Function at 0x180012670
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe0
mov rax, qword [0x1801eef68]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r14, r9
mov r12, r8
mov r15, rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
movdqa xmm0, xmmword [0x1801e4850]
movdqa xmmword [rbp - 0x51], xmm0
mov byte [rbp - 0x61], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp - 0x31], xmm0
mov byte [rbp - 0x41], 0
movdqa xmmword [rbp - 0x11], xmm0
mov byte [rbp - 0x21], 0
lea esi, [rcx + 7]
movzx ebx, byte [rsp + 0x40]
cmp ecx, esi
jae 0x180012929
lea edi, [rcx - 0xd4]
lea rdx, [0x180000000]
mov r13, qword [rbp - 0x79]
cmp edi, 0x10
ja case.0x180012706.3
mov ecx, dword [rdx + rdi*4 + 0x12a30]
add rcx, rdx
jmp rcx
lea rax, [r13 + 0xa]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x10d
lea rax, [rbp - 0x61]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180007a70
movzx eax, word [r13 + 8]
mov word [rsp + 0x40], ax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x20], rax
mov r9d, 0xde
xor r8d, r8d
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.180030230
mov ebx, eax
jmp 0x180012912
mov qword [0x1801f3158], 0
jmp case.0x180012706.3
xorps xmm0, xmm0
movups xmmword [r14], xmm0
lea rcx, str.install.conf_policy_url
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x180012797
inc dword [r14 + 0xc]
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
mov qword [r14], rax
mov eax, dword [rcx]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, PathYetAnotherMakeUniqueName
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800699d0
mov dword [r14 + 8], eax
test r12, r12
je 0x180012912
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputs]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
jmp 0x180012912
mov r13, r15
cmp qword [r15 + 0x1a], 0
jne case.0x180012706.3
lea rcx, [rbp - 0x61]
call fcn.1800045e0
xor al, al
jmp 0x180012a09
mov rax, qword [r15]
test dword [rax + 0x10], 0x40000
je case.0x180012706.16
movdqa xmm0, xmmword [0x1801e4870]
movq rax, xmm0
movups xmmword [0x1801f3260], xmm0
movups xmmword [0x1801f3270], xmm0
movups xmmword [0x1801f3280], xmm0
movups xmmword [0x1801f3290], xmm0
mov qword [0x1801f32a0], rax
mov dword [0x1801f32a8], eax
mov word [0x1801f32ac], ax
mov byte [0x1801f32ae], al
mov byte [0x1801f32af], 0
movdqa xmm0, xmmword [str._b_b_b_b_b_b_b_b_b_b_b_b_b_b_b_b________________KCABISABPILCNOLCIFEDRDHDCSIDLDNEMARFTADIDNEIRDHIGNPIPOOLNGAMDNEMRDHMEVOMTSAPETLPTLPPMORPEVASKEESWOHSMRETDGKbMRHcTNveAMAgPCCitXTiDEEnBGRstXEtEMIt]
movq rax, xmm0
movups xmmword [0x1801f32b0], xmm0
movups xmmword [0x1801f32c0], xmm0
movups xmmword [0x1801f32d0], xmm0
movups xmmword [0x1801f32e0], xmm0
mov qword [0x1801f32f0], rax
mov dword [0x1801f32f8], eax
mov word [0x1801f32fc], ax
mov byte [0x1801f32fe], al
mov byte [0x1801f32ff], 0
jmp case.0x180012706.3
mov eax, dword [r12]
mov dword [rsp + 0x40], eax
mov eax, dword [r14]
mov qword [rbp - 0x79], rax
mov rax, qword [r15]
mov qword [rbp - 0x69], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], 0
lea rax, [rbp - 0x69]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x79]
xor r8d, r8d
xor edx, edx
mov ecx, SHSetFolderPathW
call fcn.18007e090
lea rdx, [0x180000000]
inc edi
lea eax, [rdi + 0xd4]
cmp eax, esi
jb 0x1800126f3
mov rdx, qword [rbp - 9]
cmp rdx, 0x10
jb 0x180012964
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001295f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800129ef
call fcn.1800d6a9c
movdqa xmm0, xmmword [0x1801e4850]
movdqa xmmword [rbp - 0x11], xmm0
mov byte [rbp - 0x21], 0
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x1800129ac
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800129a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800129ef
call fcn.1800d6a9c
movdqa xmm0, xmmword [0x1801e4850]
movdqa xmmword [rbp - 0x31], xmm0
mov byte [rbp - 0x41], 0
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x180012a06
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012a01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180012a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rbp - 0x61]
call fcn.1800045e0
jmp 0x180012a06
call fcn.1800d6a9c
movzx eax, bl
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1800d7250
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret