Function at 0x18010d280
Capabilities:
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x18017d2b8]
xor rax, rsp
mov qword [rbp - 0x48], rax
lea r13d, [rcx + 0x13]
mov qword [rsp + 0x70], r8
mov r14, rdx
cmp ecx, r13d
jae 0x18010d68a
movsd xmm7, qword [0x180159c08]
lea esi, [rcx - 0x4c]
movsd xmm6, qword [0x18015cfb8]
lea rdx, [0x180000000]
movsd xmm8, qword [0x18015c1c0]
lea rdi, [0x18014da14]
movsd xmm9, qword [0x18015aa78]
movsd xmm10, qword [0x180159948]
movsd xmm11, qword [0x18015aac8]
mov r12, qword [rsp + 0x70]
mov ebx, dword [rsp + 0x48]
movabs r10, 0x342da7f2f4960343
cmp esi, 0x42
ja case.0x18010d358.0
movzx eax, byte [rdx + rsi + 0x10d764]
mov ecx, dword [rdx + rax*4 + 0x10d720]
add rcx, rdx
jmp rcx
movsd xmm0, qword [rsp + 0x78]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x58]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea r8, [0x18014dc28]
lea rdx, str.eraUt1tt
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0x60]
movsd qword [rsp + 0x60], xmm7
movsd qword [rsp + 0x48], xmm6
movsd qword [rsp + 0x58], xmm0
call fcn.1800fe9c0
jmp 0x18010d675
mov rdx, qword [0x18017d888]
cmp rdx, qword [0x18017d890]
je 0x18010d3ce
mov rax, qword [r14]
mov qword [rdx], rax
add qword [0x18017d888], 8
jmp 0x18010d675
mov r8, r14
lea rcx, [0x18017d880]
call fcn.180005260
jmp 0x18010d675
mov eax, dword [rsp + 0x50]
cmp eax, 0x274
jb 0x18010d6da
mov ecx, eax
mov rax, r10
mul rcx
mov r12, rdx
shr r12, 7
jmp 0x18010d675
mov r8d, 0xa
lea rdx, [rbp - 0x56]
lea ecx, [r8 - 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltow]
mov r8d, 4
lea rdx, [0x18014dc40]
lea rcx, [rbp - 0x54]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
lea r8, [rbp - 0x78]
mov dword [rbp - 0x4e], 0x6c
mov edx, 0x29
lea rcx, [rbp - 0x60]
call fcn.180012590
mov qword [rsp + 0x68], rax
jmp 0x18010d675
mov eax, dword [0x18014dc4c]
mov dword [rbp - 0x73], eax
movzx eax, byte [0x18014dc50]
mov byte [rbp - 0x6f], al
mov byte [rbp - 0x74], 0x6e
mov byte [rbp - 0x6e], 0
jmp case.0x18010d358.0
lea rax, [rbp - 0x80]
movsd qword [rsp + 0x48], xmm8
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x48]
lea rax, [rsp + 0x60]
movsd qword [rsp + 0x58], xmm9
lea r8, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov edx, 0x2e
movsd qword [rsp + 0x60], xmm6
lea rcx, [rsp + 0x78]
call fcn.180020560
mov rbx, rax
jmp 0x18010d675
mov r8d, 6
mov word [rbp - 0x68], 0x57
lea rdx, str.ws2_3
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18010d675
mov r15, qword [r14 + 8]
mov rax, r10
mov r9, qword [r14]
mov rcx, r15
sub rcx, r9
mov byte [rsp + 0x40], 0
imul rcx
mov r8, rdx
sar r8, 7
mov rax, r8
shr rax, 0x3f
add r8, rax
cmp r12, r8
jae 0x18010d51e
imul rax, r12, 0x274
add rax, r9
mov qword [r14 + 8], rax
jmp 0x18010d675
jbe 0x18010d675
mov rcx, qword [r14 + 0x10]
mov rax, r10
sub rcx, r9
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r12, rdx
jbe 0x18010d559
lea r8, [rsp + 0x40]
mov rdx, r12
mov rcx, r14
call fcn.1800065d0
jmp 0x18010d675
mov rax, r12
sub rax, r8
je 0x18010d57f
imul rdi, rax, 0x274
xor edx, edx
mov rcx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memset
add r15, rdi
lea rdi, [0x18014da14]
mov qword [r14 + 8], r15
jmp 0x18010d675
mov dword [rsp + 0x50], 0
jmp case.0x18010d358.0
mov eax, dword [0x18014dc78]
lea rdx, [0x18014dc88]
mov dword [rbp - 0x6e], eax
lea rcx, [rbp - 0x78]
movzx eax, byte [0x18014dc7c]
mov r8d, 1
mov byte [rbp - 0x6a], al
mov byte [rbp - 0x69], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18010d675
movzx eax, word [0x18014dc94]
mov word [rbp - 0x78], ax
movzx eax, byte [0x18014dc96]
mov byte [rbp - 0x76], al
mov word [rbp - 0x75], 0x45
jmp case.0x18010d358.0
movsd xmm0, qword [rbp - 0x80]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x48]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHTestTokenMembership
lea r8, [0x18014dcb4]
lea rdx, str.eraUt1tt
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0x58]
movsd qword [rsp + 0x58], xmm10
movsd qword [rsp + 0x60], xmm11
movsd qword [rsp + 0x48], xmm0
call fcn.1800fe9c0
lea r9, str.eraUt1tt
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], 0
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], ebx
mov ecx, 0xd4
mov qword [rsp + 0x20], r14
call fcn.1800186b0
jmp 0x18010d675
lea r8, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call qword [rsp + 0x68]
lea rdx, [0x180000000]
inc esi
lea eax, [rsi + 0x4c]
cmp eax, r13d
jb 0x18010d333
mov rax, qword [rsp + 0x48]
mov rcx, qword [rbp - 0x48]
xor rcx, rsp
call fcn.180110960
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rsp + 0x48], 0
jmp 0x18010d68a
mov rdx, qword [r14]
lea r8, [rsp + 0x50]
xor ecx, ecx
call qword [rsp + 0x68]
movsxd rcx, eax
cmp rcx, r12
sete byte [rsp + 0x48]
jmp 0x18010d68a
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [0x18017d8c0], rax
test rax, rax
jne 0x18010d68f
mov rax, qword [rsp + 0x70]
jmp 0x18010d68f