Function at 0x140011394
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
mov eax, 0x4690
call fcn.140030b10
sub rsp, rax
mov rax, qword [0x14003f9c0]
xor rax, rsp
mov qword [rsp + 0x4680], rax
mov rcx, qword [0x14004cf90]
xor esi, esi
cmp rcx, rsi
jne 0x14001140d
lea edi, [rsi + 0x28]
mov rcx, rdi
call fcn.140016a18
mov rbx, rax
cmp rax, rsi
je 0x1400113f3
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1400184b0
jmp 0x1400113f6
mov rbx, rsi
mov rcx, rbx
mov qword [0x14004cf90], rbx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, qword [0x14004cf90]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x14004cf88]
cmp rcx, rsi
je 0x14001143b
cmp qword [0x14004cf80], rsi
jne 0x14001143b
lea rdx, str.a_ccsUTF_8
call fcn.1400189d8
mov qword [0x14004cf80], rax
cmp byte [0x14004cf78], sil
jne 0x14001161f
mov bl, byte [0x14004e793]
lea rdx, [rsp + 0x30]
lea rcx, str.EXE4J_LOG
mov ebp, 1
mov r8d, 0x1770
mov byte [0x14004cf78], bpl
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, esi
jbe 0x14001148f
lea rdx, [0x140036360]
lea rcx, [rsp + 0x30]
call fcn.1400180a0
movzx ebx, bl
cmp eax, esi
cmove ebx, ebp
lea rdx, [rsp + 0x30]
lea rcx, str.INSTALL4J_LOG
mov r8d, 0x1770
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, esi
jbe 0x1400114c4
lea rdx, [0x140036360]
lea rcx, [rsp + 0x30]
call fcn.1400180a0
movzx ebx, bl
cmp eax, esi
cmove ebx, ebp
cmp bl, sil
je 0x14001161f
mov edi, 0x2ee0
mov rcx, rdi
call fcn.140015fd4
xor edx, edx
mov rcx, rax
mov rbx, rax
mov word [rax], si
call fcn.140006b50
mov rcx, rbx
call fcn.140016b78
cmp eax, esi
jne 0x140011507
lea rdx, [0x140036348]
mov rcx, rbx
call fcn.14001725c
jmp 0x140011528
cdqe
cmp word [rbx + rax*2 - 2], 0x5c
je 0x140011528
cmp word [rbx + rax*2 - 2], 0x2f
je 0x140011528
lea rdx, [0x140034080]
mov rcx, rbx
call fcn.140017230
mov rcx, rdi
call fcn.140015fd4
mov edi, esi
mov qword [0x14004cf88], rax
add edi, ebp
lea rdx, str._si4j_nlog__d.log
mov r8, rbx
mov r9d, edi
mov rcx, rax
call fcn.1400112e0
mov rcx, qword [0x14004cf88]
call fcn.140005bec
cmp al, sil
je 0x140011572
cmp edi, 0x3e8
jge 0x140011572
mov rax, qword [0x14004cf88]
jmp 0x140011539
mov rcx, rbx
call fcn.140016490
mov rcx, qword [0x14004cf88]
lea rdx, str.w_ccsUTF_8
call fcn.1400189d8
mov qword [0x14004cf80], rax
cmp rax, rsi
jne 0x1400115bf
lea rcx, str.c:i4j_nlog
lea rdx, str.w_ccsUTF_8
mov qword [0x14004cf88], rcx
call fcn.1400189d8
mov qword [0x14004cf80], rax
cmp rax, rsi
je 0x14001161f
lea rdx, [rsp + 0x17a0]
mov r8d, 0x1770
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x20]
call fcn.140018004
lea rcx, [rsp + 0x20]
call fcn.14001a4b4
mov rcx, qword [0x14004cf80]
lea r8, [rsp + 0x17a0]
lea rdx, str.Started_executable__s_at__S_n
mov r9, rax
call fcn.14001a514
mov rcx, qword [0x14004cf80]
call fcn.140017948
call fcn.140011304
mov qword [0x14004cf98], rax
mov rcx, qword [rsp + 0x4680]
xor rcx, rsp
call fcn.140016820
lea r11, [rsp + 0x4690]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret