Function at 0x401520
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov r14d, dword [0x00403030]
mov rbp, rcx
cmp r14d, 0xffffffff
je 0x4015d0
sub r14d, 1
js 0x401599
mov r13, qword [0x00407108]
mov rdi, qword [sym.imp.ucrtbase.dll_strcmp]
lea r12, [rbp + 1]
xor r15d, r15d
jmp 0x401571
lea r15d, [rsi + 1]
cmp r15d, r14d
jg 0x401599
lea esi, [r14 + r15]
mov rcx, r12
sar esi, 1
movsxd rbx, esi
shl rbx, 4
add rbx, r13
lea rdx, [rbx + 1]
call rdi
test eax, eax
je 0x4015c8
jns 0x401568
lea r14d, [rsi - 1]
cmp r15d, r14d
jle 0x401571
cmp byte [rbp], 0
movzx eax, byte [0x00403034]
js 0x4015c0
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov byte [rbp], al
jmp 0x4015a6
movzx eax, byte [rbx]
jmp 0x4015a6
lea rcx, str.WINEDEBUG
call qword [sym.imp.ucrtbase.dll_getenv]
mov dword [0x00403030], 0
mov rcx, rax
test rax, rax
je 0x401599
call qword [sym.imp.ucrtbase.dll__strdup]
mov qword [rsp + 0x20], rax
test rax, rax
je 0x4017f2
mov qword [rsp + 0x90], rbp
mov r12, qword [rsp + 0x20]
mov edx, 0x2c
mov rcx, r12
xor ebp, ebp
call qword [sym.imp.ucrtbase.dll_strchr]
test rax, rax
je 0x40162c
mov byte [rax], 0
lea rbp, [rax + 1]
lea rdx, [0x0040409a]
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strcspn]
lea r14, [r12 + rax]
mov rbx, rax
movzx esi, byte [r14]
test sil, sil
je 0x4016c8
cmp r14, r12
jbe 0x401740
mov eax, 5
xor r15d, r15d
lea r13, str.fixme
cdqe
cmp rax, rbx
jne 0x401681
mov r8, rbx
mov rdx, r13
mov rcx, r12
call sym.memcmp
test eax, eax
je 0x40187a
add r15, 1
cmp r15, 4
je 0x4016b0
lea rax, str.fixme
mov r13, qword [rax + r15*8]
mov rcx, r13
call qword [sym.imp.ucrtbase.dll_strlen]
cdqe
cmp rax, rbx
je 0x40166b
add r15, 1
cmp r15, 4
jne 0x40168b
test rbp, rbp
je 0x4017df
mov r12, rbp
jmp 0x401610
movzx esi, byte [r12]
cmp sil, 0x2d
je 0x401720
lea ebx, [rsi - 0x2b]
and ebx, 0xfd
je 0x401748
mov r13d, 0xffffffff
xor ebx, ebx
test sil, sil
je 0x4016b0
mov ecx, 4
mov rsi, r12
lea rdi, [0x0040409d]
repe cmpsb byte [rsi], byte [rdi]
seta al
sbb al, 0
test al, al
jne 0x401758
not ebx
and bl, byte [0x00403034]
or r13d, ebx
mov byte [0x00403034], r13b
jmp 0x4016b0
mov ebx, 0xffffffff
xor r13d, r13d
mov r14, r12
movzx esi, byte [r14 + 1]
lea r12, [r14 + 1]
jmp 0x4016e6
mov r12, r14
jmp 0x4016cd
mov r14, r12
mov r13d, 0xffffffff
jmp 0x40172b
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strlen]
cmp rax, 0xe
ja 0x4016b0
mov eax, dword [0x00403030]
mov rcx, qword [0x00407108]
mov dword [rsp + 0x38], eax
sub eax, 1
mov qword [rsp + 0x28], rcx
mov edi, eax
js 0x401949
mov rax, qword [sym.imp.ucrtbase.dll_strcmp]
xor r15d, r15d
mov qword [rsp + 0x30], rbp
mov byte [rsp + 0x3f], bl
mov ebp, r15d
mov ebx, edi
mov rdi, rcx
mov r15, rax
jmp 0x4017b8
lea ebp, [r14 + 1]
cmp ebp, ebx
jg 0x401817
lea r14d, [rbx + rbp]
mov rcx, r12
sar r14d, 1
movsxd rsi, r14d
shl rsi, 4
add rsi, rdi
lea rdx, [rsi + 1]
call r15
test eax, eax
je 0x4017fe
jns 0x4017b0
lea ebx, [r14 - 1]
jmp 0x4017b4
mov rbp, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.ucrtbase.dll_free]
mov r14d, dword [0x00403030]
jmp 0x401544
movzx ebx, byte [rsp + 0x3f]
mov rbp, qword [rsp + 0x30]
not ebx
and bl, byte [rsi]
or r13d, ebx
mov byte [rsi], r13b
jmp 0x4016b0
movsxd r14, ebp
movzx ebx, byte [rsp + 0x3f]
mov rbp, qword [rsp + 0x30]
mov rsi, r14
mov r15, r14
shl rsi, 4
mov eax, dword [0x00407110]
cmp dword [rsp + 0x38], eax
jge 0x4018da
add rsi, qword [rsp + 0x28]
cmp r15d, dword [rsp + 0x38]
jl 0x4018b0
lea rcx, [rsi + 1]
mov rdx, r12
not ebx
call qword [sym.imp.ucrtbase.dll_strcpy]
mov r15d, dword [rsp + 0x38]
and bl, byte [0x00403034]
or r13d, ebx
add r15d, 1
mov byte [rsi], r13b
mov dword [0x00403030], r15d
jmp 0x4016b0
mov r13d, 1
mov ecx, r15d
shl r13d, cl
mov ebx, r13d
cmp sil, 0x2b
je 0x40193f
sub esi, 0x2b
and esi, 0xfd
mov r13d, esi
je 0x40172b
mov r12, r14
xor r13d, r13d
jmp 0x4016eb
mov r8d, dword [rsp + 0x38]
lea rcx, [r14 + 1]
mov rdx, rsi
shl rcx, 4
add rcx, qword [rsp + 0x28]
sub r8d, r15d
movsxd r8, r8d
shl r8, 4
call qword [sym.imp.ucrtbase.dll_memmove]
jmp 0x40184a
add eax, eax
mov edx, 0x10
cmp eax, 0x10
cmovl eax, edx
mov dword [0x00407110], eax
cdqe
shl rax, 4
mov r8, rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
cmp qword [rsp + 0x28], 0
mov rcx, qword [rax + 0x30]
je 0x401956
mov r9, r8
xor edx, edx
mov r8, qword [rsp + 0x28]
call qword [sym.imp.kernel32.dll_HeapReAlloc]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [0x00407108], rax
mov eax, dword [0x00403030]
mov dword [rsp + 0x38], eax
jmp 0x40183e
mov r12, r14
xor ebx, ebx
jmp 0x401728
xor esi, esi
xor r14d, r14d
xor r15d, r15d
jmp 0x40182e
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x28], rax
jmp 0x401924