Function at 0x14000ec00
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov r13d, dword [0x140010010]
mov qword [rsp + 0xa0], rcx
cmp r13d, 0xffffffff
je 0x14000ecc8
sub r13d, 1
js 0x14000ec82
mov rax, qword [rsp + 0xa0]
mov r12, qword [0x140020328]
xor r14d, r14d
mov rdi, qword [sym.imp.ucrtbase.dll_strcmp]
lea rbp, [rax + 1]
jmp 0x14000ec59
lea r14d, [rsi + 1]
cmp r14d, r13d
jg 0x14000ec82
lea esi, [r13 + r14]
mov rcx, rbp
sar esi, 1
movsxd rbx, esi
shl rbx, 4
add rbx, r12
lea rdx, [rbx + 1]
call rdi
test eax, eax
je 0x14000ecc0
jns 0x14000ec50
lea r13d, [rsi - 1]
cmp r14d, r13d
jle 0x14000ec59
mov rcx, qword [rsp + 0xa0]
movzx eax, byte [0x140010014]
cmp byte [rcx], 0
js 0x14000ecb0
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, qword [rsp + 0xa0]
mov byte [rdi], al
jmp 0x14000ec96
movzx eax, byte [rbx]
jmp 0x14000ec96
lea rcx, str.WINEDEBUG
call qword [sym.imp.ucrtbase.dll_getenv]
mov dword [0x140010010], 0
mov rcx, rax
test rax, rax
je 0x14000ec82
call qword [sym.imp.ucrtbase.dll__strdup]
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14000ee17
mov r12, qword [rsp + 0x28]
mov edx, 0x2c
mov rcx, r12
xor edi, edi
call qword [sym.imp.ucrtbase.dll_strchr]
test rax, rax
je 0x14000ed1c
mov byte [rax], 0
lea rdi, [rax + 1]
lea rdx, [0x14001a0f0]
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strcspn]
lea r13, [r12 + rax]
mov rbx, rax
movzx esi, byte [r13]
test sil, sil
je 0x14000edb8
cmp r13, r12
jbe 0x14000ee40
mov eax, 5
xor r14d, r14d
lea r15, str.fixme
cdqe
cmp rax, rbx
jne 0x14000ed72
mov r8, rbx
mov rdx, r15
mov rcx, r12
call sym.memcmp
test eax, eax
je 0x14000ef85
add r14, 1
cmp r14, 4
je 0x14000eda8
lea rax, str.fixme
mov r15, qword [rax + r14*8]
mov rcx, r15
call qword [sym.imp.ucrtbase.dll_strlen]
cdqe
cmp rax, rbx
je 0x14000ed5c
add r14, 1
cmp r14, 4
jne 0x14000ed7c
nop dword [rax]
test rdi, rdi
je 0x14000ee0c
mov r12, rdi
jmp 0x14000ed00
movzx esi, byte [r12]
cmp sil, 0x2d
je 0x14000ee28
lea ebx, [rsi - 0x2b]
and ebx, 0xfd
je 0x14000eed0
mov r15d, 0xffffffff
xor ebx, ebx
test sil, sil
je 0x14000eda8
mov rbp, qword [sym.imp.ucrtbase.dll_strcmp]
lea rdx, [0x14001a0f3]
mov rcx, r12
call rbp
test eax, eax
jne 0x14000ee50
not ebx
and bl, byte [0x140010014]
or ebx, r15d
mov byte [0x140010014], bl
test rdi, rdi
jne 0x14000edad
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.ucrtbase.dll_free]
mov r13d, dword [0x140010010]
jmp 0x14000ec29
mov ebx, 0xffffffff
xor r15d, r15d
mov r13, r12
movzx esi, byte [r13 + 1]
lea r12, [r13 + 1]
jmp 0x14000edda
mov r12, r13
jmp 0x14000edbd
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strlen]
mov qword [rsp + 0x30], rax
cmp rax, 0xe
ja 0x14000eda8
mov eax, dword [0x140010010]
mov rcx, qword [0x140020328]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x38], rcx
sub eax, 1
js 0x14000f0aa
xor r13d, r13d
mov qword [rsp + 0x40], rdi
mov r14, rcx
mov byte [rsp + 0x4f], bl
mov edi, r13d
mov ebx, eax
mov r13, rbp
jmp 0x14000eea7
lea edi, [rbp + 1]
cmp edi, ebx
jg 0x14000eef6
lea ebp, [rbx + rdi]
mov rcx, r12
sar ebp, 1
movsxd rsi, ebp
shl rsi, 4
add rsi, r14
lea rdx, [rsi + 1]
call r13
test eax, eax
je 0x14000eede
jns 0x14000eea0
lea ebx, [rbp - 1]
jmp 0x14000eea3
mov r13, r12
mov r15d, 0xffffffff
jmp 0x14000ee33
movzx eax, byte [rsp + 0x4f]
mov rdi, qword [rsp + 0x40]
not eax
and al, byte [rsi]
or eax, r15d
mov byte [rsi], al
jmp 0x14000eda8
movsxd rbp, edi
movzx ebx, byte [rsp + 0x4f]
mov rdi, qword [rsp + 0x40]
mov rsi, rbp
mov r13, rbp
shl rsi, 4
mov eax, dword [0x140020330]
cmp dword [rsp + 0x48], eax
jge 0x14000f039
add rsi, qword [rsp + 0x38]
cmp r13d, dword [rsp + 0x48]
jl 0x14000f00c
mov r13, qword [rsp + 0x30]
lea rax, [rsi + 1]
add r13, 1
cmp r13d, 8
jae 0x14000efb8
test r13b, 4
jne 0x14000f0c5
test r13d, r13d
je 0x14000ef61
movzx edx, byte [r12]
mov byte [rsi + 1], dl
test r13b, 2
jne 0x14000f0de
mov eax, ebx
not eax
and al, byte [0x140010014]
or eax, r15d
mov r15d, dword [rsp + 0x48]
mov byte [rsi], al
add r15d, 1
mov dword [0x140010010], r15d
jmp 0x14000eda8
mov eax, 1
mov ecx, r14d
shl eax, cl
mov ebx, eax
cmp sil, 0x2b
je 0x14000f09d
sub esi, 0x2b
and esi, 0xfd
mov r15d, esi
je 0x14000ee33
mov r12, r13
xor r15d, r15d
jmp 0x14000eddf
mov rdx, qword [r12]
lea r8, [rsi + 9]
mov r10, r12
and r8, 0xfffffffffffffff8
mov qword [rsi + 1], rdx
mov edx, r13d
mov rcx, qword [r12 + rdx - 8]
mov qword [rax + rdx - 8], rcx
sub rax, r8
add r13d, eax
sub r10, rax
and r13d, 0xfffffff8
cmp r13d, 8
jb 0x14000ef61
and r13d, 0xfffffff8
xor eax, eax
mov edx, eax
add eax, 8
mov rcx, qword [r10 + rdx]
mov qword [r8 + rdx], rcx
cmp eax, r13d
jb 0x14000eff5
jmp 0x14000ef61
mov r8d, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
lea rax, [rbp + 1]
mov rdx, rsi
shl rax, 4
sub r8d, r13d
add rcx, rax
movsxd r8, r8d
shl r8, 4
call qword [sym.imp.ucrtbase.dll_memmove]
jmp 0x14000ef2d
add eax, eax
mov edx, 0x10
cmp eax, edx
cmovl eax, edx
mov dword [0x140020330], eax
cdqe
shl rax, 4
mov r8, rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
cmp qword [rsp + 0x38], 0
mov rcx, qword [rax + 0x30]
je 0x14000f0b6
mov r9, r8
xor edx, edx
mov r8, qword [rsp + 0x38]
call qword [sym.imp.kernel32.dll_HeapReAlloc]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [0x140020328], rax
mov eax, dword [0x140010010]
mov dword [rsp + 0x48], eax
jmp 0x14000ef1d
mov r12, r13
mov r15d, eax
xor ebx, ebx
jmp 0x14000ee30
xor esi, esi
xor ebp, ebp
xor r13d, r13d
jmp 0x14000ef0d
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x38], rax
jmp 0x14000f082
mov edx, dword [r12]
mov r13d, r13d
mov dword [rsi + 1], edx
mov edx, dword [r12 + r13 - 4]
mov dword [rax + r13 - 4], edx
jmp 0x14000ef61
mov r13d, r13d
movzx edx, word [r12 + r13 - 2]
mov word [rax + r13 - 2], dx
jmp 0x14000ef61