Function at 0x140006230
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x14003f080]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov edi, edx
mov rbx, rcx
xor esi, esi
mov r15d, esi
mov dword [rsp + 0x30], esi
call fcn.140005f70
mov r13, rax
movzx r9d, ax
shl r9, 0x10
xor r8d, r8d
mov edx, 0x401
mov rcx, qword [0x140041e98]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [0x140041e98]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov r8d, 0xf0
lea rcx, [rbp + 0x120]
call fcn.14002b960
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8d, edi
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140004b90
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x120]
call fcn.140007750
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x140006330
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000632b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b78
call fcn.14000bad0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov r12, rsi
lea r14, [0x140000000]
lea rdi, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
nop dword [rax + rax]
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x160]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rsp + 0x60]
call fcn.1400045d0
mov r8, qword [rax]
mov dl, 0xa
mov rcx, rax
call qword [r8 + 0x40]
movzx ebx, al
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400063bf
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x1400063bf
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
movzx r8d, bl
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x120]
call fcn.14000a710
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x140006a69
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x20]
call fcn.14002b960
lea rax, [r14 + 0x38760]
mov qword [rbp + 0x20], rax
lea rax, [r14 + 0x386b0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 0
mov dword [rbp + 0xd0], esi
mov qword [rbp + 0xd8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0x110], 0
or r15d, 1
mov dword [rsp + 0x30], r15d
mov qword [rbp + 0xb8], rdi
mov dword [rbp + 0xb4], 0x80
mov qword [rbp + 0x28], rsi
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0xb8]
call fcn.140004450
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x2c], edx
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx + 0x1c], edx
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x1c], edx
lea rax, [rbp + 0x38]
mov qword [rsp + 0x58], rax
lea rcx, [rbp + 0x38]
call fcn.140004370
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x38], rax
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rdx, qword [rbp - 0x40]
xor r9d, r9d
mov r8, qword [rbp - 0x30]
lea rcx, [rbp + 0x38]
call fcn.1400094c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov r8b, 0x7c
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x20]
call fcn.14000a710
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x140006974
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x60]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rsp + 0x70]
call fcn.1400045d0
mov r8, qword [rax]
mov dl, 0xa
mov rcx, rax
call qword [r8 + 0x40]
movzx ebx, al
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400065d1
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x1400065d1
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
movzx r8d, bl
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.14000a710
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x140006974
lea rbx, [rbp - 0x60]
mov rsi, qword [rbp - 0x60]
mov r14, qword [rbp - 0x48]
cmp r14, 0xf
cmova rbx, rsi
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x14000669a
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x210]
call fcn.14002b960
lea rcx, str.__n_r_t
lea rsi, [0x1400385c4]
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rbp + rax + 0x210], 1
inc rcx
cmp rcx, rsi
jne 0x140006640
mov rsi, qword [rbp - 0x60]
lea rcx, [rdi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
add rax, rbx
movzx ecx, byte [rax]
cmp byte [rbp + rcx + 0x210], 0
je 0x140006695
nop dword [rax]
cmp rax, rbx
je 0x14000669a
dec rax
movzx ecx, byte [rax]
cmp byte [rbp + rcx + 0x210], 0
jne 0x140006680
sub rax, rbx
jmp 0x1400066a1
mov rax, 0xffffffffffffffff
lea rcx, [rax + 1]
cmp rdi, rcx
jb 0x140006b90
mov qword [rbp - 0x50], rcx
lea rax, [rbp - 0x60]
cmp r14, 0xf
cmova rax, rsi
mov byte [rax + rcx], 0
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rcx, qword [rbp - 0x60]
mov r8d, 0x104
lea rdx, [rbp + 0x210]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
dec eax
cmp eax, 0x103
ja 0x14000672f
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xor esi, esi
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rbp + 0x210]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x140006710
lea rdx, [rbp + 0x210]
lea rcx, [rbp]
call fcn.140004b90
or r15d, 0x10
jmp 0x14000675d
lea rdx, str.Failed_to_expand_environment_variables_in_path.
lea rcx, [0x140040790]
call fcn.140004710
mov rcx, rax
call fcn.1400049c0
lea rdx, [rbp - 0x60]
lea rcx, [rbp]
call fcn.140003280
or r15d, 0x10
xor esi, esi
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova r8, qword [rbp - 0x80]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rbp - 0x70]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
mov r8, rbx
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140009670
or r15d, 0x20
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova r8, qword [rbp - 0x80]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp - 0x70]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rdx, [0x1400385c8]
lea rcx, [rsp + 0x38]
call fcn.140007c20
nop
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
lea r8, [rbp]
lea rdx, [rsp + 0x38]
call fcn.140005b30
movzx ebx, al
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x140006853
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000684e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b7e
call fcn.14000bad0
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], si
test bl, bl
jne 0x1400068c9
lea rdx, str.Failed_to_decrypt_resource_ID:
lea rcx, [0x140040790]
call fcn.140004710
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
mov rcx, rax
call fcn.140005300
lea rdx, [0x1400385d0]
mov rcx, rax
call fcn.140004710
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
mov rcx, rax
call fcn.140005300
mov rcx, rax
call fcn.1400049c0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140006909
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b84
call fcn.14000bad0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140006954
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000694f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b8a
call fcn.14000bad0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
lea rdi, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
lea r14, [0x140000000]
jmp 0x1400069a9
lea rdx, str.Invalid_format_in_line:
lea rcx, [0x140040790]
call fcn.140004710
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
mov rcx, rax
call fcn.140005300
mov rcx, rax
call fcn.1400049c0
inc r12
xor r9d, r9d
mov r8, r12
mov edx, 0x402
mov rcx, qword [0x140041e98]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140006a00
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b96
call fcn.14000bad0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140006a4b
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b9c
call fcn.14000bad0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
lea rcx, [rbp + 0x20]
call fcn.140006bb0
jmp 0x140006360
xor r9d, r9d
mov r8, r13
mov edx, 0x402
mov rcx, qword [0x140041e98]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140006abd
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b78
call fcn.14000bad0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x130]
call fcn.140007650
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x120], rdi
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x11c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x1b0], rax
lea rcx, [rbp + 0x1b0]
call fcn.14000b18c
nop
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.14000bab0
mov rbx, qword [rsp + 0x480]
add rsp, 0x430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140013368
nop
call fcn.140013368
nop
call fcn.140013368
nop
call fcn.140013368
int3
call fcn.1400045b0
nop
call fcn.140013368
nop
call fcn.140013368
int3