Function at 0x140006d70
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x410]
sub rsp, 0x510
mov rax, qword [0x14003a120]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rsi, r9
mov qword [rsp + 0x78], r9
mov rax, qword [0x14003cb90]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x80]
call qword [sym.imp.ole32.dll_CoCreateGuid]
mov r8d, 0x104
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call qword [sym.imp.ole32.dll_StringFromGUID2]
xor r15d, r15d
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
lea rax, [rbp - 0x20]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x140006e00
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140004a70
nop
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov r8d, 0x104
lea rdx, [rbp + 0x1f0]
lea rcx, str._TEMP_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov r8d, 1
lea rdx, [0x140034a48]
lea rcx, [rsp + 0x30]
call fcn.140004a70
nop
lea rax, [rbp + 0x1f0]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140006e76
mov r9, rbx
lea r8, [rbp + 0x1f0]
lea rcx, [rsp + 0x30]
call fcn.140007670
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea r9, [rbp - 0x60]
mov r14, qword [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r9, r14
mov rcx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x68]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp - 0x50]
cmp rdx, rax
ja 0x140006f13
lea rdi, [rcx + rdx]
mov qword [rbp - 0x70], rdi
lea rbx, [rbp - 0x80]
cmp r8, 8
cmovae rbx, qword [rbp - 0x80]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.14000ac30
mov word [rbx + rdi*2], r15w
lea rax, [rbp - 0x80]
jmp 0x140006f25
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x80]
call fcn.140005840
mov r14, qword [rbp - 0x60]
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
movups xmmword [rbp - 0x40], xmm1
movups xmmword [rbp - 0x30], xmm0
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140006f8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071c9
call fcn.140009050
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140006fe1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071cf
call fcn.140009050
lea r15, [rbp - 0x40]
mov rbx, qword [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 8
cmovae r15, rbx
mov r12, qword [rsp + 0x68]
cmp r12, 8
jae 0x140007015
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x30], xmm0
mov edi, 7
jmp 0x1400070a5
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1400071c3
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000707f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400071c3
mov rcx, rax
call fcn.140008dc4
mov rcx, rax
test rax, rax
je 0x1400071d5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000708d
test rcx, rcx
je 0x14000708b
call fcn.140008dc4
jmp 0x14000708d
xor eax, eax
mov qword [rsp + 0x30], rax
lea r8, [r12*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.14000ac30
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
call fcn.140005ff0
movzx edi, al
cmp r13, 8
jb 0x1400070fd
lea rdx, [r13*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400070f4
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071db
mov rcx, rbx
call fcn.140009050
nop
mov rax, qword [rbp - 0x48]
cmp rax, 8
jb 0x14000713d
lea rdx, [rax*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140007134
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400071e1
mov rcx, r14
call fcn.140009050
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x140007178
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140007173
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400071bd
mov rcx, r8
call fcn.140009050
xor eax, eax
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], 7
mov word [rsi], ax
movzx eax, dil
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.140008da0
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140010af0
nop
call fcn.1400014c0
nop
call fcn.140010af0
nop
call fcn.140010af0
int3
call fcn.140010af0
nop
call fcn.140010af0
nop
call fcn.140010af0
int3