Function at 0x1802f6cb0
Capabilities:
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x598
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x510], 0xfffffffffffffffe
mov r13, r9
mov r14, r8
mov r15, rdx
mov r12d, ecx
mov eax, dword [0x180314e68]
mov ecx, dword [0x180314e6c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x4f4]
cmp ecx, 0xa
setl byte [rbp + 0x4e8]
lea r8, [rbp + 0x1c3]
mov ebx, 0xc1c5a957
lea r9, [rbp + 0x1c4]
movabs rdx, 0x80c8c1caedc5dbf3
jmp 0x1802f6d32
mov ebx, 0x51965904
cmp edi, 0xa
cmovl ebx, eax
cmp ebx, 0xe4de7437
jle 0x1802f6d80
cmp ebx, 0x51965903
jle 0x1802f6e00
cmp ebx, 0x51965904
je 0x1802f6f15
cmp ebx, 0x6e8f733c
jne 0x1802f6f31
mov qword [rbp + 0x1b8], rdx
mov word [rbp + 0x1c0], 0xc8ca
mov byte [rbp + 0x1c2], 0xd4
mov ebx, 0xe4de7438
jmp 0x1802f6d32
cmp ebx, 0xc1c5a956
jg 0x1802f6e50
cmp ebx, 0x9863e554
je 0x1802f6e79
cmp ebx, 0xa7c8e0f9
jne 0x1802f6d32
mov rax, qword [rbp - 0x50]
mov byte [rax], 0
mov rax, qword [rbp - 0x50]
add rax, 1
mov qword [rbp + 0x4c8], rax
mov rax, qword [rbp + 0x500]
mov rcx, qword [rbp + 0x4c8]
cmp rcx, rax
sete byte [rbp + 0x4f0]
mov eax, dword [0x180314e68]
mov edi, dword [0x180314e6c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, 0x9863e554
mov ebx, 0x9863e554
test cl, 1
je 0x1802f6d2c
jmp 0x1802f6d27
cmp ebx, 0xe4de7438
je 0x1802f6e98
cmp ebx, 0xcbaabee
jne 0x1802f6d32
mov qword [rbp - 0x50], rsi
mov eax, dword [0x180314e68]
mov edi, dword [0x180314e6c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, 0xa7c8e0f9
mov ebx, 0xa7c8e0f9
test cl, 1
je 0x1802f6d2c
jmp 0x1802f6d27
cmp ebx, 0xc1c5a957
je 0x1802f6eec
cmp ebx, 0xc9f6f805
jne 0x1802f6d32
mov ebx, 0xcbaabee
mov rsi, qword [rbp + 0x4f8]
jmp 0x1802f6d32
cmp byte [rbp + 0x4f0], 0
mov ebx, 0x7bd61bb1
jne 0x1802f6e8c
mov ebx, 0xcbaabee
mov rsi, qword [rbp + 0x4c8]
jmp 0x1802f6d32
mov qword [rbp + 0x1b8], rdx
mov word [rbp + 0x1c0], 0xc8ca
mov byte [rbp + 0x1c2], 0xd4
mov qword [rbp + 0x4f8], r8
mov qword [rbp + 0x500], r9
mov eax, dword [0x180314e68]
mov edi, dword [0x180314e6c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, 0xc9f6f805
mov ebx, 0xc9f6f805
test cl, 1
je 0x1802f6d2c
mov ebx, 0x6e8f733c
jmp 0x1802f6d2c
movzx eax, byte [rbp + 0x4f4]
cmp byte [rbp + 0x4e8], 0
mov edi, 0xe4de7438
mov ebx, 0xe4de7438
jne 0x1802f6f0b
mov ebx, 0x6e8f733c
test al, al
cmovne ebx, edi
jmp 0x1802f6d32
mov rax, qword [rbp - 0x50]
mov byte [rax], 0
mov rax, qword [rbp - 0x50]
mov rax, qword [rbp + 0x500]
mov ebx, 0xa7c8e0f9
jmp 0x1802f6d32
cmp ebx, 0x7bd61bb1
jne 0x1802f6d32
mov eax, dword [0x180314e70]
mov ecx, dword [0x180314e74]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x4f8]
mov eax, 0x1638486b
mov edi, 0xfdb830a2
cmove edi, eax
cmp ecx, 0xa
setl byte [rbp + 0x500]
cmovl edi, eax
mov eax, 0x9b9d5d81
mov r9d, 0x503830f0
mov r8d, 0x4571968e
jmp 0x1802f6fe0
mov rax, qword [rbp - 0x50]
movzx edx, byte [rbp + rax + 0x1b8]
mov ebx, dword [rbp + 0x4c8]
mov esi, 0x58
sub esi, ebx
add ebx, 0xa7
mov ecx, esi
or ecx, edx
and esi, 0x3c
and ebx, 0xc3
or ebx, esi
xor ebx, edx
xor ebx, 0x3c
and ebx, edx
xor ebx, ecx
not bl
mov byte [rbp + rax + 0x1b8], bl
mov ebx, dword [rbp + 0x4c8]
add ebx, 1
mov eax, 0xa47bf35a
nop word cs:[rax + rax]
nop
cmp eax, 0xfdb830a1
jle 0x1802f7010
cmp eax, 0x4571968d
jg 0x1802f7030
cmp eax, 0xfdb830a2
je 0x1802f7046
cmp eax, 0x1638486b
jne 0x1802f6fe0
mov eax, 0xa47bf35a
xor ebx, ebx
jmp 0x1802f6fe0
cmp eax, 0x9b9d5d81
je 0x1802f704d
cmp eax, 0xa47bf35a
je 0x1802f706f
cmp eax, 0xd6507547
jne 0x1802f6fe0
jmp 0x1802f7096
cmp eax, 0x4571968e
je 0x1802f6f86
cmp eax, 0x503830f0
jne 0x1802f6fe0
mov eax, edi
jmp 0x1802f6fe0
mov eax, 0x503830f0
jmp 0x1802f6fe0
movzx edx, byte [rbp + 0x4f8]
cmp byte [rbp + 0x500], 0
mov eax, 0xfdb830a2
cmovne eax, r9d
test dl, dl
cmovne eax, r9d
jmp 0x1802f6fe0
mov dword [rbp + 0x4c8], ebx
movsxd rax, dword [rbp + 0x4c8]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
cmp rax, 0xb
mov eax, 0xd6507547
cmovb eax, r8d
jmp 0x1802f6fe0
mov byte [rbp + 0x1c3], 0
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x1802f7194
mov qword [rbp + 0x4b8], r13
mov r13d, 0x277a
cmp dword [r14 + 0x28], 2
jl 0x1802f7197
mov word [rbp + 0x4ee], r12w
mov qword [rbp + 0x4a8], r15
mov qword [rbp + 0x4c0], r14
mov rcx, qword [rbp + 0x4b8]
mov rax, qword [rcx + 0x70]
mov qword [0x18031c980], rax
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [0x18031c970], xmm0
movups xmm0, xmmword [rcx + 0x50]
movups xmmword [0x18031c960], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [0x18031c950], xmm0
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movups xmm3, xmmword [rcx + 0x30]
movups xmmword [0x18031c940], xmm3
movups xmmword [0x18031c930], xmm2
movups xmmword [0x18031c920], xmm1
movups xmmword [0x18031c910], xmm0
lea rcx, [rbp + 0x4f0]
call fcn.1802e3a40
mov r12, rax
mov eax, dword [rbp + 0x4f0]
mov r13d, 0x277a
test eax, eax
jle 0x1802f7197
mov rcx, qword [rbp + 0x4c0]
mov ecx, dword [rcx + 0x30]
imul rdx, rax, 0x274
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp dword [r12 + rax + 0x24], ecx
je 0x1802f71ae
add rax, 0x274
cmp rdx, rax
jne 0x1802f7180
jmp 0x1802f7197
xor r13d, r13d
mov eax, r13d
add rsp, 0x598
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rdx, r12
add rdx, rax
lea rcx, [rbp + 0x1b8]
mov r8d, 0x274
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbp + 0x4f4], 0x104
lea rcx, [rbp + 0x1cc]
lea rdx, [rbp - 0x50]
lea r8, [rbp + 0x4f4]
lea r9, [rbp + 0x4e8]
call sub.WS2_32.dll_WSCGetProviderPath
mov r13d, 0x277a
cmp eax, 0xffffffff
je 0x1802f7197
lea rcx, [rbp - 0x50]
mov rdx, rcx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x1802f7197
lea r13, [rbp + 0x4c8]
lea rdx, [rbp - 0x50]
mov rcx, r13
call fcn.1802f6a40
mov rcx, r13
call fcn.180003610
mov rcx, rax
xor edx, edx
mov r8d, 8
call fcn.18000f2d0
mov qword [rbp + 0x4b0], rax
lea rcx, [rbp + 0x4c8]
call fcn.18000b040
movabs rax, 0xdadfcddff9f9fbf0
mov qword [rbp + 0x4c8], rax
mov word [rbp + 0x4d0], 0xc0da
lea rsi, [rbp + 0x4d2]
lea rcx, [rbp + 0x4d3]
mov qword [rbp + 0x500], rcx
nop dword [rax]
mov ecx, 0x1ae3a0b3
jmp 0x1802f7296
mov ecx, 0xd6b8748f
nop dword [rax]
cmp edx, 0xa
cmovl ecx, ebx
cmp ecx, 0x60d3dfd3
jg 0x1802f72e0
cmp ecx, 0xe53e90ce
jg 0x1802f7340
cmp ecx, 0x91cd1f01
je 0x1802f7436
cmp ecx, 0xd6b8748f
je 0x1802f73bf
cmp ecx, 0xe2ce553d
jne 0x1802f7296
mov ecx, 0x91cd1f01
jmp 0x1802f7296
cmp ecx, 0x725f4f9e
jle 0x1802f7380
cmp ecx, 0x725f4f9f
je 0x1802f745e
cmp ecx, 0x79c88388
je 0x1802f73c9
cmp ecx, 0x7f415e23
jne 0x1802f7296
mov ecx, dword [0x180316068]
mov edx, dword [0x18031606c]
lea edi, [rcx - 1]
imul edi, ecx
mov ebx, 0x60d3dfd4
mov ecx, 0x60d3dfd4
test dil, 1
je 0x1802f7290
mov ecx, 0x79c88388
jmp 0x1802f7290
cmp ecx, 0xe53e90cf
je 0x1802f748e
cmp ecx, 0x1ae3a0b3
jne 0x1802f7498
mov byte [rsi], 0
add rsi, 1
mov ecx, 0x7f415e23
cmp rsi, qword [rbp + 0x500]
jne 0x1802f7280
jmp 0x1802f7296
cmp ecx, 0x60d3dfd4
je 0x1802f73f4
cmp ecx, 0x650476fb
jne 0x1802f7296
mov eax, dword [0x180316068]
mov edx, dword [0x18031606c]
lea edi, [rax - 1]
imul edi, eax
mov ebx, 0xe53e90cf
mov ecx, 0xe53e90cf
test dil, 1
je 0x1802f7290
jmp 0x1802f7287
mov ecx, 0x650476fb
jmp 0x1802f7296
mov eax, dword [0x180316068]
mov edx, dword [0x18031606c]
lea edi, [rax - 1]
imul edi, eax
mov ebx, 0x650476fb
mov ecx, 0x650476fb
test dil, 1
je 0x1802f7290
jmp 0x1802f7287
mov ecx, dword [0x180316068]
mov edx, dword [0x18031606c]
lea ebx, [rcx - 1]
imul ebx, ecx
and bl, 1
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
mov eax, edx
xor al, 1
and cl, bl
or cl, al
xor cl, dl
mov ecx, 0x725f4f9f
jne 0x1802f7296
mov ecx, 0x79c88388
jmp 0x1802f7296
mov eax, dword [0x180316068]
mov edx, dword [0x18031606c]
lea edi, [rax - 1]
imul edi, eax
mov ebx, 0x1012c281
mov ecx, 0x1012c281
test dil, 1
je 0x1802f7290
jmp 0x1802f7484
mov eax, dword [0x180316068]
mov edx, dword [0x18031606c]
lea edi, [rax - 1]
imul edi, eax
mov ebx, 0x91cd1f01
mov ecx, 0x91cd1f01
test dil, 1
je 0x1802f7290
mov ecx, 0xe2ce553d
jmp 0x1802f7290
mov ecx, 0x60d3dfd4
jmp 0x1802f7296
cmp ecx, 0x1012c281
jne 0x1802f7296
mov eax, dword [0x180314e78]
mov ecx, dword [0x180314e7c]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete al
cmp ecx, 0xa
setl r8b
or r8b, al
cmp ecx, 9
setg cl
xor al, cl
mov ebx, eax
xor bl, 1
and dl, cl
or dl, bl
xor dl, al
mov r9d, 0x8a477926
mov eax, 0xade8781e
cmove r9d, eax
test r8b, r8b
mov r13d, 0xda329b01
cmove r13d, eax
mov r10d, 0xacba3095
mov eax, 0xf1f6ee4c
cmove r10d, eax
mov esi, 0x1c383dc6
cmove esi, eax
mov ebx, 0x3a4ba52c
mov eax, 0x67ca78e1
cmove ebx, eax
mov r11d, 0x28c22
cmove r11d, eax
mov edi, 0x64540499
xor eax, eax
jmp 0x1802f7540
mov edi, 0x28c22
nop word cs:[rax + rax]
nop dword [rax + rax]
mov edx, edi
cmp edi, 0x28c21
jle 0x1802f7580
cmp edx, 0x4aba4849
jg 0x1802f75c0
mov edi, ebx
cmp edx, 0x28c22
je 0x1802f7540
cmp edx, 0x1c383dc6
je 0x1802f7618
mov edi, edx
cmp edx, 0x3a4ba52c
jne 0x1802f7540
mov edi, r9d
jmp 0x1802f7540
cmp edx, 0xc6d26bb4
jg 0x1802f75f0
mov edi, esi
cmp edx, 0x8a477926
je 0x1802f7540
mov edi, r13d
cmp edx, 0xacba3095
je 0x1802f7540
mov edi, edx
cmp edx, 0xade8781e
jne 0x1802f7540
mov ecx, dword [rbp + 0x4f8]
mov edi, 0x8a477926
jmp 0x1802f7540
cmp edx, 0x4aba484a
je 0x1802f7640
cmp edx, 0x67ca78e1
je 0x1802f752c
mov edi, edx
cmp edx, 0x64540499
jne 0x1802f7540
mov dword [rbp + 0x4f8], eax
mov edi, r11d
jmp 0x1802f7540
cmp edx, 0xda329b01
je 0x1802f76cb
cmp edx, 0xf1f6ee4c
jne 0x1802f76e4
mov ecx, dword [rbp + 0x4f8]
mov edi, 0x1c383dc6
jmp 0x1802f7540
movsxd rdx, dword [rbp + 0x4f8]
mov qword [rbp + 0x500], rdx
mov rdx, qword [rbp + 0x500]
cmp rdx, 0xa
setb byte [rbp + 0x50f]
mov edi, r10d
jmp 0x1802f7540
mov rax, qword [rbp + 0x500]
movzx edx, byte [rbp + rax + 0x4c8]
mov edi, dword [rbp + 0x4f8]
lea ecx, [rdi + 0x1fffffa7]
mov r14d, 0x58
sub r14d, edi
mov r8d, edx
xor r8d, 0x52
add edi, 0x7ffffa7
and edi, 0x610b842
mov r15d, r14d
and r15d, 0x692d0010
and r14d, 0x8000452d
and ecx, 0x10c20280
add edi, r15d
add edi, 0x8000452d
add ecx, r14d
add ecx, 0x610b842
xor ecx, edi
xor edx, 0xad
and edx, ecx
not ecx
and ecx, r8d
or ecx, edx
mov byte [rbp + rax + 0x4c8], cl
mov eax, dword [rbp + 0x4f8]
add eax, 1
mov edi, 0x64540499
jmp 0x1802f7540
cmp byte [rbp + 0x50f], 0
mov edi, 0xc6d26bb5
mov ecx, 0x4aba484a
cmovne edi, ecx
jmp 0x1802f7540
mov edi, edx
cmp edx, 0xc6d26bb5
jne 0x1802f7540
mov byte [rbp + 0x4d2], 0
lea rdx, [rbp + 0x4c8]
mov rcx, qword [rbp + 0x4b0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [rbp + 0x1e0], 1
mov r8, qword [rbp + 0x4c0]
lea rcx, [rbp + 0x1b8]
cmove r8, rcx
mov rcx, qword [rbp + 0x4b8]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movups xmm3, xmmword [rcx + 0x30]
movaps xmmword [rbp + 0x430], xmm0
movaps xmmword [rbp + 0x440], xmm1
movaps xmmword [rbp + 0x450], xmm2
movaps xmmword [rbp + 0x460], xmm3
movups xmm0, xmmword [rcx + 0x40]
movaps xmmword [rbp + 0x470], xmm0
movups xmm0, xmmword [rcx + 0x50]
movaps xmmword [rbp + 0x480], xmm0
movups xmm0, xmmword [rcx + 0x60]
movaps xmmword [rbp + 0x490], xmm0
mov rcx, qword [rcx + 0x70]
mov qword [rbp + 0x4a0], rcx
mov rsi, qword [rbp + 0x580]
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x430]
movzx ecx, word [rbp + 0x4ee]
mov rdx, qword [rbp + 0x4a8]
call rax
mov r13d, eax
lea rcx, [0x18031c988]
mov r8d, 0xf0
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x18031cc88]
mov r8d, 0xf0
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x180314e50]
mov ecx, dword [0x180314e54]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x500]
cmp ecx, 0xa
setl byte [rbp + 0x4c8]
mov eax, 0x80e9c190
mov esi, 0xa0197e87
mov rdi, qword [sym.imp.KERNEL32.dll_GlobalFree]
mov ebx, 0x42c67527
cmp eax, 0x42c67526
jg 0x1802f7850
cmp eax, 0x80e9c190
je 0x1802f786e
cmp eax, 0xa0197e87
jne 0x1802f7810
mov rcx, r12
call rdi
mov eax, dword [0x180314e50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x55b2c325
cmove eax, ebx
cmp dword [0x180314e54], 0xa
cmovl eax, ebx
jmp 0x1802f7810
cmp eax, 0x42c67527
je 0x1802f7197
cmp eax, 0x55b2c325
jne 0x1802f7810
mov rcx, r12
call rdi
mov eax, 0xa0197e87
jmp 0x1802f7810
movzx ecx, byte [rbp + 0x500]
cmp byte [rbp + 0x4c8], 0
mov eax, 0x55b2c325
cmovne eax, esi
test cl, cl
cmovne eax, esi
jmp 0x1802f7810