Function at 0x14006bdac
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
lea rdx, str.XMRIG_VERSION
lea rcx, [rbp - 0x20]
call fcn.140016378
nop
lea rdx, str.6.21.3
lea rcx, [rbp - 0x10]
call fcn.140016378
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x40]
lea rsi, [0x140708360]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
lea rdx, str.XMRIG_KIND
lea rcx, [rbp - 0x20]
call fcn.140016378
nop
lea rdx, str.miner
lea rcx, [rbp - 0x10]
call fcn.140016378
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
lea rcx, [rbp - 0x40]
call fcn.14006bb28
mov rbx, rax
lea rdx, str.XMRIG_HOSTNAME
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
xor edi, edi
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
lea rcx, [rbp - 0x40]
call fcn.14000e578
mov rbx, rax
lea rdx, str.XMRIG_EXE
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14000e630
mov rbx, rax
lea rdx, str.XMRIG_EXE_DIR
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
xor r8d, r8d
lea edx, [rdi + 1]
lea rcx, [rbp - 0x40]
call fcn.14000e630
mov rbx, rax
lea rdx, str.XMRIG_CWD
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
xor r8d, r8d
lea edx, [rdi + 3]
lea rcx, [rbp - 0x40]
call fcn.14000e630
mov rbx, rax
lea rdx, str.XMRIG_HOME_DIR
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
xor r8d, r8d
lea edx, [rdi + 4]
lea rcx, [rbp - 0x40]
call fcn.14000e630
mov rbx, rax
lea rdx, str.XMRIG_TEMP_DIR
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
xor r8d, r8d
lea edx, [rdi + 2]
lea rcx, [rbp - 0x40]
call fcn.14000e630
mov rbx, rax
lea rdx, str.XMRIG_DATA_DIR
lea rcx, [rbp - 0x20]
call fcn.140016378
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
lea rdx, str.HOSTNAME
lea rcx, [rbp - 0x50]
call fcn.140016378
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14006c192
lea rcx, [rbp - 0x40]
call fcn.14006bb28
nop
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x20], rcx
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x18], rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov rdx, qword [rax]
mov qword [rbp - 0x10], rdx
mov rdx, qword [rax + 8]
mov qword [rbp - 8], rdx
mov qword [rax], rdi
mov qword [rax + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14006c9c0
nop
mov rcx, qword [rbp - 0x10]
call fcn.14001037c
mov rcx, qword [rbp - 0x20]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x40]
call fcn.14001037c
nop
mov rcx, qword [rbp - 0x50]
call fcn.14001037c
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret