Function at 0x140004f20
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push r12
push r13
push r15
sub rsp, 0x280
mov rax, qword [0x1400ca008]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov r8d, dword [0x1400d5a04]
xor ebx, ebx
mov eax, dword [0x1400d5a00]
mov r13, rdx
mov r12d, ecx
test r8d, r8d
je 0x140004f83
test eax, eax
je 0x140004f8b
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0x10], 0xf
je 0x140004f75
mov dword [0x1400d5a00], ebx
jmp 0x140004fc8
test byte [rdx + 0x78], 0xf
je 0x140004fc8
mov dword [0x1400d5a04], ebx
jmp 0x140004fc8
test eax, eax
je 0x1400054ac
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0x10], 0xf
je 0x140004fa6
test r8d, r8d
jne 0x140004fa6
lea rdx, str._4___ipv4_ignored__IPv4_networking_not_found.
jmp 0x140004fb7
test byte [rdx + 0x78], 0xf
je 0x140004fc8
test eax, eax
jne 0x140004fc8
lea rdx, str._6___ipv6_ignored__IPv6_networking_not_found.
mov ecx, 4
call fcn.14005c0d0
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0xe0], 0xf
mov ebp, 1
je 0x140004fde
mov dword [0x1400d6444], ebp
jmp 0x140004ff4
mov eax, dword [0x1400d6444]
test byte [rdx + 0x148], 0xf
cmovne eax, ebx
mov dword [0x1400d6444], eax
test byte [rdx + 0x1b0], 0xf
je 0x140005010
mov dword [0x1400d6400], ebp
call fcn.140020a70
mov rdx, qword [0x1400cb6e8]
nop
test byte [rdx + 0x218], 0xf
je 0x140005027
mov rax, qword [rdx + 0x220]
mov qword [0x1400d8030], rax
test byte [rdx + 0x350], 0xf
je 0x140005048
mov rdx, qword [rdx + 0x358]
mov r8d, ebp
mov ecx, ebp
call fcn.14003c8e0
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0x3b8], 0xf
mov eax, dword [0x1400d1bc8]
cmovne eax, ebp
test byte [rdx + 0x420], 0xf
mov dword [0x1400d1bc8], eax
mov eax, dword [0x1400d09b4]
cmovne eax, ebp
test byte [rdx + 0x558], 0xf
mov dword [0x1400d09b4], eax
je 0x140005090
mov rcx, qword [rdx + 0x560]
call fcn.14003dd90
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0x7c8], 0xf
mov r15d, 3
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], rdi
je 0x1400051a0
mov rsi, qword [rdx + 0x7d0]
mov r8d, 0x104
mov rcx, rsi
lea rdx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
jne 0x140005131
lea rdx, [rsp + 0x50]
mov r8d, 0x103
lea rcx, str.STATS_PID_FILE
nop word [rax + rax]
movzx eax, byte [rcx]
inc rcx
mov byte [rdx], al
lea rdx, [rdx + 1]
test al, al
je 0x140005107
sub r8, rbp
jne 0x1400050f0
jmp 0x14000510c
test r8, r8
jne 0x14000511b
mov byte [rdx], bl
nop
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140005110
lea r8, [rsp + 0x50]
mov ecx, r15d
lea rdx, str.ExpandEnvironmentStrings__s__failed:__m_n
call fcn.14005c0d0
jmp 0x140005139
lea rsi, [rsp + 0x160]
or dword [0x1400d0a0c], 8
lea rdx, [0x1400ae8d4]
mov rcx, rsi
call fcn.14008026c
mov rdi, rax
test rax, rax
jne 0x14000516b
mov r8, rsi
lea rdx, str.pid_file__s:__m
mov ecx, r15d
call fcn.14005c0d0
jmp 0x14000518a
call sub.KERNEL32.dll_GetCurrentProcessId
mov r8d, eax
lea rdx, [0x1400ae2c8]
mov rcx, rdi
call fcn.140004e80
mov rcx, rdi
call fcn.140081584
mov rdx, qword [0x1400cb6e8]
nop dword [rax]
nop word [rax + rax]
test byte [rdx + 0x898], 0xf
mov eax, dword [0x1400d09b8]
cmovne eax, ebp
test byte [rdx + 0x900], 0xf
mov dword [0x1400d09b8], eax
je 0x140005224
mov rdi, qword [rdx + 0x908]
lea r8, [rsp + 0x40]
mov rcx, rdi
lea rdx, [0x1400acf48]
call fcn.140004ed0
cmp eax, ebp
je 0x1400051f2
mov r8, rdi
lea rdx, str.command_line_broadcast_delay_value__s_undecodable
mov ecx, r15d
call fcn.14005c0d0
jmp 0x14000521d
movsd xmm1, qword [rsp + 0x40]
xorps xmm0, xmm0
ucomisd xmm1, xmm0
jp 0x140005215
jne 0x140005215
movsd xmm0, qword [0x1400bddb8]
movsd qword [0x1400d6410], xmm0
jmp 0x14000521d
movsd qword [0x1400d6410], xmm1
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0x9d0], 0xf
je 0x140005248
mov rdx, qword [rdx + 0x9d8]
mov r8d, ebp
mov ecx, 2
call fcn.14003c8e0
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0xa38], 0xf
mov qword [rsp + 0x2c0], r14
je 0x14000533c
mov rax, qword [rdx + 0xa48]
mov esi, dword [rax]
lea r14, [rax + 8]
nop word [rax + rax]
mov rdi, qword [r14]
lea r14, [r14 + 8]
mov rcx, rdi
call fcn.140078d64
lea ecx, [rax - 1]
cmp ecx, 0xfffe
ja 0x140005319
movzx edx, word [0x1400cf03c]
mov ecx, eax
and rdx, rcx
mov rcx, qword [0x1400d5160]
mov r8, qword [rcx + rdx*8]
test r8, r8
je 0x1400052be
nop word [rax + rax]
cmp eax, dword [r8 + 0x2c]
je 0x1400052de
mov r8, qword [r8]
test r8, r8
jne 0x1400052b0
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rbx
mov edx, ebp
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov ecx, eax
call fcn.140069010
jmp 0x14000532b
cmp dword [0x1400d5170], eax
jne 0x14000530e
mov dword [0x1400d5170], ebx
mov dword [0x1400d5158], ebx
mov word [0x1400d50f4], bx
mov qword [0x1400d50f8], rbx
mov qword [0x1400d5168], rbx
mov qword [0x1400d5148], rbx
or word [r8 + 0x40], bp
mov dword [r8 + 0x28], ebx
jmp 0x14000532b
mov r8, rdi
lea rdx, str.command_line_trusted_key__s_is_invalid
mov ecx, r15d
call fcn.14005c0d0
dec esi
test esi, esi
jg 0x140005270
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0xb70], 0xf
je 0x14000538d
mov rax, qword [rdx + 0xb80]
mov edi, dword [rax]
lea rsi, [rax + 8]
mov rdx, qword [rsi]
lea rsi, [rsi + 8]
test rdx, rdx
je 0x140005380
or rax, 0xffffffffffffffff
cmp byte [rdx + rax + 1], bl
lea rax, [rax + 1]
jne 0x140005362
lea r8d, [rax + 1]
movzx r9d, r15w
lea rcx, [0x1400d0920]
call fcn.1400166a0
dec edi
test edi, edi
jg 0x140005352
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0xbd8], 0xf
je 0x1400053eb
mov rax, qword [rdx + 0xbe8]
mov r14d, 0x23
mov edi, dword [rax]
lea rsi, [rax + 8]
nop dword [rax]
mov rdx, qword [rsi]
lea rsi, [rsi + 8]
test rdx, rdx
je 0x1400053de
or rax, 0xffffffffffffffff
cmp byte [rdx + rax + 1], bl
lea rax, [rax + 1]
jne 0x1400053c0
lea r8d, [rax + 1]
movzx r9d, r14w
lea rcx, [0x1400d0920]
call fcn.1400166a0
dec edi
test edi, edi
jg 0x1400053b0
mov rdx, qword [0x1400cb6e8]
test byte [rdx + 0xca8], 0xf
mov r14, qword [rsp + 0x2c0]
mov rsi, qword [rsp + 0x2b0]
je 0x140005422
movsd xmm0, qword [0x1400bdd28]
movsd qword [0x1400cc858], xmm0
movsd qword [0x1400cc878], xmm0
mov dword [0x1400cc870], ebx
test byte [rdx + 0xb08], 0xf
je 0x14000546d
mov edi, dword [rdx + 0xb10]
test edi, edi
js 0x14000543d
mov dword [0x1400d5f20], edi
jmp 0x14000546d
mov ecx, 2
call fcn.140075c34
mov rcx, rax
lea rdx, str.command_line_interface_update_interval__ld_must_not_be_negative_n
mov r8d, edi
call fcn.140004e80
mov r8d, edi
lea rdx, str.command_line_interface_update_interval__ld_must_not_be_negative
mov ecx, r15d
call fcn.14005c0d0
mov ebx, ebp
mov rdi, qword [rsp + 0x2b8]
test r12d, r12d
jle 0x140005488
mov dword [0x1400d8028], r12d
mov qword [0x1400d8020], r13
test ebx, ebx
jne 0x1400054c8
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.140073c20
add rsp, 0x280
pop r15
pop r13
pop r12
pop rbp
pop rbx
ret
lea rdx, str.Neither_IPv4_nor_IPv6_networking_detected__fatal.
mov ecx, 3
call fcn.14005c0d0
mov ecx, 1
call fcn.1400786ac
int3
mov edx, 2
lea rcx, [0x1400cb670]
call fcn.140066200
int3