Function at 0x140029210
Capabilities:
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4b8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x430], 0xfffffffffffffffe
mov rsi, rcx
lea rcx, [rbp - 0x60]
call fcn.1400261e0
mov r14, qword [rbp - 0x58]
test r14, r14
je 0x1400293d3
mov qword [rbp + 0x410], rsi
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov qword [rbp + 0x3f0], rcx
mov qword [rbp + 0x3b8], rcx
mov qword [rbp + 0x3c0], r14
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x400], 2
mov qword [rbp + 0x408], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x428], rax
xor eax, eax
mov qword [rbp + 0x420], rax
xor esi, esi
xor edi, edi
cmp r8, 0x201
jae 0x140029300
jmp 0x1400292e2
mov r14, rbx
jae 0x14002944e
cmp r8, 0x201
jae 0x140029300
lea r13, [rbp - 0x60]
mov r15d, 0x200
mov r12, r8
jmp 0x140029362
sub r8, rdi
sub rsi, rdi
cmp rsi, r8
jae 0x140029336
lea rcx, [rbp + 0x3f8]
mov rdx, rdi
call fcn.140052750
mov rax, qword [rbp + 0x3f8]
mov qword [rbp + 0x420], rax
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x428], rax
mov rsi, qword [rbp + 0x420]
mov eax, 0xffffffff
cmp rsi, rax
mov edi, 0xffffffff
cmovb rdi, rsi
mov qword [rbp + 0x408], rdi
mov r13, qword [rbp + 0x428]
mov r15, rdi
mov r12, rdi
xor ecx, ecx
call qword [sym.imp.kernel32.dll_SetLastError]
mov rbx, r14
mov rcx, r14
mov rdx, r13
mov r8d, r12d
call qword [sym.imp.kernel32.dll_GetEnvironmentVariableW]
mov r14d, eax
test eax, eax
jne 0x140029391
call qword [sym.imp.kernel32.dll_GetLastError]
test eax, eax
jne 0x14002959b
mov r8d, r14d
cmp r12, r8
jne 0x1400292d0
call qword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400295c4
mov r14, rbx
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jb 0x1400292e2
jmp 0x140029300
mov rdx, qword [rbp - 0x60]
mov eax, edx
and eax, 3
cmp eax, 1
jne 0x140029445
lea rax, [rdx - 1]
mov qword [rbp + 0x420], rax
mov rcx, qword [rdx - 1]
mov qword [rbp + 0x428], rdx
mov rax, qword [rdx + 7]
call qword [rax]
mov rax, qword [rbp + 0x428]
mov rax, qword [rax + 7]
cmp qword [rax + 8], 0
mov rdi, qword [rbp + 0x420]
je 0x140029433
mov r8, qword [rdi]
cmp qword [rax + 0x10], 0x11
jb 0x140029424
mov r8, qword [r8 - 8]
mov rcx, qword [0x14127fbb0]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [0x14127fbb0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov byte [rsi + 0x18], 2
jmp 0x140029586
cmp r15, r8
jb 0x1400295de
lea rcx, [rbp + 0x3d0]
mov rdx, r13
call fcn.140027420
mov rdi, qword [rbp + 0x3d0]
movups xmm0, xmmword [rbp + 0x3d8]
movaps xmmword [rbp + 0x3a0], xmm0
movzx esi, byte [rbp + 0x3e8]
mov eax, dword [rbp + 0x3e9]
mov dword [rbp + 0x418], eax
mov eax, dword [rbp + 0x3ec]
mov dword [rbp + 0x41b], eax
cmp qword [rbp + 0x420], 0
je 0x1400294ba
mov rcx, qword [0x14127fbb0]
xor edx, edx
mov r8, qword [rbp + 0x428]
call qword [sym.imp.kernel32.dll_HeapFree]
cmp sil, 2
jne 0x14002953f
mov rax, qword [rbp + 0x410]
mov byte [rax + 0x18], 2
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14002956a
lea rax, [rdi - 1]
mov qword [rbp + 0x420], rax
mov rcx, qword [rdi - 1]
mov rax, qword [rdi + 7]
mov qword [rbp + 0x428], rdi
call qword [rax]
mov rax, qword [rbp + 0x428]
mov rax, qword [rax + 7]
cmp qword [rax + 8], 0
mov rsi, qword [rbp + 0x420]
je 0x14002952b
mov r8, qword [rsi]
cmp qword [rax + 0x10], 0x11
jb 0x14002951c
mov r8, qword [r8 - 8]
mov rcx, qword [0x14127fbb0]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [0x14127fbb0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x14002956a
movaps xmm0, xmmword [rbp + 0x3a0]
mov rdx, qword [rbp + 0x410]
movups xmmword [rdx + 8], xmm0
mov eax, dword [rbp + 0x418]
mov ecx, dword [rbp + 0x41b]
mov dword [rdx + 0x19], eax
mov dword [rdx + 0x1c], ecx
mov qword [rdx], rdi
mov byte [rdx + 0x18], sil
cmp qword [rbp + 0x3f0], 0
je 0x140029586
mov rcx, qword [0x14127fbb0]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
nop
add rsp, 0x4b8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov sil, 2
mov r14, rbx
cmp qword [rbp + 0x420], 0
jne 0x1400294a4
jmp 0x1400294ba
lea rcx, [0x14126c020]
lea r8, [0x14126e6a0]
mov edx, 0x28
call fcn.140051880
jmp 0x1400295f3
lea rax, [0x14126e6b8]
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.140051870
ud2