Function at 0x1400551b0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0xf8
mov r8b, 1
xor edx, edx
mov rdi, rcx
call fcn.14002b980
mov rbx, rax
test rax, rax
jne 0x1400551dd
add rsp, 0xf8
pop rdi
pop rbx
ret
cmp byte [rax + 0x23], 0
jne 0x1400551e7
mov rbx, qword [rax + 0x10]
movzx r10d, byte [rdi + 2]
mov qword [rsp + 0xe0], r13
cmp r10b, 1
jbe 0x14005522c
mov rax, qword [rdi + 0x10]
mov rdx, qword [rax + 0x38]
test rdx, rdx
je 0x14005522c
mov rdx, qword [rdx]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.140001370
mov r13, qword [rsp + 0xe0]
mov eax, 1
add rsp, 0xf8
pop rdi
pop rbx
ret
mov qword [rsp + 0x128], rbp
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0xd8], r14
xor r14d, r14d
cmp r10b, 2
jb 0x140055344
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx + 0x30]
test rax, rax
je 0x140055344
cmp qword [rax], r14
je 0x140055344
mov r8, qword [rcx + 0x30]
lea rbp, [rcx + 0x20]
mov r12, qword [r8 + 8]
movzx ecx, byte [r12 + 0x23]
test cl, cl
jne 0x14005528c
mov rax, qword [r12 + 0x10]
movzx edx, byte [rax + 0x23]
jmp 0x14005528f
movzx edx, cl
cmp dl, 3
jne 0x1400552c7
movzx eax, byte [rbx + 0x23]
cmp al, 2
jne 0x1400552aa
mov r13d, 1
mov eax, r13d
jmp 0x140055a7f
test al, al
jne 0x1400552b2
mov rbx, qword [rbx + 0x10]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400e9550
mov r13d, eax
jmp 0x140055a7f
test cl, cl
jne 0x1400552d7
mov rax, qword [r12 + 0x10]
movzx r9d, byte [rax + 0x21]
jmp 0x1400552dd
movzx r9d, byte [r12 + 0x21]
test r9b, 1
je 0x1400552f3
mov rdx, r12
mov rcx, rbx
call fcn.1400e98e0
jmp 0x140055a7f
cmp qword [r8 + 0x18], r14
jne 0x140055347
movzx eax, word [rbp + 2]
cmp word [r8 + 0x12], ax
jne 0x140055347
cmp dl, 1
jne 0x14005533d
mov rax, qword [0x140169c00]
cmp byte [rax + 0x134], r14b
je 0x14005532d
test cl, cl
jne 0x140055324
mov rax, qword [r12 + 0x10]
jmp 0x140055327
mov rax, r12
test byte [rax + 0x21], 8
je 0x14005533d
mov rdx, r12
mov rcx, rbx
call fcn.1400e92d0
jmp 0x140055a7f
mov qword [rsp + 0x38], r12
jmp 0x14005534f
mov rbp, r14
mov qword [rsp + 0x38], r14
mov r12, r14
xor r8b, r8b
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xd0], r15
xor r15b, r15b
mov r13d, 1
mov byte [rsp + 0x118], r8b
test rbp, rbp
je 0x14005542f
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x14005538c
mov rax, qword [rbx + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 2
je 0x14005542f
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rcx]
test rdx, rdx
je 0x14005542f
mov rax, qword [rcx + 8]
test r15b, r15b
je 0x1400553f7
cmp byte [rax + 0x23], r14b
jne 0x1400553b7
mov rax, qword [rax + 0x10]
cmp rax, rbx
jne 0x14005541c
xor r15b, r15b
test r8b, r8b
je 0x14005542f
test r15b, r15b
jne 0x14005542f
xor r9d, r9d
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, rdi
call fcn.140080840
cmp eax, r13d
jne 0x14005577e
mov edx, r13d
mov rcx, rdi
call fcn.14002b6b0
lea rsi, [rax + 1]
jmp 0x14005561b
cmp byte [rax + 0x23], r14b
jne 0x140055401
mov rax, qword [rax + 0x10]
cmp rax, rbx
jne 0x14005541c
movzx r8d, r13b
mov byte [rsp + 0x118], r13b
cmp rdx, qword [rbp + 8]
jne 0x1400553c9
movzx r15d, r13b
mov rdx, qword [rcx + 0x18]
add rcx, 0x18
test rdx, rdx
jne 0x1400553a4
jmp 0x1400553bf
cmp r10b, 2
jb 0x1400557f5
test r12, r12
je 0x140055525
movzx ecx, byte [r12 + 0x23]
test ecx, ecx
je 0x140055510
dec ecx
je 0x14005549e
dec ecx
je 0x140055475
dec ecx
je 0x1400554e9
mov rdx, qword [r12 + 0x28]
xor ecx, ecx
call qword [r12 + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rsi, [rax + 1]
jmp 0x14005561b
lea rcx, [0x140171f30]
xor edx, edx
call fcn.1400056e0
mov r14d, 0xffffffff
mov ecx, 0
cmp rax, r14
cmove rax, rcx
lea rsi, [rax + 1]
jmp 0x14005561b
mov rcx, r12
call fcn.140001410
cmp dword [0x14016f9f4], r14d
jne 0x1400554f5
cmp qword [r12 + 0x10], r14
jne 0x1400554f5
mov rcx, qword [r12 + 0x28]
lea rdx, [rsp + 0x120]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1400554e2
dec eax
mov qword [0x140176058], r14
lea rsi, [rax + 1]
jmp 0x14005561b
mov qword [0x140176058], r12
mov rax, r14
lea rsi, [rax + 1]
jmp 0x14005561b
mov rax, qword [r12 + 0x10]
shr rax, 1
lea rsi, [rax + 1]
jmp 0x14005561b
mov rcx, qword [r12 + 0x10]
xor edx, edx
call fcn.1400ea020
lea rsi, [rax + 1]
jmp 0x14005561b
mov rax, qword [rdi + 0x10]
movzx ecx, word [rax + 0x22]
inc ecx
movsxd rsi, ecx
test rbp, rbp
je 0x14005561b
mov rbp, qword [rbp + 0x10]
cmp qword [rbp], r14
je 0x14005561b
mov r14d, 0xffffffff
xor r13d, r13d
nop word [rax + rax]
mov rdi, qword [rbp + 8]
movzx eax, word [rbp + 0x12]
movzx ecx, byte [rdi + 0x23]
sub rsi, rax
test ecx, ecx
je 0x1400555f1
dec ecx
je 0x1400555a1
dec ecx
je 0x14005558a
dec ecx
je 0x1400555e3
mov rdx, qword [rdi + 0x28]
xor ecx, ecx
call qword [rdi + reloc.OLEAUT32.dll_SafeArrayGetElement]
jmp 0x1400555fc
lea rcx, [0x140171f30]
xor edx, edx
call fcn.1400056e0
cmp rax, r14
cmove rax, r13
jmp 0x1400555fc
mov rcx, rdi
call fcn.140001410
cmp dword [0x14016f9f4], r13d
jne 0x1400555e8
cmp qword [rdi + 0x10], r13
jne 0x1400555e8
mov rcx, qword [rdi + 0x28]
lea rdx, [rsp + 0x120]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1400555dc
mov qword [0x140176058], r13
dec eax
jmp 0x1400555fc
mov qword [0x140176058], rdi
mov rax, r13
jmp 0x1400555fc
mov rax, qword [rdi + 0x10]
shr rax, 1
jmp 0x1400555fc
mov rcx, qword [rdi + 0x10]
xor edx, edx
call fcn.1400ea020
add rbp, 0x18
add rsi, rax
cmp qword [rbp], r13
jne 0x140055560
mov rdi, qword [rsp + 0x110]
mov r13d, 1
cmp rsi, 2
jb 0x1400557f2
test r15b, r15b
je 0x140055672
cmp byte [rbx + 0x23], 0
jne 0x140055636
mov rax, qword [rbx + 0x10]
jmp 0x140055639
mov rax, rbx
cmp byte [rax + 0x23], 2
jne 0x140055647
mov eax, dword [0x140171f58]
jmp 0x14005564b
mov rax, qword [rax + 0x18]
shr rax, 1
cmp rsi, rax
jbe 0x14005572f
lea r9, [rsp + 0x30]
mov r8, rsi
xor edx, edx
mov rcx, rdi
call fcn.140080840
cmp eax, 1
jne 0x14005577e
cmp byte [rsp + 0x118], 0
je 0x14005572f
mov rdx, qword [0x14016f798]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
test eax, eax
je 0x14005577e
mov rax, qword [0x140169c00]
cmp byte [rax + 0x134], 0
je 0x140055a6c
xor r8d, r8d
mov edx, r13d
mov rcx, rbx
call fcn.140001550
mov rdi, rax
cmp word [rax], 0
je 0x140055a6c
mov rcx, rbx
call fcn.1400235c0
mov rcx, rdi
mov rdx, rax
call fcn.14003f510
mov rcx, rdi
mov rdx, rax
call fcn.140023010
mov rcx, rbx
mov rdx, rax
call fcn.140023570
cmp byte [rbx + 0x23], 0
jne 0x140055705
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x140055726
cmp qword [0x140171f48], 0
je 0x140055726
lea rcx, [0x140171f30]
call fcn.140005a80
jmp 0x140055a6c
and byte [rbx + 0x21], 0x86
jmp 0x140055a6c
test r15b, r15b
jne 0x14005574f
lea r8, [rsi - 1]
xor r9d, r9d
xor edx, edx
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
cmp eax, 1
jne 0x14005577e
xor r8d, r8d
mov edx, r13d
mov rcx, rbx
call fcn.140001550
mov rcx, qword [rsp + 0x110]
mov r9, r12
mov rdx, rax
mov r8d, r13d
mov rdi, rax
call fcn.140081240
mov rdx, rax
test rax, rax
jne 0x140055785
xor eax, eax
jmp 0x140055a6f
mov rax, qword [0x140169c00]
sub rdx, rdi
sar rdx, 1
dec rdx
cmp byte [rax + 0x134], 0
je 0x1400557b4
mov rcx, rdi
call fcn.14003f510
mov rcx, rdi
mov rdx, rax
call fcn.140023010
mov rdx, rax
mov rcx, rbx
call fcn.140023570
cmp byte [rbx + 0x23], 0
jne 0x1400557c6
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x140055726
cmp qword [0x140171f48], 0
je 0x140055726
lea rcx, [0x140171f30]
call fcn.140005a80
mov r13d, eax
jmp 0x140055a6c
xor r14d, r14d
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140055821
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401295d4]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov r13d, eax
jmp 0x140055a6c
lea rbp, [0x1401295d4]
cmp qword [rbx + 8], rbp
jne 0x140055837
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x14005583a
mov r12, r14
lea rcx, [r12 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x14005585a
mov rdx, r12
mov rcx, rbp
call fcn.140005910
mov r13d, eax
jmp 0x140055a6c
mov r8, qword [0x140169b08]
cmp rsi, r8
jbe 0x140055892
cmp rsi, qword [rbx + 0x18]
jbe 0x140055892
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea rcx, [0x1401712e0]
mov r8, rbp
mov rdx, rax
call fcn.1400a5580
mov r13d, eax
jmp 0x140055a6c
cmp rcx, 2
jae 0x1400558ac
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400ea290
jmp 0x140055a6c
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400558c9
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140169b08]
mov rcx, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, rcx
jbe 0x140055a46
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140055902
cmp al, 2
je 0x140055943
mov rdi, qword [rsp + 0x118]
mov rax, qword [rsp + 0x118]
jmp 0x140055a3a
mov edi, pe_nt_image_headers64
cmp rsi, rdi
ja 0x140055943
cmp rsi, 8
ja 0x140055919
mov edi, 8
jmp 0x140055925
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, rax
cmovbe rdi, rax
mov rcx, rdi
call fcn.1400dc2b0
test rax, rax
jne 0x14005593a
mov r13d, r14d
jmp 0x140055a6c
mov byte [rbx + 0x20], 1
jmp 0x140055a3a
cmp rsi, 0x20
jae 0x140055953
mov edi, SafeArrayAllocDescriptor
jmp 0x1400559fd
mov edi, 0x208
cmp rsi, rdi
jb 0x1400559fd
cmp rsi, 0x50000
jae 0x1400559b9
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140055980
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor eax, eax
comisd xmm0, xmm1
jbe 0x1400559af
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400559af
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rdi, xmm0
add rdi, rax
jmp 0x1400559fd
cmp rsi, 0x320000
jae 0x1400559cb
lea rdi, [rsi + 0x8000]
jmp 0x1400559fd
cmp rsi, 0xc80000
jae 0x1400559f6
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x1400559fd
lea rdi, [rsi + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r9b, 2
jne 0x140055a1d
test rcx, rcx
je 0x140055a1d
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.140108f48
jmp 0x140055a20
xor sil, sil
test rdi, rdi
js 0x140055aa9
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x140055aa9
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, rbp
je 0x140055a5b
lea r8, [r12 + r12]
mov rdx, rbp
call fcn.140109100
mov rax, qword [rbx + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], r14w
mov qword [rbx + 0x10], rcx
mov eax, r13d
mov rsi, qword [rsp + 0xf0]
mov r15, qword [rsp + 0xd0]
mov r12, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0x128]
mov r14, qword [rsp + 0xd8]
mov r13, qword [rsp + 0xe0]
add rsp, 0xf8
pop rdi
pop rbx
ret
test sil, sil
je 0x140055abf
lea rax, [0x140171290]
mov qword [rbx + 0x18], r14
mov qword [rbx + 8], rax
jmp 0x140055ac7
mov rax, qword [rbx + 8]
mov word [rax], r14w
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov r8, rbp
mov qword [rbx + 0x10], r14
call fcn.1400a5580
mov r13d, eax
jmp 0x140055a6c