Function at 0x140002f5e
Capabilities:
Query environment variable

Disassembly:
jmp 0x140374710
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x138
mov esi, ecx
mov rax, qword [0x14056a550]
xor rax, rsp
mov qword [rsp + 0x130], rax
cmp byte [0x1406f0184], 0
jne 0x140374a89
lea rcx, str.FOR_FMT_TERMINATOR
lea rdi, [rsp + 0x20]
mov rdx, rdi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x14037484f
mov dword [0x1406f018c], 0
mov dword [0x1406f0188], 0
mov dword [0x1406f0190], 0
mov byte [0x1406f0184], 1
cmp eax, 0x104
ja 0x140374a89
cmp byte [rsp + 0x20], 0
je 0x140374a89
mov eax, 0x5243
xor eax, dword [rsp + 0x20]
movzx ecx, byte [rsp + 0x22]
or cx, ax
je 0x140374879
mov eax, 0x464c
xor eax, dword [rsp + 0x20]
movzx ecx, byte [rsp + 0x22]
or cx, ax
je 0x140374888
mov eax, 0x464c5243
xor eax, dword [rsp + 0x20]
movzx ecx, byte [rsp + 0x24]
or ecx, eax
je 0x140374897
mov rcx, rdi
mov edx, 0x3b
call fcn.140001415
test rax, rax
je 0x1403748a6
mov rbx, rax
lea rdx, [0x14052be40]
lea rdi, [rsp + 0x20]
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
je 0x1403748aa
lea rdx, [0x14052be44]
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
je 0x1403748b1
lea rdx, str.CRLF_
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
jne 0x140374a5f
mov ebp, 8
jmp 0x1403748b6
mov dword [0x1406f018c], 0
mov dword [0x1406f0188], 0
mov dword [0x1406f0190], 0
mov byte [0x1406f0184], 1
jmp 0x140374a89
mov dword [0x1406f018c], 7
jmp 0x140374a89
mov dword [0x1406f018c], 6
jmp 0x140374a89
mov dword [0x1406f018c], 8
jmp 0x140374a89
xor ebp, ebp
jmp 0x1403748c2
mov ebp, 7
jmp 0x1403748b6
mov ebp, 6
mov dword [0x1406f018c], ebp
inc rbx
mov rdi, rbx
mov rcx, rdi
mov edx, 0x3a
call fcn.140001415
test rax, rax
je 0x14037491e
mov rbx, rax
lea rdx, [0x14052be4f]
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
je 0x14037492f
lea rdx, [0x14052be53]
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
je 0x140374936
lea rdx, str.CRLF:
mov rcx, rdi
call fcn.140006203
cmp rdi, rax
jne 0x140374a5f
mov eax, 8
jmp 0x14037493b
mov dword [0x1406f0188], 7
mov eax, 7
jmp 0x140374947
mov eax, 7
jmp 0x14037493b
mov eax, 6
mov dword [0x1406f0188], eax
inc rbx
mov rdi, rbx
cmp eax, ebp
jne 0x140374955
mov dword [0x1406f0188], 0
movzx r10d, byte [rdi]
lea eax, [r10 - 0x30]
cmp al, 9
ja 0x140374a5f
xor r9d, r9d
lea rcx, [0x1406f01a0]
lea rax, [0x1406f02b0]
xor edx, edx
movzx r8d, r10b
add r8d, 0xffffffd0
lea r11, [rdi + 1]
cmp r9d, 0x3f
jg 0x140374b85
movzx r10d, byte [r11]
test r10b, r10b
je 0x140374b9c
movsxd rbx, r9d
add rdi, 2
mov ebp, r10d
movzx r14d, bpl
cmp edx, 2
je 0x1403749d2
cmp edx, 1
je 0x140374a16
mov r15d, ebp
and r15b, 0xfe
cmp r15b, 0x2c
jne 0x1403749d8
mov dword [rcx + rbx*4], r8d
cmp bpl, 0x2c
je 0x1403749fb
cmp r14d, 0x2d
jne 0x1403749d8
jmp 0x140374a20
cmp bpl, 0x2c
je 0x1403749fb
add bpl, 0xd0
cmp bpl, 9
ja 0x140374a5f
lea r8d, [r8 + r8*4]
lea r8d, [r14 + r8*2]
add r8d, 0xffffffd0
movzx ebp, byte [rdi]
inc rdi
test bpl, bpl
jne 0x1403749a5
jmp 0x140374a44
cmp dword [rcx + rbx*4], r8d
jg 0x140374a5f
lea r11d, [r9 + 1]
mov dword [rax + rbx*4], r8d
xor edx, edx
cmp r9d, 0x3e
jle 0x140374a28
jmp 0x140374ba4
mov edx, 2
mov rdi, r11
jmp 0x140374a34
mov edx, 2
mov r11d, r9d
movzx r10d, byte [rdi]
mov r9d, r11d
test r10b, r10b
je 0x140374a4c
lea r8d, [r10 - 0x30]
cmp r8b, 0xa
jb 0x140374978
jmp 0x140374a5f
dec rdi
inc edx
mov r11d, r9d
movzx r9d, byte [rdi - 1]
and r9b, 0xfe
cmp r9b, 0x2c
jne 0x140374b49
mov dword [0x1406f018c], 0
mov dword [0x1406f0188], 0
mov dword [0x1406f0190], 0
mov ecx, 0x60
xor edx, edx
call fcn.140004539
lea rax, [0x1406f018c]
cmp dword [0x1406f0188], 0
je 0x140374b25
mov ecx, dword [0x1406f0190]
test ecx, ecx
jle 0x140374b25
cmp ecx, 1
jne 0x140374ad7
mov edx, ecx
and edx, 0xfffffffe
cmp rdx, rcx
jae 0x140374b25
lea rcx, [0x1406f01a0]
cmp dword [rcx + rdx*4], esi
jg 0x140374b25
lea rcx, [0x1406f02b0]
cmp dword [rcx + rdx*4], esi
jl 0x140374b25
lea rax, [0x1406f0188]
jmp 0x140374b25
mov rdx, rcx
shr rdx, 1
xor r8d, r8d
lea r10, [0x1406f01a0]
lea r11, [0x1406f02b0]
lea r9, [0x1406f0188]
jmp 0x140374b08
inc r8
cmp rdx, r8
je 0x140374aac
cmp dword [r10 + r8*8], esi
jg 0x140374b14
cmp dword [r11 + r8*8], esi
jge 0x140374b22
cmp dword [r10 + r8*8 + 4], esi
jg 0x140374b00
cmp dword [r11 + r8*8 + 4], esi
jl 0x140374b00
mov rax, r9
mov esi, dword [rax]
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140003706
mov eax, esi
add rsp, 0x138
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
movsxd r9, r11d
cmp edx, 1
jne 0x140374b68
mov dword [rcx + r9*4], r8d
mov dword [rax + r9*4], r8d
inc r9d
mov dword [0x1406f0190], r9d
jmp 0x140374a89
cmp dword [rcx + r9*4], r8d
jg 0x140374a5f
lea ecx, [r9 + 1]
mov dword [0x1406f0190], ecx
mov dword [rax + r9*4], r8d
jmp 0x140374a89
inc edx
mov rdi, r11
cmp byte [r11], 0
mov r11d, r9d
jne 0x140374a5f
jmp 0x140374a4c
mov rdi, r11
jmp 0x140374a47
mov r9d, r11d
mov r11, rdi
jmp 0x140374b8a