Function at 0x1400034d0
Capabilities:
Create process on windows
Query environment variable

Disassembly:
push rdi
sub rsp, 0x190
mov rax, qword [0x140021220]
xor rax, rsp
mov qword [rsp + 0x180], rax
mov dword [rsp + 0x178], 0
call fcn.1400032e0
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x160], rax
cmp qword [rsp + 0x160], 0
jne 0x140003595
mov eax, dword [0x140020940]
and eax, 0x10
test eax, eax
jne 0x14000353c
mov rcx, qword [0x140020948]
mov eax, dword [0x140025264]
cmp dword [rcx], eax
je 0x140003590
call fcn.140010ff0
lea rcx, str.Cant_read_adapter_info
call fcn.140012270
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x295
lea rax, [0x1400180b0]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140020060]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [0x1400180c0]
mov edx, 0x10
lea rcx, str.pcpnio_get_NIC__
call fcn.1400122d0
call fcn.1400110a0
jmp 0x14000386f
movzx eax, byte [0x140017852]
mov byte [rsp + 0x50], al
lea rdi, [rsp + 0x51]
xor eax, eax
mov ecx, 0x103
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x50]
lea rcx, [0x1400180c8]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea r8, str._binPNIOMGR.exe
mov edx, 0x104
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCR90.dll_strcat_s]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, str.__start_0
lea r8, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov qword [rsp + 0x170], rax
cmp qword [rsp + 0x170], 0x20
ja 0x140003693
mov eax, dword [0x140020940]
and eax, 0x10
test eax, eax
jne 0x140003635
mov rcx, qword [0x140020948]
mov eax, dword [0x140025264]
cmp dword [rcx], eax
je 0x140003691
call fcn.140010ff0
mov rdx, qword [rsp + 0x170]
lea rcx, str.Start_PNIOMGR:_Error___d
call fcn.140012270
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x2a1
lea rax, [0x140018120]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140020060]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [0x1400180c4]
mov edx, 0x10
lea rcx, str.pcpnio_get_NIC__
call fcn.1400122d0
call fcn.1400110a0
jmp 0x140003705
mov eax, dword [0x140020940]
and eax, 0x10
test eax, eax
jne 0x1400036b1
mov rcx, qword [0x140020948]
mov eax, dword [0x140025264]
cmp dword [rcx], eax
je 0x140003705
call fcn.140010ff0
lea rcx, str.Start_PNIOMGR_ok
call fcn.140012270
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x2a5
lea rax, [0x140018148]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140020060]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [0x140018158]
mov edx, 0x10
lea rcx, str.pcpnio_get_NIC__
call fcn.1400122d0
call fcn.1400110a0
cmp qword [rsp + 0x160], 0
je 0x1400037e8
mov rcx, qword [rsp + 0x160]
add rcx, 0xc
call fcn.140001ad0
mov dword [rsp + 0x17c], eax
mov eax, dword [0x140020940]
and eax, 0x10
test eax, eax
jne 0x14000374a
mov rcx, qword [0x140020948]
mov eax, dword [0x140025264]
cmp dword [rcx], eax
je 0x1400037b5
call fcn.140010ff0
mov rdx, qword [rsp + 0x160]
add rdx, 0x110
mov r8d, dword [rsp + 0x17c]
lea rcx, str.Adapter:__s_____active___d
call fcn.140012270
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x2ac
lea rax, [0x140018180]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140020060]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [0x14001815c]
mov edx, 0x10
lea rcx, str.pcpnio_get_NIC__
call fcn.1400122d0
call fcn.1400110a0
cmp dword [rsp + 0x17c], 0
je 0x1400037d0
mov eax, dword [rsp + 0x178]
add eax, 1
mov dword [rsp + 0x178], eax
mov rax, qword [rsp + 0x160]
mov rax, qword [rax]
mov qword [rsp + 0x160], rax
jmp 0x140003705
mov rcx, qword [rsp + 0x168]
call qword [sym.imp.MSVCR90.dll_free]
mov eax, dword [0x140020940]
and eax, 0x40
test eax, eax
jne 0x140003814
mov rcx, qword [0x140020948]
mov eax, dword [0x140025264]
cmp dword [rcx], eax
je 0x14000386f
call fcn.140010ff0
mov edx, dword [rsp + 0x178]
lea rcx, str._d_active_adapters_found
call fcn.140012270
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x2b5
lea rax, [0x1400181b0]
mov qword [rsp + 0x28], rax
mov eax, dword [0x140020060]
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [0x14001817c]
mov edx, 0x40
lea rcx, str.pcpnio_get_NIC__
call fcn.1400122d0
call fcn.1400110a0
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.140015270
add rsp, 0x190
pop rdi
ret