Function at 0x1400492b0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x1402eec28]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
lea rcx, str.OBS_PLUGINS_PATH
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
lea rcx, str.OBS_PLUGINS_DATA_PATH
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor ebx, ebx
lea rdi, [rbx - 1]
test rsi, rsi
je 0x14004943e
test rax, rax
je 0x14004943e
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140049337
lea rcx, [rsp + 0x40]
cmp rbx, 0xf
ja 0x140049362
mov qword [rsp + 0x50], rbx
mov r8, rbx
mov rdx, rax
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x40], 0
jmp 0x140049375
mov qword [rsp + 0x20], rbx
mov r9, rax
xor r8d, r8d
mov rdx, rbx
call fcn.1400020a0
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x1400493c1
lea rax, [rcx + 9]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x40]
add rbx, rcx
mov r8d, 9
lea rdx, str.__module_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
jmp 0x1400493e2
mov qword [rsp + 0x20], 9
lea r9, str.__module_
xor r8d, r8d
lea edx, [r8 + 9]
lea rcx, [rsp + 0x40]
call fcn.1400020a0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov rcx, rsi
call sub.obs.dll_obs_add_module_path
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14004943c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049437
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049437
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d5ad0
xor ebx, ebx
lea r8, str.obs_studio_plugins__module_
mov edx, 0x200
lea rcx, [rbp - 0x60]
call fcn.14002f580
test eax, eax
jle 0x1400497a5
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rax, [rbp - 0x60]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140049473
mov r8, rdi
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.140004ee0
nop
movabs rcx, 0x7fffffffffffffff
mov r14, rcx
mov r12, qword [rbp - 0x70]
sub r14, r12
cmp r14, 5
jb 0x1400497e7
lea rdx, [rbp - 0x80]
mov rsi, qword [rbp - 0x80]
mov r13, qword [rbp - 0x68]
cmp r13, 0x10
cmovae rdx, rsi
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
lea rax, [r12 + 5]
mov ebx, 0xf
lea rdi, [rsp + 0x60]
movabs r15, 0x8000000000000027
lea r8d, [rbx + 7]
cmp rax, rbx
jbe 0x140049573
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x140049530
mov rbx, rcx
mov rax, r15
mov rcx, rax
call fcn.1401d5a94
test rax, rax
je 0x14004975e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
lea rax, [r12 + 5]
mov rdx, qword [rsp + 0x30]
jmp 0x14004956e
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140049553
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400497db
jmp 0x140049507
test rcx, rcx
je 0x14004956c
call fcn.1401d5a94
mov rdi, rax
lea rax, [r12 + 5]
mov rdx, qword [rsp + 0x30]
jmp 0x14004956e
xor edi, edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov r8, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str._data]
mov dword [r12 + rdi], eax
movzx eax, byte [0x1402072d8]
mov byte [r12 + rdi + 4], al
mov byte [rdi + r12 + 5], 0
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
cmp r14, 0xa
jb 0x1400497d5
lea rax, [rbp - 0x80]
cmp r13, 0x10
cmovae rax, rsi
mov qword [rsp + 0x30], rax
xor edx, edx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rdx
lea r14, [r12 + 0xa]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp r14, rbx
jbe 0x140049680
mov rbx, r14
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14004963b
mov rbx, rcx
mov rcx, r15
call fcn.1401d5a94
test rax, rax
je 0x140049707
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x30]
jmp 0x14004967b
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140049664
lea r15, [rcx + 0x27]
cmp r15, rcx
jbe 0x1400497e1
jmp 0x140049617
test rcx, rcx
je 0x140049678
call fcn.1401d5a94
mov rdi, rax
mov rax, qword [rsp + 0x30]
jmp 0x14004967b
mov rdi, rdx
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
mov r8, r12
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._bin_64bit]
movsd qword [r12 + rdi], xmm0
movzx eax, word [0x1402072e8]
mov word [r12 + rdi + 8], ax
mov byte [rdi + r14], 0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
call sub.obs.dll_obs_add_module_path
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140049713
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004970e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004970e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d5ad0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14004976b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049765
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049765
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d5ad0
nop
cmp r13, 0x10
jb 0x1400497a5
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14004979d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004979d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1401d5ad0
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.1401d5bf0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140004d50
nop
call fcn.140004cb0
nop
call fcn.140004cb0
nop
call fcn.140004d50
int3