Function at 0x1800abef4
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor r13d, r13d
mov r14, r8
mov r15, rdx
mov r12d, ecx
mov ebp, r13d
test r8, r8
je 0x1800ac216
mov ebx, dword [0x180190054]
test ebx, ebx
jne 0x1800abf45
lea eax, [rbx + 1]
mov dword [0x1801967a8], eax
mov ebx, eax
mov dword [0x180190054], eax
jmp 0x1800abf4b
mov eax, dword [0x1801967a8]
mov ecx, dword [0x180191318]
cmp ecx, 0xffffffff
je 0x1800abf5a
test eax, eax
je 0x1800abf82
lea rcx, [0x180164c88]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov ebx, dword [0x180190054]
mov ecx, r13d
test rax, rax
mov eax, dword [0x1801967a8]
setne cl
mov dword [0x180191318], ecx
cmp byte [r14], 0x2d
jne 0x1800abf8f
mov ebp, 2
jmp 0x1800abf95
cmp byte [r14], 0x2b
jne 0x1800abf98
inc r14
mov qword [0x1801968d8], r13
test eax, eax
je 0x1800abfb6
or esi, 0xffffffff
or edi, esi
mov dword [0x180190178], esi
mov dword [0x18019017c], edi
jmp 0x1800abfc2
mov edi, dword [0x18019017c]
mov esi, dword [0x180190178]
test eax, eax
jne 0x1800abfd6
mov rax, qword [0x180191310]
cmp byte [rax], r13b
jne 0x1800ac08a
mov dword [0x1801967a8], r13d
cmp ebx, r12d
jge 0x1800ac1d6
movsxd rax, ebx
mov rax, qword [r15 + rax*8]
mov qword [0x180191310], rax
cmp byte [rax], 0x2d
jne 0x1800ac1a7
cmp byte [rax + 1], r13b
jne 0x1800ac033
mov edx, 0x2d
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_strchr]
mov ebx, dword [0x180190054]
test rax, rax
je 0x1800ac1a7
mov edi, dword [0x18019017c]
mov esi, dword [0x180190178]
mov rax, qword [0x180191310]
cmp edi, 0xffffffff
je 0x1800ac045
cmp esi, 0xffffffff
jne 0x1800ac045
mov esi, ebx
mov dword [0x180190178], ebx
lea rcx, [rax + 1]
cmp byte [rcx], r13b
je 0x1800ac08a
cmp byte [rcx], 0x2d
mov rax, rcx
jne 0x1800ac08a
cmp byte [rcx + 1], r13b
jne 0x1800ac08a
inc ebx
lea rax, [0x180196537]
mov dword [0x180190054], ebx
mov qword [0x180191310], rax
cmp esi, 0xffffffff
je 0x1800ac208
mov r9, r15
call fcn.1800abe2c
sub ebx, esi
jmp 0x1800ac1f3
movsx edi, byte [rax]
mov esi, 0x3a
inc rax
mov qword [0x180191310], rax
cmp edi, esi
je 0x1800ac180
cmp edi, 0x2d
jne 0x1800ac0b2
cmp byte [rax], r13b
jne 0x1800ac18d
mov edx, edi
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_strchr]
test rax, rax
je 0x1800ac163
cmp byte [rax + 1], sil
je 0x1800ac0de
mov rax, qword [0x180191310]
cmp byte [rax], r13b
jne 0x1800ac15c
jmp 0x1800ac156
mov rcx, qword [0x180191310]
mov qword [0x1801968d8], r13
cmp byte [rcx], r13b
jne 0x1800ac141
cmp byte [rax + 2], sil
je 0x1800ac148
mov eax, dword [0x180190054]
inc eax
mov dword [0x180190054], eax
cmp eax, r12d
jl 0x1800ac13b
lea rax, [0x180196537]
mov qword [0x180191310], rax
cmp byte [r14], sil
je 0x1800ac12b
mov edx, edi
lea rcx, [0x180164c88]
call fcn.1800abd90
cmp byte [r14], sil
mov eax, 0x3f
cmove eax, esi
jmp 0x1800ac219
cdqe
mov rcx, qword [r15 + rax*8]
mov qword [0x1801968d8], rcx
lea rax, [0x180196537]
mov qword [0x180191310], rax
inc dword [0x180190054]
mov eax, edi
jmp 0x1800ac219
mov rax, qword [0x180191310]
cmp edi, 0x2d
jne 0x1800ac17a
cmp byte [rax], r13b
je 0x1800ac216
jmp 0x1800ac18d
mov ebx, dword [0x180190054]
cmp byte [rax], r13b
jne 0x1800ac18d
inc ebx
mov dword [0x180190054], ebx
cmp byte [r14], sil
je 0x1800ac1a0
mov edx, edi
lea rcx, [0x180164c88]
call fcn.1800abd90
mov eax, 0x3f
jmp 0x1800ac219
lea rax, [0x180196537]
mov qword [0x180191310], rax
test ebp, ebp
je 0x1800ac216
movsxd rax, ebx
inc ebx
mov dword [0x180190054], ebx
mov rcx, qword [r15 + rax*8]
mov eax, 1
mov qword [0x1801968d8], rcx
jmp 0x1800ac219
lea rax, [0x180196537]
mov qword [0x180191310], rax
cmp esi, 0xffffffff
je 0x1800ac1fd
mov r9, r15
call fcn.1800abe2c
sub edi, esi
add ebx, edi
mov dword [0x180190054], ebx
jmp 0x1800ac208
cmp edi, 0xffffffff
je 0x1800ac208
mov dword [0x180190054], edi
or dword [0x180190178], 0xffffffff
or dword [0x18019017c], 0xffffffff
or eax, 0xffffffff
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret