Function at 0x140011358
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
mov eax, 0x4690
call fcn.140030d40
sub rsp, rax
mov rax, qword [0x1400409c0]
xor rax, rsp
mov qword [rsp + 0x4680], rax
mov rcx, qword [0x14004df90]
xor esi, esi
cmp rcx, rsi
jne 0x1400113d1
lea edi, [rsi + 0x28]
mov rcx, rdi
call fcn.140016c48
mov rbx, rax
cmp rax, rsi
je 0x1400113b7
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1400186e0
jmp 0x1400113ba
mov rbx, rsi
mov rcx, rbx
mov qword [0x14004df90], rbx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, qword [0x14004df90]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x14004df88]
cmp rcx, rsi
je 0x1400113ff
cmp qword [0x14004df80], rsi
jne 0x1400113ff
lea rdx, str.a_ccsUTF_8
call fcn.140018c08
mov qword [0x14004df80], rax
cmp byte [0x14004df78], sil
jne 0x1400115e3
mov bl, byte [0x14004f793]
lea rdx, [rsp + 0x30]
lea rcx, str.EXE4J_LOG
mov ebp, 1
mov r8d, 0x1770
mov byte [0x14004df78], bpl
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, esi
jbe 0x140011453
lea rdx, [0x140037390]
lea rcx, [rsp + 0x30]
call fcn.1400182d0
movzx ebx, bl
cmp eax, esi
cmove ebx, ebp
lea rdx, [rsp + 0x30]
lea rcx, str.INSTALL4J_LOG
mov r8d, 0x1770
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, esi
jbe 0x140011488
lea rdx, [0x140037390]
lea rcx, [rsp + 0x30]
call fcn.1400182d0
movzx ebx, bl
cmp eax, esi
cmove ebx, ebp
cmp bl, sil
je 0x1400115e3
mov edi, 0x2ee0
mov rcx, rdi
call fcn.140016208
xor edx, edx
mov rcx, rax
mov rbx, rax
mov word [rax], si
call fcn.140006b8c
mov rcx, rbx
call fcn.140016da8
cmp eax, esi
jne 0x1400114cb
lea rdx, [0x140037378]
mov rcx, rbx
call fcn.14001748c
jmp 0x1400114ec
cdqe
cmp word [rbx + rax*2 - 2], 0x5c
je 0x1400114ec
cmp word [rbx + rax*2 - 2], 0x2f
je 0x1400114ec
lea rdx, [0x1400350e0]
mov rcx, rbx
call fcn.140017460
mov rcx, rdi
call fcn.140016208
mov edi, esi
mov qword [0x14004df88], rax
add edi, ebp
lea rdx, str._si4j_nlog__d.log
mov r8, rbx
mov r9d, edi
mov rcx, rax
call fcn.1400112a4
mov rcx, qword [0x14004df88]
call fcn.140005c28
cmp al, sil
je 0x140011536
cmp edi, 0x3e8
jge 0x140011536
mov rax, qword [0x14004df88]
jmp 0x1400114fd
mov rcx, rbx
call fcn.1400166c0
mov rcx, qword [0x14004df88]
lea rdx, str.w_ccsUTF_8
call fcn.140018c08
mov qword [0x14004df80], rax
cmp rax, rsi
jne 0x140011583
lea rcx, str.c:i4j_nlog
lea rdx, str.w_ccsUTF_8
mov qword [0x14004df88], rcx
call fcn.140018c08
mov qword [0x14004df80], rax
cmp rax, rsi
je 0x1400115e3
lea rdx, [rsp + 0x17a0]
mov r8d, 0x1770
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x20]
call fcn.140018234
lea rcx, [rsp + 0x20]
call fcn.14001a868
mov rcx, qword [0x14004df80]
lea r8, [rsp + 0x17a0]
lea rdx, str.Started_executable__s_at__S_n
mov r9, rax
call fcn.14001a8c8
mov rcx, qword [0x14004df80]
call fcn.140017b78
call fcn.1400112c8
mov qword [0x14004df98], rax
mov rcx, qword [rsp + 0x4680]
xor rcx, rsp
call fcn.140016a50
lea r11, [rsp + 0x4690]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret