Function at 0x1000fc25c
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x460
mov rax, qword [0x100151198]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rsi, rcx
mov rdi, r8
mov ebp, edx
mov ebx, 0x206
lea rcx, [rsp + 0x242]
xor r13d, r13d
xor edx, edx
mov r8, rbx
mov r12, r9
mov word [rsp + 0x240], r13w
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x32]
mov r8, rbx
xor edx, edx
mov word [rsp + 0x30], r13w
call sub.msvcrt.dll_memset
mov ebx, 0x80070057
cmp rsi, r13
jne 0x1000fc2f4
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
lea edx, [r13 + 0x11]
jmp 0x1000fc31f
cmp rdi, r13
jne 0x1000fc334
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x12
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
call fcn.100034764
jmp 0x1000fc5f9
mov r14d, 0x104
cmp dword [rdi], r13d
jne 0x1000fc404
lea r8, [0x100027370]
lea rcx, [rsp + 0x240]
mov r9, rsi
mov rdx, r14
call fcn.1000f1884
cmp eax, r13d
mov ebx, eax
jge 0x1000fc38f
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x13
jmp 0x1000fc5be
mov eax, ebp
lea r8, [0x100027410]
lea rdx, [rsp + 0x240]
neg eax
mov r9, rdi
sbb rcx, rcx
neg rcx
add rcx, 0xffffffff80000001
call fcn.1000f43e4
cmp eax, r13d
jne 0x1000fc3c1
cmp dword [rdi], r13d
jne 0x1000fc404
mov ebx, 0x90070a02
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 4
je 0x1000fc5f9
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
mov edx, 0x14
mov r9, rsi
call fcn.100034788
jmp 0x1000fc5f9
cmp r12, r13
je 0x1000fc5d3
mov r8d, r14d
lea rdx, [rsp + 0x30]
cmp ebp, r13d
je 0x1000fc458
lea rcx, [0x1000270d0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r13d
je 0x1000fc431
cmp eax, r14d
jbe 0x1000fc477
call sub.KERNEL32.dll_GetLastError
movzx ebx, ax
or ebx, 0x80070000
cmp eax, r13d
cmovle ebx, eax
cmp ebx, r13d
jl 0x1000fc5f9
mov ebx, 0x80004005
jmp 0x1000fc5f9
lea rcx, [0x100027420]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp eax, r13d
je 0x1000fc5d8
cmp eax, r14d
ja 0x1000fc5d8
lea rdx, [0x100022c50]
lea rcx, [rsp + 0x30]
call fcn.1000fc018
cmp eax, r13d
mov ebx, eax
jge 0x1000fc4ba
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x15
jmp 0x1000fc5be
lea rcx, [rsp + 0x30]
mov rdx, rsi
call fcn.1000fc018
cmp eax, r13d
mov ebx, eax
jge 0x1000fc4f9
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x16
jmp 0x1000fc5be
lea rdx, [0x100027440]
lea rcx, [rsp + 0x30]
call fcn.1000fc018
cmp eax, r13d
mov ebx, eax
jge 0x1000fc53c
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x17
jmp 0x1000fc5be
lea rdx, [0x100027448]
lea rcx, [rsp + 0x30]
call fcn.1000fc018
cmp eax, r13d
mov ebx, eax
jge 0x1000fc57c
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x18
jmp 0x1000fc5be
mov eax, dword [rdi]
lea r9, [rsp + 0x30]
lea r8, [0x100027460]
mov rdx, r14
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.1000f1884
cmp eax, r13d
mov ebx, eax
jge 0x1000fc5d3
mov rcx, qword [0x100152eb8]
lea rax, [0x100152eb8]
cmp rcx, rax
je 0x1000fc5f9
test byte [rcx + 0x1c], 1
je 0x1000fc5f9
mov edx, 0x19
mov rcx, qword [rcx + 0x10]
lea r8, [0x10001dbd8]
mov r9d, ebx
call fcn.100036328
jmp 0x1000fc5f9
mov ebx, r13d
jmp 0x1000fc5f9
call sub.KERNEL32.dll_GetLastError
mov ebx, 0x80004005
movzx ecx, ax
or ecx, 0x80070000
cmp eax, r13d
cmovle ecx, eax
cmp ecx, r13d
cmovge ecx, ebx
mov ebx, ecx
mov eax, ebx
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.10011b980
add rsp, 0x460
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret