Function at 0x140119520
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x270
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x2b0], rbx
mov rbx, r9
mov rbp, r8
mov r13d, edx
mov r14, rcx
lea rcx, [0x14011a420]
call fcn.14012aa94
mov qword [rsp + 0x40], rax
xor r12d, r12d
mov dword [rsp + 0x48], r12d
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rbp + r8*2], 0
jne 0x140119580
inc r8d
mov esi, r8d
mov edx, 2
mov ecx, r8d
call fcn.14012aad0
mov r15, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x1401195b5
mov word [r14], r12w
jmp 0x14011992a
mov edi, 1
mov r8, rbp
mov rdx, rsi
mov rcx, rax
call fcn.140121234
mov rdx, rsi
mov rcx, r15
call fcn.1401215c8
test rbx, rbx
je 0x14011990e
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], 0
jne 0x1401195e0
test rax, rax
je 0x14011990e
mov rdx, rbx
mov rcx, rbp
call fcn.140122ad0
test rax, rax
je 0x14011990e
lea rdx, str.http:__
mov rcx, r15
call fcn.140122ad0
test rax, rax
jne 0x14011990e
lea rdx, str.https:__
mov rcx, r15
call fcn.140122ad0
test rax, rax
jne 0x14011990e
lea rdx, str.ftp:__
mov rcx, r15
call fcn.140122ad0
test rax, rax
jne 0x14011990e
mov r8, rbp
mov rdx, rsi
mov rcx, r15
call fcn.140121234
mov rsi, r15
mov rdx, rbx
mov rcx, r15
call fcn.140122ad0
mov r15, rax
mov word [r14], r12w
test rax, rax
je 0x1401198e5
nop dword [rax + rax]
mov word [r15], r12w
mov r8, rsi
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
test edi, edi
je 0x140119902
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x1401196b0
lea r15, [r15 + rax*2]
mov rdx, rbx
mov rcx, r15
call fcn.140122ad0
mov rbp, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140119894
mov word [rax], r12w
mov word [rsp + 0x60], r12w
mov r8d, 0x104
lea rdx, [rsp + 0x60]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea esi, [rax + 1]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 1
jne 0x1401197a7
cmp eax, 0xcb
jne 0x1401197a7
test byte [0x1402d741c], 2
je 0x140119745
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str.Cannot_find_environment_variable_name__s_in_string__s._n
lea edx, [rsi + 1]
lea rcx, str.ReplaceEnvVariables
call fcn.14011a590
mov r8, rbx
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
test edi, edi
je 0x140119902
mov r8, r15
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
test edi, edi
je 0x140119902
mov r8, rbx
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
test edi, edi
je 0x140119902
jmp 0x140119829
mov ecx, esi
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x1401197b0
inc rax
add rax, rcx
cmp rax, r13
ja 0x140119867
cmp esi, 1
jbe 0x140119829
cmp esi, 0x104
ja 0x1401197e9
lea r8, [rsp + 0x60]
mov rdx, r13
mov rcx, r14
call fcn.140122790
jmp 0x140119829
mov edx, 2
call fcn.14012aad0
mov rbp, rax
test rax, rax
je 0x14011988f
mov r8d, esi
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r8, rbp
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov rcx, rbp
call fcn.1401217ac
mov rbp, qword [rsp + 0x38]
or rax, 0xffffffffffffffff
nop dword [rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x140119830
lea rsi, [rax*2]
add rsi, rbp
mov rdx, rbx
mov rcx, rsi
call fcn.140122ad0
mov r15, rax
test rax, rax
jne 0x140119680
mov r13d, dword [rsp + 0x2b8]
jmp 0x1401198e5
test byte [0x1402d741c], 1
je 0x14011988f
mov dword [rsp + 0x20], esi
mov r9, r15
lea r8, str.Lenght_of_environment_variable_string__s_is_too_big__d._n
mov edx, 1
lea rcx, str.ReplaceEnvVariables
call fcn.14011a590
mov edi, r12d
jmp 0x140119902
test byte [0x1402d741c], 2
je 0x1401198c2
mov qword [rsp + 0x20], rbx
mov r9, qword [rsp + 0x2c0]
lea r8, str.String__s_mismatched_delimiter__s._n
mov edx, 2
lea rcx, str.ReplaceEnvVariables
call fcn.14011a590
mov r8, rbx
mov rdx, r13
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
test edi, edi
je 0x140119902
mov r8, r15
mov rdx, r13
jmp 0x1401198f1
cmp word [rsi], 0
je 0x140119902
mov edx, r13d
mov r8, rsi
mov rcx, r14
call fcn.140122790
mov edi, r12d
test eax, eax
sete dil
mov rcx, qword [rsp + 0x30]
call fcn.1401217ac
jmp 0x14011992d
mov rcx, r15
call fcn.1401217ac
mov rdx, r13
mov r8, rbp
mov rcx, r14
call fcn.140121234
test eax, eax
sete r12b
mov edi, r12d
mov rcx, qword [rsp + 0x40]
call fcn.14012aa94
mov eax, edi
mov rbx, qword [rsp + 0x2b0]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret