Function at 0x14005d900
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4b8
mov rsi, rcx
mov rax, qword [0x140180518]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
lea rbx, [rsp + 0x3b0]
mov qword [rsp + 0x398], rbx
mov qword [rsp + 0x3a0], 0
mov qword [rsp + 0x3a8], 0x80
movups xmm0, xmmword [rdx]
movaps xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x178]
lea rdx, [rsp + 0x20]
lea r8, [rsp + 0x398]
call fcn.14005a3d0
cmp dword [rsp + 0x178], 0
je 0x14005d985
mov byte [rsi + 0x20], 0
jmp 0x14005dbba
lea rdi, [rsp + 0x190]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 0x104
mov r14d, 0x104
xor eax, eax
mov r15, qword [sym.imp.KERNEL32.dll_SetLastError]
mov r13, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
lea rbx, [rsp + 0x178]
jmp 0x14005da1e
mov qword [rsp + 0x180], r14
xor ecx, ecx
call r15
mov r8d, dword [rsp + 0x180]
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x398]
call r13
mov ebp, eax
test eax, eax
je 0x14005da50
mov r14d, ebp
mov rax, qword [rsp + 0x180]
cmp rax, r14
jae 0x14005da6b
cmp rax, r14
je 0x14005d9e8
ja 0x14005d9e0
cmp qword [rsp + 0x188], r14
jae 0x14005d9e0
mov r9d, 2
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call fcn.14001dc70
jmp 0x14005d9e0
call r12
cmp eax, 0xcb
jne 0x14005da0e
mov byte [rsi + 0x20], 0
lea rbx, [rsp + 0x3b0]
jmp 0x14005dba7
mov qword [rsp + 0x180], r14
lea r13, [rsp + 0x70]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0x104
mov rdx, qword [rsp + 0x178]
lea rcx, [rsp + 0x38]
lea r9, [rsp + 0x58]
mov r8, r14
call fcn.14005a5c0
cmp dword [rsp + 0x38], 0
je 0x14005dab9
mov byte [rsi + 0x20], 0
jmp 0x14005db8f
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
mov rcx, rbx
call fcn.140122e90
mov r14, rax
cmp rax, 0xf
jbe 0x14005db25
test r14, r14
js 0x14005dbf4
mov rax, r14
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x14005db42
lea rcx, [r12 + 0x28]
call fcn.1401210e8
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x14005db4f
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
mov rdx, rbx
mov r8, r14
call fcn.140122c80
mov byte [rsp + r14 + 0x38], 0
jmp 0x14005db71
lea rcx, [r12 + 1]
call fcn.1401210e8
mov r15, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r12
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.140122c80
mov byte [r15 + r14], 0
mov qword [rsp + 0x38], r15
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi], rax
mov qword [rsi + 8], rcx
mov byte [rsi + 0x20], 1
lea rbx, [rsp + 0x3b0]
mov rcx, qword [rsp + 0x58]
cmp rcx, r13
je 0x14005dba7
call qword [0x14017cb20]
mov rcx, qword [rsp + 0x178]
cmp rcx, rdi
je 0x14005dbba
call qword [0x14017cb20]
mov rcx, qword [rsp + 0x398]
cmp rcx, rbx
je 0x14005dbcd
call qword [0x14017cb20]
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.1401213e0
mov rax, rsi
add rsp, 0x4b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400057a0
int3