Function at 0x140067cf0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x50
mov eax, 0x1000000
lea rcx, [0x14013eaa0]
xorps xmm0, xmm0
mov qword [0x14013eba8], rax
mov qword [0x14013e690], rax
mov ebx, 0x104
xor eax, eax
xor edi, edi
mov r8d, ebx
mov qword [0x14013e470], rax
xor edx, edx
mov qword [0x14013e448], rdi
movups xmmword [0x14013e450], xmm0
movups xmmword [0x14013e460], xmm0
call sub.msvcrt.dll_memset
mov edx, ebx
lea rcx, [0x1401476d0]
call fcn.14005282c
test al, al
je 0x140067f9b
mov edx, ebx
lea rcx, [0x1401476b0]
call fcn.14005282c
test al, al
je 0x140067f9b
mov r8, qword [0x1401476d8]
xor ecx, ecx
mov rdx, qword [0x1401476d0]
sub r8, rdx
sar r8, 1
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
je 0x140067f83
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jne 0x140067f83
mov edx, ebx
lea rcx, [0x1401476d0]
call fcn.14005282c
mov rax, qword [0x1401476b0]
xor r9d, r9d
mov rcx, qword [0x1401476b8]
xor r8d, r8d
mov qword [rsp + 0x40], rdi
sub rcx, rax
sar rcx, 1
xor edx, edx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rcx
mov rcx, qword [0x1401476d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call qword [sym.imp.msvcrt.dll__wsplitpath_s]
nop dword [rax + rax]
test eax, eax
je 0x140067e26
lea rcx, str.error_0x_x_from__wsplitpath_s___n
mov edx, eax
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
jmp 0x140067fae
mov rdx, qword [0x1401476b8]
mov rcx, qword [0x1401476b0]
sub rdx, rcx
sar rdx, 1
call qword [sym.imp.msvcrt.dll_wcsnlen]
nop dword [rax + rax]
mov rdx, rax
lea rcx, [0x1401476b0]
call fcn.14005282c
lea rcx, str.dbg:_initializing..._n
call fcn.140067c4c
lea rbx, [0x14013e6a0]
mov r8d, 0x400
mov rdx, rbx
lea rcx, str._NT_SYMBOL_PATH
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
nop dword [rax + rax]
movzx ecx, byte [0x14013e6a0]
mov rdx, rbx
cmp eax, 1
cmovl ecx, edi
mov byte [0x14013e6a0], cl
lea rcx, str.Symbol_Path____s__n
call fcn.140067c4c
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax + rax]
xor r8d, r8d
mov rdx, rbx
lea ecx, [rax + 1]
mov qword [0x14013e698], rcx
call qword [sym.imp.imagehlp.dll_SymInitialize]
nop dword [rax + rax]
test eax, eax
jne 0x140067eff
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, eax
lea rcx, str.error_0x_x_from_SymInitialize___n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
mov qword [0x14013e698], rdi
jmp 0x140067fae
mov ecx, 0x10813
call qword [sym.imp.imagehlp.dll_SymSetOptions]
nop dword [rax + rax]
mov edx, eax
mov dword [0x14013e684], eax
lea rcx, str.SymOpts__0x_x_n
call fcn.140067c4c
mov rcx, qword [0x14013e698]
lea rdx, [0x140067cc0]
xor r8d, r8d
call qword [sym.imp.imagehlp.dll_SymRegisterCallback64]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jne 0x140067f5f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
lea rcx, str.error_0x_x_from_SymRegisterCallback64___n
jmp 0x140067e13
call fcn.1400670f8
cmp dword [0x14013d15c], edi
jne 0x140067f7f
lea rcx, str.warning:_Enums_will_not_be_proccess__failed_allocation_of_structures_n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
mov eax, ebx
jmp 0x140067fb0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
lea rcx, str.error_0x_x_from_GetModuleFileNameW___n
jmp 0x140067e13
lea rcx, str.error_out_of_memory_from_resize_n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
xor eax, eax
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret