Function at 0x18008b480
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x180162880]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov r12, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov dword [rsp + 0x30], 1
lea rcx, str.APPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], r14
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18008b510
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.180024740
nop
mov r8d, 0x12
lea rdx, str.LucaModzZProfile
lea rcx, [rbp + 0xc0]
call fcn.18002baa0
mov rdi, qword [rbp + 0xd0]
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rbx, qword [rbp + 0xc0]
call fcn.1800de594
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rdi
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp]
call fcn.18006cd50
mov r15d, 0xc01
mov dword [rsp + 0x30], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp]
lea rcx, [rbp + 0x90]
call fcn.1800d0650
test eax, eax
jne 0x18008bc04
lea rcx, [rbp]
call fcn.18006fb10
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008b5dd
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x80], xmm0
test rcx, rcx
je 0x18008b601
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
test rcx, rcx
je 0x18008b64a
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008b645
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008b645
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
mov r13, qword [rbp + 0x80]
nop dword [rax]
nop word [rax + rax]
lea rbx, str..json
test r13, r13
je 0x18008bb3d
call fcn.1800de594
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 5
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.18006cd50
or r15d, 6
mov dword [rsp + 0x30], r15d
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008b6ac
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006cea0
cmp rax, rdx
je 0x18008b6fc
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008b6d0
cmp cx, 0x2f
jne 0x18008b6d9
add rax, 2
cmp rax, rdx
jne 0x18008b6c1
cmp rax, rdx
je 0x18008b6fc
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008b6fc
cmp cx, 0x2f
je 0x18008b6fc
mov rbx, r8
cmp rax, r8
jne 0x18008b6e0
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800de3f0
mov rcx, rax
cmp rbx, rax
je 0x18008b752
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008b74f
cmp word [rax], 0x2e
jne 0x18008b732
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008b752
cmp word [rdx], 0x2e
jne 0x18008b752
jmp 0x18008b74f
sub rax, 2
cmp rbx, rax
je 0x18008b74f
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008b752
sub rax, 2
cmp rbx, rax
jne 0x18008b740
mov rax, rcx
mov qword [rbp - 0x80], rax
sub rcx, rax
sar rcx, 1
mov qword [rbp - 0x78], rcx
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.1800d02f0
or r15d, 8
mov dword [rsp + 0x30], r15d
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1800cff20
mov ebx, eax
lea rcx, [rbp + 0x40]
call fcn.18006fb10
nop
lea rcx, [rsp + 0x40]
call fcn.18006fb10
test ebx, ebx
jne 0x18008ba80
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008b7d7
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18006cea0
cmp rax, r11
je 0x18008b82b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008b7ff
cmp cx, 0x2f
jne 0x18008b808
add rax, 2
cmp rax, r11
jne 0x18008b7f0
cmp rax, r11
je 0x18008b82b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18008b82b
cmp cx, 0x2f
je 0x18008b82b
mov r10, rdx
cmp rax, rdx
jne 0x18008b810
mov qword [rbp - 0x60], r10
sub r11, r10
sar r11, 1
mov qword [rbp - 0x58], r11
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800d02f0
bts r15d, 8
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006cea0
cmp rax, rdx
je 0x18008b8ac
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008b882
cmp cx, 0x2f
jne 0x18008b88b
add rax, 2
cmp rax, rdx
jne 0x18008b873
cmp rax, rdx
je 0x18008b8ac
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008b8ac
cmp cx, 0x2f
je 0x18008b8ac
mov rbx, r8
cmp rax, r8
jne 0x18008b890
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800de3f0
mov rcx, rax
cmp rbx, rax
je 0x18008b8e7
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008b8e7
cmp word [rax], 0x2e
jne 0x18008ba1e
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008b8e4
cmp word [rdx], 0x2e
je 0x18008b8e7
mov rcx, rax
mov qword [rbp - 0x50], rbx
sub rcx, rbx
sar rcx, 1
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x40]
call fcn.1800d02f0
bts r15d, 9
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 7
cmova rsi, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x30]
call fcn.1800de594
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], al
bts r15d, 7
mov dword [rsp + 0x30], r15d
test rdi, rdi
je 0x18008b9da
cmp rdi, 0x7fffffff
ja 0x18008bc2b
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800de604
mov rbx, rax
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008bc21
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp + 0xa0]
call fcn.18006dc40
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova r9, qword [rbp + 0xa0]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800de604
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008bc17
btr r15d, 7
or r15d, 0x70
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x40]
call fcn.18006fb10
nop
lea rcx, [rbp - 0x20]
call fcn.18006fb10
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x18008ba48
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.180025020
add qword [r12 + 8], 0x20
jmp 0x18008ba5b
sub rax, 2
cmp rbx, rax
je 0x18008b8e7
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008b8e4
sub rax, 2
cmp rbx, rax
jne 0x18008ba30
jmp 0x18008b8e7
lea r8, [rbp + 0xa0]
mov rdx, rax
mov rcx, r12
call fcn.1800cfcd0
nop
lea rcx, [rbp + 0xa0]
call fcn.180004060
mov rsi, 0xffffffffffffffff
xor r14d, r14d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0xf0]
mov rcx, qword [r13 + 0x40]
call fcn.1800de86c
cmp eax, 0x12
je 0x18008bad7
test eax, eax
jne 0x18008bbfc
cmp word [rbp + 0x11c], 0x2e
jne 0x18008bac3
movzx eax, word [rbp + 0x11e]
test ax, ax
je 0x18008ba80
cmp ax, 0x2e
jne 0x18008bac3
cmp word [rbp + 0x120], 0
je 0x18008ba80
lea rdx, [rbp + 0xf0]
mov rcx, r13
call fcn.1800d0440
jmp 0x18008b660
mov r13, r14
mov qword [rbp + 0x80], r14
mov rbx, qword [rbp + 0x88]
mov qword [rbp + 0x88], r14
test rbx, rbx
je 0x18008b660
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18008bb20
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x18008bb2a
nop dword [rax + rax]
mov r15d, dword [rsp + 0x30]
jmp 0x18008b64a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
jmp 0x18008b64a
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x18008bb7e
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008bb7e
mov rbx, qword [rbp + 0x88]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008bb7e
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008bbbd
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008bbbd
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x18008bbbd
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
lea rcx, [rbp + 0xc0]
call fcn.180004060
mov rax, r12
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1800defc0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
call fcn.1800d01d0
nop
lea r8, [rbp]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.18006d830
nop
mov ecx, dword [rsp + 0x3c]
call fcn.18006dff0
int3
mov ecx, dword [rsp + 0x3c]
call fcn.18006dff0
int3
mov ecx, 0x16
call fcn.18006da50
int3