Function at 0x1402dbfe0
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xc5b537b8
pushf
not eax
add eax, 0x83bfc004
xor eax, 0xed9f55e7
rol eax, 0x83
popf
pushf
not eax
add eax, 0xbc99c968
xor eax, 0x90ce031d
rol eax, 0x49
popf
pushf
not eax
add eax, 0xee6f8129
xor eax, 0xa4b1500a
rol eax, 0x83
popf
cmp eax, 4
jne 0x1402dc030
popf
pop rax
jmp 0x1402dc2e7
cmp eax, 0
jne 0x1402dc03f
popf
pop rax
jmp 0x1402dc0f3
cmp eax, 3
jne 0x1402dc04e
popf
pop rax
jmp 0x1402dc2b0
cmp eax, 1
jne 0x1402dc05d
popf
pop rax
jmp 0x1402dc1cf
cmp eax, 0xd
jne 0x1402dc06c
popf
pop rax
jmp 0x1402dc6ab
cmp eax, 7
jne 0x1402dc07b
popf
pop rax
jmp 0x1402dc4ea
cmp eax, 6
jne 0x1402dc08a
popf
pop rax
jmp 0x1402dc42b
cmp eax, 0xb
jne 0x1402dc099
popf
pop rax
jmp 0x1402dc61b
cmp eax, 0xc
jne 0x1402dc0a8
popf
pop rax
jmp 0x1402dc66e
cmp eax, 8
jne 0x1402dc0b7
popf
pop rax
jmp 0x1402dc52c
cmp eax, 5
jne 0x1402dc0c6
popf
pop rax
jmp 0x1402dc390
cmp eax, 2
jne 0x1402dc0d5
popf
pop rax
jmp 0x1402dc22f
cmp eax, 9
jne 0x1402dc0e4
popf
pop rax
jmp 0x1402dc5a2
cmp eax, 0xa
jne 0x1402dc0f3
popf
pop rax
jmp 0x1402dc5f4
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1402dc10d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x1402dc176
push rax
pushf
mov eax, 0x732aa80c
pushf
not eax
add eax, 0xcb050f9a
xor eax, 0xb1b4d554
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xc60f4179
xor eax, 0xf92f9c30
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xa4693cd0
xor eax, 0x9ff6cb0b
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xb4a5e4fb
xor eax, 0xa080d297
rol eax, 0x53
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0x79fc8e21
pushf
not eax
add eax, 0xcceea37f
xor eax, 0xb5bddc39
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xb1cd05d3
xor eax, 0xa7e5f29c
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa5feabbb
xor eax, 0xcb7d5d35
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe3254535
xor eax, 0xe135c783
rol eax, 0x1f
popf
jmp 0x1402dc021
xor eax, eax
jmp 0x1402dc6b8
mov rbp, rbx
cmp word [rax], si
je 0x1402dc27d
push rax
pushf
mov eax, 0x412f360c
pushf
not eax
add eax, 0xf1f0051e
xor eax, 0xccabffb4
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x937ac451
xor eax, 0xb29ede6c
rol eax, 0x87
popf
pushf
not eax
add eax, 0xb736e753
xor eax, 0xdbca6bae
rol eax, 0xb2
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0xc8cb5588
pushf
not eax
add eax, 0xc3f48ccf
xor eax, 0xcd2c8bde
rol eax, 0xad
popf
pushf
not eax
add eax, 0x81844d11
xor eax, 0xc9c14650
rol eax, 0x8d
popf
jmp 0x1402dc021
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x41a99516
pushf
not eax
add eax, 0x8bc40544
xor eax, 0xc2c1d427
rol eax, 0xce
popf
pushf
not eax
add eax, 0x8995f7ab
xor eax, 0xa0925574
rol eax, 0xf2
popf
jmp 0x1402dc021
inc rax
cmp word [rbp + rax*2], si
jne 0x1402dc34a
push rax
pushf
mov eax, 0x71b85d8c
pushf
not eax
add eax, 0x9607aa12
xor eax, 0xebf5b68c
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xe4d820ce
xor eax, 0xd9f6a7e8
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xee89bacd
xor eax, 0xe8f5bcaa
rol eax, 2
popf
pushf
not eax
add eax, 0xfe50ab9c
xor eax, 0xf9cc7f1c
rol eax, 0xb1
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0x2b1fc7c7
pushf
not eax
add eax, 0xf32bbbe5
xor eax, 0x8d6b50a9
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xd8d9506f
xor eax, 0xf208a933
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xbd517bf6
xor eax, 0x9398d544
rol eax, 0x37
popf
jmp 0x1402dc021
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x1402dc3d2
push rax
pushf
mov eax, 0x1a5ceb38
pushf
not eax
add eax, 0xfe30635f
xor eax, 0x9caa8bf4
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8bc5db3c
xor eax, 0xebe75e4b
rol eax, 0xbf
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0x43b16fbd
pushf
not eax
add eax, 0xf6fde5b1
xor eax, 0xb55fd34e
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf1c0b4c5
xor eax, 0xe2291e49
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x8679db54
xor eax, 0xd9f29439
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xfae914d4
xor eax, 0xa18421f5
rol eax, 0xc
popf
jmp 0x1402dc021
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1402f3aa8
movsxd r14, eax
test eax, eax
jne 0x1402dc4a4
push rax
pushf
mov eax, 0x6be136c0
pushf
not eax
add eax, 0x8618b973
xor eax, 0xebc95e6e
rol eax, 0x46
popf
pushf
not eax
add eax, 0xdc440421
xor eax, 0xe11844cf
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9152753a
xor eax, 0xc70e5cdb
rol eax, 0x99
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0x19e12d4a
pushf
not eax
add eax, 0xc0380657
xor eax, 0x87b3845d
rol eax, 0xc
popf
pushf
not eax
add eax, 0x802f22ee
xor eax, 0x9b658658
rol eax, 0xb
popf
pushf
not eax
add eax, 0x9d2a4227
xor eax, 0xa075869d
rol eax, 0xba
popf
jmp 0x1402dc021
mov rcx, rbx
jmp 0x1402dc4ee
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1402dc1cf
mov rcx, r14
call fcn.1402bc8e2
mov rdi, rax
test rax, rax
jne 0x1402dc56f
push rax
pushf
mov eax, 0xa2767fb2
pushf
not eax
add eax, 0xf5e20e05
xor eax, 0xfe07bd08
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xa9e9b6a1
xor eax, 0xf9544beb
rol eax, 0x2d
popf
jmp 0x1402dc021
push rax
pushf
mov eax, 0x4af61e6f
pushf
not eax
add eax, 0xb99e8fa9
xor eax, 0xa092e3e0
rol eax, 0x24
popf
pushf
not eax
add eax, 0xcba0abdc
xor eax, 0xb7f77e3f
rol eax, 5
popf
jmp 0x1402dc021
xor ecx, ecx
call fcn.1402ee2cb
jmp 0x1402dc4ea
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1402f3aa8
test eax, eax
jne 0x1402dc66e
mov rcx, rdi
call fcn.1402ee2cb
jmp 0x1402dc6ab
xor ecx, ecx
call fcn.1402ee2cb
mov rsi, rdi
push rax
pushf
mov eax, 0x342cfafd
pushf
not eax
add eax, 0x86060767
xor eax, 0xb500f98a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe946a7f0
xor eax, 0xaaf90e11
rol eax, 0xf9
popf
jmp 0x1402dc021
mov rcx, rbx
jmp 0x1402dc6af
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret