Function at 0x14013fe4e
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x85a83b80
pushf
not eax
add eax, 0x500d5dd3
xor eax, 0x1d970383
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x7ac41397
xor eax, 0x57dcd4be
rol eax, 0x47
popf
pushf
not eax
add eax, 0x57345d3e
xor eax, 0x638e8da9
rol eax, 0x74
popf
cmp eax, 3
jne 0x14013fe9e
popf
pop rax
jmp 0x1401400f8
cmp eax, 7
jne 0x14013fead
popf
pop rax
jmp 0x140140328
cmp eax, 4
jne 0x14013febc
popf
pop rax
jmp 0x140140155
cmp eax, 8
jne 0x14013fecb
popf
pop rax
jmp 0x14014036a
cmp eax, 0
jne 0x14013feda
popf
pop rax
jmp 0x14013ff61
cmp eax, 0xc
jne 0x14013fee9
popf
pop rax
jmp 0x140140597
cmp eax, 6
jne 0x14013fef8
popf
pop rax
jmp 0x140140260
cmp eax, 0xa
jne 0x14013ff07
popf
pop rax
jmp 0x140140458
cmp eax, 2
jne 0x14013ff16
popf
pop rax
jmp 0x140140064
cmp eax, 0xb
jne 0x14013ff25
popf
pop rax
jmp 0x140140531
cmp eax, 1
jne 0x14013ff34
popf
pop rax
jmp 0x140140017
cmp eax, 9
jne 0x14013ff43
popf
pop rax
jmp 0x140140406
cmp eax, 0xd
jne 0x14013ff52
popf
pop rax
jmp 0x1401405e7
cmp eax, 5
jne 0x14013ff61
popf
pop rax
jmp 0x1401401c5
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x14013ff7b
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x14013ffd1
push rax
pushf
mov eax, 0x9d64226e
pushf
not eax
add eax, 0x28a76d89
xor eax, 0x6b245b3d
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x5ac02002
xor eax, 0x294c7376
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x3a90d585
xor eax, 0x545fc71a
rol eax, 0x4a
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0x341a2cd3
pushf
not eax
add eax, 0x1bc4dcdb
xor eax, 0x21ecd8a1
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x7e239059
xor eax, 0xa166e73
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xda2957a
xor eax, 0x5289bb92
rol eax, 0x3f
popf
jmp 0x14013fe8f
xor eax, eax
jmp 0x1401405f4
mov rbp, rbx
cmp word [rax], si
je 0x1401400c5
push rax
pushf
mov eax, 0xa4b211b0
pushf
not eax
add eax, 0x62431a14
xor eax, 0x5f8f2875
rol eax, 0x93
popf
pushf
not eax
add eax, 0x75684d11
xor eax, 0x45242c04
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x6814803
xor eax, 0x5e38bfe6
rol eax, 0x74
popf
pushf
not eax
add eax, 0x13a1cb2
xor eax, 0xe3d1
rol eax, 0xcf
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0x91589e80
pushf
not eax
add eax, 0x41146860
xor eax, 0x3d81b672
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x24171214
xor eax, 0x71cfc212
rol eax, 0x5f
popf
jmp 0x14013fe8f
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xc8523f0d
pushf
not eax
add eax, 0xb0618bb
xor eax, 0x30f31757
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x6f4e4290
xor eax, 0xb879d31
rol eax, 0xff
popf
pushf
not eax
add eax, 0x1e9d8745
xor eax, 0x6a9b63fc
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x43776d2
xor eax, 0x6462dea3
rol eax, 0x1d
popf
jmp 0x14013fe8f
inc rax
cmp word [rbp + rax*2], si
jne 0x140140192
push rax
pushf
mov eax, 0x5cf77b72
pushf
not eax
add eax, 0x20d51a16
xor eax, 0x74125c4e
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x26a278be
xor eax, 0x4ab09747
rol eax, 0x4f
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0xd2f9f7bd
pushf
not eax
add eax, 0x7b10cd00
xor eax, 0x28494a52
rol eax, 0x75
popf
pushf
not eax
add eax, 0x2dc2a72f
xor eax, 0x4bb29b3a
rol eax, 0xc2
popf
jmp 0x14013fe8f
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x140140207
push rax
pushf
mov eax, 0x13ed69f9
pushf
not eax
add eax, 0x6bb12ba2
xor eax, 0x3e1965b2
rol eax, 0x36
popf
pushf
not eax
add eax, 0xc94ef55
xor eax, 0x9fa78ab
rol eax, 0xc7
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0x1796d5e9
pushf
not eax
add eax, 0x7846b23f
xor eax, 0x4a5e66aa
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x1ea40adf
xor eax, 0x1e2cc699
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x4215844d
xor eax, 0x1820845e
rol eax, 0x36
popf
pushf
not eax
add eax, 0x2d41fc16
xor eax, 0xba9599b
rol eax, 0xea
popf
jmp 0x14013fe8f
mov qword [rsp + 0x38], rsi
push rbx
not rbx
add rbp, rbx
pop rbx
add rbp, 1
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.140134307
movsxd r14, eax
test eax, eax
jne 0x1401402f5
push rax
pushf
mov eax, 0xf17e0781
pushf
not eax
add eax, 0x69964548
xor eax, 0x7b13443b
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xea3d756
xor eax, 0x5bae6a7a
rol eax, 0xc
popf
pushf
not eax
add eax, 0x67e11e91
xor eax, 0x793ccc01
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x79ae6921
xor eax, 0x237021c5
rol eax, 0xf7
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0xeb015c5
pushf
not eax
add eax, 0x5f56144d
xor eax, 0x26611bc7
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x691035c6
xor eax, 0x69d948a
rol eax, 0x5b
popf
jmp 0x14013fe8f
mov rcx, rbx
jmp 0x14014032c
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x140140017
mov rcx, r14
call fcn.140119cc6
mov rdi, rax
test rax, rax
jne 0x1401403ad
push rax
pushf
mov eax, 0x98770752
pushf
not eax
add eax, 0x14e325be
xor eax, 0x5fcb4745
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x124bd491
xor eax, 0x3c004b37
rol eax, 0x3c
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0xa384b5d
pushf
not eax
add eax, 0x505cc0c8
xor eax, 0x56f05ee7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x5711dbe8
xor eax, 0xce93f66
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x37d82a7e
xor eax, 0x36dcdd11
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x429e5dc5
xor eax, 0x649c6e8f
rol eax, 0x35
popf
jmp 0x14013fe8f
xor ecx, ecx
call fcn.140107465
jmp 0x140140328
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.140134307
test eax, eax
jne 0x1401404d8
push rax
pushf
mov eax, 0x34a34e7e
pushf
not eax
add eax, 0x2b1e29d9
xor eax, 0xbd1bd7a
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x6c38b523
xor eax, 0x55e22c74
rol eax, 0x48
popf
pushf
not eax
add eax, 0x583e5ef3
xor eax, 0xaa05525
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x45ad036a
xor eax, 0x5327865f
rol eax, 0xc8
popf
jmp 0x14013fe8f
push rax
pushf
mov eax, 0x1c3673bb
pushf
not eax
add eax, 0x5e15d883
xor eax, 0x33236052
rol eax, 0x54
popf
pushf
not eax
add eax, 0x6e10703f
xor eax, 0x7c399cea
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x388e1ac6
xor eax, 0x10573d15
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xbf38531
xor eax, 0x65cc295a
rol eax, 0xed
popf
jmp 0x14013fe8f
mov rcx, rdi
call fcn.140107465
jmp 0x1401405e7
xor ecx, ecx
call fcn.140107465
mov rsi, rdi
push rax
pushf
mov eax, 0x386c6174
pushf
not eax
add eax, 0x3f526a32
xor eax, 0x479bd03a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x7eada463
xor eax, 0x54f82353
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x7b7233a1
xor eax, 0x6fde31bb
rol eax, 0xbb
popf
jmp 0x14013fe8f
mov rcx, rbx
jmp 0x1401405eb
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret