Function at 0x180028ef0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
lea r15d, [rdx - 0x11]
mov r12, r8
mov esi, edx
mov r13, rcx
cmp edx, r15d
jbe 0x1800293e7
mov rdi, qword [rsp + 0x98]
mov r14, qword [rsp + 0x98]
mov ebp, dword [rsp + 0x88]
xor ebx, ebx
lea eax, [rsi - 0x26]
lea rdx, [0x180000000]
cmp eax, 0x3f
ja case.0x180028f57.55
movzx eax, byte [rdx + rax + 0x29454]
mov ecx, dword [rdx + rax*4 + 0x2940c]
add rcx, rdx
jmp rcx
mov ebx, 0xa
xor esi, esi
mov eax, ebx
sub eax, 9
je 0x180029052
cmp eax, 1
jne 0x1800290ef
mov r8d, eax
lea rdx, [0x18006c868]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18002936a
mov r8d, 4
lea rdx, str.quit
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x18002936a
mov r8d, 1
lea rdx, [0x18006c874]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x180028fe1
mov r8d, 5
lea rdx, [0x18006c878]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x180028ff9
mov r9d, 0xfd
mov qword [rsp + 0x20], r14
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.180040d00
mov r8d, 1
lea rdx, [0x18006c880]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x180029031
mov r8d, 5
lea rdx, str.flash
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1800290ef
mov qword [rsp + 0x28], rdi
mov r9d, 0x49
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
xor ecx, ecx
call fcn.18003f130
jmp 0x1800290ef
mov r8d, 1
lea rdx, [0x18006c88c]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800290a0
mov r8d, 4
lea rdx, str.help
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1800290a0
mov r8d, 1
lea rdx, [0x18006c898]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1800290c3
xor r9d, r9d
mov dword [rsp + 0x20], 0x7f
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180043f80
xor edx, edx
mov ecx, 0x128
call fcn.180043310
mov r9, qword [r14]
xor r8d, r8d
mov dword [rsp + 0x28], ILRemoveLastID
mov rdx, rdi
xor ecx, ecx
mov qword [rsp + 0x20], rsi
call fcn.18005ff10
mov ebp, eax
test eax, eax
je 0x1800290ef
cmp eax, 0xffffffd4
jne 0x18002936a
dec ebx
cmp ebx, 8
ja 0x180028f60
mov esi, 0x28
jmp case.0x180028f57.55
mov rcx, qword [r14]
lea r8, str.WMI_UTILS_Is_Guard_Enabled:_SecurityServicesRunning__lu
mov r9d, ebp
mov edx, 3
call fcn.18003c520
jmp case.0x180028f57.55
mov rcx, qword [r12 + 0x278]
call fcn.180069570
mov dword [r12 + 0x280], ebx
jmp case.0x180028f57.55
lea rdx, [rsp + 0x88]
mov ecx, 0x119
call fcn.180043310
jmp case.0x180028f57.55
lea rdx, [0x180043580]
mov qword [0x18007b480], r14
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
jmp case.0x180028f57.55
mov eax, dword [r12]
mov r9d, 0x109
mov qword [rsp + 0x28], rbx
xor r8d, r8d
xor ecx, ecx
mov byte [rax + rdx + 0x7b44a], 1
xor edx, edx
mov eax, dword [r12]
mov dword [rsp + 0x88], eax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
call fcn.180028df0
jmp case.0x180028f57.55
test r14, r14
jne 0x1800291f0
mov ebx, 0x123
nop dword [rax]
mov eax, ebx
sub eax, 0x123
je 0x1800291d4
cmp eax, 0x53
je 0x18002936a
jmp 0x1800291e5
lea rcx, str.Only_for_symbols_with_fixed_locations__global_or_static_scope_.
call fcn.1800693c0
mov ebp, 0xfffffffa
add ebx, 0x53
cmp ebx, 0x1c9
jb 0x1800291c0
mov edx, 0xc0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [r14 + 8], rax
test rax, rax
jne case.0x180028f57.55
lea rcx, str.DISKLIB_LIB_MISC___:__s:_Close_failed_for__s:__s___d_.
call fcn.1800693c0
mov ebp, 0xfffffffa
lea esi, [rbp + 0x2e]
jmp case.0x180028f57.55
xor r9d, r9d
mov dword [rsp + 0x20], 0x7f
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180043f80
jmp case.0x180028f57.55
mov rax, qword [r14]
mov r9, r14
xor r8d, r8d
xor edx, edx
mov ecx, 0x8d
mov byte [rax + 0x14], 0
call fcn.18000ace0
mov ebp, eax
test eax, eax
jne 0x1800293ee
jmp case.0x180028f57.55
mov dword [r14 + 0x10], 2
jmp case.0x180028f57.55
mov r8, qword [r12 + 0x28]
test r8, r8
je 0x180029293
mov edx, 0x43
mov rcx, r13
call fcn.180028ef0
jmp case.0x180028f57.55
mov qword [r12 + 0x28], r13
jmp case.0x180028f57.55
mov edx, 0x18
mov ebp, ebx
lea ecx, [rdx - 0x17]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r14, rax
jmp case.0x180028f57.55
xor edx, edx
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
lea ecx, [rdx + 0x24]
call fcn.18003c340
mov qword [r14], rax
test rax, rax
jne 0x1800292f6
cmp dword [r14 + 0x10], eax
je 0x1800292e9
lea rcx, str.fuzz_target_0x_08x:_restoring_xsp_to_0x_08x
call fcn.1800693c0
mov ebp, 0xfffffff6
lea esi, [rbp + 0x32]
jmp case.0x180028f57.55
mov ecx, dword [r14 + 0x10]
xor r9d, r9d
mov dword [rsp + 0x88], ecx
mov r8, rax
lea rcx, [rsp + 0x88]
mov dword [rsp + 0x30], ILRemoveLastID
mov qword [rsp + 0x28], rbx
xor edx, edx
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.18003c570
test eax, eax
je case.0x180028f57.55
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x18002936a
lea rdx, [rsp + 0x88]
mov dword [rsp + 0x88], eax
mov ecx, 0xcf
call fcn.1800294a0
mov rcx, qword [r14]
lea r8, str.IDS_EXTENSIONS_LOAD_UNPACKED_BUTTON
mov r9, rax
mov edx, 2
call fcn.18003c520
mov esi, 0x28
jmp case.0x180028f57.55
mov rax, qword [r14]
mov rcx, qword [rax + 0x18]
mov rax, qword [r14 + 8]
mov qword [rcx + 0x10], rax
lea rcx, str.HOME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov r8, rax
lea r9, str.Show_printing_of_array_indexes
lea rdx, str._s_s
lea rcx, [0x18007b490]
call fcn.180069420
jmp case.0x180028f57.55
mov rax, qword [r14]
mov rcx, qword [rax + 0x18]
mov qword [rcx + 8], r14
jmp case.0x180028f57.55
mov rcx, qword [r12 + 0x260]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r12 + 0x268]
call fcn.180069570
mov dword [r12 + 0x270], ebx
dec esi
cmp esi, r15d
ja 0x180028f30
mov eax, dword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, ebx
jmp 0x1800293ee