Function at 0x140004e90
Capabilities:
Query environment variable

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2fe0]
mov eax, 0x30e0
call fcn.14000a950
sub rsp, rax
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x3130], rbx
mov rax, qword [0x14002e280]
xor rax, rsp
mov qword [rbp + 0x2fd0], rax
mov bl, r9b
mov qword [rsp + 0x30], rdx
xor edi, edi
mov word [rbp + 0xfd0], di
mov eax, 0x800
test rcx, rcx
je 0x140004f1a
test r8b, r8b
mov r8d, eax
je 0x140004f0b
mov byte [rsp + 0x20], dil
mov r9b, 1
lea rdx, [rbp + 0xfd0]
call fcn.1400058ac
jmp 0x140004f1a
mov rdx, rcx
lea rcx, [rbp + 0xfd0]
call fcn.140007288
lea rcx, [rbp - 0x60]
call fcn.140003f74
nop
cmp word [rbp + 0xfd0], di
je 0x140004f6d
lea rdx, [rbp + 0xfd0]
lea rcx, [rbp - 0x60]
test bl, bl
je 0x140004f43
call fcn.140004724
jmp 0x140004f4b
xor r8d, r8d
call fcn.140004368
test al, al
jne 0x140004f74
test bl, bl
je 0x1400053b2
mov edx, 6
lea rcx, [0x140030e70]
call fcn.140003d8c
jmp 0x1400053b2
mov dword [rbp - 0x4c], 1
mov ebx, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov edx, 0x1005
lea rcx, [rsp + 0x58]
call fcn.140004d50
nop
mov esi, 0x1000
mov r13, qword [rsp + 0x58]
mov rdx, r13
jmp 0x140004fc1
add ebx, eax
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.140004d50
mov edx, ebx
mov r13, qword [rsp + 0x58]
add rdx, r13
mov r8, rsi
lea rcx, [rbp - 0x60]
call fcn.140004568
test eax, eax
jne 0x140004fa9
lea rcx, [rbx + r13]
xor edx, edx
lea r8d, [rax + 5]
call fcn.14000b6d0
mov qword [rsp + 0x38], rdi
mov r12, rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
cmp byte [r13], 0xff
jne 0x14000500a
cmp byte [r13 + 1], 0xfe
mov esi, 1
je 0x14000500c
mov esi, edi
cmp byte [r13], 0xfe
jne 0x140005020
cmp byte [r13 + 1], 0xff
mov r15d, 1
je 0x140005023
mov r15d, edi
mov r8b, dil
test esi, esi
jne 0x14000502f
test r15d, r15d
je 0x140005064
cmp rbx, 2
jbe 0x140005064
lea rcx, [r13 + 2]
mov rdx, r13
neg rdx
cmp byte [rcx], 0x1f
ja 0x140005053
movzx eax, byte [rcx]
mov r9d, 0xffffdbff
bt r9d, eax
jb 0x140005061
inc rcx
lea rax, [rdx + rcx]
cmp rax, rbx
jae 0x140005064
jmp 0x14000503f
mov r8b, 1
mov r14d, dword [rbp + 0x3040]
cmp r14d, 3
je 0x1400051e3
test r14d, r14d
jne 0x140005083
test r8b, r8b
jne 0x1400051e3
mov rbx, r13
cmp byte [r13], dil
je 0x140005394
mov r15, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
mov rsi, rbx
mov rcx, rdi
cmp byte [rbx], 0xd
je 0x1400050d1
cmp byte [rsi], 0xa
je 0x1400050d1
cmp byte [rsi], dil
je 0x1400050d1
cmp byte [rbp + 0x3050], dil
je 0x1400050c9
cmp byte [rsi], 0x2f
jne 0x1400050c9
cmp byte [rsi + 1], 0x2f
jne 0x1400050c9
mov byte [rsi], dil
mov rcx, rsi
inc rsi
cmp byte [rsi], 0xd
jne 0x1400050a5
mov byte [rsi], dil
mov rax, rsi
test rcx, rcx
cmovne rax, rcx
jmp 0x1400050ed
cmp byte [rax], 0x20
je 0x1400050ea
cmp byte [rax], 9
jne 0x1400050f5
mov byte [rax], dil
dec rax
cmp rax, rbx
jae 0x1400050e0
cmp byte [rbx], dil
je 0x1400051bd
cmp byte [rbp + 0x3048], dil
je 0x140005123
cmp byte [rbx], 0x22
jne 0x140005123
mov rcx, rbx
call fcn.140010580
cmp byte [rax + rbx - 1], 0x22
jne 0x140005123
mov byte [rax + rbx - 1], dil
inc rbx
cmp r14d, 2
jne 0x140005135
mov rdx, rbx
mov rcx, rbx
call qword [sym.imp.USER32.dll_OemToCharA]
mov rcx, rbx
call fcn.140010580
inc rax
cmp rax, r15
jbe 0x140005166
sub rax, r12
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140004df0
mov r12, qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
jmp 0x14000516e
mov r12, rax
mov qword [rsp + 0x40], rax
mov r8, r12
mov rdx, r13
mov rcx, rbx
call fcn.140007544
cmp byte [rbp + 0x3058], dil
je 0x1400051b0
cmp byte [rbx], 0x25
jne 0x1400051b0
mov r8d, 0x800
lea rdx, [rbp + 0x1fd0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x7fe
lea rdx, [rbp + 0x1fd0]
jbe 0x1400051b3
mov rdx, r13
mov rcx, qword [rsp + 0x30]
call fcn.1400072fc
lea rbx, [rsi + 1]
cmp byte [rbx], 0xd
je 0x1400051cb
cmp byte [rbx], 0xa
jne 0x1400051d0
inc rbx
jmp 0x1400051c1
cmp byte [rbx], dil
jne 0x14000509a
mov r13, qword [rsp + 0x58]
jmp 0x140005394
mov r14d, 2
test esi, esi
jne 0x1400051f9
test r15d, r15d
jne 0x1400051f9
mov r14, rdi
lea esi, [r15 + 1]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov rbx, qword [rsp + 0x60]
mov rdx, rbx
shr rdx, 1
inc rdx
lea rcx, [rsp + 0x78]
call fcn.140004df0
nop
dec rbx
mov r12, qword [rsp + 0x78]
cmp r14, rbx
jae 0x14000527c
movsxd r9, esi
movsxd rcx, r15d
lea r8, [rcx + r13]
add r8, r14
sub r9, rcx
mov r10, r8
neg r10
sub rbx, r14
dec rbx
shr rbx, 1
inc rbx
movzx edx, byte [r9 + r8]
mov ecx, 0x100
imul edx, ecx
movzx eax, byte [r8]
add dx, ax
lea rax, [r8 + r10]
shr rax, 1
mov word [r12 + rax*2], dx
lea r8, [r8 + 2]
sub rbx, 1
jne 0x140005252
mov rbx, r12
cmp word [r12], di
je 0x14000538b
mov r13, qword [rsp + 0x30]
mov rsi, rbx
mov rcx, rdi
cmp word [rbx], 0xd
je 0x1400052cc
cmp word [rsi], 0xa
je 0x1400052cc
cmp word [rsi], di
je 0x1400052cc
cmp byte [rbp + 0x3050], dil
je 0x1400052c2
cmp word [rsi], 0x2f
jne 0x1400052c2
cmp word [rsi + 2], 0x2f
jne 0x1400052c2
mov word [rsi], di
mov rcx, rsi
add rsi, 2
cmp word [rsi], 0xd
jne 0x14000529b
mov word [rsi], di
mov rax, rsi
test rcx, rcx
cmovne rax, rcx
jmp 0x1400052ea
cmp word [rax], 0x20
je 0x1400052e7
cmp word [rax], 9
jne 0x1400052f3
mov word [rax], di
sub rax, 2
cmp rax, rbx
jae 0x1400052db
cmp word [rbx], di
je 0x140005367
mov rcx, rbx
call fcn.14000e980
cmp byte [rbp + 0x3048], dil
je 0x140005320
cmp word [rbx], 0x22
jne 0x140005320
cmp word [rbx + rax*2 - 2], 0x22
jne 0x140005320
mov word [rbx + rax*2 - 2], di
add rbx, 2
cmp byte [rbp + 0x3058], dil
je 0x14000535c
cmp word [rbx], 0x25
jne 0x14000535c
mov word [rbp + 0x1fd0], di
mov r8d, 0x800
lea rdx, [rbp + 0x1fd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x7fe
lea rdx, [rbp + 0x1fd0]
jbe 0x14000535f
mov rdx, rbx
mov rcx, r13
call fcn.1400072fc
lea rbx, [rsi + 2]
cmp word [rbx], 0xd
je 0x140005377
cmp word [rbx], 0xa
jne 0x14000537d
add rbx, 2
jmp 0x14000536b
cmp word [rbx], di
jne 0x14000528f
mov r13, qword [rsp + 0x58]
mov rcx, r12
call fcn.14000e930
nop
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x1400053a7
mov rcx, rax
call fcn.14000e930
nop
mov rcx, r13
call fcn.14000e930
mov dil, 1
lea rcx, [rbp - 0x60]
call fcn.140003fb0
mov al, dil
mov rcx, qword [rbp + 0x2fd0]
xor rcx, rsp
call fcn.14000a9c0
mov rbx, qword [rsp + 0x3130]
add rsp, 0x30e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret