Function at 0x14000aea8
Capabilities:
Query environment variable

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2f60
call fcn.140031150
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x2fb0], rbx
mov rax, qword [0x1400409c0]
xor rax, rsp
mov qword [rsp + 0x2f50], rax
mov rsi, rdx
movsxd rdi, ecx
mov ebx, 0x1770
mov rcx, rbx
call fcn.140016610
mov r12, rax
mov r8d, ebx
mov rdx, rax
mov ecx, edi
call fcn.140004548
mov rdx, r12
lea rcx, str.entry__S
call fcn.140011a6c
mov ecx, 8
call fcn.140017058
test rax, rax
je 0x14000af2f
lea rcx, [rsp + 0x28]
mov qword [rax], rcx
jmp 0x14000af31
xor eax, eax
mov qword [rsp + 0x28], rax
and qword [rsp + 0x40], 0
and qword [rsp + 0x48], 0
and qword [rsp + 0x50], 0
lea rdx, [0x14003424c]
mov rcx, r12
call fcn.1400179ac
mov rbx, rax
test rax, rax
je 0x14000afb2
mov rcx, rbx
call fcn.140016740
test rax, rax
je 0x14000afb2
mov rcx, rbx
call fcn.140016740
lea rcx, [rax + 1]
call fcn.140016610
mov qword [rsp + 0x58], rax
mov rdx, rbx
mov rcx, rax
call fcn.140016d10
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x28]
call fcn.1400082d0
lea rdx, [0x14003424c]
xor ecx, ecx
call fcn.1400179ac
mov rbx, rax
test rax, rax
jne 0x14000af5f
mov rdx, qword [rsp + 0x48]
sub rdx, qword [rsp + 0x40]
sar rdx, 3
lea rcx, [0x140036058]
call fcn.140011a6c
xor r14d, r14d
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
sub rcx, rdx
sar rcx, 3
xor ebp, ebp
mov r15, rdi
test rcx, rcx
je 0x14000b26f
mov bl, byte [rsp + 0x20]
cmp rbp, rcx
jb 0x14000b001
call fcn.140017038
mov rdx, qword [rsp + 0x40]
mov rdi, qword [rdx + rbp*8]
lea rdx, [rdi + 2]
lea rcx, [rsp + 0x17e0]
call fcn.140016d10
lea rcx, [rsp + 0x17e0]
call fcn.140009194
cmp byte [rdi + 1], 0x31
sete r13b
movsx ecx, byte [rdi]
sub ecx, 0x41
je 0x14000b1d0
sub ecx, 3
je 0x14000b1d0
sub ecx, 1
je 0x14000b0e7
cmp ecx, 0xe
jne 0x14000b229
xor r8d, r8d
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0x70]
call fcn.1400070f8
cmp r15, 0x79
jne 0x14000b09e
lea r8, [0x140036054]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140009dc0
mov bl, al
lea r8, [0x140036050]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140009dc0
or bl, al
jmp 0x14000b229
lea rcx, [rsp + 0x70]
call fcn.140005bc0
mov bl, al
lea rcx, [rsp + 0x70]
call fcn.140016740
mov r8, rax
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400075a8
lea rcx, [0x14003424c]
call fcn.140016740
mov r8, rax
lea rdx, [0x14003424c]
mov rcx, rsi
call fcn.1400075a8
jmp 0x14000b229
mov r8d, 0x1770
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x17e0]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x14000b1a6
cmp byte [rsp + 0x70], 0x22
jne 0x14000b151
lea rbx, [rsp + 0x70]
dec rbx
lea rcx, [rsp + 0x70]
call fcn.140016740
cmp byte [rax + rbx], 0x22
jne 0x14000b151
lea rcx, [rsp + 0x70]
call fcn.140016740
mov byte [rax + rbx], 0
lea rcx, [rsp + 0x71]
call fcn.140016740
mov r8, rax
lea rdx, [rsp + 0x71]
mov rcx, rsi
call fcn.1400075a8
jmp 0x14000b16b
lea rcx, [rsp + 0x70]
call fcn.140016740
mov r8, rax
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400075a8
lea rcx, [rsp + 0x70]
call fcn.140016740
lea rcx, [rsp + 0x70]
cmp byte [rax + rcx - 1], 0x3b
je 0x14000b19f
lea rcx, [0x14003424c]
call fcn.140016740
mov r8, rax
lea rdx, [0x14003424c]
mov rcx, rsi
call fcn.1400075a8
mov bl, 1
jmp 0x14000b229
test r13b, r13b
je 0x14000b244
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xcb
jne 0x14000b229
lea rdx, [rsp + 0x17e0]
mov ecx, 0x3f0
call fcn.140004f84
jmp 0x14000b229
xor r8d, r8d
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0x70]
call fcn.140007354
lea rcx, [rsp + 0x70]
call fcn.140005bc0
mov bl, al
lea rcx, [rsp + 0x70]
call fcn.140016740
mov r8, rax
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400075a8
lea rcx, [0x14003424c]
call fcn.140016740
mov r8, rax
lea rdx, [0x14003424c]
mov rcx, rsi
call fcn.1400075a8
test r13b, r13b
je 0x14000b244
test bl, bl
jne 0x14000b244
lea rdx, [rsp + 0x17e0]
mov ecx, 0x3ee
call fcn.140004f84
mov rcx, rdi
call fcn.140016ad0
inc r14d
inc rbp
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
sub rcx, rdx
sar rcx, 3
movsxd rax, r14d
cmp rax, rcx
jb 0x14000aff2
mov rcx, r12
call fcn.140016ad0
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000b287
call fcn.140016ad0
and qword [rsp + 0x40], 0
and qword [rsp + 0x48], 0
and qword [rsp + 0x50], 0
mov rcx, qword [rsp + 0x28]
call fcn.140016ad0
mov rcx, qword [rsp + 0x2f50]
xor rcx, rsp
call fcn.140016e60
mov rbx, qword [rsp + 0x2fb0]
add rsp, 0x2f60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret