Function at 0x1400048a2
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x578
movabs rax, 0x687a729e6c368523
movabs rbp, 0x50e5cfa0543f07f
movabs rbx, 0x9adb528305672d98
mov qword [rsp + 0x20], rbp
lea rsi, [rsp + 0x380]
mov rdi, rcx
mov qword [rsp + 0x190], rax
mov rcx, rsi
movabs rax, 0x9adb528305672de8
mov qword [rsp + 0x28], rbx
vmovdqa xmm1, xmmword [rsp + 0x20]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x190]
vpxor xmm0, xmm1, xmmword [rsp + 0x190]
mov rdx, rax
mov qword [rsp + 0x20], rax
vmovdqa xmmword [rsp + 0x190], xmm0
call fcn.14000188c
mov qword [rsp + 0x158], rbx
movabs rax, 0x50e5cfa550eb52b
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x150]
mov qword [rsp + 0x38], rbx
vmovdqa xmm2, xmmword [rsp + 0x30]
mov rcx, rbp
mov qword [rsp + 0x150], rax
vpxor xmm0, xmm2, xmmword [rsp + 0x150]
vmovdqa xmmword [rsp + 0x150], xmm0
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
xor edx, edx
mov rcx, rsi
mov r8, rax
call fcn.1400052c0
mov rdx, rax
lea rax, [rsp + 0xb0]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.140005290
mov rcx, rsi
call fcn.1400052f0
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x20]
mov r8d, 0x18
call fcn.140005358
lea rax, [rsp + 0xe0]
xor edx, edx
mov byte [rdi + 0x10], 0
lea r12, [rsp + 0xf0]
mov qword [rsp + 0xd0], rax
xor eax, eax
cmp dword [rsp + 0x298], 0
mov qword [rsp + 0xd8], rax
lea rax, [rdi + 0x10]
mov byte [rsp + 0xe0], 0
mov qword [rdi], rax
mov qword [rdi + 8], rdx
je 0x140004c24
movabs rax, 0x50e5cfa602e9111
mov rcx, r12
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0x80], rax
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm3, xmmword [rsp + 0x40]
vpxor xmm0, xmm3, xmmword [rsp + 0x80]
vmovdqa xmmword [rsp + 0x80], xmm0
call fcn.140002626
jmp 0x140004a71
lea rdx, [rsp + 0x80]
mov r8, r12
mov rcx, rsi
call fcn.14000190a
jmp 0x140004a94
movabs rax, 0x50e5cfa0527871c
xor ecx, ecx
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0x90], rax
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
xor edx, edx
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm4, xmmword [rsp + 0x40]
vpxor xmm0, xmm4, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea r14, [rsp + 0x3c0]
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x90]
mov rcx, r14
call fcn.1400018d0
jmp 0x140004b21
movabs rax, 0x50e5cfa622c820f
lea r13, [rsp + 0x110]
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0xa0], rax
mov rcx, r13
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm5, xmmword [rsp + 0x40]
vpxor xmm0, xmm5, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call fcn.140002a96
jmp 0x140004b8e
lea r15, [rsp + 0x400]
lea rdx, [rsp + 0xa0]
mov r8, r13
mov rcx, r15
call fcn.14000190a
jmp 0x140004bb6
lea rdx, [rsp + 0x50]
mov rcx, rbp
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], 3
call fcn.140004614
lea rbx, [rsp + 0x130]
mov rdx, rbp
mov rcx, rbx
call fcn.140003620
mov rdx, rbx
lea rcx, [rsp + 0xd0]
call fcn.1400017b8
mov rcx, rbx
call fcn.1400052f0
mov rcx, rbp
call fcn.1400072c0
mov rcx, r15
call fcn.140007450
mov rcx, r14
call fcn.140007450
mov rcx, rsi
call fcn.140007450
mov rcx, r13
jmp 0x140004ed4
mov rcx, qword [rsp + 0x20]
mov rdx, rdi
call fcn.1400051f0
movabs rax, 0x50e5cfa602e9111
mov rcx, r12
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0x70], rax
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm1, xmmword [rsp + 0x40]
vpxor xmm0, xmm1, xmmword [rsp + 0x70]
vmovdqa xmmword [rsp + 0x70], xmm0
call fcn.140002626
jmp 0x140004c8d
lea rdx, [rsp + 0x70]
mov r8, r12
mov rcx, rsi
call fcn.14000190a
jmp 0x140004cad
movabs rax, 0x50e5cfa0527871c
xor ecx, ecx
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0x80], rax
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
xor edx, edx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm2, xmmword [rsp + 0x40]
vpxor xmm0, xmm2, xmmword [rsp + 0x80]
vmovdqa xmmword [rsp + 0x80], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea rdx, [rsp + 0x80]
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x3c0]
call fcn.1400018d0
jmp 0x140004d37
movabs rax, 0x50e5cfa612a850a
lea r13, [rsp + 0x400]
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0x90], rax
mov rcx, r13
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
lea rdx, [rsp + 0x90]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm3, xmmword [rsp + 0x40]
vpxor xmm0, xmm3, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call fcn.14000188c
jmp 0x140004da6
lea rcx, [rsp + 0x420]
mov rdx, rdi
call fcn.140005288
jmp 0x140004dce
movabs rax, 0x50e5cfa622c820f
lea r14, [rsp + 0x110]
movabs rdx, 0x50e5cfa0543f07f
mov qword [rsp + 0xa0], rax
mov rcx, r14
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x48], rax
vmovdqa xmm4, xmmword [rsp + 0x40]
vpxor xmm0, xmm4, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call fcn.140002a96
jmp 0x140004e3b
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x440]
mov r8, r14
call fcn.14000190a
jmp 0x140004e60
lea rdx, [rsp + 0x50]
mov rcx, rbp
mov qword [rsp + 0x50], rsi
lea r13, [rsp + 0x480]
mov qword [rsp + 0x58], 4
call fcn.140004614
jmp 0x140004e8d
lea rbx, [rsp + 0x130]
mov rdx, rbp
mov rcx, rbx
call fcn.140003620
lea rcx, [rsp + 0xd0]
mov rdx, rbx
call fcn.1400017b8
mov rcx, rbx
call fcn.1400052f0
mov rcx, rbp
call fcn.1400072c0
sub r13, 0x40
mov rcx, r13
call fcn.140007450
cmp r13, rsi
jne 0x140004ec0
mov rcx, r14
call fcn.1400052f0
mov rcx, r12
call fcn.1400052f0
mov rcx, qword [rsp + 0x20]
call fcn.140005360
movabs rax, 0x607a2f9362268250
mov rdx, rbp
mov rcx, rsi
mov qword [rsp + 0x150], rax
movabs rax, 0x9adb528305672dea
mov qword [rsp + 0x158], rax
movabs rax, 0x50e5cfa0543f07f
mov qword [rsp + 0x40], rax
movabs rax, 0x9adb528305672d98
mov qword [rsp + 0x48], rax
vmovdqa xmm5, xmmword [rsp + 0x40]
vpxor xmm0, xmm5, xmmword [rsp + 0x150]
vmovdqa xmmword [rsp + 0x150], xmm0
call fcn.14000188c
lea rbp, [rsp + 0xd0]
mov r9, rdi
mov rdx, rsi
mov r8, rbp
lea rcx, [0x14000f100]
call fcn.140001fb4
mov ebx, eax
mov rcx, rsi
call fcn.1400052f0
cmp ebx, 0xe8
jne 0x1400050cd
mov rdx, qword [rsp + 0x30]
mov r8d, 0x10
mov rcx, rsi
call fcn.140005358
lea rcx, [rsp + 0x390]
mov rdx, rdi
call fcn.1400051f8
mov rcx, rsi
call fcn.140005360
mov rcx, rsi
call fcn.140005350
jmp 0x1400050cd
mov rcx, rbp
call fcn.1400052f0
mov rcx, qword [rsp + 0x20]
call fcn.140005350
mov rcx, qword [rsp + 0x30]
call fcn.1400052f0
mov rax, rdi
add rsp, 0x578
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret