Function at 0x140080ce0
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4b8
mov rsi, rcx
mov rax, qword [0x14027c048]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
lea rbx, [rsp + 0x3b0]
mov qword [rsp + 0x398], rbx
mov qword [rsp + 0x3a0], 0
mov qword [rsp + 0x3a8], 0x80
movups xmm0, xmmword [rdx]
movaps xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x178]
lea rdx, [rsp + 0x20]
lea r8, [rsp + 0x398]
call fcn.14007c8e0
cmp dword [rsp + 0x178], 0
je 0x140080d65
mov byte [rsi + 0x20], 0
jmp 0x140080f9a
lea rdi, [rsp + 0x190]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 0x104
mov r14d, 0x104
xor eax, eax
mov r15, qword [sym.imp.KERNEL32.dll_SetLastError]
mov r13, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
lea rbx, [rsp + 0x178]
jmp 0x140080dfe
mov qword [rsp + 0x180], r14
xor ecx, ecx
call r15
mov r8d, dword [rsp + 0x180]
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x398]
call r13
mov ebp, eax
test eax, eax
je 0x140080e30
mov r14d, ebp
mov rax, qword [rsp + 0x180]
cmp rax, r14
jae 0x140080e4b
cmp rax, r14
je 0x140080dc8
ja 0x140080dc0
cmp qword [rsp + 0x188], r14
jae 0x140080dc0
mov r9d, 2
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call fcn.1400218c0
jmp 0x140080dc0
call r12
cmp eax, 0xcb
jne 0x140080dee
mov byte [rsi + 0x20], 0
lea rbx, [rsp + 0x3b0]
jmp 0x140080f87
mov qword [rsp + 0x180], r14
lea r13, [rsp + 0x70]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0x104
mov rdx, qword [rsp + 0x178]
lea rcx, [rsp + 0x38]
lea r9, [rsp + 0x58]
mov r8, r14
call fcn.14007cad0
cmp dword [rsp + 0x38], 0
je 0x140080e99
mov byte [rsi + 0x20], 0
jmp 0x140080f6f
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
mov rcx, rbx
call fcn.1401a79d0
mov r14, rax
cmp rax, 0xf
jbe 0x140080f05
test r14, r14
js 0x140080fd4
mov rax, r14
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x140080f22
lea rcx, [r12 + 0x28]
call fcn.1401a5a84
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140080f2f
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
mov rdx, rbx
mov r8, r14
call fcn.1401a77b0
mov byte [rsp + r14 + 0x38], 0
jmp 0x140080f51
lea rcx, [r12 + 1]
call fcn.1401a5a84
mov r15, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r12
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.1401a77b0
mov byte [r15 + r14], 0
mov qword [rsp + 0x38], r15
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov byte [rsi + 0x20], 1
lea rbx, [rsp + 0x3b0]
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x140080f87
call qword [0x140276c98]
mov rcx, qword [rsp + 0x178]
cmp rcx, rdi
je 0x140080f9a
call qword [0x140276c98]
mov rcx, qword [rsp + 0x398]
cmp rcx, rbx
je 0x140080fad
call qword [0x140276c98]
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.1401a5de0
mov rax, rsi
add rsp, 0x4b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400070d0
int3