Function at 0x14004af70
Capabilities:
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1400d6060]
xor rax, rsp
mov qword [rbp + 0x1f], rax
lea rcx, str.LOCALAPPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor r14d, r14d
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x39], r14b
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r14b
jne 0x14004afd7
mov rdx, rax
lea rcx, [rbp - 0x39]
call fcn.1400460e0
nop
lea rcx, str.APPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rbp - 1], r14
mov qword [rbp + 0xf], r14
mov qword [rbp + 0x17], reloc.WS2_32.dll_ntohs
mov byte [rbp - 1], 0
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004b010
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 1]
call fcn.1400460e0
nop
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [rbp - 0x29]
sub rax, rcx
cmp rax, 1
jb 0x14004b504
lea r9, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae r9, qword [rbp - 0x39]
mov qword [rsp + 0x30], 1
lea r15, [0x1400c3cac]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x59]
call fcn.140048f00
nop
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.DigitalEntitlements
lea rcx, [rbp - 0x59]
call fcn.140048b90
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x14004b0e3
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b0de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b0de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
movups xmmword [rbp - 0x39], xmm6
movups xmmword [rbp - 0x29], xmm7
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x14004b129
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b124
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
mov rdi, qword [rbp - 0x29]
lea rbx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rbx, qword [rbp - 0x39]
call fcn.1400ae460
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x11], rdi
lea r8, [rbp - 0x19]
mov edx, eax
lea rcx, [rbp - 0x59]
call fcn.140049880
nop
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call fcn.1400ae970
movzx ebx, al
mov qword [rbp - 9], rbx
shr rax, 0x20
mov dword [rbp - 0x19], eax
lea r12, [0x1400d6328]
mov qword [rbp - 0x11], r12
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
cmp eax, 0x91
jne 0x14004b1a9
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.14004ac70
mov rbx, qword [rbp - 9]
cmp dword [rbp - 0x19], 0
jne 0x14004b50a
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x14004b1f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b1f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b1f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test rbx, rbx
lea rdx, str.Removed:
jne 0x14004b210
lea rdx, str.Couldnt_Find:
call fcn.14004de00
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
mov r8, qword [rbp - 0x29]
cmovae rdx, qword [rbp - 0x39]
mov rcx, rax
call fcn.14004ed20
lea rdx, [0x14004dfd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0xf]
sub rsi, rax
cmp rsi, 1
jb 0x14004b51f
lea r9, [rbp - 1]
cmp qword [rbp + 0x17], 0x10
cmovae r9, qword [rbp - 1]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x59]
call fcn.140048f00
nop
mov r8d, 9
lea rdx, str.CitizenFX
lea rcx, [rbp - 0x59]
call fcn.140048b90
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x14004b2e5
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b2e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b2e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
movups xmmword [rbp - 0x39], xmm6
movups xmmword [rbp - 0x29], xmm7
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x14004b32b
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b326
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b326
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
mov rdi, qword [rbp - 0x29]
lea rbx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rbx, qword [rbp - 0x39]
call fcn.1400ae460
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x11], rdi
lea r8, [rbp - 0x19]
mov edx, eax
lea rcx, [rbp - 0x59]
call fcn.140049880
nop
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call fcn.1400ae970
movzx ebx, al
mov qword [rbp - 9], rbx
shr rax, 0x20
mov dword [rbp - 0x19], eax
mov qword [rbp - 0x11], r12
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
cmp eax, 0x91
jne 0x14004b3a4
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.14004ac70
mov rbx, qword [rbp - 9]
cmp dword [rbp - 0x19], 0
jne 0x14004b4ef
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x14004b3f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b3ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b3ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test rbx, rbx
lea rdx, str.Removed:
jne 0x14004b40b
lea rdx, str.Couldnt_Find:
call fcn.14004de00
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
mov r8, qword [rbp - 0x29]
cmovae rdx, qword [rbp - 0x39]
mov rcx, rax
call fcn.14004ed20
lea rdx, [0x14004dfd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 0x10
jb 0x14004b47a
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b474
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b474
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x14004b4b8
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b4b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b4b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ad758
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400ad1b0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x19]
lea rcx, str.remove_all
call fcn.14004a5e0
nop
call fcn.140043f70
nop
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x19]
lea rcx, str.remove_all
call fcn.14004a5e0
nop
call fcn.140043f70
int3