Function at 0x140105290
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1402be5c8]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov ecx, MsiGetPropertyW
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x1401059ee
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x10]
call fcn.1401cff00
mov r8d, 0x104
lea rdx, [rbp - 0x10]
lea rcx, str.SAFEBOOT_OPTION
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp - 0x70]
call fcn.140023b20
nop
lea rcx, [rbp - 0x70]
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
cmovae rcx, qword [rbp - 0x70]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r9, str.User_is_running_in_safe_mode:__s
mov r8, 0xffffffffffffffff
call fcn.14009d740
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rbx, qword [rbp - 0x70]
xor r13d, r13d
mov dword [rsp + 0x40], r13d
lea rax, [rsp + 0x40]
mov qword [rbp - 0x30], rax
lea rax, [rsp + 0x44]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
lea r8d, [r13 + 0x17]
lea rdx, str.CheckIfUserIsInSafeMode
lea rcx, [rbp - 0x50]
call fcn.140018360
nop
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 7
lea r8d, [r13 + 0x72]
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rsp + 0x70]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x30]
mov r8d, 0x5a3
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400b0fe0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14010542d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105428
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a24
call fcn.1401a9460
call fcn.140172150
mov rbx, rax
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov r8d, 0x16
lea rdx, str.EnableSafeModeOverride
lea rcx, [rbp - 0x50]
call fcn.140018360
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140171e90
test al, al
je 0x1401059ee
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
mov r8d, 0x31
lea rdx, str.SystemCurrentControlSetControlSafeBootMinimal
lea rcx, [rbp - 0x70]
call fcn.140018360
nop
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r13w
mov r8d, 0x31
lea rdx, str.SystemCurrentControlSetControlSafeBootNetwork
lea rcx, [rbp - 0x30]
call fcn.140018360
nop
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
mov r12, qword [rbp - 0x60]
sub rax, r12
cmp rax, 0xa
jb 0x140105a2a
lea r15, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
setae byte [rsp + 0x31]
mov rdi, qword [rbp - 0x70]
cmovae r15, rdi
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
lea r14, [r12 + 0xa]
mov ebx, 7
lea rsi, [rsp + 0x70]
lea eax, [rbx + 3]
cmp r14, rbx
jbe 0x14010555e
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140105533
mov rbx, rcx
jmp 0x14010553a
cmp rbx, rax
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov rsi, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rbx
lea rbx, [r12 + r12]
mov qword [rsp + 0x48], rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.1401cf850
movups xmm0, xmmword [str.MSIServer]
movups xmmword [rbx + rsi], xmm0
mov eax, dword [0x14024a198]
mov dword [rbx + rsi + 0x10], eax
mov word [rsi + r14*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fe6d0
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov rcx, qword [rbp - 0x20]
sub rax, rcx
cmp rax, 0xa
jb 0x140105a30
lea r13, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
setae byte [rsp + 0x32]
mov rsi, qword [rbp - 0x30]
cmovae r13, rsi
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r15, [rcx + 0xa]
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r15, rbx
jbe 0x140105642
mov rbx, r15
or rbx, 7
cmp rbx, rdx
jbe 0x14010560d
mov rbx, rdx
jmp 0x14010561a
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rbx
lea rbx, [rcx + rcx]
mov qword [rsp + 0x38], rbx
mov r8, rbx
mov rdx, r13
mov rcx, r14
call fcn.1401cf850
movups xmm0, xmmword [str.MSIServer]
movups xmmword [r14 + rbx], xmm0
mov eax, dword [0x14024a198]
mov dword [r14 + rbx + 0x10], eax
xor r13d, r13d
mov word [r14 + r15*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fe6d0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r13w
lea r8d, [r13 + 0x20]
lea rdx, str.cmd.exe__c__net_start_MSIServer_
lea rcx, [rbp - 0x50]
call fcn.140018360
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.14012ca40
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140105703
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401056fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a3c
call fcn.1401a9460
lea r15, [rbp - 0x70]
cmp byte [rsp + 0x31], 0
cmovne r15, rdi
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
add r12, 8
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r12, rbx
jbe 0x14010577c
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x14010574b
mov rbx, rax
jmp 0x140105758
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], rbx
mov rbx, qword [rsp + 0x48]
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.1401cf850
movups xmm0, xmmword [str.AppXSVC]
movups xmmword [r14 + rbx], xmm0
mov word [r14 + r12*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fe6d0
lea r12, [rbp - 0x30]
movzx r13d, byte [rsp + 0x32]
test r13b, r13b
cmovne r12, rsi
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov r15, qword [rbp - 0x20]
add r15, 8
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r15, rbx
jbe 0x14010583a
mov rbx, r15
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x140105809
mov rbx, rax
jmp 0x140105816
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rbx
mov rbx, qword [rsp + 0x38]
mov r8, rbx
mov rdx, r12
mov rcx, r14
call fcn.1401cf850
movups xmm0, xmmword [str.AppXSVC]
movups xmmword [r14 + rbx], xmm0
xor ebx, ebx
mov word [r14 + r15*2], bx
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fe6d0
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], bx
lea r8d, [rbx + 0x1e]
lea rdx, str.cmd.exe__c__net_start_AppXSVC_
lea rcx, [rsp + 0x70]
call fcn.140018360
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14012ca40
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1401058f0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401058ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a36
call fcn.1401a9460
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140105932
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010592c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a3c
call fcn.1401a9460
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140105973
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010596d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a42
call fcn.1401a9460
nop
test r13b, r13b
je 0x1401059b2
mov rdx, qword [rbp - 0x18]
lea rdx, [rdx*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1401059a9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a48
mov rcx, rsi
call fcn.1401a9460
nop
cmp byte [rsp + 0x31], 0
je 0x1401059ee
mov rdx, qword [rbp - 0x58]
lea rdx, [rdx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1401059e6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140105a1e
mov rcx, rdi
call fcn.1401a9460
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1401a9440
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401e37cc
int3
call fcn.1401e37cc
nop
call fcn.1400153e0
nop
call fcn.1400153e0
nop
call fcn.1401e37cc
nop
call fcn.1401e37cc
nop
call fcn.1401e37cc
nop
call fcn.1401e37cc
int3