Function at 0x1400b45c0
Capabilities:
Query environment variable
Read file on windows

Disassembly:
push r12
push r14
push r15
mov eax, 0x2760
call fcn.1400fe810
sub rsp, rax
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x2788], rbx
mov qword [rsp + 0x2790], rsi
mov qword [rsp + 0x2798], rdi
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x2750], rax
mov r14b, cl
xor ebx, ebx
cmp dl, bl
je 0x1400b4636
cmp word [0x14016bb0e], bx
je 0x1400b462e
cmp qword [0x140186630], rbx
je 0x1400b462e
mov word [0x14016bb0e], bx
lea r12d, [rbx + 3]
jmp 0x1400b4698
mov r12d, 3
jmp 0x1400b4698
mov cl, 1
call fcn.1400b156c
mov r12d, 3
mov dword [0x14016ec58], r12d
mov qword [0x140157258], rbx
mov cl, byte [0x1401561a5]
cmp cl, bl
jne 0x1400b4797
xor r8d, r8d
lea rdx, [0x140174f30]
lea rcx, [0x140162bc0]
call fcn.140092c70
cmp byte [0x140163c3a], bl
je 0x1400b4698
mov eax, dword [0x14016ec54]
lea ecx, [r12 + 1]
cmp dword [0x140174f58], 1
cmova eax, ecx
mov dword [0x14016ec54], eax
mov cl, byte [0x1401561a5]
cmp cl, bl
jne 0x1400b4789
cmp word [0x140173f2a], bx
jne 0x1400b4789
mov r14b, bl
mov esi, 0x800
mov r8, rsi
lea rdx, [0x140173f2a]
mov ecx, dword [0x140170ec8]
call fcn.1400ad87c
mov dword [rsp + 0x20], esi
lea r15, [0x1401096a0]
mov r9, r15
lea r8, [rsp + 0x1350]
lea rdx, str.DefFolder
lea rcx, [0x14010eec8]
call fcn.14009b844
cmp word [rsp + 0x1350], bx
jne 0x1400b4722
cmp byte [0x140163c3a], bl
je 0x1400b4760
lea rcx, [rsp + 0x1350]
call fcn.14008c34c
cmp word [rsp + 0x1350], bx
je 0x1400b4760
mov rdx, rsi
lea rcx, [rsp + 0x1350]
call fcn.1400504d4
mov r8, rsi
lea rdx, [0x140173f2a]
lea rcx, [rsp + 0x1350]
call fcn.140065dac
mov r8, rsi
lea rdx, [rsp + 0x1350]
lea rcx, [0x140173f2a]
call fcn.140065d2c
cmp word [0x140169b08], bx
setne r8b
mov r9d, dword [0x140170ec8]
mov rdx, rsi
lea rcx, [0x140173f2a]
call fcn.1400adac4
mov cl, byte [0x1401561a5]
jmp 0x1400b47a3
mov esi, 0x800
lea r15, [0x1401096a0]
jmp 0x1400b47a3
mov esi, 0x800
lea r15, [0x1401096a0]
mov eax, dword [0x14016ec54]
mov edx, 5
cmp eax, ebx
cmove eax, edx
mov dword [0x14016ec54], eax
cmp cl, bl
je 0x1400b4928
mov edi, dword [0x140164e54]
cmp edi, ebx
je 0x1400b4810
cmp edi, 1
je 0x1400b4810
cmp dword [0x14016ec24], r12d
je 0x1400b4d10
lea ecx, [rdx + 0x60]
call fcn.14005fad0
mov rdi, rax
mov ecx, 0x1fd
call fcn.14005fad0
mov rdx, rax
mov r9d, 0x30
mov r8, rdi
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400b4d10
mov r8, rsi
lea rdx, [0x140173f2a]
lea rcx, [0x140164e50]
call fcn.140078534
mov r8, rsi
lea rdx, [0x14016cb20]
lea rcx, [0x140164e50]
call fcn.140078514
cmp word [0x14016cb20], bx
je 0x1400b4854
mov rdx, rsi
lea rcx, [0x14016cb20]
call fcn.1400504d4
mov byte [0x14016ecc0], bl
lea rdx, [rsp + 0x40]
lea rcx, [0x140164e50]
call fcn.140078550
mov edx, dword [rsp + 0x188]
mov dword [0x140170ec8], edx
mov qword [rsp + 0x1250], rbx
mov qword [rsp + 0x1258], rbx
mov qword [rsp + 0x1260], rbx
xor r8d, r8d
lea rdx, [rsp + 0x240]
lea rcx, [0x140173f2a]
call fcn.140043efc
cmp al, bl
je 0x1400b48b6
cmp qword [rsp + 0x1240], 0x14
je 0x1400b48d7
cmp dword [rsp + 0x188], ebx
jne 0x1400b48d1
cmp byte [rsp + 0xc0], bl
je 0x1400b48d1
mov byte [0x14016eca7], 1
jmp 0x1400b48d7
mov byte [0x14016eca7], bl
cmp edi, ebx
jne 0x1400b48e4
cmp dword [rsp + 0x210], ebx
je 0x1400b48f2
movzx eax, byte [rsp + 0x182]
mov dword [0x14016ec44], eax
cmp qword [rsp + 0x178], rbx
je 0x1400b4921
mov rcx, rbx
lea rdx, [0x140000000]
movzx eax, word [rcx + rdx + 0x10be18]
mov word [rcx + rdx + 0x169b08], ax
add rcx, 2
cmp ax, bx
jne 0x1400b4906
jmp 0x1400b4928
mov word [0x140169b08], bx
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb rcx, rcx
and rcx, qword [0x140158330]
xor r8d, r8d
mov dl, r14b
call fcn.1400b42a4
cmp al, bl
je 0x1400b4cf2
mov al, byte [0x14018664f]
neg al
sbb ecx, ecx
and ecx, dword [0x140186650]
mov dword [0x14016ec38], ecx
mov eax, dword [0x14018663c]
cmp eax, 1
je 0x1400b497a
cmp eax, 2
jne 0x1400b49e1
mov eax, dword [0x140186648]
mov dword [rsp + 0x28], eax
mov eax, dword [0x140186644]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x140186640]
lea r8, str._dd_dh_dm
mov edx, 0x50
lea rcx, [rsp + 0x1290]
call fcn.140057264
cmp dword [0x14018663c], 1
jne 0x1400b49cd
lea rdx, [rsp + 0x1290]
lea rcx, [0x14016edc8]
call fcn.140067788
jmp 0x1400b49e1
lea rdx, [rsp + 0x1290]
lea rcx, [0x14016edd0]
call fcn.140067788
mov rcx, qword [0x140186630]
cmp rcx, rbx
je 0x1400b49f4
call fcn.1400ab314
jmp 0x1400b4a17
cmp byte [0x1401561a5], bl
je 0x1400b4a17
cmp qword [rsp + 0x178], rbx
je 0x1400b4a17
cmp word [0x140169b08], 0x2a
jne 0x1400b4a17
mov word [0x140169b08], bx
cmp dword [0x140174f58], ebx
jne 0x1400b4a54
mov ecx, 0x65
call fcn.14005fad0
mov rdi, rax
mov ecx, 0x14b
call fcn.14005fad0
mov rdx, rax
mov r9d, 0x30
mov r8, rdi
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1400b4cf2
cmp word [0x14016bb0e], bx
je 0x1400b4ad8
cmp dword [0x14016cb10], ebx
jne 0x1400b4ad8
lea rdx, [0x140110140]
lea rcx, [0x14016bb0e]
call fcn.1400423b4
mov rdi, rax
cmp rax, rbx
je 0x1400b4ad8
mov r9, rax
mov edx, 1
mov r8d, 0x400
lea rcx, [rsp + 0x2350]
call fcn.1400ef54c
mov dword [rsp + 0x30], 0x30c
cmp rax, rbx
jbe 0x1400b4acf
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x2350]
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
mov ecx, dword [0x14016cb10]
cmp eax, ebx
cmovne ecx, r12d
mov dword [0x14016cb10], ecx
mov rcx, rdi
call fcn.1400eee40
nop
lea rcx, [rsp + 0x1290]
call fcn.14006634c
nop
lea rcx, [0x140174f30]
call fcn.140066134
mov r12d, 0x25
lea rcx, [0x140174f30]
call fcn.140066464
mov rdi, rax
cmp rax, rbx
je 0x1400b4bab
mov r9, rsi
lea r8, [rsp + 0x1350]
mov rdx, rax
lea rcx, [0x140162bc0]
call fcn.14008eb24
mov edx, r12d
mov rcx, rdi
call fcn.1400ed378
cmp rax, rbx
je 0x1400b4b91
mov edx, r12d
lea rcx, [rax + 2]
call fcn.1400ed378
cmp rax, rbx
je 0x1400b4b91
lea rcx, [rsp + 0x1350]
call fcn.140042584
cmp al, bl
jne 0x1400b4b91
mov r8d, esi
lea rdx, [rsp + 0x240]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x7ff
ja 0x1400b4b91
mov r8, rsi
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x1350]
call fcn.140065d2c
lea rdx, [rsp + 0x1350]
lea rcx, [rsp + 0x1290]
call fcn.1400661a4
jmp 0x1400b4af8
lea rdx, [rsp + 0x1290]
lea rcx, [0x140174f30]
call fcn.140081698
nop
mov rcx, qword [rsp + 0x1290]
cmp rcx, rbx
je 0x1400b4bd3
call fcn.1400e9aa4
nop
jmp 0x1400b4be3
cmp byte [0x140172edd], bl
jne 0x1400b4c08
mov r9, rsi
lea r8, [0x140173f2a]
lea rdx, [0x140173f2a]
lea rcx, [0x140162bc0]
call fcn.14008eb24
mov al, byte [0x14016dc20]
mov byte [0x140158380], al
lea rcx, [0x140158350]
call fcn.1400a3ae4
cmp byte [0x140172ef9], bl
je 0x1400b4c2f
call fcn.1400b3b1c
jmp 0x1400b4c41
mov dl, byte [0x140172edb]
lea rcx, [0x140164e50]
call fcn.14007a38c
cmp qword [0x140186630], rbx
je 0x1400b4c56
lea rcx, [0x14016bb0e]
call fcn.140042188
cmp dword [0x1401571d0], 1
je 0x1400b4cf2
cmp byte [0x1401561a5], bl
je 0x1400b4c79
lea rcx, [0x140162bc0]
call fcn.140095078
jmp 0x1400b4cf2
cmp byte [0x14016eca6], bl
je 0x1400b4c8d
lea rcx, [0x140162ba0]
call fcn.1400a8f40
mov r8, rsi
lea rdx, [rsp + 0x1350]
lea rcx, [0x140162bc0]
call fcn.14008eaf0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x1350]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x140173f2a]
lea rcx, [rsp + 0x1350]
call fcn.140068cd4
cmp eax, ebx
jne 0x1400b4ce3
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov r15, rax
mov rdx, r15
lea rcx, [0x140162bc0]
call fcn.140093b64
mov rcx, qword [0x140186630]
call fcn.1400ea9fc
mov byte [0x140158380], bl
lea rcx, [0x140158350]
call fcn.1400a3ae4
mov rcx, qword [rsp + 0x2750]
xor rcx, rsp
call fcn.1400e9d00
lea r11, [rsp + 0x2760]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret