Function at 0x140086369
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x47dfd0e7
pushf
not eax
add eax, 0x8959aef9
xor eax, 0xa792f790
rol eax, 0xca
popf
pushf
not eax
add eax, 0xf3ae2f4e
xor eax, 0xd96b3cd3
rol eax, 0x54
popf
pushf
not eax
add eax, 0xbb1d7794
xor eax, 0x8dce42fe
rol eax, 0x92
popf
pushf
not eax
add eax, 0xff3d2474
xor eax, 0xb0cb013c
rol eax, 0xd5
popf
cmp eax, 4
jne 0x1400863cc
popf
pop rax
jmp 0x140086696
cmp eax, 0
jne 0x1400863db
popf
pop rax
jmp 0x14008648f
cmp eax, 3
jne 0x1400863ea
popf
pop rax
jmp 0x14008664c
cmp eax, 1
jne 0x1400863f9
popf
pop rax
jmp 0x140086558
cmp eax, 0xd
jne 0x140086408
popf
pop rax
jmp 0x140086aa6
cmp eax, 7
jne 0x140086417
popf
pop rax
jmp 0x140086860
cmp eax, 6
jne 0x140086426
popf
pop rax
jmp 0x1400867a1
cmp eax, 0xb
jne 0x140086435
popf
pop rax
jmp 0x1400869dd
cmp eax, 0xc
jne 0x140086444
popf
pop rax
jmp 0x140086a43
cmp eax, 8
jne 0x140086453
popf
pop rax
jmp 0x1400868c8
cmp eax, 5
jne 0x140086462
popf
pop rax
jmp 0x14008672c
cmp eax, 2
jne 0x140086471
popf
pop rax
jmp 0x1400865b8
cmp eax, 9
jne 0x140086480
popf
pop rax
jmp 0x140086977
cmp eax, 0xa
jne 0x14008648f
popf
pop rax
jmp 0x1400869b6
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1400864a9
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x1400864ff
push rax
pushf
mov eax, 0x84ef8e75
pushf
not eax
add eax, 0x9c96d816
xor eax, 0xe8660bd6
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x9183ac10
xor eax, 0xc2754078
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x91406721
xor eax, 0x94508350
rol eax, 0x3f
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0x8fd27fe4
pushf
not eax
add eax, 0xa1295540
xor eax, 0xf31acf8d
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x9d4a6f88
xor eax, 0xd1dc6f21
rol eax, 0x39
popf
pushf
not eax
add eax, 0x8c1d720f
xor eax, 0xc951c93c
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xaa315a97
xor eax, 0xfa15fb05
rol eax, 0xf6
popf
jmp 0x1400863bd
xor eax, eax
jmp 0x140086ab3
mov rbp, rbx
cmp word [rax], si
je 0x1400865f3
push rax
pushf
mov eax, 0xbb3be79e
pushf
not eax
add eax, 0xde2fda4b
xor eax, 0xe42405d7
rol eax, 0x11
popf
pushf
not eax
add eax, 0xbd0c9f41
xor eax, 0xce150991
rol eax, 0xf5
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0x6fd96cad
pushf
not eax
add eax, 0xcfa1adc1
xor eax, 0x89639442
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xe93b868b
xor eax, 0xc64b89a8
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x93886159
xor eax, 0xe4a3132a
rol eax, 0x36
popf
pushf
not eax
add eax, 0x8807c43f
xor eax, 0xb2ca51d4
rol eax, 0x4d
popf
jmp 0x1400863bd
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x82fad4c9
pushf
not eax
add eax, 0x80b23828
xor eax, 0xe3061e4a
rol eax, 0x78
popf
pushf
not eax
add eax, 0x996a1813
xor eax, 0xd447b7b9
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xf894653c
xor eax, 0x920b0ab3
rol eax, 0x37
popf
jmp 0x1400863bd
inc rax
cmp word [rbp + rax*2], si
jne 0x1400866d3
push rax
pushf
mov eax, 0x766aa173
pushf
not eax
add eax, 0xae50720c
xor eax, 0xe0896b53
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x95c94244
xor eax, 0xbbdd8be6
rol eax, 0x26
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0x2dbc48fc
pushf
not eax
add eax, 0xe4a2e181
xor eax, 0xe083af10
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xf3d4fa35
xor eax, 0xbc39735b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xe8d8c71d
xor eax, 0xa4ff0f54
rol eax, 0xff
popf
pushf
not eax
add eax, 0xf61e7517
xor eax, 0xd5af859e
rol eax, 0xee
popf
jmp 0x1400863bd
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x14008676e
push rax
pushf
mov eax, 0x73c797c1
pushf
not eax
add eax, 0x914f58be
xor eax, 0x98667b7f
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xe615cf62
xor eax, 0xad87b3a9
rol eax, 0x8d
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0xe5a08921
pushf
not eax
add eax, 0x98544c16
xor eax, 0xdb3f99b0
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x9f362143
xor eax, 0xd98ddaaa
rol eax, 0xee
popf
jmp 0x1400863bd
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.14009018b
movsxd r14, eax
test eax, eax
jne 0x140086807
push rax
pushf
mov eax, 0xa94d945c
pushf
not eax
add eax, 0xb32e2b2a
xor eax, 0xd47bb485
rol eax, 0x73
popf
pushf
not eax
add eax, 0xfed60c13
xor eax, 0xf08f1f39
rol eax, 0xe6
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0x3e8174a6
pushf
not eax
add eax, 0xc88679f5
xor eax, 0xc286320a
rol eax, 0x98
popf
pushf
not eax
add eax, 0x91f65e96
xor eax, 0xb865e8f7
rol eax, 0x53
popf
pushf
not eax
add eax, 0xdb82e92a
xor eax, 0xb61bf2fe
rol eax, 0x12
popf
pushf
not eax
add eax, 0xbe63466b
xor eax, 0x9e0927c7
rol eax, 0x1a
popf
jmp 0x1400863bd
mov rcx, rbx
jmp 0x140086864
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x140086558
mov rcx, r14
call fcn.140075af0
mov rdi, rax
test rax, rax
jne 0x14008691e
push rax
pushf
mov eax, 0xc465745a
pushf
not eax
add eax, 0xe015ae11
xor eax, 0xef27a00b
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x972fecd3
xor eax, 0x917a2425
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x925bf57f
xor eax, 0xc4a07aab
rol eax, 0x9a
popf
jmp 0x1400863bd
push rax
pushf
mov eax, 0x7ee9e21e
pushf
not eax
add eax, 0x8b43b25f
xor eax, 0xae0ff0f8
rol eax, 0x24
popf
pushf
not eax
add eax, 0x9ebaa90e
xor eax, 0x97a7df0e
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xe67f66d6
xor eax, 0xcecf1fc8
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc081b7e5
xor eax, 0x8b7e5c53
rol eax, 0x10
popf
jmp 0x1400863bd
xor ecx, ecx
call fcn.14008f310
jmp 0x140086860
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.14009018b
test eax, eax
jne 0x140086a43
mov rcx, rdi
call fcn.14008f310
jmp 0x140086aa6
xor ecx, ecx
call fcn.14008f310
mov rsi, rdi
push rax
pushf
mov eax, 0x7fa5968b
pushf
not eax
add eax, 0xc27e958d
xor eax, 0x8940b25b
rol eax, 0xde
popf
pushf
not eax
add eax, 0xd7b5afef
xor eax, 0xe0400f07
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xbadefcfc
xor eax, 0xe43332f4
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xacf90b21
xor eax, 0xf19360cd
rol eax, 0xe5
popf
jmp 0x1400863bd
mov rcx, rbx
jmp 0x140086aaa
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret