Function at 0x5ffa50
Capabilities:
Query environment variable

Disassembly:
sub esp, 0x838
mov eax, dword [0x703580]
xor eax, esp
mov dword [esp + 0x834], eax
push ebp
mov ebp, dword [esp + 0x850]
push esi
push edi
push 0x400
lea eax, [esp + 0x444]
push eax
push str.SystemRoot
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor esi, esi
test eax, eax
jne 0x5ffb47
mov eax, dword [0x726294]
cmp eax, esi
je 0x5ffb40
cmp dword [eax + 0x5c], esi
je 0x5ffab8
mov ecx, dword [eax + 0x5c]
mov ecx, dword [ecx]
cmp ecx, 0xffffffff
je 0x5ffab8
cmp ecx, 0x12c
jl 0x5ffb40
cmp dword [eax + 0x58], esi
je 0x5ffacf
mov edx, dword [eax + 0x58]
mov ecx, dword [edx]
cmp ecx, 0xffffffff
je 0x5ffacf
cmp ecx, 0x12c
jg 0x5ffb40
push esi
push esi
push 0x12c
push eax
call fcn.00613390
add esp, 0x10
test eax, eax
je 0x5ffb40
lea eax, [esp + 0xc]
push str.SystemRoot
mov dword [esp + 0x10], str.lib_src_tbus_tbus_mmap_for_win32.c
mov dword [esp + 0x14], 0xc9
mov dword [esp + 0x18], str.tbus_generate_path
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 0x12c
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [0x726294]
push eax
push str.GetEnvironmentVariable_failed___d__by_name__s_n
lea ecx, [esp + 0x28]
push ecx
push edx
call fcn.006139e0
add esp, 0x14
mov eax, 0x695a8c
jmp 0x5ffb4e
lea eax, [esp + 0x440]
push eax
push 0x674764
push 0xffffffffffffffff
lea eax, [esp + 0x4c]
push 0x400
push eax
call fcn.0046ad85
mov edi, eax
add esp, 0x14
cmp edi, 0x3ff
ja 0x5ffcb5
push ebx
mov ebx, dword [esp + 0x860]
cmp dword [esp + 0x858], esi
je 0x5ffba9
mov ecx, dword [esp + 0x84c]
push ecx
push 0x5c
lea edx, [esp + 0x4c]
push edx
push str._s_ctbus__d
push 0xffffffffffffffff
push ebx
push ebp
call fcn.0046ad85
add esp, 0x1c
jmp 0x5ffbd9
mov eax, dword [esp + 0x854]
mov ecx, dword [esp + 0x850]
mov edx, dword [esp + 0x84c]
push eax
push ecx
push edx
push 0x5c
lea eax, [esp + 0x54]
push eax
push str._s_ctbus__d__u__u
push 0xffffffffffffffff
push ebx
push ebp
call fcn.0046ad85
add esp, 0x24
mov edi, eax
cmp edi, esi
jl 0x5ffc0b
cmp edi, ebx
jge 0x5ffc0b
lea ecx, [esp + 0x44]
push ecx
call fcn.005ea060
add esp, 4
mov eax, edi
pop ebx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x834]
xor ecx, esp
call fcn.00469ae8
add esp, 0x838
ret
mov eax, dword [0x726294]
cmp eax, esi
je 0x5ffcad
cmp dword [eax + 0x5c], esi
je 0x5ffc2f
mov edx, dword [eax + 0x5c]
mov ecx, dword [edx]
cmp ecx, 0xffffffff
je 0x5ffc2f
cmp ecx, 0x12c
jl 0x5ffcad
cmp dword [eax + 0x58], esi
je 0x5ffc46
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx]
cmp ecx, 0xffffffff
je 0x5ffc46
cmp ecx, 0x12c
jg 0x5ffcad
push esi
push esi
push 0x12c
push eax
call fcn.00613390
add esp, 0x10
test eax, eax
je 0x5ffcad
mov ecx, dword [0x726294]
push ebx
push edi
push str.failed_to_write_mmap_filepath___iwrite__d__sizeofBuff:_d
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x20]
push ecx
mov dword [esp + 0x24], str.lib_src_tbus_tbus_mmap_for_win32.c
mov dword [esp + 0x28], 0xde
mov dword [esp + 0x2c], str.tbus_generate_path
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], 0x12c
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], edx
call fcn.006139e0
add esp, 0x14
or eax, 0xffffffff
jmp 0x5ffbf2
mov eax, dword [0x726294]
cmp eax, esi
je 0x5ffd5f
cmp dword [eax + 0x5c], esi
je 0x5ffcdd
mov edx, dword [eax + 0x5c]
mov ecx, dword [edx]
cmp ecx, 0xffffffff
je 0x5ffcdd
cmp ecx, 0x12c
jl 0x5ffd5f
cmp dword [eax + 0x58], esi
je 0x5ffcf4
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx]
cmp ecx, 0xffffffff
je 0x5ffcf4
cmp ecx, 0x12c
jg 0x5ffd5f
push esi
push esi
push 0x12c
push eax
call fcn.00613390
add esp, 0x10
test eax, eax
je 0x5ffd5f
mov ecx, dword [0x726294]
push 0x400
push edi
push str.failed_to_write_mmap_filepath___iwrite__d__sizeofBuff:_d
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x1c]
push ecx
mov dword [esp + 0x20], str.lib_src_tbus_tbus_mmap_for_win32.c
mov dword [esp + 0x24], 0xd3
mov dword [esp + 0x28], str.tbus_generate_path
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], 0x12c
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], edx
call fcn.006139e0
add esp, 0x14
mov ecx, dword [esp + 0x840]
pop edi
pop esi
pop ebp
xor ecx, esp
or eax, 0xffffffff
call fcn.00469ae8
add esp, 0x838
ret