Function at 0x14003baa0
Capabilities:
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x278
cmp byte [rcx + 0x23], 0
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
mov r14, rcx
movaps xmmword [rax - 0x78], xmm8
mov rax, rdx
jne 0x14003bad7
mov r14, qword [rcx + 0x10]
movsd xmm7, qword [0x140152fd8]
movsd xmm8, qword [0x140153040]
movsd xmm6, qword [0x140153038]
mov r12, qword [rsp + 0x2c0]
mov rbp, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2c0]
movzx r8d, word [0x140169b20]
xor edi, edi
lea r9, sym.MZ_b_4ix__UH3tlIju_n3bu_bRSDz8e8_6O__LTLn_u_28Wnitpw
mov ecx, edi
lea r11d, [rdi + 8]
lea ebx, [rdi + 7]
mov dword [rsp + 0x2d8], ecx
lea esi, [rdi + 0xc]
mov r13d, 1
lea r10, [0x1401295d4]
test ecx, ecx
je 0x14003be5e
movzx ecx, byte [r14 + 0x23]
mov rbx, r12
test cl, cl
jne 0x14003bb68
mov rcx, qword [r14 + 0x10]
xor r9d, r9d
mov r8, r12
xor edx, edx
mov byte [rsp + 0x20], r13b
call fcn.1400e9bc0
jmp 0x14003be04
mov sil, 1
movzx r8d, sil
cmp r12, 0xffffffffffffffff
jne 0x14003bb7e
xor r8b, r8b
xor ebp, ebp
mov ebx, ebp
jmp 0x14003bb83
xor sil, sil
xor ebp, ebp
lea rax, [rbx + 1]
lea rdi, [rax + rax]
cmp cl, 2
jne 0x14003bbc1
test sil, sil
je 0x14003bba5
mov rdx, rbx
mov rcx, r10
call fcn.140005910
jmp 0x14003be04
lea rcx, [0x140171f30]
mov rdx, rax
call fcn.1400059d0
mov edx, ebp
test rax, rax
setne dl
jmp 0x14003be06
mov r9, qword [0x140169b08]
cmp rdi, r9
jbe 0x14003bbe7
cmp rdi, qword [r14 + 0x18]
jbe 0x14003bbe7
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
mov rdx, rax
jmp 0x14003bdf1
cmp rax, 2
jae 0x14003bc08
test r8b, r8b
mov edx, ebp
mov rcx, r14
setne dl
xor r8d, r8d
add edx, 3
call fcn.1400ea290
jmp 0x14003be21
movzx eax, byte [r14 + 0x21]
test al, 2
je 0x14003bc2d
mov rcx, qword [r14]
and al, 0x3d
mov byte [r14 + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r9, qword [0x140169b08]
mov r11d, 8
mov r8, qword [r14 + 0x18]
and byte [r14 + 0x21], 0x82
cmp rdi, r8
jbe 0x14003bd9e
movzx ecx, byte [r14 + 0x20]
movzx eax, cl
cmp cl, 1
jbe 0x14003bc5a
cmp al, 2
je 0x14003bca1
mov rax, qword [rsp + 0x38]
jmp 0x14003bd91
cmp rdi, 0x80
ja 0x14003bca1
cmp rdi, 8
ja 0x14003bc6e
mov r15, r11
jmp 0x14003bc81
mov r15d, pe_nt_image_headers64
cmp rdi, 0x10
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovbe r15d, eax
mov rcx, r15
call fcn.1400dc2b0
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14003be0b
mov byte [r14 + 0x20], 1
jmp 0x14003bd91
cmp rdi, 0x20
jae 0x14003bcb2
mov r15d, SafeArrayAllocDescriptor
jmp 0x14003bd53
cmp rdi, 0x208
jae 0x14003bcc6
mov r15d, 0x208
jmp 0x14003bd53
cmp rdi, 0x50000
jae 0x14003bd0f
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14003bce1
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x14003bd05
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x14003bd05
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si r15, xmm0
add r15, rax
jmp 0x14003bd53
cmp rdi, 0x320000
jae 0x14003bd21
lea r15, [rdi + 0x8000]
jmp 0x14003bd53
cmp rdi, 0xc80000
jae 0x14003bd4c
movabs rax, 0x47ae147ae147ae15
mov r15, rdi
mul rdi
sub r15, rdx
shr r15, 1
add r15, rdx
shr r15, 6
add r15, rdi
jmp 0x14003bd53
lea r15, [rdi + 0x20000]
cmp r15, r9
cmova r15, r9
cmp cl, 2
jne 0x14003bd72
test r8, r8
je 0x14003bd72
mov rcx, qword [r14 + 8]
mov dil, 1
call fcn.140108f48
jmp 0x14003bd75
xor dil, dil
test r15, r15
js 0x14003bdc9
mov rcx, r15
call fcn.1401084ac
mov qword [rsp + 0x38], rax
test rax, rax
je 0x14003bdc9
mov byte [r14 + 0x20], 2
and byte [r14 + 0x21], 0x7f
mov qword [r14 + 8], rax
mov qword [r14 + 0x18], r15
test sil, sil
je 0x14003be12
mov rcx, qword [r14 + 8]
lea rax, [0x1401295d4]
cmp rcx, rax
je 0x14003bdbf
lea r8, [rbx + rbx]
mov rdx, rax
call fcn.140109100
mov rax, qword [r14 + 8]
mov word [rax + rbx*2], bp
jmp 0x14003be19
test dil, dil
je 0x14003bddf
lea rax, [0x140171290]
mov qword [r14 + 0x18], rbp
mov qword [r14 + 8], rax
jmp 0x14003bde6
mov rax, qword [r14 + 8]
mov word [rax], bp
mov qword [r14 + 0x10], rbp
lea rdx, str.Out_of_memory.
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
call fcn.1400a5580
mov edx, eax
cmp edx, 1
je 0x14003be21
xor eax, eax
jmp 0x14003c219
mov rax, qword [r14 + 8]
mov word [rax], bp
lea rax, [rbx + rbx]
mov qword [r14 + 0x10], rax
xor r8d, r8d
mov edx, r13d
mov rcx, r14
call fcn.140001550
movzx r8d, word [0x140169b20]
mov ecx, dword [rsp + 0x2d8]
xor edi, edi
mov rbp, rax
mov rax, qword [rsp + 0x2c8]
lea r9, sym.MZ_b_4ix__UH3tlIju_n3bu_bRSDz8e8_6O__LTLn_u_28Wnitpw
lea ebx, [rdi + 7]
lea esi, [rdi + 0xc]
lea r11d, [rdi + 8]
jmp 0x14003be61
mov r12, rdi
mov rdx, rax
movsxd r13, ecx
movzx eax, word [rdx]
test ax, ax
je 0x14003be9e
nop
cmp ax, word [0x140169b24]
je 0x14003bec4
cmp ax, r8w
je 0x14003bec4
test r13, r13
je 0x14003be8e
mov word [rbp], ax
add rbp, 2
jmp 0x14003be91
inc r12
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
jne 0x14003be70
mov ecx, dword [rsp + 0x2d8]
inc ecx
mov dword [rsp + 0x2d8], ecx
cmp ecx, 2
jge 0x14003c186
mov rax, qword [rsp + 0x2c8]
jmp 0x14003bb2c
movzx eax, word [rdx]
test ax, ax
je 0x14003be9e
cmp ax, word [0x140169b24]
jne 0x14003bfaa
test r13, r13
je 0x14003bf9e
movzx edi, word [rdx + 2]
lea eax, [rdi - 0x61]
cmp eax, 0x15
ja case.0x14003beff.99
cdqe
mov ecx, dword [r9 + rax*4 + 0x3c240]
add rcx, r9
jmp rcx
mov word [rbp], bx
add rbp, 2
add rdx, 2
jmp 0x14003c16a
mov word [rbp], r11w
add rbp, 2
add rdx, 2
jmp 0x14003c16a
mov word [rbp], si
add rbp, 2
add rdx, 2
jmp 0x14003c16a
mov eax, 0xa
add rbp, 2
add rdx, 2
mov word [rbp - 2], ax
jmp 0x14003c16a
mov eax, SafeArrayGetElemsize
add rbp, 2
add rdx, 2
mov word [rbp - 2], ax
jmp 0x14003c16a
mov eax, 9
add rbp, 2
add rdx, 2
mov word [rbp - 2], ax
jmp 0x14003c16a
mov eax, reloc.WSOCK32.dll_inet_ntoa
add rbp, 2
add rdx, 2
mov word [rbp - 2], ax
jmp 0x14003c16a
mov word [rbp], di
add rbp, 2
add rdx, 2
jmp 0x14003c16a
inc r12
add rdx, 2
jmp 0x14003c16a
movzx eax, word [rdx + 2]
lea rsi, [rdx + 2]
test ax, ax
je 0x14003c16a
nop dword [rax + rax]
cmp ax, r8w
je 0x14003bfd8
movzx eax, word [rsi + 2]
add rsi, 2
test ax, ax
jne 0x14003bfc0
jmp 0x14003c16a
cmp word [rsi], 0
je 0x14003c16a
mov rbx, rsi
sub rbx, rdx
sar rbx, 1
dec rbx
je 0x14003c167
cmp rbx, 0xfd
ja 0x14003c167
lea rcx, [rsp + 0x40]
mov r8, rbx
add rdx, 2
call fcn.14010a074
mov word [rsp + rbx*2 + 0x40], di
cmp word [rsp + 0x40], 0
je 0x14003be0b
lea rax, [rsp + 0x2c0]
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rcx, [0x1401712e0]
mov r8, rbx
mov dword [rsp + 0x20], 3
call fcn.14002be90
mov rdi, rax
test rax, rax
jne 0x14003c085
cmp byte [rsp + 0x2c0], al
mov r9d, dword [rsp + 0x30]
lea rdx, [rsp + 0x40]
setne al
lea rcx, [0x1401712e0]
mov r8, rbx
inc eax
mov dword [rsp + 0x20], eax
call fcn.14002c190
mov rdi, rax
test rdi, rdi
je 0x14003be0b
cmp byte [rdi + 0x23], 0
jne 0x14003c098
mov rdi, qword [rdi + 0x10]
cmp rdi, r14
je 0x14003c15f
test r13, r13
je 0x14003c0bb
mov rdx, rbp
mov rcx, rdi
call fcn.1400ea020
lea rbp, [rbp + rax*2]
jmp 0x14003c15f
movzx ecx, byte [rdi + 0x23]
test ecx, ecx
je 0x14003c151
dec ecx
je 0x14003c0ff
dec ecx
je 0x14003c0de
dec ecx
je 0x14003c144
mov rdx, qword [rdi + 0x28]
xor ecx, ecx
call qword [rdi + reloc.OLEAUT32.dll_SafeArrayGetElement]
jmp 0x14003c15c
lea rcx, [0x140171f30]
xor edx, edx
call fcn.1400056e0
mov ecx, 0xffffffff
cmp rax, rcx
mov ecx, 0
cmove rax, rcx
jmp 0x14003c15c
mov rcx, rdi
call fcn.140001410
cmp dword [0x14016f9f4], 0
jne 0x14003c148
cmp qword [rdi + 0x10], 0
jne 0x14003c148
mov rcx, qword [rdi + 0x28]
lea rdx, [rsp + 0x2d0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x14003c13d
xor ecx, ecx
dec eax
mov qword [0x140176058], rcx
jmp 0x14003c15c
mov qword [0x140176058], rdi
xor eax, eax
jmp 0x14003c15c
mov rax, qword [rdi + 0x10]
shr rax, 1
jmp 0x14003c15c
mov rcx, qword [rdi + 0x10]
xor edx, edx
call fcn.1400ea020
add r12, rax
movzx r8d, word [0x140169b20]
mov rdx, rsi
add rdx, 2
xor edi, edi
lea r9, sym.MZ_b_4ix__UH3tlIju_n3bu_bRSDz8e8_6O__LTLn_u_28Wnitpw
lea ebx, [rdi + 7]
lea esi, [rdi + 0xc]
lea r11d, [rdi + 8]
jmp 0x14003be67
mov esi, 1
xor r8d, r8d
mov rcx, r14
mov edx, esi
mov word [rbp], di
call fcn.140001550
or rcx, 0xffffffffffffffff
mov rdi, rax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rbx, [rcx - 1]
cmp byte [r14 + 0x23], al
jne 0x14003c1bb
mov rdi, qword [r14 + 0x10]
jmp 0x14003c1be
mov rdi, r14
cmp byte [rdi + 0x23], sil
jne 0x14003c1d8
test byte [rdi + 0x21], 8
je 0x14003c1d2
mov rcx, rdi
call fcn.140001410
add rdi, 0x10
jmp 0x14003c1df
lea rdi, [0x140174f58]
lea rax, [rbx + rbx]
mov qword [rdi], rax
cmp byte [r14 + 0x23], 0
jne 0x14003c1f1
mov r14, qword [r14 + 0x10]
cmp byte [r14 + 0x23], 2
jne 0x14003c212
cmp qword [0x140171f48], 0
je 0x14003c212
lea rcx, [0x140171f30]
call fcn.140005a80
mov esi, eax
jmp 0x14003c217
and byte [r14 + 0x21], 0x86
mov eax, esi
lea r11, [rsp + 0x278]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret