Function at 0x1800481c0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
lea ebx, [r8 + 8]
mov rdi, rdx
mov dword [rsp + 0x40], ebx
mov r14, r9
mov rdx, rcx
cmp r8d, ebx
jae case.0x18004824b.2
mov rbp, qword [rsp + 0x68]
lea ebx, [r8 - 4]
mov rsi, qword [rsp + 0x68]
lea r8, [0x180000000]
mov r12, qword [rsp + 0x68]
xor r13d, r13d
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], ebx
mov ebx, dword [rsp + 0xc0]
mov r15d, dword [rsp + 0x44]
mov qword [rsp + 0x60], rbx
cmp r15d, 0x11
ja case.default.0x18004824b
mov eax, r15d
mov ecx, dword [r8 + rax*4 + 0x48590]
add rcx, r8
jmp rcx
movsd xmm0, qword [r14 + 8]
movsd qword [rsp + 0x50], xmm0
jmp case.0x18004824b.3
mov r9d, 0xdc
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.180025480
mov rbx, rax
mov qword [rsp + 0x60], rax
jmp 0x18004850a
mov rbp, qword [rdx]
mov rax, rdi
shr rbp, 2
and eax, 3
mov qword [rsp + 0x58], rax
jmp case.0x18004824b.3
mov rsi, r13
jmp case.0x18004824b.3
cmp qword [rsp + 0x58], r13
je 0x18004841e
test rbp, rbp
je 0x18004841e
mov rbx, qword [rsp + 0x58]
mov r15d, 0x5c
nop dword [rax]
mov eax, r15d
sub eax, 0x58
je 0x180048377
sub eax, 1
je 0x18004836f
sub eax, 1
je 0x180048367
sub eax, 1
je 0x180048312
cmp eax, 1
jne 0x180048407
mov eax, dword [r14]
xor edx, edx
mov dword [rsp + 0x48], eax
xor r9d, r9d
lea rax, [rsp + 0x48]
mov r8, rdi
mov qword [rsp + 0x20], rax
lea ecx, [rdx + 0x27]
call fcn.18005f3f0
jmp 0x1800483ff
mov r8, qword [rdx]
xor r9d, r9d
mov eax, dword [r14]
xor edx, edx
mov dword [rsp + 0x48], eax
add r8, 0xfffffffffffffffc
lea rax, [rsp + 0x48]
add r8, rdi
mov qword [rsp + 0x20], rax
lea ecx, [rdx + 0x27]
call fcn.18005f3f0
mov r8, rdi
mov edx, 0xc4
sub r8, rbx
xor ecx, ecx
add r8, 4
call fcn.180058860
mov edx, dword [r14]
lea ecx, [rbx*8]
rol edx, cl
mov r12, rax
mov dword [r14], edx
jmp 0x1800483ff
mov rsi, r13
jmp 0x180048407
dec rbp
jmp 0x180048407
mov rdx, rbp
sub rdx, rsi
cmp rsi, rbp
jae 0x1800483ff
cmp rdx, 4
jb 0x1800483de
mov r8d, dword [r14]
lea rax, [r12 + rsi*4]
lea rcx, [rbp - 1]
lea rcx, [r12 + rcx*4]
cmp rax, r14
ja 0x1800483a5
cmp rcx, r14
jae 0x1800483de
and edx, 3
mov rcx, rbp
sub rcx, rdx
mov rax, rsi
add rsi, 4
cmp rsi, rcx
jb 0x1800483b1
sub rcx, rax
lea rdi, [r12 + rax*4]
add rcx, 3
mov rax, r8
shr rcx, 2
shl rcx, 4
shr rcx, 2
rep stosd dword [rdi], eax
mov rdi, qword [rsp + 0xb8]
cmp rsi, rbp
jae 0x1800483ff
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r14]
mov dword [r12 + rsi*4], eax
inc rsi
cmp rsi, rbp
jb 0x1800483f0
mov rdx, qword [rsp + 0xb0]
dec r15d
cmp r15d, 0x57
ja 0x1800482c0
mov rbx, qword [rsp + 0x60]
jmp 0x180048505
mov r12, rdi
cmp rsi, rbp
jae case.0x18004824b.3
mov r15, rbp
lea rdi, [rdi + rsi*4]
sub r15, rsi
mov rsi, rbp
nop word [rax + rax]
mov eax, dword [r14]
xor edx, edx
mov dword [rsp + 0x48], eax
xor r9d, r9d
lea rax, [rsp + 0x48]
mov r8, rdi
mov qword [rsp + 0x20], rax
lea ecx, [rdx + 0x27]
call fcn.18005f3f0
add rdi, 4
sub r15, 1
jne 0x180048440
jmp 0x180048505
mov eax, dword [r14]
lea r8, [rdi + 0x48]
xor r9d, r9d
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x48]
mov ecx, SHSetInstanceExplorer
call fcn.18000ee90
mov r15, rax
test rax, rax
je 0x180048505
mov edi, 7
nop word [rax + rax]
mov ecx, edi
sub ecx, 5
je 0x1800484d3
sub ecx, 1
je 0x1800484be
cmp ecx, 1
jne 0x1800484fe
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov qword [rsp + 0x68], rax
jmp 0x1800484fe
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1800484fe
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1800484fe
mov qword [rsp + 0x38], r13
xor r9d, r9d
mov qword [rsp + 0x30], r13
mov r8, r15
mov dword [rsp + 0x28], 0x23
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r13
call fcn.180062aa0
cmp eax, 1
je 0x180048546
dec edi
cmp edi, 4
ja 0x1800484a0
mov r15d, dword [rsp + 0x44]
lea r8, [0x180000000]
mov eax, dword [rsp + 0x40]
mov edi, dword [rsp + 0xc0]
inc r15d
inc edi
mov dword [rsp + 0x44], r15d
mov dword [rsp + 0xc0], edi
cmp edi, eax
jae case.0x18004824b.2
mov rdi, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xb0]
jmp 0x180048233
movsd xmm0, qword [0x1800961a0]
movsd qword [rsp + 0x50], xmm0
jmp case.0x18004824b.2
test bl, 7
mov eax, ebx
cdq
setne r13b
and edx, 7
add eax, edx
sar eax, 3
add r13d, eax
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0xc8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret