Function at 0x18008d030
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x180166880]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov r12, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov dword [rsp + 0x30], 1
lea rcx, str.APPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], r14
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18008d0c0
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.180024740
nop
mov r8d, 0x12
lea rdx, str.LucaModzZProfile
lea rcx, [rbp + 0xc0]
call fcn.18002c920
mov rdi, qword [rbp + 0xd0]
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rbx, qword [rbp + 0xc0]
call fcn.1800e1464
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rdi
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp]
call fcn.18006e820
mov r15d, 0xc01
mov dword [rsp + 0x30], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp]
lea rcx, [rbp + 0x90]
call fcn.1800d3520
test eax, eax
jne 0x18008d7b4
lea rcx, [rbp]
call fcn.1800715e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008d18d
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x80], xmm0
test rcx, rcx
je 0x18008d1b1
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
test rcx, rcx
je 0x18008d1fa
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008d1f5
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008d1f5
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
mov r13, qword [rbp + 0x80]
nop dword [rax]
nop word [rax + rax]
lea rbx, str..json
test r13, r13
je 0x18008d6ed
call fcn.1800e1464
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 5
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.18006e820
or r15d, 6
mov dword [rsp + 0x30], r15d
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008d25c
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006e970
cmp rax, rdx
je 0x18008d2ac
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008d280
cmp cx, 0x2f
jne 0x18008d289
add rax, 2
cmp rax, rdx
jne 0x18008d271
cmp rax, rdx
je 0x18008d2ac
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008d2ac
cmp cx, 0x2f
je 0x18008d2ac
mov rbx, r8
cmp rax, r8
jne 0x18008d290
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800e12c0
mov rcx, rax
cmp rbx, rax
je 0x18008d302
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008d2ff
cmp word [rax], 0x2e
jne 0x18008d2e2
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008d302
cmp word [rdx], 0x2e
jne 0x18008d302
jmp 0x18008d2ff
sub rax, 2
cmp rbx, rax
je 0x18008d2ff
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008d302
sub rax, 2
cmp rbx, rax
jne 0x18008d2f0
mov rax, rcx
mov qword [rbp - 0x80], rax
sub rcx, rax
sar rcx, 1
mov qword [rbp - 0x78], rcx
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.1800d31c0
or r15d, 8
mov dword [rsp + 0x30], r15d
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1800d2df0
mov ebx, eax
lea rcx, [rbp + 0x40]
call fcn.1800715e0
nop
lea rcx, [rsp + 0x40]
call fcn.1800715e0
test ebx, ebx
jne 0x18008d630
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008d387
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18006e970
cmp rax, r11
je 0x18008d3db
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008d3af
cmp cx, 0x2f
jne 0x18008d3b8
add rax, 2
cmp rax, r11
jne 0x18008d3a0
cmp rax, r11
je 0x18008d3db
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18008d3db
cmp cx, 0x2f
je 0x18008d3db
mov r10, rdx
cmp rax, rdx
jne 0x18008d3c0
mov qword [rbp - 0x60], r10
sub r11, r10
sar r11, 1
mov qword [rbp - 0x58], r11
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800d31c0
bts r15d, 8
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006e970
cmp rax, rdx
je 0x18008d45c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008d432
cmp cx, 0x2f
jne 0x18008d43b
add rax, 2
cmp rax, rdx
jne 0x18008d423
cmp rax, rdx
je 0x18008d45c
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008d45c
cmp cx, 0x2f
je 0x18008d45c
mov rbx, r8
cmp rax, r8
jne 0x18008d440
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800e12c0
mov rcx, rax
cmp rbx, rax
je 0x18008d497
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008d497
cmp word [rax], 0x2e
jne 0x18008d5ce
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008d494
cmp word [rdx], 0x2e
je 0x18008d497
mov rcx, rax
mov qword [rbp - 0x50], rbx
sub rcx, rbx
sar rcx, 1
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x40]
call fcn.1800d31c0
bts r15d, 9
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 7
cmova rsi, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x30]
call fcn.1800e1464
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], al
bts r15d, 7
mov dword [rsp + 0x30], r15d
test rdi, rdi
je 0x18008d58a
cmp rdi, 0x7fffffff
ja 0x18008d7db
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800e14d4
mov rbx, rax
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008d7d1
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp + 0xa0]
call fcn.18006f710
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova r9, qword [rbp + 0xa0]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800e14d4
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008d7c7
btr r15d, 7
or r15d, 0x70
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x40]
call fcn.1800715e0
nop
lea rcx, [rbp - 0x20]
call fcn.1800715e0
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x18008d5f8
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.180025020
add qword [r12 + 8], 0x20
jmp 0x18008d60b
sub rax, 2
cmp rbx, rax
je 0x18008d497
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008d494
sub rax, 2
cmp rbx, rax
jne 0x18008d5e0
jmp 0x18008d497
lea r8, [rbp + 0xa0]
mov rdx, rax
mov rcx, r12
call fcn.1800d2ba0
nop
lea rcx, [rbp + 0xa0]
call fcn.180004060
mov rsi, 0xffffffffffffffff
xor r14d, r14d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0xf0]
mov rcx, qword [r13 + 0x40]
call fcn.1800e173c
cmp eax, 0x12
je 0x18008d687
test eax, eax
jne 0x18008d7ac
cmp word [rbp + 0x11c], 0x2e
jne 0x18008d673
movzx eax, word [rbp + 0x11e]
test ax, ax
je 0x18008d630
cmp ax, 0x2e
jne 0x18008d673
cmp word [rbp + 0x120], 0
je 0x18008d630
lea rdx, [rbp + 0xf0]
mov rcx, r13
call fcn.1800d3310
jmp 0x18008d210
mov r13, r14
mov qword [rbp + 0x80], r14
mov rbx, qword [rbp + 0x88]
mov qword [rbp + 0x88], r14
test rbx, rbx
je 0x18008d210
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18008d6d0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x18008d6da
nop dword [rax + rax]
mov r15d, dword [rsp + 0x30]
jmp 0x18008d1fa
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
jmp 0x18008d1fa
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x18008d72e
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008d72e
mov rbx, qword [rbp + 0x88]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008d72e
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008d76d
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008d76d
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x18008d76d
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
lea rcx, [rbp + 0xc0]
call fcn.180004060
mov rax, r12
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1800e1e90
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
call fcn.1800d30a0
nop
lea r8, [rbp]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.18006f300
nop
mov ecx, dword [rsp + 0x3c]
call fcn.18006fac0
int3
mov ecx, dword [rsp + 0x3c]
call fcn.18006fac0
int3
mov ecx, 0x16
call fcn.18006f520
int3