Function at 0x14014ffdf
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0xf7cb5bc3
pushf
not eax
add eax, 0x51bdf927
xor eax, 0x507b2d0c
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x392069ec
xor eax, 0x2f96b97c
rol eax, 0xb4
popf
cmp eax, 4
jne 0x14015001c
popf
pop rax
jmp 0x1401502d3
cmp eax, 0xc
jne 0x14015002b
popf
pop rax
jmp 0x140150712
cmp eax, 0xa
jne 0x14015003a
popf
pop rax
jmp 0x14015060f
cmp eax, 0xb
jne 0x140150049
popf
pop rax
jmp 0x1401506d5
cmp eax, 0
jne 0x140150058
popf
pop rax
jmp 0x1401500df
cmp eax, 2
jne 0x140150067
popf
pop rax
jmp 0x140150208
cmp eax, 3
jne 0x140150076
popf
pop rax
jmp 0x14015029c
cmp eax, 6
jne 0x140150085
popf
pop rax
jmp 0x1401503de
cmp eax, 7
jne 0x140150094
popf
pop rax
jmp 0x1401504a6
cmp eax, 8
jne 0x1401500a3
popf
pop rax
jmp 0x14015050e
cmp eax, 0xd
jne 0x1401500b2
popf
pop rax
jmp 0x14015074f
cmp eax, 9
jne 0x1401500c1
popf
pop rax
jmp 0x1401505bd
cmp eax, 1
jne 0x1401500d0
popf
pop rax
jmp 0x1401501a8
cmp eax, 5
jne 0x1401500df
popf
pop rax
jmp 0x140150369
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1401500f9
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x14015014f
push rax
pushf
mov eax, 0xe8964bc0
pushf
not eax
add eax, 0x6040c027
xor eax, 0x7697263f
rol eax, 0x20
popf
pushf
not eax
add eax, 0x248c3010
xor eax, 0x7808e645
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x4bc8ca96
xor eax, 0x584d73a
rol eax, 0x8d
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xd74f53cf
pushf
not eax
add eax, 0x33bed88d
xor eax, 0x613c7fa4
rol eax, 0x42
popf
pushf
not eax
add eax, 0x7b868e33
xor eax, 0x759b3690
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x7d349b0e
xor eax, 0x68a9801a
rol eax, 0x23
popf
pushf
not eax
add eax, 0x68e39f2e
xor eax, 0x5f6f81fe
rol eax, 0x7a
popf
jmp 0x14015000d
xor eax, eax
jmp 0x14015075c
mov rbp, rbx
cmp word [rax], si
je 0x140150269
push rax
pushf
mov eax, 0x15583178
pushf
not eax
add eax, 0x4a8f3cf5
xor eax, 0x41ad103
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x417112a7
xor eax, 0x3c1836f2
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x82e8081
xor eax, 0x4aa3eff4
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbf6a07f
xor eax, 0x5f9019b
rol eax, 0xf8
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xd3d9219f
pushf
not eax
add eax, 0x5515536f
xor eax, 0x3ffeb270
rol eax, 0x22
popf
pushf
not eax
add eax, 0x54fbd737
xor eax, 0x59f1cb38
rol eax, 0xf9
popf
jmp 0x14015000d
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x6639d703
pushf
not eax
add eax, 0x6f629529
xor eax, 0x115caf4a
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x7deb082a
xor eax, 0x527279e
rol eax, 0xd4
popf
jmp 0x14015000d
inc rax
cmp word [rbp + rax*2], si
jne 0x140150336
push rax
pushf
mov eax, 0x26f2c0f6
pushf
not eax
add eax, 0x1d7db9f4
xor eax, 0x62ca4aa
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x5fe34c2f
xor eax, 0x4cc75eeb
rol eax, 0x92
popf
pushf
not eax
add eax, 0x7ffe65c
xor eax, 0x64e44fdb
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x791267fe
xor eax, 0x14fa9c94
rol eax, 0xb7
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0x7badb443
pushf
not eax
add eax, 0x3477e8e4
xor eax, 0x15faef53
rol eax, 7
popf
pushf
not eax
add eax, 0x10577b99
xor eax, 0x77e983c2
rol eax, 0xb9
popf
jmp 0x14015000d
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x1401503ab
push rax
pushf
mov eax, 0x1ec509de
pushf
not eax
add eax, 0x3c83dfbe
xor eax, 0x2fec02f2
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x354c6d5e
xor eax, 0x62273e6b
rol eax, 0x1a
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xd3508624
pushf
not eax
add eax, 0x410c9d11
xor eax, 0xe10649e
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x42003303
xor eax, 0x1bc56bdd
rol eax, 0x5f
popf
jmp 0x14015000d
mov qword [rsp + 0x38], rsi
push rbx
not rbx
add rbp, rbx
pop rbx
add rbp, 1
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.140144261
movsxd r14, eax
test eax, eax
jne 0x140150460
push rax
pushf
mov eax, 0x4d66bed1
pushf
not eax
add eax, 0x6e68d815
xor eax, 0x42924dd8
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x688202d7
xor eax, 0x4558c72e
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x7c998ab
xor eax, 0x27697934
rol eax, 0xac
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xa2351cff
pushf
not eax
add eax, 0x54d03e0e
xor eax, 0x61cbcd15
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x2e82c24c
xor eax, 0x2b9a8ccd
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x11f23bff
xor eax, 0x70feccbe
rol eax, 0x26
popf
jmp 0x14015000d
mov rcx, rbx
jmp 0x1401504aa
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1401501a8
mov rcx, r14
call fcn.140129d30
mov rdi, rax
test rax, rax
jne 0x140150564
push rax
pushf
mov eax, 0x86131191
pushf
not eax
add eax, 0xf0b3c29
xor eax, 0x224bbcc4
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x38c42148
xor eax, 0x2e630bca
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x5f73385b
xor eax, 0x5fb30e3c
rol eax, 0xa1
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xf9727219
pushf
not eax
add eax, 0x11b1265
xor eax, 0x6e10aa16
rol eax, 0x17
popf
pushf
not eax
add eax, 0x3d8798cc
xor eax, 0x38bb391e
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x5425249e
xor eax, 0x305aa3ca
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x5fc46327
xor eax, 0x50221921
rol eax, 0x34
popf
jmp 0x14015000d
xor ecx, ecx
call fcn.14011705c
jmp 0x1401504a6
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.140144261
test eax, eax
jne 0x14015067c
push rax
pushf
mov eax, 0x5ad2eb08
pushf
not eax
add eax, 0x78f3b7e9
xor eax, 0xb4bc1f0
rol eax, 0x35
popf
pushf
not eax
add eax, 0x10e5ad1a
xor eax, 0x13a2a33f
rol eax, 0xb
popf
pushf
not eax
add eax, 0x62118dd8
xor eax, 0x5f2d09ed
rol eax, 0x15
popf
jmp 0x14015000d
push rax
pushf
mov eax, 0xc9d6a0de
pushf
not eax
add eax, 0x5c5bf1f
xor eax, 0x6976f263
rol eax, 0xea
popf
pushf
not eax
add eax, 0x1ce7ad8
xor eax, 0x3cd9a5ad
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x4fa6548f
xor eax, 0x659854e3
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xd41659b
xor eax, 0x4900f514
rol eax, 0x35
popf
jmp 0x14015000d
mov rcx, rdi
call fcn.14011705c
jmp 0x14015074f
xor ecx, ecx
call fcn.14011705c
mov rsi, rdi
push rax
pushf
mov eax, 0xa89057e7
pushf
not eax
add eax, 0x62831861
xor eax, 0x7fd16bd6
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x282c26da
xor eax, 0x525477c8
rol eax, 0x36
popf
jmp 0x14015000d
mov rcx, rbx
jmp 0x140150753
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret