Function at 0x1400c80da
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x4c565c1a
pushf
not eax
add eax, 0xd1a32414
xor eax, 0xcc349873
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd215c8ac
xor eax, 0xe0d5f7a2
rol eax, 0x10
popf
pushf
not eax
add eax, 0xa178ed1c
xor eax, 0xa59a00f7
rol eax, 0x84
popf
cmp eax, 4
jne 0x1400c812a
popf
pop rax
jmp 0x1400c83e1
cmp eax, 0
jne 0x1400c8139
popf
pop rax
jmp 0x1400c81ed
cmp eax, 3
jne 0x1400c8148
popf
pop rax
jmp 0x1400c8384
cmp eax, 1
jne 0x1400c8157
popf
pop rax
jmp 0x1400c827d
cmp eax, 0xd
jne 0x1400c8166
popf
pop rax
jmp 0x1400c882a
cmp eax, 7
jne 0x1400c8175
popf
pop rax
jmp 0x1400c860a
cmp eax, 6
jne 0x1400c8184
popf
pop rax
jmp 0x1400c8525
cmp eax, 0xb
jne 0x1400c8193
popf
pop rax
jmp 0x1400c8787
cmp eax, 0xc
jne 0x1400c81a2
popf
pop rax
jmp 0x1400c87c7
cmp eax, 8
jne 0x1400c81b1
popf
pop rax
jmp 0x1400c864c
cmp eax, 5
jne 0x1400c81c0
popf
pop rax
jmp 0x1400c8477
cmp eax, 2
jne 0x1400c81cf
popf
pop rax
jmp 0x1400c82dd
cmp eax, 9
jne 0x1400c81de
popf
pop rax
jmp 0x1400c86fb
cmp eax, 0xa
jne 0x1400c81ed
popf
pop rax
jmp 0x1400c8760
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1400c8207
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x1400c824a
push rax
pushf
mov eax, 0x4622dac8
pushf
not eax
add eax, 0xc0306168
xor eax, 0xedcf12c2
rol eax, 0x37
popf
pushf
not eax
add eax, 0xc2a17956
xor eax, 0x9395980b
rol eax, 0x2a
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0xcf4c050f
pushf
not eax
add eax, 0x9d0029cf
xor eax, 0xfe8180b2
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xa209038f
xor eax, 0x9f6f68bc
rol eax, 0x67
popf
jmp 0x1400c811b
xor eax, eax
jmp 0x1400c8837
mov rbp, rbx
cmp word [rax], si
je 0x1400c832b
push rax
pushf
mov eax, 0xfe1eeefa
pushf
not eax
add eax, 0xba11931f
xor eax, 0x928b6ed6
rol eax, 0x71
popf
pushf
not eax
add eax, 0xe9156ed0
xor eax, 0xe9b34a0e
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x98927f7f
xor eax, 0xf4ed0a79
rol eax, 0xc0
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0x3a3c501a
pushf
not eax
add eax, 0xd3afa43b
xor eax, 0xb6d264c7
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa16edc30
xor eax, 0xae2ec226
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xdc35d73a
xor eax, 0xa62fd037
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x8df9b3b1
xor eax, 0x807c86b0
rol eax, 0x6b
popf
jmp 0x1400c811b
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x829ac672
pushf
not eax
add eax, 0xaff56915
xor eax, 0x97de7521
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x9bcb4018
xor eax, 0xdab1357b
rol eax, 0xec
popf
pushf
not eax
add eax, 0xa59d94ae
xor eax, 0xf3ae3710
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc28ae187
xor eax, 0xfc52581d
rol eax, 0xee
popf
jmp 0x1400c811b
inc rax
cmp word [rbp + rax*2], si
jne 0x1400c841e
push rax
pushf
mov eax, 0x696efcae
pushf
not eax
add eax, 0xa6ca90a4
xor eax, 0xecbc0f22
rol eax, 0x96
popf
pushf
not eax
add eax, 0xe4500f00
xor eax, 0xee5b9519
rol eax, 0xe2
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0x5eabb71
pushf
not eax
add eax, 0xc1682325
xor eax, 0xcf1e77f9
rol eax, 0x97
popf
pushf
not eax
add eax, 0xac21f48d
xor eax, 0x8becf446
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x8a0b1c99
xor eax, 0xc70d29eb
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf95e4c57
xor eax, 0xe91f04de
rol eax, 0x99
popf
jmp 0x1400c811b
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x1400c84cc
push rax
pushf
mov eax, 0xf291c236
pushf
not eax
add eax, 0xff8f93f1
xor eax, 0x9346db95
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x8b209860
xor eax, 0xa4009fdc
rol eax, 0x45
popf
pushf
not eax
add eax, 0xf9d411eb
xor eax, 0xb8c92615
rol eax, 0x81
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0x87028dee
pushf
not eax
add eax, 0x80dbb637
xor eax, 0x925a790b
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x89ffbdf6
xor eax, 0xcd5b3913
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xd9d85a73
xor eax, 0xfc521c06
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc065d8c3
xor eax, 0xadb85b30
rol eax, 0xb7
popf
jmp 0x1400c811b
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1400d8349
movsxd r14, eax
test eax, eax
jne 0x1400c85b1
push rax
pushf
mov eax, 0x85603bde
pushf
not eax
add eax, 0xb650f483
xor eax, 0x9d216d84
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xccff04ef
xor eax, 0xbfa292ea
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xabb4bcff
xor eax, 0xad694c58
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb98eff0e
xor eax, 0xa2d1c32c
rol eax, 0x2d
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0xbb55eb9a
pushf
not eax
add eax, 0x9e748a01
xor eax, 0xd8e95c27
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xa8dd844e
xor eax, 0xf82b7c0b
rol eax, 0x75
popf
pushf
not eax
add eax, 0xfd500298
xor eax, 0xcd67aa21
rol eax, 0x52
popf
pushf
not eax
add eax, 0xf9aee2c0
xor eax, 0xafd05af4
rol eax, 0x66
popf
jmp 0x1400c811b
mov rcx, rbx
jmp 0x1400c860e
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1400c827d
mov rcx, r14
call fcn.1400b2bbc
mov rdi, rax
test rax, rax
jne 0x1400c86b5
push rax
pushf
mov eax, 0x4f8ec0
pushf
not eax
add eax, 0xe47f8324
xor eax, 0x9e1b3e20
rol eax, 0xb
popf
pushf
not eax
add eax, 0xa69cc701
xor eax, 0xb1c4d63e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xd1ee0638
xor eax, 0xa1ff6623
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xd734b6a2
xor eax, 0xeee873c5
rol eax, 0xf3
popf
jmp 0x1400c811b
push rax
pushf
mov eax, 0x50019149
pushf
not eax
add eax, 0xf19bc9a9
xor eax, 0xabeaa854
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xad5e548f
xor eax, 0xeb16211a
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xc6889d3d
xor eax, 0xce885ce5
rol eax, 0x5f
popf
jmp 0x1400c811b
xor ecx, ecx
call fcn.1400d5e22
jmp 0x1400c860a
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1400d8349
test eax, eax
jne 0x1400c87c7
mov rcx, rdi
call fcn.1400d5e22
jmp 0x1400c882a
xor ecx, ecx
call fcn.1400d5e22
mov rsi, rdi
push rax
pushf
mov eax, 0x8f0d3a19
pushf
not eax
add eax, 0xc306bd8d
xor eax, 0xd8993b5d
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x8788f0e6
xor eax, 0xc736abec
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xb6c35852
xor eax, 0xa93e4c3f
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa23578c3
xor eax, 0xcc221e21
rol eax, 0xe0
popf
jmp 0x1400c811b
mov rcx, rbx
jmp 0x1400c882e
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret