Function at 0x140007ee0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140389910]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r15d, r15d
mov qword [rbp + 0x10], r15
movdqa xmm0, xmmword [0x14033cd50]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], r15w
mov qword [rbp - 0x10], r15
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r15w
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r15w
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r15w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.1402c0d00
lea r12, [0x140000000]
cmp byte [0x14038be80], r15b
je 0x14000802a
mov ecx, r15d
nop
movzx eax, byte [rcx + r12 + 0x38be82]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38be82], al
movzx eax, byte [rcx + r12 + 0x38be83]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38be83], al
movzx eax, byte [rcx + r12 + 0x38be84]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38be84], al
movzx eax, byte [rcx + r12 + 0x38be85]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38be85], al
movzx eax, byte [rcx + r12 + 0x38be86]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38be86], al
add rcx, 5
cmp rcx, 0x74e
jl 0x140007f90
mov byte [0x14038be80], 0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 7
lea rdx, [0x14038be82]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140008050
lea rcx, [rbp - 0x70]
call fcn.14000ad00
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400080a4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000809f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a2c
call fcn.140003b50
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp + 0x20], xmm1
cmp byte [0x14038b380], 0
je 0x140008178
mov rcx, r15
movzx eax, byte [rcx + r12 + 0x38b382]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b382], al
movzx eax, byte [rcx + r12 + 0x38b383]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b383], al
movzx eax, byte [rcx + r12 + 0x38b384]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b384], al
movzx eax, byte [rcx + r12 + 0x38b385]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b385], al
movzx eax, byte [rcx + r12 + 0x38b386]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b386], al
movzx eax, byte [rcx + r12 + 0x38b387]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [rcx + r12 + 0x38b387], al
add rcx, 6
cmp rcx, 0xaf8
jl 0x1400080c4
mov byte [0x14038b380], 0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 7
lea rdx, [0x14038b382]
mov r8, rbx
inc r8
cmp word [rdx + r8*2], 0
jne 0x140008192
lea rcx, [rbp - 0x70]
call fcn.14000ad00
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400081e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a2c
call fcn.140003b50
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp], xmm1
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.14000cac0
test eax, eax
jne 0x1400088e0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
lea rcx, [0x14038b338]
call fcn.14000a1a0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140008250
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000ad00
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov r8d, 0x104
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
lea rax, [rbp + 0x30]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400082b0
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.14000ad00
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000830c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008307
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a08
call fcn.140003b50
mov word [rsp + 0x48], r15w
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
lea rcx, [0x14038b370]
call fcn.140009a30
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140008342
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000ad00
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x10]
call fcn.1400182b0
test eax, eax
jne 0x1400088e0
lea rax, [rsp + 0x20]
mov qword [rsp + 0x40], rax
lea rcx, [0x14038b308]
call fcn.140009b00
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400083a2
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000ad00
nop
lea rcx, [0x14038b320]
call fcn.140009b00
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400083e0
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000ad00
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400182b0
test eax, eax
jne 0x1400088e0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov r14, qword [rbp - 0x20]
lea rsi, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rsi, qword [rbp - 0x30]
cmp r14, 8
jae 0x140008457
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x48], xmm0
mov edi, 7
jmp 0x1400084e8
mov rdi, r14
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140008a26
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400084c1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140008a26
mov rcx, rax
call fcn.14001f68c
mov rcx, rax
test rax, rax
je 0x140008a0e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400084d0
test rcx, rcx
je 0x1400084cd
call fcn.14001f68c
jmp 0x1400084d0
mov rax, r15
mov qword [rsp + 0x48], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1401ae660
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rdi
cmp byte [0x14038b2f0], 0
je 0x1400086be
movzx eax, byte [0x14038b2f2]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f2], al
movzx eax, byte [0x14038b2f3]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f3], al
movzx eax, byte [0x14038b2f4]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f4], al
movzx eax, byte [0x14038b2f5]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f5], al
movzx eax, byte [0x14038b2f6]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f6], al
movzx eax, byte [0x14038b2f7]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f7], al
movzx eax, byte [0x14038b2f8]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f8], al
movzx eax, byte [0x14038b2f9]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2f9], al
movzx eax, byte [0x14038b2fa]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2fa], al
movzx eax, byte [0x14038b2fb]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2fb], al
movzx eax, byte [0x14038b2fc]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2fc], al
movzx eax, byte [0x14038b2fd]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2fd], al
movzx eax, byte [0x14038b2fe]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2fe], al
movzx eax, byte [0x14038b2ff]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b2ff], al
movzx eax, byte [0x14038b300]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b300], al
movzx eax, byte [0x14038b301]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b301], al
movzx eax, byte [0x14038b302]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b302], al
movzx eax, byte [0x14038b303]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b303], al
movzx eax, byte [0x14038b304]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b304], al
movzx eax, byte [0x14038b305]
movzx eax, byte [rax + r12 + 0x33b350]
mov byte [0x14038b305], al
mov byte [0x14038b2f0], 0
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
lea rdx, [0x14038b2f2]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400086e0
lea rcx, [rsp + 0x20]
call fcn.14000ad00
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x10]
call fcn.1400182b0
test eax, eax
jne 0x1400088e0
lea rcx, [0x14038b290]
call fcn.140009f50
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140008730
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000ad00
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14000878a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008785
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a14
call fcn.140003b50
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rbp - 0x40], xmm1
call fcn.1402c0cd4
mov ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
lea edx, [rcx + 5]
lea rcx, [rsp + 0x20]
call fcn.14001e450
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400087d4
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000b110
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140008823
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000881e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a1a
call fcn.140003b50
mov ebx, 1
mov r8d, ebx
lea rdx, [0x14033be38]
lea rcx, [rbp - 0x50]
call fcn.14000b110
lea rcx, [rsp + 0x20]
call fcn.14001e560
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140008854
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000b110
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x1400088a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000889e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a20
call fcn.140003b50
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rdx, qword [rbp - 0x10]
call fcn.140018b70
test eax, eax
jne 0x1400088e0
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x20]
call fcn.140005660
mov rcx, rax
call fcn.140007a80
jmp 0x1400088e3
mov ebx, r15d
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14000891f
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008919
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a2c
call fcn.140003b50
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14000895f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000895a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a32
call fcn.140003b50
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r15w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400089ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400089a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a02
call fcn.140003b50
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r15w
lea rcx, [rbp - 0x10]
call fcn.140004f30
nop
lea rcx, [rbp + 0x10]
call fcn.140004f30
mov eax, ebx
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1401ac180
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1401bad9c
nop
call fcn.1401bad9c
int3
call fcn.1401bad9c
int3
call fcn.1401bad9c
int3
call fcn.1401bad9c
int3
call fcn.1401bad9c
int3
call fcn.140002a90
nop
call fcn.1401bad9c
nop
call fcn.1401bad9c
int3