Function at 0x14001b110
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
movaps xmmword [rsp + 0x20], xmm6
mov r13, rcx
lea rcx, str.e_0m
call fcn.14001c040
lea rcx, str.e_32me_1minterfacee_0m:_e_32m_se_0m_n
mov rdx, r13
call fcn.14001c040
mov eax, dword [r13 + 0x44]
test al, 4
je 0x14001b171
lea rdx, [r13 + 0x48]
lea rsi, [0x1400286d0]
mov rcx, rsi
call fcn.140014450
lea rcx, str.__e_1mpublic_keye_0m:__s_n
mov rdx, rsi
call fcn.14001c040
mov eax, dword [r13 + 0x44]
test al, 2
je 0x14001b1c2
lea rcx, str.WG_HIDE_KEYS
call sub.msvcrt.dll_getenv
lea rsi, str._hidden_
test rax, rax
je 0x14001b1b3
lea rdx, str.never
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x14001b1b3
lea rdx, [r13 + 0x68]
lea rsi, [0x1400286d0]
mov rcx, rsi
call fcn.140014450
lea rcx, str.__e_1mprivate_keye_0m:__s_n
mov rdx, rsi
call fcn.14001c040
movzx edx, word [r13 + 0x8c]
test edx, edx
je 0x14001b1da
lea rcx, str.__e_1mlistening_porte_0m:__u_n
call fcn.14001c040
mov edx, dword [r13 + 0x88]
test edx, edx
je 0x14001b1f1
lea rcx, str.__e_1mfwmarke_0m:_0x_x_n
call fcn.14001c040
mov rdi, qword [r13 + 0x90]
test rdi, rdi
je 0x14001b65e
mov bl, 2
mov rbp, 0xfffffffffffffffd
mov rax, rdi
nop dword [rax]
mov rsi, rbp
mov rax, qword [rax + 0x98]
add bl, 1
add rbp, 1
test rax, rax
jne 0x14001b210
cmp rbp, 0xfffffffffffffffd
je 0x14001b38b
lea r14, [rbp + 3]
mov edx, 8
mov rcx, r14
call sub.msvcrt.dll_calloc
test rax, rax
je 0x14001b38b
mov r12, rax
lea r15, [rbp + 1]
nop word cs:[rax + rax]
nop
mov qword [rax], rdi
mov rdi, qword [rdi + 0x98]
add rax, 8
test rdi, rdi
jne 0x14001b260
lea r9, [0x14001b6d0]
mov r8d, 8
mov rcx, r12
mov rdx, r14
call sub.msvcrt.dll_qsort
mov rax, qword [r12]
mov qword [r13 + 0x90], rax
cmp r14, 2
jb 0x14001b373
mov rcx, qword [r12 + 8]
mov qword [rax + 0x98], rcx
cmp rbp, 0xffffffffffffffff
je 0x14001b373
lea rcx, [r12 + 8]
cmp rbp, 3
jae 0x14001b2c8
mov eax, 1
jmp 0x14001b331
mov rdx, r15
and rdx, 0xfffffffffffffffc
neg rdx
mov eax, 1
nop word [rax + rax]
mov rbp, qword [rcx]
mov rdi, qword [rcx + 8]
mov qword [rbp + 0x98], rdi
mov rbp, qword [rcx + 8]
mov rdi, qword [rcx + 0x10]
mov qword [rbp + 0x98], rdi
mov rbp, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x18]
mov qword [rbp + 0x98], rdi
mov rbp, qword [rcx + 0x18]
mov rdi, qword [rcx + 0x20]
add rcx, 0x20
mov qword [rbp + 0x98], rdi
lea rbp, [rdx + rax]
add rbp, 4
add rax, 4
cmp rbp, 1
jne 0x14001b2e0
test r15b, 3
je 0x14001b373
lea r8, [r12 + rax*8]
add r8, 8
movzx ebp, bl
and ebp, 3
xor ebx, ebx
nop dword [rax + rax]
mov rdi, qword [rcx]
lea rcx, [r12 + rax*8]
add rcx, 8
add rax, 1
mov rdx, qword [r8 + rbx*8]
mov qword [rdi + 0x98], rdx
add rbx, 1
cmp rbp, rbx
jne 0x14001b350
mov rax, qword [r12 + rsi*8 + 0x18]
mov qword [rax + 0x98], 0
mov rcx, r12
call sub.msvcrt.dll_free
lea rsi, [0x14001e60f]
mov rcx, rsi
call fcn.14001c040
mov r12, qword [r13 + 0x90]
test r12, r12
je 0x14001b65e
lea r14, [0x140022c70]
xorps xmm6, xmm6
lea rbp, [0x140028680]
mov rbx, qword [sym.imp.WS2_32.dll_inet_ntop]
lea r13, [0x14001e9d1]
lea r15, str._se_36m_e_0m_u_s
lea rdx, [r12 + 4]
lea rdi, [0x1400286d0]
mov rcx, rdi
call fcn.140014450
lea rcx, str.e_33me_1mpeere_0m:_e_33m_se_0m_n
mov rdx, rdi
call fcn.14001c040
test byte [r12], 8
je 0x14001b44f
lea rcx, str.WG_HIDE_KEYS
call sub.msvcrt.dll_getenv
lea rdx, str._hidden_
test rax, rax
je 0x14001b443
mov rcx, rax
lea rdx, str.never
call sub.msvcrt.dll_strcmp
lea rdx, str._hidden_
test eax, eax
jne 0x14001b443
lea rdx, [r12 + 0x24]
lea rdi, [0x1400286d0]
mov rcx, rdi
call fcn.140014450
mov rdx, rdi
lea rcx, str.__e_1mpreshared_keye_0m:__s_n
call fcn.14001c040
mov rdi, r14
movzx eax, word [r12 + 0x44]
cmp ax, 0x17
je 0x14001b464
cmp ax, 2
jne 0x14001b481
lea rcx, [r12 + 0x44]
call fcn.14001b750
lea rcx, str.__e_1mendpointe_0m:__s_n
lea rdx, [0x140027470]
call fcn.14001c040
lea rcx, str.__e_1mallowed_ipse_0m:
call fcn.14001c040
mov r14, qword [r12 + 0x88]
test r14, r14
jne 0x14001b519
lea rcx, str._none__n
call fcn.14001c040
cmp qword [r12 + 0x60], 0
mov r14, rdi
je 0x14001b5b3
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
sub rax, qword [r12 + 0x60]
jne 0x14001b560
mov r8d, 0x3ff
mov rcx, r14
lea rdx, [0x14001e697]
jmp 0x14001b598
lea rdx, [r14 + 4]
mov r9d, 0x41
mov ecx, 0x17
mov r8, rbp
call rbx
movzx r8d, byte [r14 + 0x14]
cmp qword [r14 + 0x18], 0
mov r9, r13
cmove r9, rsi
mov rcx, r15
mov rdx, rbp
call fcn.14001c040
mov r14, qword [r14 + 0x18]
test r14, r14
je 0x14001b4a6
movaps xmmword [0x1400286b0], xmm6
movaps xmmword [0x1400286a0], xmm6
movaps xmmword [0x140028690], xmm6
movaps xmmword [0x140028680], xmm6
mov word [0x1400286c0], 0
movzx eax, word [r14]
cmp ax, 0x17
je 0x14001b4e0
cmp ax, 2
jne 0x14001b4f4
lea rdx, [r14 + 4]
mov r9d, 0x41
mov ecx, 2
jmp 0x14001b4ef
jge 0x14001b574
mov r8d, 0x3ff
mov rcx, r14
lea rdx, str._e_31mSystem_clock_wound_backward__connection_problems_may_ensue.e_0m_
jmp 0x14001b598
mov edx, 0x400
mov rcx, r14
mov r8, rax
call fcn.14001b850
lea rcx, [r14 + rax]
mov r8d, 0x3ff
sub r8, rax
lea rdx, str._ago
call sub.msvcrt.dll_strncpy
mov byte [0x14002306f], 0
lea rcx, str.__e_1mlatest_handshakee_0m:__s_n
mov rdx, r14
call fcn.14001c040
cmp qword [r12 + 0x70], 0
jne 0x14001b5c3
cmp qword [r12 + 0x78], 0
je 0x14001b608
lea rcx, str.__e_1mtransfere_0m:
call fcn.14001c040
mov rcx, qword [r12 + 0x70]
call fcn.14001bae0
lea rcx, str._s_received_
lea rdi, [0x140023070]
mov rdx, rdi
call fcn.14001c040
mov rcx, qword [r12 + 0x78]
call fcn.14001bae0
lea rcx, str._s_sent_n
mov rdx, rdi
call fcn.14001c040
movzx r8d, word [r12 + 0x80]
test r8, r8
je 0x14001b63a
mov edx, 0x3f9
lea rcx, [0x1400210b6]
call fcn.14001b850
lea rcx, str.__e_1mpersistent_keepalivee_0m:__s_n
lea rdx, str.every
call fcn.14001c040
cmp qword [r12 + 0x98], 0
je 0x14001b65e
mov rcx, rsi
call fcn.14001c040
mov r12, qword [r12 + 0x98]
test r12, r12
jne 0x14001b3d0
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret