Function at 0x140001260
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x228
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x200
call fcn.1400164b0
mov r8d, 0x200
lea rdx, [rsp + 0x20]
lea rcx, str._LOCALAPPDATA_..LocalState_timings.bin
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov r8d, 0x1ffec00
mov rcx, rax
mov qword [rsp + 0x288], rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor edx, edx
mov r8d, 0x3ffd8
mov rcx, rbx
mov qword [rsp + 0x278], rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor edx, edx
mov r8d, 0x4000
mov rcx, rbx
mov r15, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r13d, r13d
mov qword [rsp + 0x280], rax
xor ebp, ebp
lea r14, [rdi - 0x14]
movabs rsi, 0xfffff81000000000
movabs r12, 0xfffff80000a00000
mov rbx, r12
cmp rbp, 5
jb 0x140001340
mov rdi, r14
mov rcx, rbx
call fcn.1400023e0
add rbx, 0x100000
mov dword [rdi], eax
lea rdi, [rdi + 0x200]
cmp rbx, rsi
jb 0x140001321
jmp 0x14000135a
mov edi, 0xfff6
mov rcx, rbx
call fcn.1400023e0
add rbx, 0x100000
sub rdi, 1
jne 0x140001345
inc rbp
add r14, 4
cmp rbp, 0x85
jb 0x140001315
mov r11, qword [rsp + 0x278]
xor edx, edx
mov rsi, qword [rsp + 0x280]
mov rcx, r11
mov r12d, edx
nop dword [rax]
nop word [rax + rax]
xorps xmm3, xmm3
xorps xmm2, xmm2
mov eax, 0x20
nop dword [rax + rax]
movq xmm1, qword [rcx]
xorps xmm0, xmm0
punpckldq xmm1, xmm0
paddq xmm3, xmm1
movq xmm1, qword [rcx + 8]
add rcx, 0x10
punpckldq xmm1, xmm0
paddq xmm2, xmm1
sub rax, 1
jne 0x1400013a0
paddq xmm2, xmm3
movdqa xmm0, xmm2
psrldq xmm0, 8
paddq xmm2, xmm0
movq rax, xmm2
shr rax, 7
mov dword [r15 + rdx*4], eax
inc rdx
cmp rdx, 0xfff6
jb 0x140001390
xor ecx, ecx
mov edx, 0xa00000
movabs r8, 0x1000000000
test rdx, 0x1ffffff
jne 0x140001426
lea rax, [rcx + 1]
cmp rax, 0xfff6
jae 0x14000141d
mov eax, dword [r15 + rcx*4 + 4]
jmp 0x140001422
mov eax, dword [r15 + rcx*4 - 4]
mov dword [r15 + rcx*4], eax
mov eax, dword [r15 + rcx*4]
add rdx, 0x100000
add r13, rax
inc rcx
cmp rdx, r8
jb 0x140001401
xor r10d, r10d
movabs rax, 0x8005003201f41389
mul r13
movabs rax, 0xaaaaaaaaaaaaaaab
xor r8d, r8d
mov rcx, rdx
lea edi, [r10 + 1]
shr rcx, 0xf
movabs rbx, 0x7ffff600000
mul rcx
shr rdx, 1
add rdx, rcx
xor r9d, r9d
nop word [rax + rax]
mov eax, dword [r15 + r9*4]
cmp rax, rdx
jbe 0x140001499
inc r8
test r10, r10
cmove r8, rdi
cmove r10, r9
jmp 0x1400014c6
test r10, r10
je 0x1400014c6
cmp r8, 4
jbe 0x1400014c3
mov ecx, r12d
mov rax, r9
sub rax, r8
add rcx, rcx
shl rax, 0x14
sub rax, rbx
inc r12d
mov qword [rsi + rcx*8], rax
mov qword [rsi + rcx*8 + 8], r8
xor r8d, r8d
inc r9
cmp r9, 0xfff6
jb 0x140001480
mov rcx, qword [rsp + 0x288]
mov r8, r11
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0x288]
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
test r12d, r12d
je 0x14000151c
nop
mov rcx, qword [rsi + 8]
mov rax, qword [rsi]
add rcx, 0xffffffffffffffaf
cmp rcx, 0x26
jbe 0x140001532
inc edx
add rsi, 0x10
cmp edx, r12d
jb 0x140001500
xor eax, eax
add rsp, 0x228
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
add rax, 0xffffffffffa00000
jmp 0x14000151e