Function at 0x1400028f0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x140045020]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
mov r8d, 0x104
lea rdx, [rbp + 0xc0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
lea rax, [rbp + 0xc0]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], r12w
jne 0x140002970
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x70]
call fcn.14000b210
nop
mov r9d, 0x104
lea r8, [rbp + 0xc0]
mov edx, 0x69
mov rcx, qword [0x1400479c0]
call qword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x140002e05
mov r8d, 0x103
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
lea rax, [rbp + 0x2d0]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x1400029f0
lea rdx, [rbp + 0x2d0]
lea rcx, [rsp + 0x50]
call fcn.14000b210
nop
lea rdx, [rsp + 0x70]
mov r9, qword [rsp + 0x70]
mov r10, qword [rbp - 0x78]
cmp r10, 8
cmovae rdx, r9
mov r8, qword [rbp - 0x80]
test r8, r8
je 0x140002a5b
lea rcx, [r8 - 1]
mov rax, rsi
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rdx + rax*2]
cmp word [rcx], 0x5c
je 0x140002a53
cmp rcx, rdx
je 0x140002a5b
sub rcx, 2
cmp word [rcx], 0x5c
jne 0x140002a44
sub rcx, rdx
sar rcx, 1
jmp 0x140002a5e
mov rcx, rsi
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r12w
cmp r8, rcx
jb 0x140002e7d
sub r8, rcx
mov rbx, rsi
cmp r8, rbx
cmovb rbx, r8
lea rax, [rsp + 0x70]
cmp r10, 8
cmovae rax, r9
lea r15, [rax + rcx*2]
cmp rbx, 7
ja 0x140002acc
mov qword [rsp + 0x40], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.140011020
mov word [rsp + rbx + 0x30], r12w
mov rdi, qword [rsp + 0x30]
jmp 0x140002b89
movabs r14, 0x7ffffffffffffffe
cmp rbx, r14
ja 0x140002e83
mov rax, rbx
or rax, 7
cmp rax, r14
jbe 0x140002af4
mov rcx, 0xfffffffffffffffe
jmp 0x140002b26
mov r14, rax
mov ecx, 0xa
cmp rax, rcx
cmovb r14, rcx
lea rcx, [r14 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140002e9b
add rcx, rcx
cmp rcx, 0x1000
jb 0x140002b52
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002e9b
mov rcx, rax
call fcn.14000ee58
test rax, rax
je 0x140002e8f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002b64
test rcx, rcx
je 0x140002b61
call fcn.14000ee58
mov rdi, rax
jmp 0x140002b64
mov rdi, r12
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], r14
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140011020
mov word [rbx + rdi], r12w
mov qword [rsp + 0x30], rdi
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x140002bcf
lea rcx, [rdx + 4]
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x30]
cmp r8, 8
cmovae rax, rdi
movabs r8, 0x6b0064006a002e
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r12w
lea rax, [rsp + 0x30]
jmp 0x140002bee
mov qword [rsp + 0x20], 4
lea r9, str..jdk
mov edx, 4
lea rcx, [rsp + 0x30]
call fcn.14000c920
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea r9, [rbp - 0x70]
movq r14, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 8
cmovae r9, r14
mov rcx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x68]
mov rax, r8
sub rax, rcx
movq rdx, xmm1
cmp rdx, rax
ja 0x140002c75
lea rdi, [rdx + rcx]
mov qword [rsp + 0x60], rdi
lea rbx, [rsp + 0x50]
cmp r8, 8
cmovae rbx, qword [rsp + 0x50]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.140011020
mov word [rbx + rdi*2], r12w
jmp 0x140002c8c
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0x50]
call fcn.14000c920
mov r15, qword [rbp - 0x58]
mov r14, qword [rbp - 0x70]
cmp r15, 8
jb 0x140002cc8
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140002cbf
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e89
mov rcx, r14
call fcn.14000ee50
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140002d0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e8f
call fcn.14000ee50
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
lea rdx, [0x14003e2bc]
call fcn.14001550c
mov rbx, rax
test rax, rax
je 0x140002d4d
mov r8, rax
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.1400179c4
test rax, rax
jne 0x140002d97
mov rcx, rbx
call fcn.140016284
xor bl, bl
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140002e07
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e95
call fcn.14000ee50
jmp 0x140002e07
lea rax, [rbp - 0x50]
nop dword [rax + rax]
lea rsi, [rsi + 1]
cmp byte [rax + rsi], 0
jne 0x140002da0
lea rax, [rbp + rsi - 0x51]
lea rcx, [rbp - 0x50]
cmp rax, rcx
jb 0x140002dec
cmp byte [rax], 0xa
jne 0x140002dd0
mov byte [rax], 0
dec rax
lea rcx, [rbp - 0x50]
cmp rax, rcx
jb 0x140002dec
nop dword [rax]
movzx ecx, byte [rax]
cmp cl, 0x20
je 0x140002ddd
cmp cl, 9
jne 0x140002dec
mov byte [rax], 0
dec rax
lea rcx, [rbp - 0x50]
cmp rax, rcx
jae 0x140002dd0
mov rcx, rbx
call fcn.140016284
lea rcx, [rbp - 0x50]
call fcn.1400026f0
movzx ebx, al
jmp 0x140002d4f
xor bl, bl
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140002e44
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e77
call fcn.14000ee50
movzx eax, bl
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.14000ee30
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140017d80
nop
call fcn.14000b9f0
nop
call fcn.140001220
nop
call fcn.140017d80
nop
call fcn.140017d80
nop
call fcn.140017d80
nop
call fcn.140001180
int3