Function at 0x14000479b
Capabilities:
Query environment variable

Disassembly:
movabs rax, 0xb9791fc1f95d7299
push rbp
mov rbp, rsp
push r15
push r14
push r13
movabs r13, 0xf62c6938a341bd1a
push r12
movabs r12, 0xd40d31a5902807c5
push rdi
push rsi
mov rsi, rcx
push rbx
and rsp, 0xfffffffffffffff0
sub rsp, 0x580
mov qword [rsp + 0x1a0], rax
lea rbx, [rsp + 0x390]
movabs rax, 0xf62c6938a341bd6a
mov qword [rsp + 0x50], r12
mov rcx, rbx
mov qword [rsp + 0x58], r13
vmovdqa xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x1a0]
vpxor xmm0, xmm1, xmmword [rsp + 0x1a0]
mov rdx, rax
mov qword [rsp + 0x48], rax
vmovdqa xmmword [rsp + 0x1a0], xmm0
call fcn.14000181c
mov qword [rsp + 0x168], r13
movabs rax, 0xd40d31a5c0654291
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r13
vmovdqa xmm2, xmmword [rsp + 0x50]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
vpxor xmm0, xmm2, xmmword [rsp + 0x160]
mov rcx, rax
mov qword [rsp + 0x50], rax
vmovdqa xmmword [rsp + 0x160], xmm0
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
xor edx, edx
mov rcx, rbx
mov r8, rax
call fcn.1400ac180
mov rdx, rax
lea rax, [rsp + 0xc0]
mov rcx, rax
mov qword [rsp + 0x40], rax
call fcn.1400ad2c0
mov rcx, rbx
call fcn.1400aa4a0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov r8d, 0x18
call fcn.140092480
lea rax, [rsp + 0xe0]
xor edx, edx
mov byte [rsi + 0x10], 0
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xe0], rax
xor eax, eax
cmp dword [rsp + 0x2a8], 0
mov qword [rsp + 0xe8], rax
lea rax, [rsi + 0x10]
mov byte [rsp + 0xf0], 0
mov qword [rsi], rax
mov qword [rsi + 8], rdx
je 0x140004ab4
mov qword [rsp + 0x98], r13
movabs rax, 0xd40d31a5f54566ab
lea rdi, [rsp + 0x100]
lea r14, [rsp + 0x3d0]
mov qword [rsp + 0x30], r12
mov rcx, rdi
lea r15, [rsp + 0x410]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x38], r13
vmovdqa xmm3, xmmword [rsp + 0x30]
vpxor xmm0, xmm3, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call fcn.1400025ea
mov r8, rdi
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.140001880
mov qword [rsp + 0x30], r12
xor edx, edx
xor ecx, ecx
movabs rax, 0xd40d31a5904c70a6
mov qword [rsp + 0x38], r13
vmovdqa xmm4, xmmword [rsp + 0x30]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xa0], rax
vpxor xmm0, xmm4, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea rdx, [rsp + 0xa0]
lea r8, [rsp + 0x80]
mov rcx, r14
mov qword [rsp + 0x80], rax
call fcn.140001860
mov qword [rsp + 0xb8], r13
movabs rax, 0xd40d31a5f74775b5
mov qword [rsp + 0x30], r12
lea r12, [rsp + 0x120]
mov qword [rsp + 0x38], r13
vmovdqa xmm5, xmmword [rsp + 0x30]
mov rcx, r12
lea r13, [rsp + 0x140]
mov qword [rsp + 0xb0], rax
vpxor xmm0, xmm5, xmmword [rsp + 0xb0]
vmovdqa xmmword [rsp + 0xb0], xmm0
call fcn.140002ae1
mov r8, r12
lea rdx, [rsp + 0xb0]
mov rcx, r15
call fcn.140001880
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x68], 3
call fcn.140004508
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call fcn.140003651
mov rcx, qword [rsp + 0x28]
mov rdx, r13
call fcn.140001748
mov rcx, r13
call fcn.1400aa4a0
mov rcx, qword [rsp + 0x50]
call fcn.140083c00
mov rcx, r15
call fcn.1400a6010
mov rcx, r14
call fcn.1400a6010
mov rcx, rbx
call fcn.1400a6010
jmp 0x140004cb3
mov rcx, qword [rsp + 0x48]
mov rdx, rsi
lea rdi, [rsp + 0x100]
call fcn.1400ca880
mov qword [rsp + 0x88], r13
mov rcx, rdi
movabs rax, 0xd40d31a5f54566ab
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
vmovdqa xmm1, xmmword [rsp + 0x30]
mov qword [rsp + 0x80], rax
vpxor xmm0, xmm1, xmmword [rsp + 0x80]
vmovdqa xmmword [rsp + 0x80], xmm0
call fcn.1400025ea
mov r8, rdi
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.140001880
mov qword [rsp + 0x30], r12
xor edx, edx
xor ecx, ecx
movabs rax, 0xd40d31a5904c70a6
mov qword [rsp + 0x38], r13
vmovdqa xmm2, xmmword [rsp + 0x30]
mov qword [rsp + 0x98], r13
mov qword [rsp + 0x90], rax
vpxor xmm0, xmm2, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x3d0]
mov qword [rsp + 0x78], rax
call fcn.140001860
mov qword [rsp + 0xa8], r13
movabs rax, 0xd40d31a5f44172b0
lea rdx, [rsp + 0xa0]
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x410]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x38], r13
vmovdqa xmm3, xmmword [rsp + 0x30]
vpxor xmm0, xmm3, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call fcn.14000181c
mov rdx, rsi
lea rcx, [rsp + 0x430]
call fcn.1400ad580
mov qword [rsp + 0xb8], r13
movabs rax, 0xd40d31a5f74775b5
mov qword [rsp + 0x30], r12
lea r12, [rsp + 0x120]
mov qword [rsp + 0x38], r13
vmovdqa xmm4, xmmword [rsp + 0x30]
mov rcx, r12
lea r13, [rsp + 0x140]
mov qword [rsp + 0xb0], rax
vpxor xmm0, xmm4, xmmword [rsp + 0xb0]
vmovdqa xmmword [rsp + 0xb0], xmm0
call fcn.140002ae1
mov r8, r12
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x450]
call fcn.140001880
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x68], 4
call fcn.140004508
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call fcn.140003651
mov rcx, qword [rsp + 0x28]
mov rdx, r13
call fcn.140001748
mov rcx, r13
lea r13, [rsp + 0x490]
call fcn.1400aa4a0
mov rcx, qword [rsp + 0x50]
call fcn.140083c00
sub r13, 0x40
mov rcx, r13
call fcn.1400a6010
cmp r13, rbx
jne 0x140004ca2
mov rcx, r12
lea r12, [rsp + 0xe0]
call fcn.1400aa4a0
mov rcx, rdi
call fcn.1400aa4a0
mov rcx, qword [rsp + 0x48]
call fcn.140092010
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
movabs rax, 0xb17942ccf74d75ea
mov qword [rsp + 0x160], rax
movabs rax, 0xf62c6938a341bd68
mov qword [rsp + 0x168], rax
movabs rax, 0xd40d31a5902807c5
mov qword [rsp + 0x30], rax
movabs rax, 0xf62c6938a341bd1a
mov qword [rsp + 0x38], rax
vmovdqa xmm5, xmmword [rsp + 0x30]
vpxor xmm0, xmm5, xmmword [rsp + 0x160]
vmovdqa xmmword [rsp + 0x160], xmm0
call fcn.14000181c
mov r9, rsi
mov r8, r12
mov rdx, rbx
lea rcx, [0x140103100]
call fcn.140001f8b
mov rcx, rbx
mov edi, eax
call fcn.1400aa4a0
cmp edi, 0xe8
jne 0x140004d96
mov rdx, qword [rsp + 0x40]
mov r8d, 0x10
mov rcx, rbx
call fcn.140092480
lea rcx, [rsp + 0x3a0]
mov rdx, rsi
call fcn.1400c99b0
mov rcx, rbx
call fcn.140092010
mov rcx, rbx
call fcn.140092df0
mov rcx, r12
call fcn.1400aa4a0
mov rcx, qword [rsp + 0x48]
call fcn.140092df0
mov rcx, qword [rsp + 0x40]
call fcn.1400aa4a0
lea rsp, [rbp - 0x38]
mov rax, rsi
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret