Function at 0x140018298
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
lea rdx, str.XMRIG_VERSION
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
nop
lea rdx, [0x140122c80]
lea rcx, [rbp - 0x10]
call fcn.14003e8e0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x40]
lea rsi, [0x14015be50]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
lea rdx, str.XMRIG_KIND
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
nop
lea rdx, str.miner
lea rcx, [rbp - 0x10]
call fcn.14003e8e0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
lea rcx, [rbp - 0x40]
call fcn.1400192d8
mov rbx, rax
lea rdx, str.XMRIG_HOSTNAME
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
xor edi, edi
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
lea rcx, [rbp - 0x40]
call fcn.140023cc0
mov rbx, rax
lea rdx, str.XMRIG_EXE
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002435c
mov rbx, rax
lea rdx, str.XMRIG_EXE_DIR
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
xor r8d, r8d
lea edx, [rdi + 1]
lea rcx, [rbp - 0x40]
call fcn.14002435c
mov rbx, rax
lea rdx, str.XMRIG_CWD
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
xor r8d, r8d
lea edx, [rdi + 3]
lea rcx, [rbp - 0x40]
call fcn.14002435c
mov rbx, rax
lea rdx, str.XMRIG_HOME_DIR
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
xor r8d, r8d
lea edx, [rdi + 4]
lea rcx, [rbp - 0x40]
call fcn.14002435c
mov rbx, rax
lea rdx, str.XMRIG_TEMP_DIR
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
xor r8d, r8d
lea edx, [rdi + 2]
lea rcx, [rbp - 0x40]
call fcn.14002435c
mov rbx, rax
lea rdx, str.XMRIG_DATA_DIR
lea rcx, [rbp - 0x20]
call fcn.14003e8e0
mov rcx, qword [rbx]
mov qword [rbp - 0x10], rcx
mov rcx, qword [rbx + 8]
mov qword [rbp - 8], rcx
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
lea rdx, str.HOSTNAME
lea rcx, [rbp - 0x50]
call fcn.14003e8e0
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14001867e
lea rcx, [rbp - 0x40]
call fcn.1400192d8
nop
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x20], rcx
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x18], rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov rdx, qword [rax]
mov qword [rbp - 0x10], rdx
mov rdx, qword [rax + 8]
mov qword [rbp - 8], rdx
mov qword [rax], rdi
mov qword [rax + 8], rdi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.140012310
nop
mov rcx, qword [rbp - 0x10]
call fcn.14011ad24
mov rcx, qword [rbp - 0x20]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x40]
call fcn.14011ad24
nop
mov rcx, qword [rbp - 0x50]
call fcn.14011ad24
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret