Function at 0x1800bb040
Capabilities:
Query environment variable

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov rax, qword [0x1800dbea8]
xor rax, rsp
mov qword [rbp - 1], rax
mov rax, r9
mov qword [rbp - 0x71], rax
mov r15, r8
mov r13, rdx
mov r14, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
xor r11d, r11d
mov qword [rbp - 0x59], r11
mov ebx, dword [rbp + 0x7f]
mov edi, ebx
imul r12d, ebx, 0x438
lea r9d, [r11 + 0x6e]
cmp ebx, r12d
ja 0x1800bb34f
mov ecx, 0x6f43
lea edx, [r11 + 0x63]
lea r8d, [r11 + 0x73]
mov rbx, qword [rbp - 0x71]
mov rsi, qword [rbp - 0x71]
cmp edi, 0x1c48
ja 0x1800bb1de
je 0x1800bb722
cmp edi, 0xbe
ja 0x1800bb1bd
je 0x1800bb180
cmp edi, 0x15
je 0x1800bb13d
cmp edi, 0x28
je 0x1800bb0f9
cmp edi, 0xae
jne 0x1800bb293
mov rbx, r11
mov rsi, r15
jmp 0x1800bb293
mov edx, 0x61
lea rcx, [rbp - 0x69]
call fcn.180052ca0
test al, al
je 0x1800bb2ab
xor r11d, r11d
mov dword [r15], r11d
mov rax, qword [rbp - 0x69]
mov rcx, qword [rbp - 0x61]
cmp rax, rcx
je 0x1800bb280
cmp dword [rax + 8], r11d
jne 0x1800bb12f
inc dword [r15]
add rax, 0x20
cmp rax, rcx
jne 0x1800bb126
jmp 0x1800bb280
mov eax, dword [rax]
mov dword [rsp + 0x40], eax
mov eax, dword [r14]
mov qword [rbp - 0x49], rax
mov rax, qword [r15]
mov qword [rbp - 0x51], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x49]
xor edx, edx
mov r8d, 0xe2
mov rcx, r13
call fcn.18005e320
mov dword [rbp - 0x79], eax
jmp 0x1800bb27d
mov byte [rbp - 0x39], 0
lea rcx, [rbp - 0x39]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1800bb190
movzx eax, word [0x1800ced74]
mov word [rcx], ax
movzx eax, word [0x1800ced78]
mov word [rbp - 0x38], ax
movzx eax, byte [0x1800ced7a]
mov byte [rbp - 0x36], al
jmp 0x1800bb28e
cmp edi, 0x777
je 0x1800bb722
cmp edi, 0xe38
jne 0x1800bb293
mov byte [rbp - 0x79], 1
jmp 0x1800bb293
cmp edi, 0x3dda
je 0x1800bb2bb
cmp edi, 0x438a
je 0x1800bb23f
cmp edi, 0x8656
je 0x1800bb229
cmp edi, 0xc922
je 0x1800bb21c
cmp edi, 0x10bee
jne 0x1800bb293
mov dword [rbp - 0x19], 0x6e6f43
mov word [rbp - 0x16], r9w
jmp 0x1800bb293
movzx eax, word [0x1800caef0]
mov word [rbp - 0x3d], ax
jmp 0x1800bb293
mov word [rbp - 0x41], dx
movzx eax, word [0x1800ced7c]
mov word [rbp - 0x40], ax
mov word [rbp - 0x3e], r8w
jmp 0x1800bb293
mov r8d, 4
lea rdx, str.P_1.
lea rcx, [rbp - 0x39]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 0xa
lea rdx, [rbp - 0x32]
lea ecx, [r8 - 9]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
mov eax, dword [str.Host]
mov dword [rbp - 9], eax
movzx eax, byte [0x1800ced90]
mov byte [rbp - 5], al
xor r11d, r11d
mov r9d, 0x6e
lea r8d, [r9 + 5]
lea edx, [r9 - 0xb]
mov ecx, 0x6f43
imul eax, dword [rbp + 0x7f], 0x5a
add edi, eax
cmp edi, r12d
ja 0x1800bb34f
mov rax, qword [rbp - 0x71]
jmp 0x1800bb0b4
mov dword [r15], 1
mov byte [rbp - 0x79], 0
jmp 0x1800bb722
cmp byte [rsi], 0
je 0x1800bb726
mov edi, 0x17
nop dword [rax]
mov eax, edi
sub eax, 0x17
je 0x1800bb2de
cmp eax, 1
je 0x1800bb332
jmp 0x1800bb33a
movzx ecx, byte [rsi]
cmp cl, 0x7e
je 0x1800bb30d
movzx eax, word [0x1800cabc4]
mov word [rsp + 0x40], ax
mov byte [rsp + 0x40], cl
lea r8, [rsp + 0x40]
mov rdx, rbx
mov ecx, 0x141
call fcn.18003f690
mov rbx, rax
jmp 0x1800bb33a
lea rcx, str.HOME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1800bb332
mov r8, rax
mov rdx, rbx
mov ecx, 0x141
call fcn.18003f690
mov rbx, rax
mov edi, 0x18
inc rsi
inc edi
cmp edi, 0x19
jb 0x1800bb2d0
cmp byte [rsi], 0
jne 0x1800bb2c4
jmp 0x1800bb726
mov r13d, dword [rbp + 0x7f]
lea esi, [r13 + 0x2c0]
cmp r13d, esi
jae 0x1800bb722
mov ecx, 0x7355
mov edx, 0x6365
mov r8d, 0x74
lea r9d, [r8 - 0xb]
lea r10d, [r8 - 5]
lea r12, [0x1800dbe70]
cmp r13d, 0x1fe
ja 0x1800bb55c
je 0x1800bb4ba
mov eax, r13d
sub eax, 0xbe
je 0x1800bb4a4
sub eax, 0x40
je 0x1800bb496
sub eax, 0x40
je 0x1800bb472
sub eax, 0x40
je 0x1800bb437
cmp eax, 0x40
jne 0x1800bb70f
mov word [rbp - 0x20], 0x74
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x1800bb413
lea rax, [rcx + 3]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1800bb3f1
mov rax, qword [r14]
lea rbx, [rax + rcx]
mov r8d, 3
lea rdx, [0x1800ced9c]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
jmp 0x1800bb6f7
mov qword [rsp + 0x20], 3
lea r9, [0x1800ced9c]
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, r14
call fcn.180031da0
jmp 0x1800bb6f7
mov byte [rbp - 0x25], 0
mov r8d, 4
lea rdx, [0x1800ceda4]
lea rcx, [rbp - 0x25]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x21], 0
mov r8d, 1
lea rdx, [0x1800cedd9]
lea rcx, [rbp - 0x29]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x1800bb6f7
mov word [rbp - 0x29], cx
mov byte [rbp - 0x27], 0
mov r8d, 2
lea rdx, [0x1800cedff]
lea rcx, [rbp - 0x27]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x1800bb6f7
mov eax, 0x6e
mov word [rbp - 0x10], ax
jmp 0x1800bb70f
mov dword [rbp - 0x15], 0x746365
mov word [rbp - 0x12], r9w
mov word [rbp - 0x11], r10w
jmp 0x1800bb70f
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
cmp rcx, rdx
jae 0x1800bb4e3
lea rax, [rcx + 1]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1800bb4db
mov rax, qword [r14]
mov word [rax + rcx], 0x20
jmp 0x1800bb4f5
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r14
call fcn.180031c40
lea rax, [r15 + 0x20]
cmp qword [r15 + 0x38], 0x10
jb 0x1800bb504
mov rax, qword [r15 + 0x20]
cmp byte [rax], 0x2f
je 0x1800bb544
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
cmp rcx, rdx
jae 0x1800bb532
lea rax, [rcx + 1]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1800bb52a
mov rax, qword [r14]
mov word [rax + rcx], 0x2f
jmp 0x1800bb544
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r14
call fcn.180031c40
lea rdx, [r15 + 0x20]
cmp qword [r15 + 0x38], 0x10
jb 0x1800bb553
mov rdx, qword [r15 + 0x20]
mov r8, qword [r15 + 0x30]
jmp 0x1800bb6ef
mov eax, r13d
sub eax, 0x23e
je 0x1800bb62f
sub eax, 0x40
je 0x1800bb5f6
sub eax, 0x40
je 0x1800bb58f
sub eax, 0x40
je 0x1800bb6d5
cmp eax, 0x40
jne 0x1800bb70f
jmp 0x1800bb6d5
mov dword [rsp + 0x38], 0xae
lea rax, [rbp - 0x41]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r11
lea r9, [rbp - 0x19]
mov r8, r14
xor edx, edx
xor ecx, ecx
call fcn.180033750
lea rax, [r15 + 0x40]
cmp qword [rax + 0x18], 0x10
jb 0x1800bb5c8
mov rax, qword [rax]
mov dword [rsp + 0x38], 0xae
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x29]
mov r8, r14
xor edx, edx
xor ecx, ecx
call fcn.180033750
jmp 0x1800bb6f7
mov rax, r15
cmp qword [r15 + 0x18], 0x10
jb 0x1800bb603
mov rax, qword [r15]
mov dword [rsp + 0x38], 0xae
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r11
lea r9, [rbp - 9]
mov r8, r14
xor edx, edx
xor ecx, ecx
call fcn.180033750
jmp 0x1800bb6f7
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
cmp rcx, rdx
jae 0x1800bb658
lea rax, [rcx + 1]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1800bb650
mov rax, qword [r14]
mov word [rax + rcx], 0x20
jmp 0x1800bb66a
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r14
call fcn.180031c40
lea rax, [rbp - 0x39]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800bb675
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1800bb6be
lea rax, [rcx + rdi]
mov qword [r14 + 0x10], rax
mov rax, r14
cmp rdx, 0x10
jb 0x1800bb6a5
mov rax, qword [r14]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x39]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x1800bb6d5
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x39]
xor r8d, r8d
mov rdx, rdi
mov rcx, r14
call fcn.180031da0
mov rdx, r12
cmp qword [0x1800dbe88], 0x10
cmovae rdx, qword [0x1800dbe70]
mov r8, qword [0x1800dbe80]
mov rcx, r14
call fcn.1800482e0
mov r10d, 0x6f
lea r9d, [r10 - 6]
lea r8d, [r10 + 5]
mov edx, 0x6365
mov ecx, 0x7355
add r13d, 0x40
cmp r13d, esi
mov r11d, 0
jb 0x1800bb382
mov rbx, qword [rbp - 0x79]
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x1800bb767
mov rdx, qword [rbp - 0x59]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800bb762
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800bb762
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c05d0
mov rax, rbx
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1800c0ae0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret