Function at 0x1800b0190
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x10], edx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov eax, edx
mov r15, r9
add edx, 0x12
mov r13, r8
mov dword [rsp + 0x40], edx
mov rsi, rcx
cmp eax, edx
jae case.0x1800b0216.240
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov r12, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x98]
mov ebp, dword [rsp + 0x98]
mov qword [rsp + 0x58], r8
add eax, 0xffffff1f
lea r9, [0x180000000]
cmp eax, 0x25
ja case.0x1800b0216.242
movzx eax, byte [r9 + rax + 0xb084c]
mov ecx, dword [r9 + rax*4 + 0xb0804]
add rcx, r9
jmp rcx
mov r8, qword [rsi + 0x138]
mov r11, qword [rsp + 0xb0]
mov rdi, qword [r8 + 0x18]
test rdi, rdi
je 0x1800b0274
mov edx, dword [r15]
mov r10d, dword [r11]
add edx, r10d
nop dword [rax]
test r14, r14
jne 0x1800b0252
mov eax, dword [rdi + 0x14]
add eax, dword [rdi + 0x10]
cmp r10d, eax
cmove r14, rdi
mov r9d, dword [rdi + 0x10]
cmp edx, r9d
jbe 0x1800b0267
mov ecx, dword [rdi + 0x14]
lea eax, [r9 + rcx]
cmp r10d, eax
jb 0x1800b02dd
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x1800b0240
mov edx, dword [rsp + 0x40]
test r14, r14
je 0x1800b042e
mov eax, dword [r14 + 0x10]
add eax, dword [r14 + 0x14]
mov edx, dword [r11]
cmp eax, edx
jne 0x1800b042a
mov ecx, dword [r15]
mov r8d, dword [r8 + 0x28]
add ecx, edx
cmp ecx, r8d
jb 0x1800b02a7
cmp edx, r8d
jbe 0x1800b042a
mov ebx, 0xd0
nop dword [rax]
mov eax, ebx
sub eax, 0xd0
je 0x1800b04d1
sub eax, 1
je 0x1800b045d
sub eax, 1
je 0x1800b0450
cmp eax, 1
je case.0x1800b0216.240
jmp 0x1800b04ec
cmp r10d, r9d
jae 0x1800b0375
mov ebx, 0x110
nop dword [rax + rax]
cmp ebx, 0x110
je 0x1800b0357
cmp ebx, 0xdd0
je 0x1800b030f
cmp ebx, 0x1a90
jne 0x1800b035d
mov eax, ebp
add r13, rax
jmp 0x1800b035d
mov eax, dword [r11]
lea r9, [rsp + 0x48]
mov dword [rsp + 0x98], eax
mov r8, r13
lea rax, [rsp + 0x98]
mov dword [rsp + 0x48], ebp
mov edx, 0xe1
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.1800b0190
test eax, eax
jne case.0x1800b0216.235
mov r11, qword [rsp + 0xb0]
sub dword [r15], ebp
add dword [r11], ebp
jmp 0x1800b035d
mov ebp, dword [rdi + 0x10]
sub ebp, dword [r11]
add ebx, 0xcc0
cmp ebx, 0x2640
jbe 0x1800b02f0
mov ecx, dword [rdi + 0x14]
mov r9d, dword [rdi + 0x10]
mov r10d, dword [r11]
mov r8d, dword [r15]
lea edx, [r9 + rcx]
mov eax, edx
sub eax, r10d
lea ecx, [r8 + r10]
cmp ecx, edx
mov rdx, r13
cmova r8d, eax
sub r10d, r9d
mov ecx, r10d
add rcx, qword [rdi + 0x18]
mov ebp, r8d
call sub.VCRUNTIME140.dll_memcpy
sub dword [r15], ebp
add r13, rbp
mov rdx, qword [rsp + 0xb0]
mov ecx, dword [rdx]
add ecx, ebp
mov dword [rdx], ecx
mov eax, dword [r15]
test eax, eax
je 0x1800b07b9
mov dword [rsp + 0x48], eax
lea r9, [rsp + 0x48]
lea rax, [rsp + 0x98]
mov dword [rsp + 0x98], ecx
mov r8, r13
mov qword [rsp + 0x20], rax
mov edx, 0xe1
mov rcx, rsi
call fcn.1800b0190
test eax, eax
je 0x1800b07b9
mov eax, dword [r15]
lea r8, str._s:_too_many_frames__timestamp_u__limit_d
mov dword [rsp + 0x20], eax
xor edx, edx
mov rax, qword [rsp + 0xb0]
mov rcx, rsi
mov dword [rsp + 0x98], 0xeb
mov r9d, dword [rax]
call qword [rsi + 0x110]
mov dword [rsi + 0x38], 2
mov edx, dword [rsp + 0x40]
mov r8, qword [rsp + 0x58]
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp eax, edx
jae case.0x1800b0216.240
jmp 0x1800b01ed
mov dword [rsp + 0x50], 0
jmp 0x1800b04ec
cmp qword [rdi + 0x18], 0
jne 0x1800b04a0
mov ecx, 0x69
nop dword [rax]
mov eax, ecx
sub eax, 0x68
je 0x1800b07d7
cmp eax, 1
jne 0x1800b0499
mov rax, qword [rsi + 0x138]
mov dword [rsi + 0x38], 4
mov dword [rax + 0x20], 1
mov qword [rdi + 0x18], r12
dec ecx
cmp ecx, 0x67
ja 0x1800b0470
mov ecx, dword [rdi + 0x14]
add rcx, qword [rdi + 0x18]
mov r8d, dword [r15]
test r13, r13
je 0x1800b04bf
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [r15]
add dword [rdi + 0x14], eax
jmp 0x1800b04ec
mov edx, 0x42
call sub.VCRUNTIME140.dll_memset
mov eax, dword [r15]
add dword [rdi + 0x14], eax
jmp 0x1800b04ec
mov r12, qword [r14 + 0x18]
mov rdi, r14
mov edx, dword [r14 + 0x14]
mov rcx, r12
add edx, dword [r15]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov qword [r14 + 0x18], rax
inc ebx
cmp ebx, 0xd4
jb 0x1800b02b0
jmp 0x1800b042a
mov ecx, 0x20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
jmp 0x1800b042a
mov ecx, 0xe1
mov eax, ecx
sub eax, 0xe1
je 0x1800b052b
cmp eax, 0x51
je case.0x1800b0216.240
jmp 0x1800b0557
mov rax, qword [rdi + 8]
test rax, rax
je 0x1800b0539
mov qword [rax], rdi
jmp 0x1800b0544
mov rax, qword [rsi + 0x138]
mov qword [rax + 0x10], rdi
mov rax, qword [rsi + 0x138]
mov dword [rsp + 0x50], 0
mov qword [rax + 0x18], rdi
add ecx, 0x51
cmp ecx, 0x183
jb 0x1800b0517
mov dword [rsp + 0x50], 0
jmp case.0x1800b0216.242
mov eax, dword [r15]
test eax, eax
je 0x1800b07b9
cmp eax, 4
jne case.0x1800b0216.242
mov rax, qword [rsp + 0xb0]
mov eax, dword [rax]
cmp eax, 0xa8
jb case.0x1800b0216.242
mov ecx, eax
mov eax, dword [rsi + 0x60]
inc eax
lea rax, [rax*4 + 0xa8]
cmp rcx, rax
jae case.0x1800b0216.242
mov rax, qword [rsi + 0x138]
lea rdx, [rcx - 0xa8]
shr rdx, 2
mov edx, edx
mov rcx, qword [rax]
mov eax, dword [r13]
mov dword [rcx + rdx*4], eax
mov edx, dword [rsp + 0x40]
jmp case.0x1800b0216.242
mov rax, qword [rsi]
xor edx, edx
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x98]
mov r8d, dword [rcx + 0x28]
div r8
mov edx, dword [rsp + 0x40]
mov r8, rax
mov qword [rsp + 0x58], rax
jmp case.0x1800b0216.242
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x50], rax
jmp 0x1800b042a
xor r14d, r14d
jmp case.0x1800b0216.242
test rdi, rdi
jne case.0x1800b0216.242
mov ecx, 0xcb
cmp ecx, 0xcb
je 0x1800b0650
cmp ecx, 0x7627
je 0x1800b0646
cmp ecx, 0xeb83
je case.0x1800b0216.240
jmp 0x1800b0665
mov dword [rsp + 0x50], 0xffffffff
jmp 0x1800b0665
mov rax, qword [rsi + 0x138]
mov dword [rsi + 0x38], 4
mov dword [rax + 0x20], 1
add ecx, 0x755c
cmp ecx, 0x16014
jbe 0x1800b0628
jmp case.0x1800b0216.242
mov qword [rdi], 0
jmp case.0x1800b0216.242
cmp qword [rdi + 0x18], 0
jne 0x1800b06ee
mov ebx, 0x100
cmp ebx, 0x100
je 0x1800b06d7
cmp ebx, 0x1a2
je 0x1800b06c0
cmp ebx, 0x244
je 0x1800b06b6
cmp ebx, 0x2e6
je case.0x1800b0216.240
jmp 0x1800b06e0
mov dword [rsp + 0x50], 0xffffffff
jmp 0x1800b06e0
mov rax, qword [rsi + 0x138]
mov dword [rsi + 0x38], 4
mov dword [rax + 0x20], 1
jmp 0x1800b06e0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add ebx, 0xa2
cmp ebx, 0x388
jb 0x1800b0690
mov rcx, qword [rdi + 0x18]
mov r8d, dword [r15]
test r13, r13
je 0x1800b0707
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1800b042a
mov edx, 0x42
call sub.VCRUNTIME140.dll_memset
jmp 0x1800b042a
mov ecx, dword [r15]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rdi + 0x18], rax
jmp 0x1800b042a
mov rax, qword [rsi + 0x138]
mov rcx, qword [rax + 0x18]
mov rax, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
mov eax, dword [rax]
mov dword [rdi + 0x10], eax
mov eax, dword [r15]
mov dword [rdi + 0x14], eax
jmp case.0x1800b0216.242
mov rax, qword [rsi]
mov ebx, r8d
cmp rbx, qword [rax + 0xa0]
je 0x1800b07ad
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
lea r9, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x20], 0
lea ecx, [rdx + 0x10]
call fcn.18006acd0
test eax, eax
jne 0x1800b07c3
mov rax, qword [rsi]
mov edx, dword [rsp + 0x40]
mov r8, qword [rsp + 0x58]
and dword [rax + 0x94], 0xffffdfff
mov rax, qword [rsi]
mov qword [rax + 0xa0], rbx
jmp case.0x1800b0216.242
mov dword [rsp + 0x50], 0
jmp case.0x1800b0216.240
mov dword [rsp + 0x50], eax
jmp case.0x1800b0216.240
mov rax, qword [rsi + 0x138]
mov dword [rax + 0x20], 1
mov dword [rsp + 0x50], 0xffffffff
mov rax, qword [rsp + 0x50]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret