Function at 0x406fa0
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov r14d, dword [0x00408060]
mov rbp, rcx
cmp r14d, 0xffffffff
je 0x407050
sub r14d, 1
js 0x407019
mov r13, qword [0x0040d1e8]
mov rdi, qword [sym.imp.ucrtbase.dll_strcmp]
lea r12, [rbp + 1]
xor r15d, r15d
jmp 0x406ff1
lea r15d, [rsi + 1]
cmp r15d, r14d
jg 0x407019
lea esi, [r14 + r15]
mov rcx, r12
sar esi, 1
movsxd rbx, esi
shl rbx, 4
add rbx, r13
lea rdx, [rbx + 1]
call rdi
test eax, eax
je 0x407048
jns 0x406fe8
lea r14d, [rsi - 1]
cmp r15d, r14d
jle 0x406ff1
cmp byte [rbp], 0
movzx eax, byte [0x00408064]
js 0x407040
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov byte [rbp], al
jmp 0x407026
movzx eax, byte [rbx]
jmp 0x407026
lea rcx, str.WINEDEBUG
call qword [sym.imp.ucrtbase.dll_getenv]
mov dword [0x00408060], 0
mov rcx, rax
test rax, rax
je 0x407019
call qword [sym.imp.ucrtbase.dll__strdup]
mov qword [rsp + 0x20], rax
test rax, rax
je 0x40727e
mov qword [rsp + 0x90], rbp
mov r12, qword [rsp + 0x20]
mov edx, 0x2c
mov rcx, r12
xor ebp, ebp
call qword [sym.imp.ucrtbase.dll_strchr]
test rax, rax
je 0x4070ac
mov byte [rax], 0
lea rbp, [rax + 1]
lea rdx, [0x0040998a]
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strcspn]
lea r14, [r12 + rax]
mov rbx, rax
movzx esi, byte [r14]
test sil, sil
je 0x407158
cmp r14, r12
jbe 0x4071d0
mov eax, 5
mov r13, qword [sym.imp.ucrtbase.dll_strlen]
xor r15d, r15d
cdqe
cmp rax, rbx
jne 0x40710d
lea rax, str.fixme
mov r8, rbx
mov rcx, r12
mov rdx, qword [rax + r15*8]
call sym.memcmp
test eax, eax
je 0x407303
add r15, 1
cmp r15, 4
je 0x407140
lea rax, str.fixme
mov rcx, qword [rax + r15*8]
call r13
cdqe
cmp rax, rbx
je 0x4070ef
add r15, 1
cmp r15, 4
jne 0x407117
nop word cs:[rax + rax]
test rbp, rbp
je 0x40726b
mov r12, rbp
jmp 0x407090
movzx esi, byte [r12]
cmp sil, 0x2d
je 0x4071b0
lea ebx, [rsi - 0x2b]
and ebx, 0xfd
je 0x4071d8
mov r13d, 0xffffffff
xor ebx, ebx
test sil, sil
je 0x407140
mov ecx, 4
mov rsi, r12
lea rdi, [0x0040998d]
repe cmpsb byte [rsi], byte [rdi]
seta al
sbb al, 0
test al, al
jne 0x4071e8
not ebx
and bl, byte [0x00408064]
or r13d, ebx
mov byte [0x00408064], r13b
jmp 0x407140
mov ebx, 0xffffffff
xor r13d, r13d
mov r14, r12
movzx esi, byte [r14 + 1]
lea r12, [r14 + 1]
jmp 0x407176
mov r12, r14
jmp 0x40715d
mov r14, r12
mov r13d, 0xffffffff
jmp 0x4071bb
mov rcx, r12
call qword [sym.imp.ucrtbase.dll_strlen]
cmp rax, 0xe
ja 0x407140
mov eax, dword [0x00408060]
mov rdi, qword [0x0040d1e8]
mov dword [rsp + 0x38], eax
sub eax, 1
mov qword [rsp + 0x28], rdi
mov r14d, eax
js 0x4073d7
mov rax, qword [sym.imp.ucrtbase.dll_strcmp]
xor r15d, r15d
mov qword [rsp + 0x30], rbp
mov byte [rsp + 0x3f], bl
mov ebp, r15d
mov ebx, r14d
mov r14, rdi
mov r15, rax
jmp 0x407247
lea ebp, [rdi + 1]
cmp ebp, ebx
jg 0x4072a3
lea edi, [rbx + rbp]
mov rcx, r12
sar edi, 1
movsxd rsi, edi
shl rsi, 4
add rsi, r14
lea rdx, [rsi + 1]
call r15
test eax, eax
je 0x40728a
jns 0x407240
lea ebx, [rdi - 1]
jmp 0x407243
mov rbp, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.ucrtbase.dll_free]
mov r14d, dword [0x00408060]
jmp 0x406fc4
movzx ebx, byte [rsp + 0x3f]
mov rbp, qword [rsp + 0x30]
not ebx
and bl, byte [rsi]
or r13d, ebx
mov byte [rsi], r13b
jmp 0x407140
movsxd rsi, ebp
movzx ebx, byte [rsp + 0x3f]
mov rbp, qword [rsp + 0x30]
mov r15, rsi
shl rsi, 4
mov eax, dword [0x0040d1f0]
cmp dword [rsp + 0x38], eax
jge 0x407368
add rsi, qword [rsp + 0x28]
cmp r15d, dword [rsp + 0x38]
jl 0x407339
lea rcx, [rsi + 1]
mov rdx, r12
not ebx
call qword [sym.imp.ucrtbase.dll_strcpy]
mov r15d, dword [rsp + 0x38]
and bl, byte [0x00408064]
or r13d, ebx
add r15d, 1
mov byte [rsi], r13b
mov dword [0x00408060], r15d
jmp 0x407140
mov r13d, 1
mov ecx, r15d
shl r13d, cl
mov ebx, r13d
cmp sil, 0x2b
je 0x4073cd
sub esi, 0x2b
and esi, 0xfd
mov r13d, esi
je 0x4071bb
mov r12, r14
xor r13d, r13d
jmp 0x40717b
mov r8d, dword [rsp + 0x38]
lea eax, [r15 + 1]
mov rcx, qword [rsp + 0x28]
mov rdx, rsi
cdqe
sub r8d, r15d
shl rax, 4
movsxd r8, r8d
add rcx, rax
shl r8, 4
call qword [sym.imp.ucrtbase.dll_memmove]
jmp 0x4072d3
add eax, eax
mov edx, 0x10
cmp eax, 0x10
cmovl eax, edx
mov dword [0x0040d1f0], eax
cdqe
shl rax, 4
mov r8, rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
cmp qword [rsp + 0x28], 0
mov rcx, qword [rax + 0x30]
je 0x4073e1
mov r9, r8
xor edx, edx
mov r8, qword [rsp + 0x28]
call qword [sym.imp.kernel32.dll_HeapReAlloc]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [0x0040d1e8], rax
mov eax, dword [0x00408060]
mov dword [rsp + 0x38], eax
jmp 0x4072c7
mov r12, r14
xor ebx, ebx
jmp 0x4071b8
xor esi, esi
xor r15d, r15d
jmp 0x4072b7
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov qword [rsp + 0x28], rax
jmp 0x4073b2