Function at 0x14002de60
Capabilities:
Query environment variable

Disassembly:
push r14
push r15
sub rsp, 0x58
movzx eax, byte [rcx + 1]
movzx r15d, r8b
mov r14, rcx
cmp edx, eax
jl 0x14002de82
xor eax, eax
add rsp, 0x58
pop r15
pop r14
ret
mov qword [rsp + 0x30], r13
movsxd r13, edx
shl r13, 5
add r13, qword [rcx + 8]
cmp byte [r13], 0
jne 0x14002dea9
xor eax, eax
mov r13, qword [rsp + 0x30]
add rsp, 0x58
pop r15
pop r14
ret
mov qword [rsp + 0x40], rdi
mov rdi, qword [r13 + 8]
cmp word [rdi], 0
jne 0x14002decf
mov rax, qword [r13 + 0x10]
mov rdi, qword [rsp + 0x40]
mov r13, qword [rsp + 0x30]
add rsp, 0x58
pop r15
pop r14
ret
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x50], rbp
mov rbp, qword [r13 + 0x10]
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x38], r12
xor r12d, r12d
lea r10, [0x14011cf10]
mov ebx, r12d
test rbp, rbp
je 0x14002e03d
mov rax, qword [rbp]
test rax, rax
je 0x14002e03d
cmp rdi, rax
jae 0x14002df31
cmp rbx, 0xfd
jae 0x14002df3a
movzx eax, word [rdi]
add rdi, 2
inc rbx
mov word [r10 + rbx*2 - 2], ax
cmp rdi, qword [rbp]
jb 0x14002df12
cmp rbx, 0xfd
jb 0x14002df44
cmp rdi, qword [rbp]
jb 0x14002e02d
mov rsi, qword [rbp + 8]
movzx ecx, byte [rsi + 0x23]
test ecx, ecx
je 0x14002dfe3
dec ecx
je 0x14002df8d
dec ecx
je 0x14002df6e
dec ecx
je 0x14002dfd5
mov rdx, qword [rsi + 0x28]
xor ecx, ecx
call qword [rsi + reloc.OLEAUT32.dll_SafeArrayGetElement]
jmp 0x14002dfee
lea rcx, [0x14011be28]
xor edx, edx
call fcn.140005e70
mov r11, rax
mov eax, 0xffffffff
cmp r11, rax
cmove r11, r12
jmp 0x14002dff1
mov rcx, rsi
call fcn.140001130
cmp dword [0x14011992c], r12d
jne 0x14002dfda
cmp qword [rsi + 0x10], r12
jne 0x14002dfda
mov rcx, qword [rsi + 0x28]
lea rdx, [rsp + 0x78]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea r10, [0x14011cf10]
test eax, eax
je 0x14002dfce
mov qword [0x14011cd68], r12
lea r11d, [rax - 1]
jmp 0x14002dff8
mov qword [0x14011cd68], rsi
mov r11, r12
jmp 0x14002dff8
mov r11, qword [rsi + 0x10]
shr r11, 1
jmp 0x14002dff1
mov rcx, qword [rsi + 0x10]
xor edx, edx
call fcn.1400b1950
mov r11, rax
lea r10, [0x14011cf10]
mov eax, 0xfd
sub rax, rbx
cmp r11, rax
ja 0x14002e02d
mov rcx, qword [rbp + 8]
lea rdx, [r10 + rbx*2]
call fcn.1400b1950
lea r10, [0x14011cf10]
add rbx, rax
movzx eax, word [rbp + 0x12]
add rbp, 0x18
lea rdi, [rdi + rax*2]
jmp 0x14002df00
mov r9, qword [r13 + 8]
lea rdx, [0x1400eaad0]
jmp 0x14002e1dd
movzx eax, word [rdi]
test ax, ax
je 0x14002e062
cmp rbx, 0xfd
jae 0x14002e06b
add rdi, 2
mov word [r10 + rbx*2], ax
inc rbx
movzx eax, word [rdi]
test ax, ax
jne 0x14002e045
cmp rbx, 0xfd
jb 0x14002e071
cmp word [rdi], r12w
jne 0x14002e02d
test rbx, rbx
jne 0x14002e086
mov r9, qword [r13 + 8]
lea rdx, [0x1400eabe0]
jmp 0x14002e1dd
mov eax, dword [0x14011cf00]
mov word [r10 + rbx*2], r12w
test al, 1
jne 0x14002e0cb
or eax, 1
mov qword [0x14011cee0], r12
mov qword [0x14011cef8], r10
mov dword [0x14011cf00], eax
lea rax, [0x14011b184]
mov dword [0x14011cef0], 0x1000400
mov qword [0x14011ced8], rax
mov qword [0x14011cee8], r12
test r15b, r15b
jne 0x14002e146
cmp word [0x14011cf10], r12w
je 0x14002e1e8
mov edx, 1
mov rcx, r10
call fcn.1400b2210
test eax, eax
je 0x14002e1e8
lea rdx, [0x14011cf10]
lea rcx, [0x14011b1d0]
xor r9d, r9d
mov r8, rbx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 3
call fcn.14002e2a0
test rax, rax
jne 0x14002e1ea
lea rcx, [0x14011cf10]
call fcn.14002ec50
test rax, rax
jne 0x14002e13f
lea rax, [0x14011ced0]
jmp 0x14002e1ea
lea r10, [0x14011cf10]
cmp word [0x14011cf10], r12w
je 0x14002e1e8
lea rax, [rsp + 0x78]
lea r9, [rsp + 0x70]
lea rcx, [0x14011b1d0]
mov qword [rsp + 0x28], rax
mov r8, rbx
mov rdx, r10
mov dword [rsp + 0x20], 3
call fcn.14002e2a0
test rax, rax
jne 0x14002e1b3
cmp byte [rsp + 0x78], r12b
mov r9d, dword [rsp + 0x70]
lea rdx, [0x14011cf10]
setne r12b
lea rcx, [0x14011b1d0]
mov r8, rbx
inc r12d
mov dword [rsp + 0x20], r12d
call fcn.14002e5a0
test rax, rax
je 0x14002e1e8
cmp byte [r13], 2
jne 0x14002e1ea
movzx ecx, byte [rax + 0x23]
test cl, cl
jne 0x14002e1ca
mov rcx, qword [rax + 0x10]
movzx ecx, byte [rcx + 0x23]
cmp cl, 2
jbe 0x14002e1ea
lea r9, [0x14011cf10]
lea rdx, [0x1400e99d0]
xor r8d, r8d
mov rcx, r14
call fcn.140040410
xor eax, eax
mov r12, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x40]
mov r13, qword [rsp + 0x30]
add rsp, 0x58
pop r15
pop r14
ret