Function at 0x140002ff0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x50
mov eax, 0x1000000
lea rcx, [0x14000c240]
xorps xmm0, xmm0
mov qword [0x14000c558], rax
mov qword [0x14000c230], rax
mov ebx, 0x104
xor eax, eax
xor edi, edi
mov r8d, ebx
mov qword [0x14000bc10], rax
xor edx, edx
mov qword [0x14000bbe8], rdi
movups xmmword [0x14000bbf0], xmm0
movups xmmword [0x14000bc00], xmm0
call sub.msvcrt.dll_memset
mov edx, ebx
lea rcx, [0x14000b0a0]
call fcn.14000524c
test al, al
je 0x14000329b
mov edx, ebx
lea rcx, [0x14000b060]
call fcn.14000524c
test al, al
je 0x14000329b
mov r8, qword [0x14000b0a8]
xor ecx, ecx
mov rdx, qword [0x14000b0a0]
sub r8, rdx
sar r8, 1
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
je 0x140003283
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jne 0x140003283
mov edx, ebx
lea rcx, [0x14000b0a0]
call fcn.14000524c
mov rax, qword [0x14000b060]
xor r9d, r9d
mov rcx, qword [0x14000b068]
xor r8d, r8d
mov qword [rsp + 0x40], rdi
sub rcx, rax
sar rcx, 1
xor edx, edx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rcx
mov rcx, qword [0x14000b0a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call qword [sym.imp.msvcrt.dll__wsplitpath_s]
nop dword [rax + rax]
test eax, eax
je 0x140003126
lea rcx, str.error_0x_x_from__wsplitpath_s___n
mov edx, eax
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
jmp 0x1400032ae
mov rdx, qword [0x14000b068]
mov rcx, qword [0x14000b060]
sub rdx, rcx
sar rdx, 1
call qword [sym.imp.msvcrt.dll_wcsnlen]
nop dword [rax + rax]
mov rdx, rax
lea rcx, [0x14000b060]
call fcn.14000524c
lea rcx, str.dbg:_initializing..._n
call fcn.140002f4c
lea rbx, [0x14000be30]
mov r8d, 0x400
mov rdx, rbx
lea rcx, str._NT_SYMBOL_PATH
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
nop dword [rax + rax]
movzx ecx, byte [0x14000be30]
mov rdx, rbx
cmp eax, 1
cmovl ecx, edi
mov byte [0x14000be30], cl
lea rcx, str.Symbol_Path____s__n
call fcn.140002f4c
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax + rax]
xor r8d, r8d
mov rdx, rbx
lea ecx, [rax + 1]
mov qword [0x14000c238], rcx
call qword [sym.imp.dbghelp.dll_SymInitialize]
nop dword [rax + rax]
test eax, eax
jne 0x1400031ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, eax
lea rcx, str.error_0x_x_from_SymInitialize___n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
mov qword [0x14000c238], rdi
jmp 0x1400032ae
mov ecx, 0x10813
call qword [sym.imp.dbghelp.dll_SymSetOptions]
nop dword [rax + rax]
mov edx, eax
mov dword [0x14000be24], eax
lea rcx, str.SymOpts__0x_x_n
call fcn.140002f4c
mov rcx, qword [0x14000c238]
lea rdx, [0x140002fc0]
xor r8d, r8d
call qword [sym.imp.dbghelp.dll_SymRegisterCallback64]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jne 0x14000325f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
lea rcx, str.error_0x_x_from_SymRegisterCallback64___n
jmp 0x140003113
call fcn.1400023ec
cmp dword [0x14000bad4], edi
jne 0x14000327f
lea rcx, str.warning:_Enums_will_not_be_proccess__failed_allocation_of_structures_n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
mov eax, ebx
jmp 0x1400032b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
lea rcx, str.error_0x_x_from_GetModuleFileNameW___n
jmp 0x140003113
lea rcx, str.error_out_of_memory_from_resize_n
call qword [sym.imp.msvcrt.dll_printf]
nop dword [rax + rax]
xor eax, eax
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret