Function at 0x14006d330
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4b8
mov rsi, rcx
mov rax, qword [0x1402f4538]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
lea rbx, [rsp + 0x3b0]
mov qword [rsp + 0x398], rbx
mov qword [rsp + 0x3a0], 0
mov qword [rsp + 0x3a8], 0x80
movups xmm0, xmmword [rdx]
movaps xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x178]
lea rdx, [rsp + 0x20]
lea r8, [rsp + 0x398]
call fcn.1400293a0
cmp dword [rsp + 0x178], 0
je 0x14006d3b5
mov byte [rsi + 0x20], 0
jmp 0x14006d5ea
lea rdi, [rsp + 0x190]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 0x104
mov r14d, 0x104
xor eax, eax
mov r15, qword [sym.imp.KERNEL32.dll_SetLastError]
mov r13, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
lea rbx, [rsp + 0x178]
jmp 0x14006d44e
mov qword [rsp + 0x180], r14
xor ecx, ecx
call r15
mov r8d, dword [rsp + 0x180]
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x398]
call r13
mov ebp, eax
test eax, eax
je 0x14006d480
mov r14d, ebp
mov rax, qword [rsp + 0x180]
cmp rax, r14
jae 0x14006d49b
cmp rax, r14
je 0x14006d418
ja 0x14006d410
cmp qword [rsp + 0x188], r14
jae 0x14006d410
mov r9d, 2
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call fcn.14001cd30
jmp 0x14006d410
call r12
cmp eax, 0xcb
jne 0x14006d43e
mov byte [rsi + 0x20], 0
lea rbx, [rsp + 0x3b0]
jmp 0x14006d5d7
mov qword [rsp + 0x180], r14
lea r13, [rsp + 0x70]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0x104
mov rdx, qword [rsp + 0x178]
lea rcx, [rsp + 0x38]
lea r9, [rsp + 0x58]
mov r8, r14
call fcn.140029590
cmp dword [rsp + 0x38], 0
je 0x14006d4e9
mov byte [rsi + 0x20], 0
jmp 0x14006d5bf
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
mov rcx, rbx
call fcn.140242e00
mov r14, rax
cmp rax, 0xf
jbe 0x14006d555
test r14, r14
js 0x14006d624
mov rax, r14
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x14006d572
lea rcx, [r12 + 0x28]
call fcn.140241054
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x14006d57f
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
mov rdx, rbx
mov r8, r14
call fcn.140242bf0
mov byte [rsp + r14 + 0x38], 0
jmp 0x14006d5a1
lea rcx, [r12 + 1]
call fcn.140241054
mov r15, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r12
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.140242bf0
mov byte [r15 + r14], 0
mov qword [rsp + 0x38], r15
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov byte [rsi + 0x20], 1
lea rbx, [rsp + 0x3b0]
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x14006d5d7
call qword [0x1402f0bf8]
mov rcx, qword [rsp + 0x178]
cmp rcx, rdi
je 0x14006d5ea
call qword [0x1402f0bf8]
mov rcx, qword [rsp + 0x398]
cmp rcx, rbx
je 0x14006d5fd
call qword [0x1402f0bf8]
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.140241350
mov rax, rsi
add rsp, 0x4b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400044b0
int3