r15d
jmp 0x140010281
test rdx, rdx
je 0x14001027b
mov rcx, rdx
call fcn.1400a08c4
xor r15d, r15d
jmp 0x140010281
xor r15d, r15d
mov eax, r15d
mov qword [rsp + 0x30], rax
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov r8, r12
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140001ddc
mov word [rsp + 0x28], r15w
lea rcx, [rbx + r12*2]
lea rdx, [rsp + 0x28]
call fcn.140001dd4
cmp r13, 8
jb 0x1400102fc
lea rdx, [r13*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1400102ed
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140010377
mov rcx, r8
call fcn.1400a0900
mov rax, qword [rsp + 0x30]
mov qword [r14], rax
jmp 0x140010324
lea rcx, [rsp + 0x30]
call fcn.140001ca0
mov rbx, rax
mov rcx, r14
call fcn.140001ca0
mov rdx, rax
mov ecx, 8
call fcn.140001bf0
mov rdx, qword [rbx]
mov qword [rax], rdx
mov rcx, rsi
call fcn.140002da0
movzx edi, dil
mov ecx, 1
test al, al
cmove edi, ecx
movzx eax, dil
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.1400a08a0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140001f60
int3
call fcn.1400a4d80
int3
call fcn.1400a4d80
nop
int3