Function at 0x1801ec470
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x40c8
call fcn.1801907a0
sub rsp, rax
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov dword [rsp + 0x20], 0
mov rdx, qword [rsp + 0x40d8]
lea rcx, [rsp + 0x30]
call fcn.1800aac40
nop
lea rcx, [0x1803dbbb8]
call fcn.180003ba0
mov qword [rsp + 0x58], rax
lea rcx, [0x1803dbbb8]
call fcn.180079500
mov rcx, qword [rsp + 0x58]
mov r9, rcx
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1800ee170
mov qword [rsp + 0x50], rax
mov rax, qword [0x180323d38]
cmp qword [rsp + 0x50], rax
je 0x1801ec5c7
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800a6630
movzx eax, word [rax]
cmp eax, 0x2f
je 0x1801ec588
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800a6630
movzx eax, word [rax]
cmp eax, 0x5c
je 0x1801ec588
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800a6630
movzx eax, word [rax]
test eax, eax
je 0x1801ec54c
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.1800a6630
movzx eax, word [rax]
cmp eax, 0x3a
je 0x1801ec588
lea rcx, [rsp + 0x30]
call fcn.180074060
mov rdx, rax
mov rcx, qword [rsp + 0x40d0]
call fcn.1801ec300
mov eax, dword [rsp + 0x20]
or eax, 1
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x30]
call fcn.180073fc0
mov rax, qword [rsp + 0x40d0]
jmp 0x1801ec75d
lea rcx, [rsp + 0x30]
call fcn.180074060
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x40d0]
call fcn.1801e24e0
mov eax, dword [rsp + 0x20]
or eax, 1
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x30]
call fcn.180073fc0
mov rax, qword [rsp + 0x40d0]
jmp 0x1801ec75d
mov r8d, 0x2000
lea rdx, [rsp + 0xc0]
lea rcx, str.PATH
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1801ec733
xor r9d, r9d
mov r8w, 0x3b
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x68]
call fcn.1801e6510
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x68]
call fcn.1800742b0
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x1801ec636
xor r8d, r8d
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x28]
call fcn.180075fe0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x68]
call fcn.1800742e0
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.1800755a0
movzx eax, al
test eax, eax
je 0x1801ec729
lea rcx, [rsp + 0x30]
call fcn.180074060
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x28]
call fcn.1800760f0
mov rcx, rax
call fcn.180074060
mov rcx, qword [rsp + 0x60]
mov r9, rcx
mov r8, rax
lea rdx, str._s__s
lea rcx, [rsp + 0x80]
call fcn.1801e9260
nop
lea rcx, [rsp + 0x80]
call fcn.180074060
xor edx, edx
mov rcx, rax
call fcn.1801e68f0
movzx eax, al
test eax, eax
je 0x1801ec717
lea rcx, [rsp + 0x80]
call fcn.180074060
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x40d0]
call fcn.1801e24e0
mov eax, dword [rsp + 0x20]
or eax, 1
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x80]
call fcn.180073fc0
nop
lea rcx, [rsp + 0x68]
call fcn.1800748f0
nop
lea rcx, [rsp + 0x30]
call fcn.180073fc0
mov rax, qword [rsp + 0x40d0]
jmp 0x1801ec75d
lea rcx, [rsp + 0x80]
call fcn.180073fc0
jmp 0x1801ec621
lea rcx, [rsp + 0x68]
call fcn.1800748f0
mov rcx, qword [rsp + 0x40d0]
call fcn.180073cf0
mov eax, dword [rsp + 0x20]
or eax, 1
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x30]
call fcn.180073fc0
mov rax, qword [rsp + 0x40d0]
add rsp, 0x40c8
ret