Function at 0x14007f320
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x5d95a991
pushf
not eax
add eax, 0xc78bf916
xor eax, 0xf44b1757
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb197d4c2
xor eax, 0xdd0c1e4c
rol eax, 0x68
popf
pushf
not eax
add eax, 0x9f558f31
xor eax, 0xbeb18d0c
rol eax, 0x5e
popf
cmp eax, 4
jne 0x14007f370
popf
pop rax
jmp 0x14007f673
cmp eax, 0
jne 0x14007f37f
popf
pop rax
jmp 0x14007f433
cmp eax, 3
jne 0x14007f38e
popf
pop rax
jmp 0x14007f616
cmp eax, 1
jne 0x14007f39d
popf
pop rax
jmp 0x14007f50f
cmp eax, 0xd
jne 0x14007f3ac
popf
pop rax
jmp 0x14007fa5c
cmp eax, 7
jne 0x14007f3bb
popf
pop rax
jmp 0x14007f876
cmp eax, 6
jne 0x14007f3ca
popf
pop rax
jmp 0x14007f7ca
cmp eax, 0xb
jne 0x14007f3d9
popf
pop rax
jmp 0x14007f9b9
cmp eax, 0xc
jne 0x14007f3e8
popf
pop rax
jmp 0x14007fa1f
cmp eax, 8
jne 0x14007f3f7
popf
pop rax
jmp 0x14007f8b8
cmp eax, 5
jne 0x14007f406
popf
pop rax
jmp 0x14007f72f
cmp eax, 2
jne 0x14007f415
popf
pop rax
jmp 0x14007f55c
cmp eax, 9
jne 0x14007f424
popf
pop rax
jmp 0x14007f940
cmp eax, 0xa
jne 0x14007f433
popf
pop rax
jmp 0x14007f992
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x14007f44d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x14007f4b6
push rax
pushf
mov eax, 0xdd8c6137
pushf
not eax
add eax, 0x9112851e
xor eax, 0xe1a81183
rol eax, 0x47
popf
pushf
not eax
add eax, 0xfa7a72e9
xor eax, 0x9a8872fa
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xa7834a67
xor eax, 0xd9d531f9
rol eax, 0x42
popf
pushf
not eax
add eax, 0xea5c4546
xor eax, 0xd37af879
rol eax, 0x3b
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0xd739f86d
pushf
not eax
add eax, 0xf68ff36a
xor eax, 0xdc491c98
rol eax, 0x95
popf
pushf
not eax
add eax, 0x9fd07a07
xor eax, 0x801491b0
rol eax, 0xef
popf
pushf
not eax
add eax, 0xbba57903
xor eax, 0xa28f5827
rol eax, 0x81
popf
pushf
not eax
add eax, 0xec3ac593
xor eax, 0xc1cc96fb
rol eax, 0xe2
popf
jmp 0x14007f361
xor eax, eax
jmp 0x14007fa69
mov rbp, rbx
cmp word [rax], si
je 0x14007f5bd
push rax
pushf
mov eax, 0xdec01b83
pushf
not eax
add eax, 0xeeda6c45
xor eax, 0xff0201e6
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xb167b350
xor eax, 0xa8a44a8e
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xddc38bf8
xor eax, 0xa410b1b0
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xbcf2d0e2
xor eax, 0xd2552099
rol eax, 0xa9
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0x3e04a739
pushf
not eax
add eax, 0xd3c38281
xor eax, 0x9d234291
rol eax, 0xea
popf
pushf
not eax
add eax, 0xf3ac2f68
xor eax, 0xab25270f
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x94ae2aaf
xor eax, 0xc7ac86dd
rol eax, 0
popf
pushf
not eax
add eax, 0xb2dc89bb
xor eax, 0xe75c1032
rol eax, 0xb
popf
jmp 0x14007f361
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xf452c415
pushf
not eax
add eax, 0x9a9dfca9
xor eax, 0xd54f377b
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xe53c75af
xor eax, 0x9166b6b5
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xe2f71fc1
xor eax, 0xdb9f3888
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe6f3535c
xor eax, 0xf0d4abe8
rol eax, 0xd0
popf
jmp 0x14007f361
inc rax
cmp word [rbp + rax*2], si
jne 0x14007f6d6
push rax
pushf
mov eax, 0x7effb80
pushf
not eax
add eax, 0xd1e515b7
xor eax, 0xf681b653
rol eax, 0x15
popf
pushf
not eax
add eax, 0x98ae73ab
xor eax, 0xbb650789
rol eax, 0x16
popf
pushf
not eax
add eax, 0xd1c214d3
xor eax, 0xc95b9abc
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x8e807f64
xor eax, 0xa62cc6d0
rol eax, 0xfb
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0x8dd6f0c5
pushf
not eax
add eax, 0xfe39e091
xor eax, 0xc9aa1627
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb127b22e
xor eax, 0xe70c553b
rol eax, 0x69
popf
pushf
not eax
add eax, 0xdb2ea5d2
xor eax, 0xc513f7c2
rol eax, 0xed
popf
pushf
not eax
add eax, 0x9b0cde28
xor eax, 0xfbca0456
rol eax, 0x7c
popf
jmp 0x14007f361
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x14007f771
push rax
pushf
mov eax, 0xfe409fa9
pushf
not eax
add eax, 0xbdfa988a
xor eax, 0xb400877d
rol eax, 6
popf
pushf
not eax
add eax, 0x8252e035
xor eax, 0x93f2f4f2
rol eax, 0xf7
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0x2c9cfa3c
pushf
not eax
add eax, 0xa5e128be
xor eax, 0x99f4194e
rol eax, 0x77
popf
pushf
not eax
add eax, 0xbaf8aef0
xor eax, 0x9fc9869b
rol eax, 0xf
popf
pushf
not eax
add eax, 0xc09e0fea
xor eax, 0xb3289227
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xec0c48f7
xor eax, 0xf4af723a
rol eax, 0xa0
popf
jmp 0x14007f361
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1400897da
movsxd r14, eax
test eax, eax
jne 0x14007f843
push rax
pushf
mov eax, 0x41d86386
pushf
not eax
add eax, 0x8789a1a3
xor eax, 0xebead913
rol eax, 0x39
popf
pushf
not eax
add eax, 0xdccf02fe
xor eax, 0xae7ccdb2
rol eax, 0xf
popf
pushf
not eax
add eax, 0xcbc9f753
xor eax, 0x887b6acb
rol eax, 0x38
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0xa0c1a71a
pushf
not eax
add eax, 0xca366843
xor eax, 0xf59903f6
rol eax, 0x63
popf
pushf
not eax
add eax, 0xc116c679
xor eax, 0xd9a8af83
rol eax, 0xc3
popf
jmp 0x14007f361
mov rcx, rbx
jmp 0x14007f87a
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x14007f50f
mov rcx, r14
call fcn.14006f01c
mov rdi, rax
test rax, rax
jne 0x14007f8fa
push rax
pushf
mov eax, 0x200f1671
pushf
not eax
add eax, 0xe03de90b
xor eax, 0x866b9bee
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa3331b9d
xor eax, 0xc5618a4e
rol eax, 1
popf
jmp 0x14007f361
push rax
pushf
mov eax, 0x20cf41da
pushf
not eax
add eax, 0xfd4dee0d
xor eax, 0x97e4a0e1
rol eax, 0x27
popf
pushf
not eax
add eax, 0xf60df280
xor eax, 0xa7621a83
rol eax, 0xc
popf
pushf
not eax
add eax, 0x9ea1f610
xor eax, 0xe57c5d29
rol eax, 0x44
popf
jmp 0x14007f361
xor ecx, ecx
call fcn.14008892e
jmp 0x14007f876
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1400897da
test eax, eax
jne 0x14007fa1f
mov rcx, rdi
call fcn.14008892e
jmp 0x14007fa5c
xor ecx, ecx
call fcn.14008892e
mov rsi, rdi
push rax
pushf
mov eax, 0xc0f2c02d
pushf
not eax
add eax, 0xe54322ac
xor eax, 0xebbb66f9
rol eax, 0x82
popf
pushf
not eax
add eax, 0xe7d2f686
xor eax, 0xa826e46b
rol eax, 0xa0
popf
jmp 0x14007f361
mov rcx, rbx
jmp 0x14007fa60
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret