Function at 0x140105a40
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1402bf5c8]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov ecx, MsiGetPropertyW
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x14010619e
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x10]
call fcn.1401d04f0
mov r8d, 0x104
lea rdx, [rbp - 0x10]
lea rcx, str.SAFEBOOT_OPTION
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor r8d, r8d
mov edx, 0x3ff
lea rcx, [rbp - 0x70]
call fcn.140023b20
nop
lea rcx, [rbp - 0x70]
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
cmovae rcx, qword [rbp - 0x70]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r9, str.User_is_running_in_safe_mode:__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
lea rbx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rbx, qword [rbp - 0x70]
xor r13d, r13d
mov dword [rsp + 0x40], r13d
lea rax, [rsp + 0x40]
mov qword [rbp - 0x30], rax
lea rax, [rsp + 0x44]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
lea r8d, [r13 + 0x17]
lea rdx, str.CheckIfUserIsInSafeMode
lea rcx, [rbp - 0x50]
call fcn.140018360
nop
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 7
lea r8d, [r13 + 0x72]
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManInstallManHelpers.cpp
lea rcx, [rsp + 0x70]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x30]
mov r8d, 0x5a3
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400b16b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140105bdd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105bd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061d4
call fcn.1401a9a50
call fcn.140172740
mov rbx, rax
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov r8d, 0x16
lea rdx, str.EnableSafeModeOverride
lea rcx, [rbp - 0x50]
call fcn.140018360
xor r8d, r8d
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140172480
test al, al
je 0x14010619e
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
mov r8d, 0x31
lea rdx, str.SystemCurrentControlSetControlSafeBootMinimal
lea rcx, [rbp - 0x70]
call fcn.140018360
nop
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r13w
mov r8d, 0x31
lea rdx, str.SystemCurrentControlSetControlSafeBootNetwork
lea rcx, [rbp - 0x30]
call fcn.140018360
nop
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
mov r12, qword [rbp - 0x60]
sub rax, r12
cmp rax, 0xa
jb 0x1401061da
lea r15, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
setae byte [rsp + 0x31]
mov rdi, qword [rbp - 0x70]
cmovae r15, rdi
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
lea r14, [r12 + 0xa]
mov ebx, 7
lea rsi, [rsp + 0x70]
lea eax, [rbx + 3]
cmp r14, rbx
jbe 0x140105d0e
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140105ce3
mov rbx, rcx
jmp 0x140105cea
cmp rbx, rax
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov rsi, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rbx
lea rbx, [r12 + r12]
mov qword [rsp + 0x48], rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.1401cfe40
movups xmm0, xmmword [str.MSIServer]
movups xmmword [rbx + rsi], xmm0
mov eax, dword [0x14024b198]
mov dword [rbx + rsi + 0x10], eax
mov word [rsi + r14*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fee80
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov rcx, qword [rbp - 0x20]
sub rax, rcx
cmp rax, 0xa
jb 0x1401061e0
lea r13, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
setae byte [rsp + 0x32]
mov rsi, qword [rbp - 0x30]
cmovae r13, rsi
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea r15, [rcx + 0xa]
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r15, rbx
jbe 0x140105df2
mov rbx, r15
or rbx, 7
cmp rbx, rdx
jbe 0x140105dbd
mov rbx, rdx
jmp 0x140105dca
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rbx
lea rbx, [rcx + rcx]
mov qword [rsp + 0x38], rbx
mov r8, rbx
mov rdx, r13
mov rcx, r14
call fcn.1401cfe40
movups xmm0, xmmword [str.MSIServer]
movups xmmword [r14 + rbx], xmm0
mov eax, dword [0x14024b198]
mov dword [r14 + rbx + 0x10], eax
xor r13d, r13d
mov word [r14 + r15*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fee80
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r13w
lea r8d, [r13 + 0x20]
lea rdx, str.cmd.exe__c__net_start_MSIServer_
lea rcx, [rbp - 0x50]
call fcn.140018360
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.14012d180
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140105eb3
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140105eae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061ec
call fcn.1401a9a50
lea r15, [rbp - 0x70]
cmp byte [rsp + 0x31], 0
cmovne r15, rdi
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
add r12, 8
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r12, rbx
jbe 0x140105f2c
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x140105efb
mov rbx, rax
jmp 0x140105f08
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], rbx
mov rbx, qword [rsp + 0x48]
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.1401cfe40
movups xmm0, xmmword [str.AppXSVC]
movups xmmword [r14 + rbx], xmm0
mov word [r14 + r12*2], r13w
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fee80
lea r12, [rbp - 0x30]
movzx r13d, byte [rsp + 0x32]
test r13b, r13b
cmovne r12, rsi
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov r15, qword [rbp - 0x20]
add r15, 8
mov ebx, 7
lea r14, [rsp + 0x70]
cmp r15, rbx
jbe 0x140105fea
mov rbx, r15
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x140105fb9
mov rbx, rax
jmp 0x140105fc6
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140023c30
mov r14, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rbx
mov rbx, qword [rsp + 0x38]
mov r8, rbx
mov rdx, r12
mov rcx, r14
call fcn.1401cfe40
movups xmm0, xmmword [str.AppXSVC]
movups xmmword [r14 + rbx], xmm0
xor ebx, ebx
mov word [r14 + r15*2], bx
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400fee80
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], bx
lea r8d, [rbx + 0x1e]
lea rdx, str.cmd.exe__c__net_start_AppXSVC_
lea rcx, [rsp + 0x70]
call fcn.140018360
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14012d180
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1401060a0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010609a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061e6
call fcn.1401a9a50
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x1401060e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401060dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061ec
call fcn.1401a9a50
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140106123
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010611d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061f2
call fcn.1401a9a50
nop
test r13b, r13b
je 0x140106162
mov rdx, qword [rbp - 0x18]
lea rdx, [rdx*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140106159
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061f8
mov rcx, rsi
call fcn.1401a9a50
nop
cmp byte [rsp + 0x31], 0
je 0x14010619e
mov rdx, qword [rbp - 0x58]
lea rdx, [rdx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140106196
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401061ce
mov rcx, rdi
call fcn.1401a9a50
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1401a9a30
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401e3dbc
int3
call fcn.1401e3dbc
nop
call fcn.1400153e0
nop
call fcn.1400153e0
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
int3