Function at 0x14006a979
Capabilities:
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x4d440174
pushf
not eax
add eax, 0xd965331b
xor eax, 0xd0fd4dfa
rol eax, 0x91
popf
pushf
not eax
add eax, 0xfa501491
xor eax, 0xf87f7aa0
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xab3db601
xor eax, 0x8ac4bc18
rol eax, 0xe6
popf
cmp eax, 4
jne 0x14006a9c9
popf
pop rax
jmp 0x14006ad17
cmp eax, 0
jne 0x14006a9d8
popf
pop rax
jmp 0x14006aa9b
cmp eax, 3
jne 0x14006a9e7
popf
pop rax
jmp 0x14006ac6e
cmp eax, 1
jne 0x14006a9f6
popf
pop rax
jmp 0x14006ab56
cmp eax, 0xd
jne 0x14006aa05
popf
pop rax
jmp 0x14006b0fb
cmp eax, 7
jne 0x14006aa14
popf
pop rax
jmp 0x14006ae85
cmp eax, 0xe
jne 0x14006aa23
popf
pop rax
jmp 0x14006b138
cmp eax, 0xb
jne 0x14006aa32
popf
pop rax
jmp 0x14006b021
cmp eax, 0xc
jne 0x14006aa41
popf
pop rax
jmp 0x14006b07d
cmp eax, 8
jne 0x14006aa50
popf
pop rax
jmp 0x14006af37
cmp eax, 5
jne 0x14006aa5f
popf
pop rax
jmp 0x14006adc4
cmp eax, 2
jne 0x14006aa6e
popf
pop rax
jmp 0x14006ac11
cmp eax, 9
jne 0x14006aa7d
popf
pop rax
jmp 0x14006af85
cmp eax, 0xa
jne 0x14006aa8c
popf
pop rax
jmp 0x14006afbb
cmp eax, 6
jne 0x14006aa9b
popf
pop rax
jmp 0x14006ae71
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x14006aab5
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor r14d, r14d
mov rbx, rax
test rax, rax
je 0x14006aafd
push rax
pushf
mov eax, 0xd5a5132f
pushf
not eax
add eax, 0xaa0523f6
xor eax, 0xc6dbbf9a
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xbc7f5a65
xor eax, 0xcdc1ea5a
rol eax, 0x7a
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0xedf1b846
pushf
not eax
add eax, 0xc02d085f
xor eax, 0xed8af5c1
rol eax, 0xf
popf
pushf
not eax
add eax, 0xb5c825ad
xor eax, 0x8043d04d
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xfa6af129
xor eax, 0xbc45e26b
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x8dc9af59
xor eax, 0x8ba8dcec
rol eax, 0xee
popf
jmp 0x14006a9ba
mov rsi, rax
cmp word [rax], r14w
je 0x14006abb8
push rax
pushf
mov eax, 0x9717564b
pushf
not eax
add eax, 0xed2e334a
xor eax, 0x8cc98cc2
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xaa93fc7d
xor eax, 0xbf8a8aed
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x8c420548
xor eax, 0xccc9f7ae
rol eax, 0x92
popf
pushf
not eax
add eax, 0xbe15c88f
xor eax, 0xdbc1ecab
rol eax, 0x47
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0x387e253b
pushf
not eax
add eax, 0xe19fa5b8
xor eax, 0x9ea438e6
rol eax, 0x72
popf
pushf
not eax
add eax, 0xfa4c2454
xor eax, 0xb79585ef
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa7f5fd68
xor eax, 0xe2ff0e80
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x98f43bea
xor eax, 0xc14bed40
rol eax, 0x7c
popf
jmp 0x14006a9ba
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x670c96f7
pushf
not eax
add eax, 0x932fb975
xor eax, 0x91689b0e
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xddb6f0c1
xor eax, 0x90347f13
rol eax, 0x80
popf
pushf
not eax
add eax, 0x84bb4843
xor eax, 0xf6903891
rol eax, 0x73
popf
pushf
not eax
add eax, 0xa30ecbb8
xor eax, 0xef700cc9
rol eax, 0xa9
popf
jmp 0x14006a9ba
inc rax
cmp word [rsi + rax*2], r14w
jne 0x14006acd1
push rax
pushf
mov eax, 0xa82c0859
pushf
not eax
add eax, 0xdb9c8f65
xor eax, 0x9e2b72f4
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xe61c9084
xor eax, 0xfc8e2b56
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x884bdfc4
xor eax, 0xf876ed69
rol eax, 0x91
popf
pushf
not eax
add eax, 0xc462e0a6
xor eax, 0xe592dfcf
rol eax, 0xdf
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0x8a341bcb
pushf
not eax
add eax, 0xedb988a6
xor eax, 0xb22b3dca
rol eax, 0x93
popf
pushf
not eax
add eax, 0x838763ae
xor eax, 0x85d7284d
rol eax, 0x19
popf
pushf
not eax
add eax, 0xd9106bfb
xor eax, 0xec22bbfe
rol eax, 0xcc
popf
jmp 0x14006a9ba
lea rsi, [rsi + rax*2]
add rsi, 2
cmp word [rsi], r14w
jne 0x14006ad6b
push rax
pushf
mov eax, 0x47237f60
pushf
not eax
add eax, 0x8c2cadc7
xor eax, 0xea7575a6
rol eax, 0x97
popf
pushf
not eax
add eax, 0xd847e657
xor eax, 0xa97e4d9b
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xce618ec2
xor eax, 0x828fc201
rol eax, 0x1f
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0x4d3e353d
pushf
not eax
add eax, 0xf8d920ce
xor eax, 0xf17a750e
rol eax, 0x12
popf
pushf
not eax
add eax, 0xbb8e50c6
xor eax, 0x922a8ebc
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x8a1a076f
xor eax, 0x9bb92f21
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xace7b030
xor eax, 0x8ce51c6e
rol eax, 0x34
popf
jmp 0x14006a9ba
mov qword [rsp + 0x38], r14
sub rsi, rbx
mov qword [rsp + 0x30], r14
add rsi, 2
sar rsi, 1
mov r8, rbx
mov r9d, esi
mov dword [rsp + 0x28], r14d
xor edx, edx
mov qword [rsp + 0x20], r14
xor ecx, ecx
call fcn.140072b49
movsxd rbp, eax
test eax, eax
je 0x14006ae2b
push rax
pushf
mov eax, 0x766df403
pushf
not eax
add eax, 0xd16d764e
xor eax, 0x98eab437
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9befdf95
xor eax, 0xbb462ba6
rol eax, 0x25
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0xe3045b90
pushf
not eax
add eax, 0xb9169b3e
xor eax, 0x83974098
rol eax, 0xff
popf
pushf
not eax
add eax, 0x9d21ba8d
xor eax, 0x80c40ba1
rol eax, 0x27
popf
pushf
not eax
add eax, 0xdc428736
xor eax, 0x8edfdd7c
rol eax, 0xf
popf
jmp 0x14006a9ba
mov rcx, rbp
call fcn.14005d4cc
mov rdi, rax
test rax, rax
je 0x14006af85
mov qword [rsp + 0x38], r14
mov r9d, esi
mov qword [rsp + 0x30], r14
mov r8, rbx
mov dword [rsp + 0x28], ebp
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.140072b49
test eax, eax
je 0x14006aede
push rax
pushf
mov eax, 0x557983de
pushf
not eax
add eax, 0x8b5ddda8
xor eax, 0x89045b9c
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x86c3dc2e
xor eax, 0x969e805f
rol eax, 0x27
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0xc7165ef1
pushf
not eax
add eax, 0x9f807c8a
xor eax, 0xbf412ed8
rol eax, 0x50
popf
pushf
not eax
add eax, 0xe628de71
xor eax, 0x998f0a86
rol eax, 0x52
popf
pushf
not eax
add eax, 0xea75c702
xor eax, 0xad0d52c7
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb46760b6
xor eax, 0xe2b90e90
rol eax, 0xb3
popf
jmp 0x14006a9ba
mov rsi, rdi
mov rdi, r14
jmp 0x14006afbb
mov rsi, r14
push rax
pushf
mov eax, 0xe10b7320
pushf
not eax
add eax, 0xce02e01c
xor eax, 0xe483014b
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xed9330ba
xor eax, 0xec84a243
rol eax, 0x3b
popf
jmp 0x14006a9ba
mov rcx, rdi
call fcn.14007221b
jmp 0x14006b07d
mov rsi, r14
push rax
pushf
mov eax, 0x3c38e457
pushf
not eax
add eax, 0xa2940d85
xor eax, 0x9df583fb
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x83966bd9
xor eax, 0x986108db
rol eax, 0x13
popf
pushf
not eax
add eax, 0xbdd0e064
xor eax, 0xde0c58b8
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x8960dd37
xor eax, 0xcd07d5c0
rol eax, 0xb6
popf
jmp 0x14006a9ba
test rbx, rbx
je 0x14006b0c8
push rax
pushf
mov eax, 0x3ff93fe0
pushf
not eax
add eax, 0x98236b9c
xor eax, 0xe81f683b
rol eax, 0x74
popf
pushf
not eax
add eax, 0xb0cafedd
xor eax, 0xa2a0d386
rol eax, 0x38
popf
pushf
not eax
add eax, 0xf4aaac2b
xor eax, 0xe5d08d36
rol eax, 0x5e
popf
jmp 0x14006a9ba
push rax
pushf
mov eax, 0xca7b0b1c
pushf
not eax
add eax, 0xb408e709
xor eax, 0xd4951f30
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x925884c4
xor eax, 0xce86f9b6
rol eax, 0x9b
popf
jmp 0x14006a9ba
mov rcx, rbx
jmp 0x14006b0ff
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push rax
pushf
mov eax, 0x1de367da
pushf
not eax
add eax, 0xfd324560
xor eax, 0x8a3624f6
rol eax, 0x83
popf
pushf
not eax
add eax, 0x8c5d2d17
xor eax, 0xe0956160
rol eax, 0x3f
popf
jmp 0x14006a9ba
mov rbx, qword [rsp + 0x50]
mov rax, rsi
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret