Function at 0x18008bbb0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x180162880]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov r12, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov dword [rsp + 0x30], 1
lea rcx, str.APPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], r14
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18008bc40
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.180024740
nop
mov r8d, 0x12
lea rdx, str.LucaModzZProfile
lea rcx, [rbp + 0xc0]
call fcn.18002c1d0
mov rdi, qword [rbp + 0xd0]
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rbx, qword [rbp + 0xc0]
call fcn.1800de6c4
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rdi
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp]
call fcn.18006d480
mov r15d, 0xc01
mov dword [rsp + 0x30], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp]
lea rcx, [rbp + 0x90]
call fcn.1800d0780
test eax, eax
jne 0x18008c334
lea rcx, [rbp]
call fcn.180070240
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008bd0d
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x80], xmm0
test rcx, rcx
je 0x18008bd31
lock inc dword [rcx + 8]
mov rcx, qword [rbp + 0x98]
mov r15d, dword [rsp + 0x30]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
test rcx, rcx
je 0x18008bd7a
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008bd75
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008bd75
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
mov r13, qword [rbp + 0x80]
nop dword [rax]
nop word [rax + rax]
lea rbx, str..json
test r13, r13
je 0x18008c26d
call fcn.1800de6c4
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 5
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.18006d480
or r15d, 6
mov dword [rsp + 0x30], r15d
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008bddc
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006d5d0
cmp rax, rdx
je 0x18008be2c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008be00
cmp cx, 0x2f
jne 0x18008be09
add rax, 2
cmp rax, rdx
jne 0x18008bdf1
cmp rax, rdx
je 0x18008be2c
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008be2c
cmp cx, 0x2f
je 0x18008be2c
mov rbx, r8
cmp rax, r8
jne 0x18008be10
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800de520
mov rcx, rax
cmp rbx, rax
je 0x18008be82
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008be7f
cmp word [rax], 0x2e
jne 0x18008be62
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008be82
cmp word [rdx], 0x2e
jne 0x18008be82
jmp 0x18008be7f
sub rax, 2
cmp rbx, rax
je 0x18008be7f
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008be82
sub rax, 2
cmp rbx, rax
jne 0x18008be70
mov rax, rcx
mov qword [rbp - 0x80], rax
sub rcx, rax
sar rcx, 1
mov qword [rbp - 0x78], rcx
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.1800d0420
or r15d, 8
mov dword [rsp + 0x30], r15d
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rax, qword [rsp + 0x40]
mov qword [rbp - 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1800d0050
mov ebx, eax
lea rcx, [rbp + 0x40]
call fcn.180070240
nop
lea rcx, [rsp + 0x40]
call fcn.180070240
test ebx, ebx
jne 0x18008c1b0
lea rcx, [r13 + 0x20]
cmp qword [r13 + 0x38], 7
jbe 0x18008bf07
mov rcx, qword [r13 + 0x20]
mov rax, qword [r13 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18006d5d0
cmp rax, r11
je 0x18008bf5b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008bf2f
cmp cx, 0x2f
jne 0x18008bf38
add rax, 2
cmp rax, r11
jne 0x18008bf20
cmp rax, r11
je 0x18008bf5b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18008bf5b
cmp cx, 0x2f
je 0x18008bf5b
mov r10, rdx
cmp rax, rdx
jne 0x18008bf40
mov qword [rbp - 0x60], r10
sub r11, r10
sar r11, 1
mov qword [rbp - 0x58], r11
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.1800d0420
bts r15d, 8
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18006d5d0
cmp rax, rdx
je 0x18008bfdc
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008bfb2
cmp cx, 0x2f
jne 0x18008bfbb
add rax, 2
cmp rax, rdx
jne 0x18008bfa3
cmp rax, rdx
je 0x18008bfdc
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008bfdc
cmp cx, 0x2f
je 0x18008bfdc
mov rbx, r8
cmp rax, r8
jne 0x18008bfc0
mov r8d, 0x3a
mov rcx, rbx
call fcn.1800de520
mov rcx, rax
cmp rbx, rax
je 0x18008c017
add rax, 0xfffffffffffffffe
cmp rbx, rax
je 0x18008c017
cmp word [rax], 0x2e
jne 0x18008c14e
lea rdx, [rax - 2]
cmp rbx, rdx
jne 0x18008c014
cmp word [rdx], 0x2e
je 0x18008c017
mov rcx, rax
mov qword [rbp - 0x50], rbx
sub rcx, rbx
sar rcx, 1
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x40]
call fcn.1800d0420
bts r15d, 9
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 7
cmova rsi, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x30]
call fcn.1800de6c4
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], al
bts r15d, 7
mov dword [rsp + 0x30], r15d
test rdi, rdi
je 0x18008c10a
cmp rdi, 0x7fffffff
ja 0x18008c35b
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800de734
mov rbx, rax
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008c351
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp + 0xa0]
call fcn.18006e370
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova r9, qword [rbp + 0xa0]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1800de734
mov qword [rsp + 0x38], rax
shr rax, 0x20
test eax, eax
jne 0x18008c347
btr r15d, 7
or r15d, 0x70
mov dword [rsp + 0x30], r15d
lea rcx, [rbp - 0x40]
call fcn.180070240
nop
lea rcx, [rbp - 0x20]
call fcn.180070240
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x18008c178
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.180025020
add qword [r12 + 8], 0x20
jmp 0x18008c18b
sub rax, 2
cmp rbx, rax
je 0x18008c017
nop dword [rax + rax]
cmp word [rax], 0x2e
je 0x18008c014
sub rax, 2
cmp rbx, rax
jne 0x18008c160
jmp 0x18008c017
lea r8, [rbp + 0xa0]
mov rdx, rax
mov rcx, r12
call fcn.1800cfe00
nop
lea rcx, [rbp + 0xa0]
call fcn.180004060
mov rsi, 0xffffffffffffffff
xor r14d, r14d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0xf0]
mov rcx, qword [r13 + 0x40]
call fcn.1800de99c
cmp eax, 0x12
je 0x18008c207
test eax, eax
jne 0x18008c32c
cmp word [rbp + 0x11c], 0x2e
jne 0x18008c1f3
movzx eax, word [rbp + 0x11e]
test ax, ax
je 0x18008c1b0
cmp ax, 0x2e
jne 0x18008c1f3
cmp word [rbp + 0x120], 0
je 0x18008c1b0
lea rdx, [rbp + 0xf0]
mov rcx, r13
call fcn.1800d0570
jmp 0x18008bd90
mov r13, r14
mov qword [rbp + 0x80], r14
mov rbx, qword [rbp + 0x88]
mov qword [rbp + 0x88], r14
test rbx, rbx
je 0x18008bd90
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18008c250
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x18008c25a
nop dword [rax + rax]
mov r15d, dword [rsp + 0x30]
jmp 0x18008bd7a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r15d, dword [rsp + 0x30]
jmp 0x18008bd7a
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x18008c2ae
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008c2ae
mov rbx, qword [rbp + 0x88]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008c2ae
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x18008c2ed
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18008c2ed
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x18008c2ed
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rcx]
call qword [rdx + 8]
nop
lea rcx, [rbp + 0xc0]
call fcn.180004060
mov rax, r12
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1800df0f0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
call fcn.1800d0300
nop
lea r8, [rbp]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.18006df60
nop
mov ecx, dword [rsp + 0x3c]
call fcn.18006e720
int3
mov ecx, dword [rsp + 0x3c]
call fcn.18006e720
int3
mov ecx, 0x16
call fcn.18006e180
int3