Function at 0x1402bd672
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x7ba9291a
pushf
not eax
add eax, 0x9431177c
xor eax, 0x96c7e120
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc885857c
xor eax, 0xe053bd7a
rol eax, 0x8a
popf
cmp eax, 4
jne 0x1402bd6af
popf
pop rax
jmp 0x1402bd907
cmp eax, 0
jne 0x1402bd6be
popf
pop rax
jmp 0x1402bd772
cmp eax, 3
jne 0x1402bd6cd
popf
pop rax
jmp 0x1402bd8d0
cmp eax, 1
jne 0x1402bd6dc
popf
pop rax
jmp 0x1402bd815
cmp eax, 0xd
jne 0x1402bd6eb
popf
pop rax
jmp 0x1402bdd3d
cmp eax, 7
jne 0x1402bd6fa
popf
pop rax
jmp 0x1402bdb1d
cmp eax, 6
jne 0x1402bd709
popf
pop rax
jmp 0x1402bda4b
cmp eax, 0xb
jne 0x1402bd718
popf
pop rax
jmp 0x1402bdc74
cmp eax, 0xc
jne 0x1402bd727
popf
pop rax
jmp 0x1402bdcda
cmp eax, 8
jne 0x1402bd736
popf
pop rax
jmp 0x1402bdb72
cmp eax, 5
jne 0x1402bd745
popf
pop rax
jmp 0x1402bd9b0
cmp eax, 2
jne 0x1402bd754
popf
pop rax
jmp 0x1402bd862
cmp eax, 9
jne 0x1402bd763
popf
pop rax
jmp 0x1402bdc0e
cmp eax, 0xa
jne 0x1402bd772
popf
pop rax
jmp 0x1402bdc4d
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x1402bd78c
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x1402bd7cf
push rax
pushf
mov eax, 0x239a241a
pushf
not eax
add eax, 0xb5efd9dc
xor eax, 0xa6396e68
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xb30d6953
xor eax, 0xd95696ea
rol eax, 0xb1
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0x9a2e6b26
pushf
not eax
add eax, 0xeb7c3454
xor eax, 0x8cb642c7
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xfece0aef
xor eax, 0x802e59e9
rol eax, 0x45
popf
pushf
not eax
add eax, 0x91d3c224
xor eax, 0x9105662b
rol eax, 0x29
popf
jmp 0x1402bd6a0
xor eax, eax
jmp 0x1402bdd4a
mov rbp, rbx
cmp word [rax], si
je 0x1402bd89d
push rax
pushf
mov eax, 0x366afe25
pushf
not eax
add eax, 0xdc0d4e3f
xor eax, 0xee57007f
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc6cb3962
xor eax, 0xcd383c0d
rol eax, 0x23
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0x6c38c253
pushf
not eax
add eax, 0xf459706b
xor eax, 0xd6adfc7c
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8b6dad4e
xor eax, 0xf09009f9
rol eax, 0x10
popf
jmp 0x1402bd6a0
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xd877aa27
pushf
not eax
add eax, 0xc7a8d80c
xor eax, 0xff43dc16
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x83743755
xor eax, 0xf3f09fc5
rol eax, 0x2a
popf
jmp 0x1402bd6a0
inc rax
cmp word [rbp + rax*2], si
jne 0x1402bd957
push rax
pushf
mov eax, 0x88808227
pushf
not eax
add eax, 0xaa95e0cd
xor eax, 0xb492ae20
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe15fc63e
xor eax, 0xdd5684c5
rol eax, 0x76
popf
pushf
not eax
add eax, 0xbb6cfe71
xor eax, 0xf1e5cbf6
rol eax, 0xbc
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0x772e094
pushf
not eax
add eax, 0x97e4668f
xor eax, 0x987e87a0
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xa5fefaa0
xor eax, 0xdf00df96
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x996754f7
xor eax, 0xea45e781
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x878102b9
xor eax, 0xf2c8e369
rol eax, 0xb
popf
jmp 0x1402bd6a0
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x1402bd9f2
push rax
pushf
mov eax, 0xb1f11416
pushf
not eax
add eax, 0x87089b44
xor eax, 0xa22e5be8
rol eax, 0xda
popf
pushf
not eax
add eax, 0xc7454437
xor eax, 0xb1585cc3
rol eax, 0x4d
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0xd37b0ea
pushf
not eax
add eax, 0xd223ce86
xor eax, 0x963de813
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xb38c6e9b
xor eax, 0x9bd17377
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xe30c1c02
xor eax, 0xeee0ec97
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xcdeb3f23
xor eax, 0xb6ec5d5e
rol eax, 0xd7
popf
jmp 0x1402bd6a0
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.1402f3f74
movsxd r14, eax
test eax, eax
jne 0x1402bdad7
push rax
pushf
mov eax, 0x3b329c88
pushf
not eax
add eax, 0x993a412b
xor eax, 0x95020972
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xb89b8da7
xor eax, 0xfb6b3e62
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x856de1c0
xor eax, 0x849fef2a
rol eax, 0x17
popf
pushf
not eax
add eax, 0x90010fec
xor eax, 0xdab907cf
rol eax, 0x77
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0xa41483be
pushf
not eax
add eax, 0xafcdfe26
xor eax, 0x9c958c88
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xbee22fd6
xor eax, 0xf27625d5
rol eax, 0x57
popf
pushf
not eax
add eax, 0xcd832fae
xor eax, 0xd7d160fa
rol eax, 0xc3
popf
jmp 0x1402bd6a0
mov rcx, rbx
jmp 0x1402bdb21
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1402bd815
mov rcx, r14
call fcn.14026f4fb
mov rdi, rax
test rax, rax
jne 0x1402bdbdb
push rax
pushf
mov eax, 0x7a01ebbb
pushf
not eax
add eax, 0xe05126ca
xor eax, 0xd410c9a8
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa1ce698d
xor eax, 0x8181619e
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xb1aa3ca3
xor eax, 0xb699c64e
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa19fc36e
xor eax, 0xbf9b8d42
rol eax, 0xe5
popf
jmp 0x1402bd6a0
push rax
pushf
mov eax, 0xca1b5640
pushf
not eax
add eax, 0xd5dd88be
xor eax, 0xcf7f1348
rol eax, 2
popf
pushf
not eax
add eax, 0xf8739f87
xor eax, 0xe07f1aaf
rol eax, 0xa9
popf
jmp 0x1402bd6a0
xor ecx, ecx
call fcn.1402e3b5e
jmp 0x1402bdb1d
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.1402f3f74
test eax, eax
jne 0x1402bdcda
mov rcx, rdi
call fcn.1402e3b5e
jmp 0x1402bdd3d
xor ecx, ecx
call fcn.1402e3b5e
mov rsi, rdi
push rax
pushf
mov eax, 0x6d5ff64
pushf
not eax
add eax, 0xb6f0498f
xor eax, 0x9eaad66d
rol eax, 0x16
popf
pushf
not eax
add eax, 0x82f284b8
xor eax, 0xf4e3ca5b
rol eax, 0xd
popf
pushf
not eax
add eax, 0xa48ae366
xor eax, 0xb08e1e59
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe20c3d3d
xor eax, 0x8255c2d7
rol eax, 0xbe
popf
jmp 0x1402bd6a0
mov rcx, rbx
jmp 0x1402bdd41
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret