Function at 0x18001cfe0
Capabilities:
Query environment variable
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x180096e80]
xor rax, rsp
mov qword [rsp + 0x50], rax
xor esi, esi
lea rcx, str.appdata
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x18001d020
mov qword [rsp + 0x28], rcx
call fcn.18004d8c0
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.180019860
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x1800955e0]
call fcn.18001c990
nop
lea rcx, [rsp + 0x30]
call fcn.180016ce0
lea rax, str.WOLF
mov qword [rsp + 0x20], rax
mov edi, 4
mov qword [rsp + 0x28], rdi
call fcn.18004d8c0
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.180019860
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x1800955e0]
call fcn.18001c990
nop
lea rcx, [rsp + 0x30]
call fcn.180016ce0
lea rcx, [0x1800955e0]
cmp qword [0x1800955f8], 7
cmova rcx, qword [0x1800955e0]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0x30]
call fcn.18004da74
mov r8d, eax
test eax, eax
jne 0x18001d14d
mov edx, dword [rsp + 0x40]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x24], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x18001d13b
mov eax, dword [rsp + 0x44]
cmp eax, 0xa000000c
jne 0x18001d128
mov ebx, 1
jmp 0x18001d179
cmp eax, 0xa0000003
jne 0x18001d13b
mov edi, 0xa
mov ebx, 1
jmp 0x18001d179
shr edx, 4
and edx, 1
or edx, 2
mov edi, edx
mov ebx, 1
jmp 0x18001d179
mov dword [rsp + 0x24], 0xffff
sub eax, 2
je 0x18001d170
sub eax, 1
je 0x18001d170
sub eax, 0x32
je 0x18001d170
cmp eax, 0x46
je 0x18001d170
mov ebx, 1
jmp 0x18001d177
mov ebx, 1
mov esi, ebx
mov edi, esi
mov dword [rsp + 0x20], r8d
lea rax, [0x180095578]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
test edi, edi
jne 0x18001d1a4
test r8d, r8d
jne 0x18001d362
jmp 0x18001d1a9
cmp edi, 1
jne 0x18001d1d4
lea rcx, [0x1800955e0]
cmp qword [0x1800955f8], 7
cmova rcx, qword [0x1800955e0]
call fcn.18004d9fc
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x18001d37a
lea rax, str.WOLF.log
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 8
call fcn.18004d8c0
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.180019860
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x1800955e0]
call fcn.18001c990
nop
lea rcx, [rsp + 0x30]
call fcn.180016ce0
nop
jmp 0x18001d22f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_AttachConsole]
test eax, eax
jne 0x18001d247
call qword [sym.imp.KERNEL32.dll_AllocConsole]
lea rcx, [0x180051ac8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov r9d, 0x40
mov r8d, 2
lea rdx, str.CONOUT_
lea rcx, [0x1800a86c8]
call fcn.18001d900
xor r8d, r8d
test rax, rax
mov rax, qword [0x1800a86c0]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800a86c0]
je 0x18001d2c7
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x18001d2d5
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov r9d, 0x40
mov r8d, ebx
lea rdx, str.CONIN_
lea rcx, [0x180095610]
call fcn.18001d900
xor r8d, r8d
test rax, rax
mov rax, qword [0x180095600]
movsxd rcx, dword [rax + 4]
lea rax, [0x180095600]
je 0x18001d318
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x18001d326
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [0x1800955e0]
lea rcx, [0x1800a85b0]
call fcn.18001c360
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.18004e300
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
ret
lea r8, [0x1800955e0]
lea rdx, [rsp + 0x20]
lea rcx, str.exists
call fcn.180019ce0
shr rdx, 0x20
lea r8, [0x1800955e0]
lea rcx, str.create_directory
call fcn.18001d870
int3