Function at 0x1403bee20
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x138
mov edx, dword [0x141a4fa80]
or edx, dword [0x141a4fa84]
or edx, dword [0x141a4fa78]
mov rax, qword [0x14194d6d8]
xor rax, rsp
mov qword [rsp + 0x128], rax
or edx, dword [0x141a4fa7c]
jne 0x1403bf069
lea rcx, str.FORT_BLOCKSIZE
lea rdx, [rsp + 0x24]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, eax
test rax, rax
je 0x1403bee8c
cmp rax, 0x104
jae 0x1403bee85
inc rax
je 0x1403bee93
jmp 0x1403bee9f
mov byte [rsp + 0x24], 0
jmp 0x1403bee9f
mov byte [rsp + 0x24], 0
jne 0x1403bee9f
mov dword [0x141a4fa80], 0xffffffff
jmp 0x1403beee8
dec rax
lea rcx, [rsp + 0x24]
mov edx, eax
mov r8d, 2
lea r9, [rsp + 0x20]
call fcn.1403f4a50
test eax, eax
jne 0x1403beecc
mov eax, dword [rsp + 0x20]
test eax, eax
jl 0x1403beecc
cmp eax, 0x7fffc000
jle 0x1403beed8
mov dword [0x141a4fa80], 0xfffffffe
jmp 0x1403beee8
add eax, 0x1ff
and eax, 0xfffffe00
mov dword [0x141a4fa80], eax
lea rcx, str.FORT_BUFFERCOUNT
lea rdx, [rsp + 0x24]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, eax
test rax, rax
je 0x1403bef1d
cmp rax, 0x104
jae 0x1403bef16
inc rax
je 0x1403bef24
jmp 0x1403bef30
mov byte [rsp + 0x24], 0
jmp 0x1403bef30
mov byte [rsp + 0x24], 0
jne 0x1403bef30
mov dword [0x141a4fa84], 0xffffffff
jmp 0x1403bef69
dec rax
lea rcx, [rsp + 0x24]
mov edx, eax
mov r8d, 2
lea r9, [rsp + 0x20]
call fcn.1403f4a50
test eax, eax
jne 0x1403bef57
mov eax, dword [rsp + 0x20]
cmp eax, 0x7f
jbe 0x1403bef63
mov dword [0x141a4fa84], 0xfffffffe
jmp 0x1403bef69
mov dword [0x141a4fa84], eax
lea rcx, str.FORT_FMT_RECL
lea rdx, [rsp + 0x24]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, eax
test rax, rax
je 0x1403bef9e
cmp rax, 0x104
jae 0x1403bef97
inc rax
je 0x1403befa5
jmp 0x1403befb1
mov byte [rsp + 0x24], 0
jmp 0x1403befb1
mov byte [rsp + 0x24], 0
jne 0x1403befb1
mov dword [0x141a4fa78], 0xffffffff
jmp 0x1403befe9
dec rax
lea rcx, [rsp + 0x24]
mov edx, eax
mov r8d, 2
lea r9, [rsp + 0x20]
call fcn.1403f4a50
test eax, eax
jne 0x1403befdf
mov eax, dword [rsp + 0x20]
test eax, eax
jl 0x1403befdf
mov dword [0x141a4fa78], eax
jmp 0x1403befe9
mov dword [0x141a4fa78], 0xfffffffe
lea rcx, str.FORT_UFMT_RECL
lea rdx, [rsp + 0x24]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, eax
test rax, rax
je 0x1403bf01e
cmp rax, 0x104
jae 0x1403bf017
inc rax
je 0x1403bf025
jmp 0x1403bf031
mov byte [rsp + 0x24], 0
jmp 0x1403bf031
mov byte [rsp + 0x24], 0
jne 0x1403bf031
mov dword [0x141a4fa7c], 0xffffffff
jmp 0x1403bf069
dec rax
lea rcx, [rsp + 0x24]
mov edx, eax
mov r8d, 2
lea r9, [rsp + 0x20]
call fcn.1403f4a50
test eax, eax
jne 0x1403bf05f
mov eax, dword [rsp + 0x20]
test eax, eax
jl 0x1403bf05f
mov dword [0x141a4fa7c], eax
jmp 0x1403bf069
mov dword [0x141a4fa7c], 0xfffffffe
mov rcx, qword [rsp + 0x128]
mov qword [rsp + 0x128], 0
xor rcx, rsp
cmp rcx, qword [0x14194d6d8]
jne 0x1403bf091
add rsp, 0x138
ret
call fcn.14043dac0
nop
nop word [rax + rax]
sub rsp, 0x48
lea rcx, [0x141a621f8]
call fcn.140340e60
mov rcx, qword [0x141a621e8]
test rcx, rcx
je 0x1403bf18f
xor eax, eax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov rdi, rax
mov qword [rsp + 0x28], r12
mov r12, rcx
mov qword [rsp + 0x20], r13
mov rcx, r12
mov rsi, qword [r12]
mov rbx, qword [r12 + 8]
mov qword [r12], rdi
mov qword [r12 + 8], rdi
call fcn.14035a530
test eax, eax
jne 0x1403bf1ab
mov r12, rbx
test rsi, rsi
je 0x1403bf16d
test byte [rsi + 0x291], 0x18
jne 0x1403bf16d
mov r13, qword [rsi + 0xc0]
test r13, r13
je 0x1403bf161
test byte [r13 + 0xb7], 2
je 0x1403bf13f
mov rcx, qword [r13 + 8]
call fcn.14035a530
test eax, eax
jne 0x1403bf1ab
mov qword [r13 + 8], 0
movzx edx, word [rsi + 0x27a]
test edx, edx
jg 0x1403bf161
mov rcx, r13
call fcn.14035a530
test eax, eax
jne 0x1403bf1ab
mov qword [rsi + 0xc0], 0
mov rcx, rsi
call fcn.14035a530
test eax, eax
jne 0x1403bf1ab
test rbx, rbx
jne 0x1403bf0e1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
mov r12, qword [rsp + 0x28]
mov r13, qword [rsp + 0x20]
mov qword [0x141a621e8], 0
xor eax, eax
mov dword [0x141a621f8], 0
add rsp, 0x48
ret
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
mov r12, qword [rsp + 0x28]
mov r13, qword [rsp + 0x20]
mov dword [0x141a621f8], 0
add rsp, 0x48
ret