Function at 0x140001430
Capabilities:
Get system information on windows
Query environment variable
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
movaps xmmword [rsp + 0x170], xmm6
mov r12, rdx
mov r15, qword [0x1401054a8]
mov rax, qword [r15]
xor rax, rsp
mov qword [rsp + 0x168], rax
mov dword [rsp + 0x44], ecx
lea rcx, [rsp + 0x54]
mov r8d, 0x110
xor edx, edx
call sub.ntdll.dll_memset
movabs rax, 0x60000011c
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], 2
mov rdi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rdi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rdi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rdi
lea rcx, [rsp + 0x48]
mov edx, 0x23
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
jne 0x1400014f3
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp word [rsp + 0x48], 0
jne 0x1400014f3
lea rcx, [0x140105098]
call fcn.140001750
lea rcx, str.PATH
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x140001596
mov ebx, eax
mov ecx, eax
add rcx, rcx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
mov ebp, ebx
dec ebp
lea rcx, str.PATH
mov rdx, rax
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp ebp, eax
jne 0x14000158e
mov rcx, rdi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov r14d, eax
lea eax, [r14 - 1]
cmp eax, 0x7ffe
ja 0x14000158e
mov ecx, r14d
add rcx, rcx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rbx, rax
mov rcx, rdi
mov rdx, rax
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x140001586
lea rcx, str.PATH
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov rcx, rbx
call sub.mozglue.dll_free
mov rcx, rdi
call sub.mozglue.dll_free
lea rcx, [0x1401050ae]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea r9, str.Tor_Project
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x44]
mov r8, r12
call fcn.140006020
cmp byte [rsp + 0x4c], 0
je 0x1400015cc
mov ebx, dword [rsp + 0x48]
jmp 0x140001715
mov eax, dword [rsp + 0x44]
lea ecx, [rax + 1]
shl rcx, 3
cmp eax, 0xffffffff
mov rbx, 0xffffffffffffffff
cmovl rcx, rbx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
mov eax, dword [rsp + 0x44]
test eax, eax
jle 0x14000167a
xor ebp, ebp
xorps xmm6, xmm6
mov r13, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
nop word cs:[rax + rax]
mov rbx, qword [r12 + rbp*8]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov r14, rax
lea rsi, [rax + rax*2]
lea rcx, [rax + rax*2]
add rcx, 2
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
inc esi
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rbx
mov r9d, r14d
call r13
cdqe
mov byte [r15 + rax], 0
mov qword [rdi + rbp*8], r15
inc rbp
movsxd rax, dword [rsp + 0x44]
cmp rbp, rax
jl 0x140001610
mov r15, qword [0x1401054a8]
mov rbx, 0xffffffffffffffff
cdqe
mov qword [rdi + rax*8], 0
lea ecx, [rax + 1]
shl rcx, 3
cmp eax, 0xffffffff
cmovl rcx, rbx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rsi, rax
mov ebx, dword [rsp + 0x44]
test ebx, ebx
jle 0x1400016b6
lea r8, [rbx*8]
mov rcx, rsi
mov rdx, rdi
call sub.ntdll.dll_memcpy
lea rcx, [0x140105128]
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll___p__environ]
mov r8, qword [rax]
mov ecx, ebx
mov rdx, rdi
call fcn.1400018c0
mov ebx, eax
mov rcx, rdi
call sub.mozglue.dll_free
movsxd rdi, dword [rsp + 0x44]
test rdi, rdi
je 0x14000170d
dec rdi
jmp 0x1400016fd
mov rax, rdi
dec rax
test edi, edi
mov rdi, rax
je 0x14000170d
mov rcx, qword [rsi + rdi*8]
test rcx, rcx
je 0x1400016f0
call sub.mozglue.dll_free
jmp 0x1400016f0
mov rcx, rsi
call sub.mozglue.dll_free
mov rax, qword [rsp + 0x168]
xor rax, rsp
mov rcx, qword [r15]
cmp rcx, rax
jne 0x140001746
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x170]
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400d58e0
int3