Function at 0x14008b670
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x14016b010]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov rdi, r8
mov rsi, rdx
mov qword [rsp + 0x20], rdx
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x28], xmm1
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov ecx, 0x20a
call fcn.1400d4898
mov qword [rsp + 0x28], rax
lea rbx, [rax + 0x20a]
mov qword [rsp + 0x38], rbx
xor edx, edx
mov r8d, 0x20a
mov rcx, rax
call fcn.1400d9a00
mov qword [rsp + 0x30], rbx
mov rdx, qword [rsp + 0x28]
sub rbx, rdx
sar rbx, 1
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14008b700
mov rcx, qword [rdi]
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov r14d, eax
test eax, eax
jne 0x14008b805
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x40]
call fcn.1400d9a00
call fcn.1400ad640
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], 2
lea rcx, [rsp + 0x50]
call fcn.14000c6b0
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400507c6.0]
cmp dword [rsp + 0x48], eax
setl byte [rbp + 0x48]
jl 0x14008b78c
cmp qword [rdi + 0x18], 8
jb 0x14008b771
mov rdi, qword [rdi]
mov r9, rdi
mov r8d, ebx
lea rdx, str.ExpandEnvironmentStringsW_failed:__u___S_
lea rcx, [rsp + 0x40]
call fcn.140050ac0
mov byte [rbp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.1400091b0
mov byte [rsi + 0x20], 0
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x14008b7dc
mov rdx, qword [rsp + 0x38]
sub rdx, rcx
sar rdx, 1
add rdx, rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b7d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ba1c
call fcn.1400d45f0
mov rax, rsi
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.1400d45d0
mov rbx, qword [rsp + 0x3b0]
add rsp, 0x380
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
cmp r14d, ebx
jbe 0x14008b9a0
lfence
mov r8, r14
mov r9, qword [rsp + 0x30]
mov rcx, r9
mov rdx, qword [rsp + 0x28]
sub rcx, rdx
sar rcx, 1
cmp r14, rcx
jae 0x14008b837
lea rax, [rdx + r14*2]
mov qword [rsp + 0x30], rax
jmp 0x14008b879
jbe 0x14008b879
mov rax, qword [rsp + 0x38]
sub rax, rdx
sar rax, 1
cmp r8, rax
jbe 0x14008b85b
lfence
mov rdx, r8
lea rcx, [rsp + 0x28]
call fcn.14008ac10
jmp 0x14008b874
sub r8, rcx
add r8, r8
lea rbx, [r9 + r8]
xor edx, edx
mov rcx, r9
call fcn.1400d9a00
mov qword [rsp + 0x30], rbx
mov rdx, qword [rsp + 0x28]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14008b886
mov rcx, qword [rdi]
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x14008b917
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x50]
call fcn.1400d9a00
call fcn.1400ad640
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], 2
lea rcx, [rbp + 0x60]
call fcn.14000c6b0
nop
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400507c6.0]
cmp dword [rbp + 0x58], eax
setl byte [rbp + 0x158]
jl 0x14008b90e
cmp qword [rdi + 0x18], 8
jb 0x14008b8f1
mov rdi, qword [rdi]
mov r9, rdi
mov r8d, ebx
lea rdx, str.ExpandEnvironmentStringsW__2__failed:__u___S_
lea rcx, [rbp + 0x50]
call fcn.140050ac0
mov byte [rbp + 0x158], 1
lea rcx, [rbp + 0x50]
jmp 0x14008b791
cmp eax, r14d
jbe 0x14008b9a0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x160]
call fcn.1400d9a00
call fcn.1400ad640
mov qword [rbp + 0x160], rax
mov dword [rbp + 0x168], 2
lea rcx, [rbp + 0x170]
call fcn.14000c6b0
nop
mov rcx, qword [rbp + 0x160]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400507c6.0]
cmp dword [rbp + 0x168], eax
setl byte [rbp + 0x268]
jl 0x14008b994
lea rdx, str.ExpandEnvironmentStringsW__2__failed:_buffer_too_small_after_resize
lea rcx, [rbp + 0x160]
call fcn.140050ac0
mov byte [rbp + 0x268], 1
lea rcx, [rbp + 0x160]
jmp 0x14008b791
mov qword [rsi], r15
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rsp + 0x28]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14008b9c0
mov rcx, rsi
call fcn.14000d1d0
mov byte [rsi + 0x20], 1
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x14008b7dc
mov rdx, qword [rsp + 0x38]
sub rdx, rcx
sar rdx, 1
add rdx, rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b7d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008b7d7
call fcn.1400e6180
int3