Function at 0x180017bc0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x90
mov rbx, rcx
xor r15d, r15d
mov dword [rsp + 0x20], r15d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov r14d, 0xf
mov qword [rcx + 0x18], r14
mov byte [rcx], r15b
mov dword [rsp + 0x20], 1
lea rcx, str.MW_DDUX_ENTITLEMENT_ID_OVERRIDE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x180017cf7
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017c30
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1800037a0
lea rax, [rsp + 0x50]
cmp rbx, rax
je 0x180017cac
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180017c8a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180017c84
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180017ca5
mov rcx, r8
call fcn.18002a018
nop
mov byte [rbx], 0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbx + 0x10], xmm1
mov byte [rsp + 0x50], 0
jmp 0x180017cb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r14, qword [rsp + 0x68]
cmp r14, 0x10
jb 0x180017df4
lea rdx, [r14 + 1]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017cec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017cec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18002a018
nop
jmp 0x180017df4
mov ecx, dword [0x180049490]
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax + rcx*8]
mov eax, dword [rdx + rcx]
cmp dword [0x180049010], eax
jg 0x180017e6b
mov rcx, qword [0x180049008]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
call qword [rax + 0x170]
mov dword [rsp + 0x20], 3
lea rax, [rsp + 0x70]
cmp rbx, rax
je 0x180017da9
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180017d7c
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180017d76
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180017de7
mov rcx, r8
call fcn.18002a018
nop
mov byte [rbx], 0
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x80]
movups xmmword [rbx + 0x10], xmm1
movdqa xmm0, xmmword [0x180032e60]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x180017df4
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017dee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017dee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18002a018
nop
call fcn.180024f90
lea rcx, [rax + 0x168]
cmp rcx, rbx
je 0x180017e4f
mov rdi, qword [rbx + 0x10]
mov r9, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x180017e16
mov r9, qword [rbx]
mov rax, qword [rcx + 0x18]
cmp rdi, rax
ja 0x180017e43
mov rsi, rcx
cmp rax, 0x10
jb 0x180017e2b
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x180017e4f
xor r8d, r8d
mov rdx, rdi
call fcn.180005620
nop
jmp 0x180017e59
mov rax, rbx
add rsp, 0x90
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
lea rcx, [0x180049010]
call fcn.18002a6ac
cmp dword [0x180049010], 0xffffffff
jne 0x180017d1e
lea rcx, [rsp + 0x28]
call fcn.1800181a0
mov rax, qword [rax]
mov qword [0x180049008], rax
mov rsi, qword [rsp + 0x30]
test rsi, rsi
je 0x180017ed1
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x180017ed1
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
lock xadd dword [rsi + 0xc], edi
cmp edi, 1
jne 0x180017ed1
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
nop
lea rcx, [0x180049010]
call fcn.18002a64c
nop
jmp 0x180017d1e