Function at 0x180005429
Capabilities:
Query environment variable

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x200
pxor xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movq qword [rbp - 0x10], xmm0
lea rdi, [rbp - 0x90]
mov eax, 0
mov ecx, 0xd
rep stosq qword [rdi], rax
mov dword [rbp - 0x90], 0x68
mov dword [rbp - 0x54], 0x100
mov qword [rbp - 0x38], r10
mov qword [rbp - 0x30], r10
push rbp
mov rbp, rsp
sub rsp, 0x38
add word [rbp - 0x1b], ax
mov qword [rbp - 0x29], r8
and dword [rbp - 0xf], edx
mov r9, rax
mov qword [rbp - 0x11], r8
mov rdx, 0x338f
add word [rbp - 0x2e], cx
mov edx, ecx
mov dword [rbp - 0x24], ecx
mov rcx, qword [0x18000894d]
sub dword [rbp - 0x15], edx
mov edx, dword [rbp - 0x21]
and r11, 0x1939
mov rdx, qword [rbp - 0x12]
sub dword [0x18000895b], edx
add rdx, r10
mov dword [rbp - 9], eax
and ecx, edx
cmp rcx, qword [0x180008950]
jne 0x1800054d9
movzx edx, dh
mov edx, dword [rbp - 0x2c]
movzx ecx, al
sub cx, word [rbp - 0x14]
mov dword [rbp - 0x13], edx
add ecx, eax
mov eax, dword [rbp - 0x14]
mov qword [rbp - 0x2b], r11
sub r8, qword [rbp - 3]
mov eax, dword [rbp - 0x29]
mov rax, r9
mov qword [rbp - 0x28], rcx
sub edx, dword [rbp - 0xe]
movzx ecx, word [0x180008958]
mov qword [rbp - 8], r8
sub eax, dword [rbp - 0x16]
and qword [rbp - 0x19], r10
mov qword [rbp - 0x24], r9
movzx ecx, ch
movzx edx, al
add qword [rbp - 0x1b], rax
sub qword [rbp - 0x1c], r11
mov cl, 0x3a
sub rcx, 0x2bd3
mov rdx, qword [rbp - 0x19]
add ecx, 0x2f6e
cmp ecx, edx
je 0x180005568
mov qword [rbp - 0x18], r8
mov ecx, 0xd2a2
mov rcx, qword [rbp - 5]
mov qword [rbp - 0xb], r10
mov r11, qword [rbp - 0x1c]
and rcx, 0x9f66
mov ecx, dword [rbp - 4]
mov dword [rbp - 0x27], edx
mov ecx, 0xa565
mov rdx, qword [rbp]
movzx eax, cl
add ecx, dword [rbp - 0x20]
xor eax, 0x6cd9
or edx, 0xf328
leave
lea rcx, [0x180008017]
call sub.msvcrt.dll_getenv
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x90]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
mov r9d, 0
mov r8d, 0
mov rdx, rsi
mov ecx, 0
mov rax, qword [0x180008834]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x378
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180005623
xor eax, 0x799c
mov edx, dword [rbp - 0x36e]
xor edx, 0x3cc8
mov eax, ecx
mov dword [0x180008954], eax
add eax, 0x91ae
sub qword [rbp - 0x280], r10
or ecx, edx
add dword [rbp - 0x2f0], edx
mov qword [0x180008957], rcx
xor dword [rbp - 0x104], edx
mov r9, 0x648e
inc qword [rsp]
mov eax, 0x8997
cmp eax, dword [rsp]
jl 0x1800055de
add rsp, 0x10
mov edx, dword [rbp - 0x157]
mov rdx, qword [rbp - 0x1e3]
mov r8, 0xa66f
mov qword [rbp - 0x20a], r11
movzx eax, byte [rbp - 0x10]
sub rax, rdx
movzx eax, al
cmp r10, 0xffffffffb6e5f57f
jb 0x18000569e
movzx edx, dl
or eax, dword [rbp - 0x10c]
mov ecx, dword [rbp - 0xda]
mov ax, word [rbp - 0xda]
mov r8, rcx
mov edx, eax
mov qword [rbp - 0x18d], r10
xor qword [rbp - 0x11a], r9
mov qword [rbp - 0x52], r8
mov ecx, eax
mov r11, rcx
mov qword [rbp - 0x1e9], r8
or ecx, 0x3692
sub eax, dword [rbp - 0x36b]
mov qword [rbp - 0x1fa], rax
sub qword [rbp - 0x170], r11
or dword [rbp - 0x15a], ecx
movzx edx, cl
movzx edx, ah
mov edx, 0xf063
sub r9, qword [rbp - 0x163]
and r9, rcx
and qword [rbp - 0x219], r10
mov rax, rcx
mov ecx, edx
mov rax, r11
mov qword [rbp - 0x39], r8
movzx eax, dl
sub eax, ecx
mov eax, dword [rbp - 0x104]
movzx ecx, byte [rbp - 0x75]
movzx eax, dh
mov r10, qword [rbp - 0xaf]
mov qword [rbp - 0x13d], rdx
mov edx, dword [rbp - 0x2ad]
mov r8, qword [rbp - 0x29e]
mov edx, 0x89fb
add edx, 0xe692
add qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], rax
mov eax, dword [rbp - 0x36d]
mov dword [rbp - 0x79], edx
mov edx, dword [rbp - 0x323]
test edx, ecx
je 0x180005770
nop
lea r9, [rbp - 0x2bd]
or dword [rbp - 0x346], eax
mov ecx, dword [0x180008954]
mov edx, ecx
or dword [rbp - 0x24d], ecx
mov rcx, qword [rbp - 0x29c]
mov qword [rbp - 0x176], r10
mov r10, qword [rbp - 0x367]
movzx eax, ch
movzx ecx, dx
lea rdx, [rbp - 0x1fa]
leave
mov rax, qword [rbp - 0x20]
mov qword [0x180008220], rax
mov rsp, rbp
pop rbp
ret