Function at 0x18014ae59
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xe19209d7
pushf
not eax
add eax, 0x832a3198
xor eax, 0xd9124618
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb05d3d3c
xor eax, 0x9c4a253d
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbfb9e98f
xor eax, 0xa696e536
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xf46e828e
xor eax, 0x85ae3732
rol eax, 0x46
popf
cmp eax, 4
jne 0x18014aebc
popf
pop rax
jmp 0x18014b160
cmp eax, 0
jne 0x18014aecb
popf
pop rax
jmp 0x18014af7f
cmp eax, 3
jne 0x18014aeda
popf
pop rax
jmp 0x18014b129
cmp eax, 1
jne 0x18014aee9
popf
pop rax
jmp 0x18014b05b
cmp eax, 0xd
jne 0x18014aef8
popf
pop rax
jmp 0x18014b583
cmp eax, 7
jne 0x18014af07
popf
pop rax
jmp 0x18014b363
cmp eax, 6
jne 0x18014af16
popf
pop rax
jmp 0x18014b2b7
cmp eax, 0xb
jne 0x18014af25
popf
pop rax
jmp 0x18014b4cd
cmp eax, 0xc
jne 0x18014af34
popf
pop rax
jmp 0x18014b533
cmp eax, 8
jne 0x18014af43
popf
pop rax
jmp 0x18014b3a5
cmp eax, 5
jne 0x18014af52
popf
pop rax
jmp 0x18014b1f6
cmp eax, 2
jne 0x18014af61
popf
pop rax
jmp 0x18014b095
cmp eax, 9
jne 0x18014af70
popf
pop rax
jmp 0x18014b441
cmp eax, 0xa
jne 0x18014af7f
popf
pop rax
jmp 0x18014b4a6
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x18014af99
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x18014b002
push rax
pushf
mov eax, 0x9d418630
pushf
not eax
add eax, 0x8a34990f
xor eax, 0xda54af2f
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xec7b039d
xor eax, 0xb11333da
rol eax, 0xae
popf
pushf
not eax
add eax, 0xa7350491
xor eax, 0xfbe64731
rol eax, 0x33
popf
pushf
not eax
add eax, 0x8b30eecc
xor eax, 0xae5774ac
rol eax, 0xcf
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0xf8282c73
pushf
not eax
add eax, 0xa5493adf
xor eax, 0x9da56288
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9bba092f
xor eax, 0x868f7d0d
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xdb332cd3
xor eax, 0x8d3e71b3
rol eax, 0x95
popf
pushf
not eax
add eax, 0xac713911
xor eax, 0xe358be73
rol eax, 0x89
popf
jmp 0x18014aead
xor eax, eax
jmp 0x18014b590
mov rbp, rbx
cmp word [rax], si
je 0x18014b0f6
push rax
pushf
mov eax, 0x92a014ec
pushf
not eax
add eax, 0xb5ccf3a3
xor eax, 0x8ba24da8
rol eax, 0x65
popf
pushf
not eax
add eax, 0xb815fef8
xor eax, 0xc7d323c4
rol eax, 0x84
popf
pushf
not eax
add eax, 0x8e210909
xor eax, 0xe0bd565a
rol eax, 0x79
popf
pushf
not eax
add eax, 0xfd89bced
xor eax, 0xcc5e6c93
rol eax, 0x82
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0x305c77fd
pushf
not eax
add eax, 0xf2b86c15
xor eax, 0xbc7ebf97
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xf1650e78
xor eax, 0xe98289bf
rol eax, 0xb5
popf
jmp 0x18014aead
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xb963e378
pushf
not eax
add eax, 0xe5675789
xor eax, 0x961a0115
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xdfb77b24
xor eax, 0xb116c3f0
rol eax, 0x3e
popf
jmp 0x18014aead
inc rax
cmp word [rbp + rax*2], si
jne 0x18014b1b0
push rax
pushf
mov eax, 0x37cdc3bf
pushf
not eax
add eax, 0xbe501d83
xor eax, 0xa0e9fe9f
rol eax, 0x21
popf
pushf
not eax
add eax, 0x8b3fdc3d
xor eax, 0xe9eed4d7
rol eax, 0x40
popf
pushf
not eax
add eax, 0xbfe0c478
xor eax, 0xc05a6b24
rol eax, 0x65
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0x342d9a69
pushf
not eax
add eax, 0xcec500cb
xor eax, 0xa8d9bf91
rol eax, 7
popf
pushf
not eax
add eax, 0xc9f8f72e
xor eax, 0xd13823eb
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x9e95c627
xor eax, 0xffacca89
rol eax, 0xf2
popf
jmp 0x18014aead
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x18014b25e
push rax
pushf
mov eax, 0xc45b1e03
pushf
not eax
add eax, 0xa3291551
xor eax, 0xb96ea962
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x8690fb5d
xor eax, 0xe45487d1
rol eax, 0xea
popf
pushf
not eax
add eax, 0xdd4a65d5
xor eax, 0xe61f41a9
rol eax, 0xee
popf
pushf
not eax
add eax, 0x82682605
xor eax, 0xad23f404
rol eax, 0xad
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0xb68a14bf
pushf
not eax
add eax, 0xc44c3bac
xor eax, 0xe2d24604
rol eax, 0x82
popf
pushf
not eax
add eax, 0x964c65cf
xor eax, 0xbf863106
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc0276fc5
xor eax, 0x88d6765c
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xcf14599d
xor eax, 0x935c305c
rol eax, 0x17
popf
jmp 0x18014aead
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.18016760a
movsxd r14, eax
test eax, eax
jne 0x18014b31d
push rax
pushf
mov eax, 0x1b30cb6f
pushf
not eax
add eax, 0xf1e5595a
xor eax, 0xf4bf0620
rol eax, 0x81
popf
pushf
not eax
add eax, 0xdd980d8e
xor eax, 0x9980f5e5
rol eax, 0x7e
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0x9ce31164
pushf
not eax
add eax, 0xc8461e18
xor eax, 0xad16cb8e
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x8252a2c3
xor eax, 0x92293cc6
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xb93f4559
xor eax, 0x9cbed61f
rol eax, 0x6f
popf
jmp 0x18014aead
mov rcx, rbx
jmp 0x18014b367
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x18014b05b
mov rcx, r14
call fcn.180116875
mov rdi, rax
test rax, rax
jne 0x18014b3e8
push rax
pushf
mov eax, 0x9432aac5
pushf
not eax
add eax, 0xb4235261
xor eax, 0xb4fba124
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xf091540b
xor eax, 0xc7b95ea9
rol eax, 0xc5
popf
jmp 0x18014aead
push rax
pushf
mov eax, 0xc40849ff
pushf
not eax
add eax, 0xe7ee3795
xor eax, 0xa2e87f5d
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd999d9fc
xor eax, 0x81c3ac6f
rol eax, 0x27
popf
pushf
not eax
add eax, 0xa43b795e
xor eax, 0xde0ce9ea
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xdaaaaa02
xor eax, 0xe82a0c6b
rol eax, 0xd2
popf
jmp 0x18014aead
xor ecx, ecx
call fcn.18015ff23
jmp 0x18014b363
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.18016760a
test eax, eax
jne 0x18014b533
mov rcx, rdi
call fcn.18015ff23
jmp 0x18014b583
xor ecx, ecx
call fcn.18015ff23
mov rsi, rdi
push rax
pushf
mov eax, 0x7c6db583
pushf
not eax
add eax, 0xda9c895f
xor eax, 0xf2289e68
rol eax, 0x18
popf
pushf
not eax
add eax, 0x98dfba96
xor eax, 0xf532548c
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc457bdea
xor eax, 0xbe96bdcb
rol eax, 0x29
popf
jmp 0x18014aead
mov rcx, rbx
jmp 0x18014b587
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret