Function at 0x1401bfe76
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xaf8c226a
pushf
not eax
add eax, 0x996ba053
xor eax, 0xd53663d3
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xc25338ca
xor eax, 0xd55f9451
rol eax, 0xba
popf
cmp eax, 4
jne 0x1401bfeb3
popf
pop rax
jmp 0x1401c0131
cmp eax, 0
jne 0x1401bfec2
popf
pop rax
jmp 0x1401bff76
cmp eax, 3
jne 0x1401bfed1
popf
pop rax
jmp 0x1401c00d4
cmp eax, 1
jne 0x1401bfee0
popf
pop rax
jmp 0x1401c0006
cmp eax, 0xd
jne 0x1401bfeef
popf
pop rax
jmp 0x1401c0554
cmp eax, 7
jne 0x1401bfefe
popf
pop rax
jmp 0x1401c0321
cmp eax, 6
jne 0x1401bff0d
popf
pop rax
jmp 0x1401c0288
cmp eax, 0xb
jne 0x1401bff1c
popf
pop rax
jmp 0x1401c049e
cmp eax, 0xc
jne 0x1401bff2b
popf
pop rax
jmp 0x1401c04f1
cmp eax, 8
jne 0x1401bff3a
popf
pop rax
jmp 0x1401c0376
cmp eax, 5
jne 0x1401bff49
popf
pop rax
jmp 0x1401c01da
cmp eax, 2
jne 0x1401bff58
popf
pop rax
jmp 0x1401c0053
cmp eax, 9
jne 0x1401bff67
popf
pop rax
jmp 0x1401c0412
cmp eax, 0xa
jne 0x1401bff76
popf
pop rax
jmp 0x1401c0477
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1401bff90
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x1401bffd3
push rax
pushf
mov eax, 0xa2c7f136
pushf
not eax
add eax, 0x882eab8d
xor eax, 0xbdd8ba6c
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xeed82e8a
xor eax, 0xb47f7009
rol eax, 0x19
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0x4b65fd7
pushf
not eax
add eax, 0x98740c13
xor eax, 0x8d86c248
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb6b2418d
xor eax, 0xece5c89f
rol eax, 0x45
popf
jmp 0x1401bfea4
xor eax, eax
jmp 0x1401c0561
mov rbp, rbx
cmp word [rax], si
je 0x1401c008e
push rax
pushf
mov eax, 0x35eed469
pushf
not eax
add eax, 0x98e89ad3
xor eax, 0xedbe8489
rol eax, 0xd
popf
pushf
not eax
add eax, 0x9bd9ecfb
xor eax, 0xbf7ddb12
rol eax, 0x46
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0x30ffb79f
pushf
not eax
add eax, 0xf9fab455
xor eax, 0xc839d0d2
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x839a852b
xor eax, 0xf85315b0
rol eax, 0x12
popf
pushf
not eax
add eax, 0xe6c6635a
xor eax, 0xf9c675aa
rol eax, 0x4c
popf
jmp 0x1401bfea4
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x2f987fae
pushf
not eax
add eax, 0xf737f15d
xor eax, 0x8b00f5fb
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xdc8aae3a
xor eax, 0xddc482fe
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xe84394d7
xor eax, 0xc6437228
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x9be8f48d
xor eax, 0xcca308bf
rol eax, 0x66
popf
jmp 0x1401bfea4
inc rax
cmp word [rbp + rax*2], si
jne 0x1401c0181
push rax
pushf
mov eax, 0xb5c9f205
pushf
not eax
add eax, 0xb54ba8d0
xor eax, 0xe1568e5a
rol eax, 0x78
popf
pushf
not eax
add eax, 0xcfd80a04
xor eax, 0xf28bfc8b
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xf3b98f36
xor eax, 0xf084d7fc
rol eax, 0x96
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0xae834056
pushf
not eax
add eax, 0xb4bb81a0
xor eax, 0xd17c9403
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x95653eef
xor eax, 0x8b0a3cdb
rol eax, 0x36
popf
pushf
not eax
add eax, 0xccbc0ae1
xor eax, 0xe68115fa
rol eax, 0x63
popf
pushf
not eax
add eax, 0xbca302d1
xor eax, 0xa1cea8c4
rol eax, 0x11
popf
jmp 0x1401bfea4
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x1401c022f
push rax
pushf
mov eax, 0x9184a6e9
pushf
not eax
add eax, 0x97b6303d
xor eax, 0x8f96e902
rol eax, 0x81
popf
pushf
not eax
add eax, 0x8131f8dc
xor eax, 0xaaddf196
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x9ea9ab10
xor eax, 0x91337119
rol eax, 0xc3
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0x2e0e076f
pushf
not eax
add eax, 0xe2d1cb07
xor eax, 0xb2caf93b
rol eax, 0x93
popf
pushf
not eax
add eax, 0xebf43760
xor eax, 0x8b39680e
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xd187c896
xor eax, 0x9a1b5706
rol eax, 0x34
popf
pushf
not eax
add eax, 0x8ab8fcd1
xor eax, 0xdfe49e65
rol eax, 0xea
popf
jmp 0x1401bfea4
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1401e95ae
movsxd r14, eax
test eax, eax
jne 0x1401c02ee
push rax
pushf
mov eax, 0xb179dbb5
pushf
not eax
add eax, 0xb21f1432
xor eax, 0xc699eda2
rol eax, 0x37
popf
pushf
not eax
add eax, 0xea5d17b8
xor eax, 0xfaf9f9ad
rol eax, 0x1b
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0xdf5e25b8
pushf
not eax
add eax, 0xd02cdf1d
xor eax, 0xe239cf9a
rol eax, 0x19
popf
pushf
not eax
add eax, 0x929a75aa
xor eax, 0x9674a6bc
rol eax, 0x16
popf
jmp 0x1401bfea4
mov rcx, rbx
jmp 0x1401c0325
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1401c0006
mov rcx, r14
call fcn.14018cd67
mov rdi, rax
test rax, rax
jne 0x1401c03df
push rax
pushf
mov eax, 0xc8bfb748
pushf
not eax
add eax, 0xd113f07e
xor eax, 0x83986a3c
rol eax, 0x65
popf
pushf
not eax
add eax, 0xf2f2e613
xor eax, 0xf91020ee
rol eax, 0x50
popf
pushf
not eax
add eax, 0x9c241877
xor eax, 0xc4e84ced
rol eax, 0x39
popf
pushf
not eax
add eax, 0xc031e207
xor eax, 0x99b7a050
rol eax, 0xb5
popf
jmp 0x1401bfea4
push rax
pushf
mov eax, 0x970301ad
pushf
not eax
add eax, 0x874f666d
xor eax, 0x92a5271f
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd8bf6d96
xor eax, 0xcc60c521
rol eax, 0x12
popf
jmp 0x1401bfea4
xor ecx, ecx
call fcn.1401db152
jmp 0x1401c0321
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1401e95ae
test eax, eax
jne 0x1401c04f1
mov rcx, rdi
call fcn.1401db152
jmp 0x1401c0554
xor ecx, ecx
call fcn.1401db152
mov rsi, rdi
push rax
pushf
mov eax, 0xeb048198
pushf
not eax
add eax, 0x8b2f4d77
xor eax, 0xe27a197f
rol eax, 0x69
popf
pushf
not eax
add eax, 0x9bfbfc42
xor eax, 0xb63b255c
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xdf142e18
xor eax, 0xd4d4b421
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf7d233ba
xor eax, 0xd93ed351
rol eax, 0x11
popf
jmp 0x1401bfea4
mov rcx, rbx
jmp 0x1401c0558
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret