Function at 0x140189424
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x2e49bb5b
pushf
not eax
add eax, 0x8af6f47f
xor eax, 0xdd48b161
rol eax, 0x92
popf
pushf
not eax
add eax, 0xf37808ad
xor eax, 0xd26e0116
rol eax, 0xf9
popf
cmp eax, 4
jne 0x140189461
popf
pop rax
jmp 0x140189705
cmp eax, 0
jne 0x140189470
popf
pop rax
jmp 0x140189524
cmp eax, 3
jne 0x14018947f
popf
pop rax
jmp 0x1401896bb
cmp eax, 1
jne 0x14018948e
popf
pop rax
jmp 0x1401895da
cmp eax, 0xd
jne 0x14018949d
popf
pop rax
jmp 0x140189b28
cmp eax, 7
jne 0x1401894ac
popf
pop rax
jmp 0x14018991b
cmp eax, 6
jne 0x1401894bb
popf
pop rax
jmp 0x14018985c
cmp eax, 0xb
jne 0x1401894ca
popf
pop rax
jmp 0x140189a72
cmp eax, 0xc
jne 0x1401894d9
popf
pop rax
jmp 0x140189ac5
cmp eax, 8
jne 0x1401894e8
popf
pop rax
jmp 0x140189983
cmp eax, 5
jne 0x1401894f7
popf
pop rax
jmp 0x14018979b
cmp eax, 2
jne 0x140189506
popf
pop rax
jmp 0x140189614
cmp eax, 9
jne 0x140189515
popf
pop rax
jmp 0x140189a0c
cmp eax, 0xa
jne 0x140189524
popf
pop rax
jmp 0x140189a4b
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x14018953e
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x140189581
push rax
pushf
mov eax, 0x1ccf7910
pushf
not eax
add eax, 0xb9e03ef0
xor eax, 0xf6aa650e
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe42f798b
xor eax, 0x9ea08f07
rol eax, 0xcb
popf
jmp 0x140189452
push rax
pushf
mov eax, 0x4062319c
pushf
not eax
add eax, 0xcc1d960b
xor eax, 0xf6cd3d55
rol eax, 0x92
popf
pushf
not eax
add eax, 0x8db85e0a
xor eax, 0xb8919683
rol eax, 0xf
popf
pushf
not eax
add eax, 0xa3679491
xor eax, 0xc022531f
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xb956a435
xor eax, 0xd6342739
rol eax, 0x51
popf
jmp 0x140189452
xor eax, eax
jmp 0x140189b35
mov rbp, rbx
cmp word [rax], si
je 0x140189675
push rax
pushf
mov eax, 0x6070519b
pushf
not eax
add eax, 0xf565186c
xor eax, 0xdbccfe11
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x833b9e9d
xor eax, 0xce922695
rol eax, 0x72
popf
pushf
not eax
add eax, 0xf194cbad
xor eax, 0xd588a9e2
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x9e785b0d
xor eax, 0xec07a657
rol eax, 0xaf
popf
jmp 0x140189452
push rax
pushf
mov eax, 0x1b3f3284
pushf
not eax
add eax, 0xc8b339a5
xor eax, 0xe2fff09a
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x98393a70
xor eax, 0xed993ef9
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xe974bcc4
xor eax, 0xa8459aaa
rol eax, 0x3b
popf
jmp 0x140189452
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xcfed2128
pushf
not eax
add eax, 0xe5933ed1
xor eax, 0xff17113c
rol eax, 0x30
popf
pushf
not eax
add eax, 0xba9e33c3
xor eax, 0x963bfdf9
rol eax, 0x56
popf
pushf
not eax
add eax, 0xd4a4f07d
xor eax, 0x9a9663cf
rol eax, 0x93
popf
jmp 0x140189452
inc rax
cmp word [rbp + rax*2], si
jne 0x140189755
push rax
pushf
mov eax, 0xd6a41ae0
pushf
not eax
add eax, 0xf167b0b6
xor eax, 0xf8f12305
rol eax, 0x82
popf
pushf
not eax
add eax, 0xf8ea47d6
xor eax, 0xee18310f
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xbbb3f51b
xor eax, 0xdb3e1b69
rol eax, 0x7d
popf
jmp 0x140189452
push rax
pushf
mov eax, 0x9bd4cab7
pushf
not eax
add eax, 0xc415ea39
xor eax, 0xd343b7eb
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xbf03b131
xor eax, 0xe8016dd3
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x8a91db33
xor eax, 0x9eb8e0f6
rol eax, 0xe4
popf
jmp 0x140189452
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x140189803
push rax
pushf
mov eax, 0xc698eb48
pushf
not eax
add eax, 0xf807466f
xor eax, 0xee805e46
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xb26fd205
xor eax, 0xe1c2cf43
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb98e70cf
xor eax, 0x8547ecfe
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xb08a17e3
xor eax, 0xe88e5df8
rol eax, 0x80
popf
jmp 0x140189452
push rax
pushf
mov eax, 0x2a88022a
pushf
not eax
add eax, 0x8d83e287
xor eax, 0xbac9bc33
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xb18f0bc1
xor eax, 0xda853a70
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xd44a3c25
xor eax, 0x9293a346
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc5f5e636
xor eax, 0xa84651e2
rol eax, 0x43
popf
jmp 0x140189452
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1401ac4ac
movsxd r14, eax
test eax, eax
jne 0x1401898d5
push rax
pushf
mov eax, 0xed198c89
pushf
not eax
add eax, 0xb074388c
xor eax, 0xfefc998a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xfb10a8d1
xor eax, 0xabf469ae
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xfaceab06
xor eax, 0x8fed949a
rol eax, 0xc9
popf
jmp 0x140189452
push rax
pushf
mov eax, 0xf5821d6b
pushf
not eax
add eax, 0xa9b65245
xor eax, 0xff3f5e09
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xc7093e3e
xor eax, 0xc3cd4311
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xd2ba6823
xor eax, 0xe5aab3e5
rol eax, 0xc2
popf
jmp 0x140189452
mov rcx, rbx
jmp 0x14018991f
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1401895da
mov rcx, r14
call fcn.14015e9d4
mov rdi, rax
test rax, rax
jne 0x1401899d9
push rax
pushf
mov eax, 0xcaff284d
pushf
not eax
add eax, 0xd7e6d44e
xor eax, 0xe4bfdde1
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xee5fbdf6
xor eax, 0xa9529550
rol eax, 0x40
popf
pushf
not eax
add eax, 0xcf11a611
xor eax, 0xdde26543
rol eax, 0xe6
popf
jmp 0x140189452
push rax
pushf
mov eax, 0x21d6f2f7
pushf
not eax
add eax, 0xf0a16dcd
xor eax, 0xd099935d
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd7e3e9b6
xor eax, 0xd4196984
rol eax, 0xf9
popf
jmp 0x140189452
xor ecx, ecx
call fcn.14019fe1c
jmp 0x14018991b
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1401ac4ac
test eax, eax
jne 0x140189ac5
mov rcx, rdi
call fcn.14019fe1c
jmp 0x140189b28
xor ecx, ecx
call fcn.14019fe1c
mov rsi, rdi
push rax
pushf
mov eax, 0xdf5918a3
pushf
not eax
add eax, 0xdfd3ec21
xor eax, 0xddf763e1
rol eax, 0x80
popf
pushf
not eax
add eax, 0xd17d86e1
xor eax, 0xf2e7f076
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x911bec07
xor eax, 0xb516c5d4
rol eax, 0x16
popf
pushf
not eax
add eax, 0xde08c499
xor eax, 0xf25250cf
rol eax, 0x10
popf
jmp 0x140189452
mov rcx, rbx
jmp 0x140189b2c
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret