Function at 0x1400049f8
Capabilities:
Query environment variable

Disassembly:
jmp 0x1403742d0
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
mov rax, qword [0x14056a550]
xor rax, rsp
mov qword [rsp + 0x130], rax
lea rcx, str.F_UFMTENDIAN
lea rsi, [rsp + 0x20]
mov rdx, rsi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x140374355
mov dword [0x1406eff54], 0
mov dword [0x1406eff58], 0
mov dword [0x1406eff5c], 0
mov byte [0x1406eff60], 1
cmp eax, 0x104
ja 0x14037437a
cmp byte [rsp + 0x20], 0
je 0x14037437a
cmp dword [rsp + 0x20], 0x676962
jne 0x140374397
mov dword [0x1406eff54], 1
jmp 0x14037437a
mov dword [0x1406eff54], 0
mov dword [0x1406eff58], 0
mov dword [0x1406eff5c], 0
mov byte [0x1406eff60], 1
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140003706
nop
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
ret
mov eax, 0x7474696c
xor eax, dword [rsp + 0x20]
mov ecx, 0x656c74
xor ecx, dword [rsp + 0x23]
or ecx, eax
je 0x1403743fa
mov rcx, rsi
mov edx, 0x3b
call fcn.140001415
test rax, rax
je 0x140374409
mov rdi, rax
lea rdx, str.big_
lea rsi, [rsp + 0x20]
mov rcx, rsi
call fcn.140006203
cmp rsi, rax
je 0x14037440d
lea rdx, str.little_
mov rcx, rsi
call fcn.140006203
cmp rsi, rax
jne 0x1403745aa
mov ebx, 0xffffffff
jmp 0x140374412
mov dword [0x1406eff54], 0xffffffff
jmp 0x14037437a
xor ebx, ebx
jmp 0x14037441e
mov ebx, 1
mov dword [0x1406eff54], ebx
inc rdi
mov rsi, rdi
mov rcx, rsi
mov edx, 0x3a
call fcn.140001415
test rax, rax
je 0x140374466
mov rdi, rax
lea rdx, str.big:
mov rcx, rsi
call fcn.140006203
cmp rsi, rax
je 0x140374477
lea rdx, str.little:
mov rcx, rsi
call fcn.140006203
cmp rsi, rax
jne 0x1403745aa
mov eax, 0xffffffff
jmp 0x14037447c
mov dword [0x1406eff58], 1
mov eax, 1
jmp 0x140374488
mov eax, 1
mov dword [0x1406eff58], eax
inc rdi
mov rsi, rdi
cmp eax, ebx
jne 0x140374496
mov dword [0x1406eff58], 0
movzx r10d, byte [rsi]
lea eax, [r10 - 0x30]
cmp al, 9
ja 0x1403745aa
xor r9d, r9d
lea rcx, [0x1406eff70]
lea rax, [0x1406f0080]
xor edx, edx
movzx r8d, r10b
add r8d, 0xffffffd0
lea r11, [rsi + 1]
cmp r9d, 0x3f
jg 0x140374611
movzx r10d, byte [r11]
test r10b, r10b
je 0x140374624
movsxd rdi, r9d
add rsi, 2
nop word cs:[rax + rax]
movzx ebx, r10b
test edx, edx
je 0x140374505
cmp edx, 2
jne 0x140374545
cmp r10b, 0x2c
jne 0x140374521
jmp 0x140374554
mov ebp, r10d
and bpl, 0xfe
cmp bpl, 0x2c
jne 0x140374521
mov dword [rcx + rdi*4], r8d
cmp r10b, 0x2c
je 0x140374554
cmp ebx, 0x2d
je 0x14037456f
add r10b, 0xd0
cmp r10b, 9
ja 0x1403745aa
lea r8d, [r8 + r8*4]
lea r8d, [rbx + r8*2]
add r8d, 0xffffffd0
movzx r10d, byte [rsi]
inc rsi
test r10b, r10b
jne 0x1403744f0
jmp 0x140374593
cmp edx, 1
jne 0x1403745aa
mov edx, 2
mov rsi, r11
jmp 0x140374583
cmp dword [rcx + rdi*4], r8d
jg 0x1403745aa
lea r11d, [r9 + 1]
mov dword [rax + rdi*4], r8d
xor edx, edx
cmp r9d, 0x3e
jle 0x140374577
jmp 0x14037462c
mov edx, 2
mov r11d, r9d
movzx r10d, byte [rsi]
mov r9d, r11d
test r10b, r10b
je 0x14037459b
lea r8d, [r10 - 0x30]
cmp r8b, 0xa
jb 0x1403744b9
jmp 0x1403745aa
dec rsi
inc edx
mov r11d, r9d
movzx r9d, byte [rsi - 1]
and r9b, 0xfe
cmp r9b, 0x2c
jne 0x1403745d9
mov dword [0x1406eff54], 0
mov dword [0x1406eff58], 0
mov dword [0x1406eff5c], 0
mov ecx, 0x60
xor edx, edx
call fcn.140004539
jmp 0x14037437a
movsxd r9, r11d
cmp edx, 1
jne 0x1403745f8
mov dword [rcx + r9*4], r8d
mov dword [rax + r9*4], r8d
inc r9d
mov dword [0x1406eff5c], r9d
jmp 0x14037437a
cmp dword [rcx + r9*4], r8d
jg 0x1403745aa
lea ecx, [r9 + 1]
mov dword [0x1406eff5c], ecx
mov dword [rax + r9*4], r8d
jmp 0x14037437a
inc edx
mov rsi, r11
cmp byte [r11], 0
mov r11d, r9d
jne 0x1403745aa
jmp 0x14037459b
mov rsi, r11
jmp 0x140374596
mov r9d, r11d
mov r11, rsi
jmp 0x140374616