Function at 0x14000c630
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140092080]
xor rax, rsp
mov qword [rbp], rax
mov r13, rdx
mov qword [rsp + 0x48], rdx
xor ebx, ebx
lea rcx, str.ProgramData
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
lea rcx, [rbx - 1]
xorps xmm0, xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
movups xmmword [rbp - 0x40], xmm0
test rax, rax
je 0x14000c6a2
mov r8, rcx
inc r8
cmp byte [rax + r8], bl
jne 0x14000c694
mov rdx, rax
jmp 0x14000c6ac
xor r8d, r8d
lea rdx, [0x140084798]
lea rcx, [rbp - 0x40]
call fcn.140006e80
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp - 0x30]
sub rax, rsi
cmp rax, 1
jb 0x14000cc7d
lea r12, [rbp - 0x40]
mov r15, qword [rbp - 0x40]
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x48], rax
cmp rax, 0x10
cmovae r12, r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r14, [rsi + 1]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x50]
lea eax, [rbx + 7]
cmp r14, rbx
jbe 0x14000c78c
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000c725
mov rbx, rcx
jmp 0x14000c72c
cmp rbx, rax
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000c776
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000cc83
mov rcx, rax
call fcn.1400711f0
test rax, rax
je 0x14000c76f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000c787
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000c785
call fcn.1400711f0
mov rdi, rax
jmp 0x14000c787
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
mov r8, rsi
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], Ordinal_50
mov byte [rdi + r14], 0
lea rdx, [0x140093310]
cmp qword [0x140093328], 0x10
cmovae rdx, qword [0x140093310]
mov r8, qword [0x140093320]
lea rcx, [rsp + 0x50]
call fcn.140005e90
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xor esi, esi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14000c844
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c83f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c83f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007154c
movdqa xmm0, xmmword [0x140085420]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdi, qword [rbp - 0x50]
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rbx, qword [rbp - 0x60]
call fcn.140070c34
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rsp + 0x28]
call fcn.140008bd0
nop
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp - 0x20]
call fcn.140070de8
mov edx, eax
test eax, eax
jne 0x14000c8fc
mov ecx, dword [rbp - 0x10]
test cl, 1
mov eax, 0x1ff
mov r8d, 0x16d
cmovne eax, r8d
mov dword [rbp - 0x7c], eax
bt ecx, 0xa
jae 0x14000c8ee
mov eax, dword [rbp - 0xc]
cmp eax, 0xa000000c
jne 0x14000c8e0
lea eax, [rdx + 4]
jmp 0x14000c91e
cmp eax, 0xa0000003
jne 0x14000c8ee
mov eax, 0xa
jmp 0x14000c91e
movzx eax, cl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x14000c91e
mov dword [rbp - 0x7c], 0xffff
sub eax, 2
je 0x14000c919
sub eax, 1
je 0x14000c919
sub eax, 0x32
je 0x14000c919
cmp eax, 0x46
mov eax, esi
jne 0x14000c91e
mov eax, 1
mov dword [rbp - 0x80], edx
lea rcx, [0x1400920c8]
mov qword [rbp - 0x78], rcx
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
test eax, eax
je 0x14000c97f
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14000c990
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c98b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c98b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test edx, edx
jne 0x14000cc6e
jmp 0x14000c93f
call fcn.14007154c
test bl, bl
je 0x14000ca2f
mov rdi, qword [rbp - 0x50]
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rbx, qword [rbp - 0x60]
call fcn.140070c34
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rsp + 0x28]
call fcn.140008bd0
nop
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call fcn.140070d70
shr rax, 0x20
test eax, eax
jne 0x14000cc89
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14000ca2f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007154c
mov rsi, qword [rbp - 0x50]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 1
jb 0x14000cc96
lea r12, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r12, qword [rbp - 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [rsi + 1]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp - 0x80]
cmp r14, rbx
jbe 0x14000caf6
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000ca8d
mov rbx, rcx
jmp 0x14000ca9a
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000cae1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000cc68
mov rcx, rax
call fcn.1400711f0
test rax, rax
je 0x14000cb9f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000caf2
test rcx, rcx
je 0x14000caf0
call fcn.1400711f0
mov rdi, rax
jmp 0x14000caf2
xor edi, edi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
mov r8, rsi
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], Ordinal_50
mov byte [rdi + r14], 0
lea rdx, [0x140093330]
cmp qword [0x140093348], 0x10
cmovae rdx, qword [0x140093330]
mov r8, qword [0x140093340]
lea rcx, [rbp - 0x80]
call fcn.140005e90
xorps xmm0, xmm0
movups xmmword [r13], xmm0
xor ebx, ebx
mov qword [r13 + 0x10], rbx
mov qword [r13 + 0x18], rbx
movups xmm0, xmmword [rax]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r13 + 0x10], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000cbac
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cba6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cba6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007154c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000cbea
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cbe5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cbe5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007154c
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000cc38
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x14000cc30
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14007154c
mov rax, r13
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400711d0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001750
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x80]
call fcn.140009500
nop
call fcn.1400017f0
int3
call fcn.140001750
nop
lea r8, [rsp + 0x28]
mov edx, eax
call fcn.140009490
nop
call fcn.1400017f0
int3