Function at 0x1400d8320
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rdi, r8
mov rbx, rdx
mov r15, rcx
cmp qword [rsp + 0xb8], 0
je 0x1400d8362
mov rcx, r15
mov rdx, rbx
mov r8, rdi
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x1400d84e0
mov qword [rsp + 0x40], r9
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov ebp, 1
xor r13d, r13d
lea r12, str.HOME
mov rsi, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov rax, qword [fcn.14009eb20]
mov edx, ebp
mov rcx, r13
call qword [0x1402a7b00]
test rax, rax
je 0x1400d8492
mov r14, rax
mov rcx, r12
mov rdx, rax
mov r8d, ebp
call rsi
test eax, eax
je 0x1400d84b5
cmp eax, ebp
je 0x1400d84b5
cmp eax, 0x8001
jae 0x1400d84b5
mov r13, r14
cmp eax, ebp
mov ebp, eax
jae 0x1400d838a
lea rcx, str._s_s.netrc
lea r8, [0x14027adb3]
mov rdx, r14
call fcn.1400c5d80
test rax, rax
je 0x1400d849e
mov r12, rax
mov qword [rsp + 0x28], rax
mov r13, qword [rsp + 0x38]
mov qword [rsp + 0x20], r13
mov rcx, r15
mov rdx, rbx
mov r8, rdi
mov rsi, qword [rsp + 0x40]
mov r9, rsi
call 0x1400d84e0
mov ebp, eax
mov rax, qword [fcn.1400581d0]
mov rcx, r12
call qword [0x1402a7b00]
cmp ebp, 1
jne 0x1400d8480
lea rcx, str._s_s_netrc
lea r8, [0x14027adb3]
mov rdx, r14
call fcn.1400c5d80
test rax, rax
je 0x1400d849e
mov r12, rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov rcx, r15
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call 0x1400d84e0
mov ebp, eax
mov rax, qword [fcn.1400581d0]
mov rcx, r12
call qword [0x1402a7b00]
mov rax, qword [fcn.1400581d0]
mov rcx, r14
call qword [0x1402a7b00]
jmp 0x1400d84ca
mov rax, qword [fcn.1400581d0]
mov rcx, r13
jmp 0x1400d84bf
mov rax, qword [fcn.1400581d0]
mov rcx, r14
call qword [0x1402a7b00]
mov ebp, 0xffffffff
jmp 0x1400d84ca
mov rax, qword [fcn.1400581d0]
mov rcx, r14
call qword [0x1402a7b00]
mov ebp, 1
mov eax, ebp
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1078
call fcn.14019f230
sub rsp, rax
mov r15, r9
mov rbx, r8
mov r12, rdx
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x10e8]
mov rax, qword [0x1402b7040]
xor rax, rsp
mov qword [rsp + 0x1070], rax
mov r14, qword [rdx]
test r14, r14
je 0x1400d85f8
cmp byte [r14], 0
setne al
mov dword [rsp + 0x3c], eax
mov rdi, qword [rbx]
lea rdx, [0x14029264b]
call fcn.1401bafcc
test rax, rax
je 0x1400d8605
mov rsi, rax
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rbp, [rsp + 0x68]
mov qword [rbp], rax
lea r15, [rsp + 0x70]
mov r8d, 0x1000
mov rcx, r15
mov dl, 0xaa
call fcn.1401d8720
mov dword [rsp + 0x2c], 1
lea rbx, [0x140299f8b]
mov dword [rsp + 0x34], 0
mov dword [rsp + 0x28], 0
xor r13d, r13d
xor edi, edi
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov rcx, r15
mov edx, 0x1000
mov r8, rsi
call fcn.1401bd24c
test rax, rax
je 0x1400d860c
mov rcx, r15
mov rdx, rbx
mov r8, rbp
call fcn.1400cff20
test rax, rax
je 0x1400d85c3
mov r12, rax
cmp byte [rax], 0x23
je 0x1400d85c3
jmp 0x1400d873b
mov dword [rsp + 0x3c], 0
jmp 0x1400d8538
mov ebx, 1
jmp 0x1400d865e
mov eax, dword [rsp + 0x2c]
mov ebx, 1
test eax, eax
mov rdi, qword [rsp + 0x40]
mov r15, qword [rsp + 0x58]
mov r12, qword [rsp + 0x50]
je 0x1400d868e
test byte [rsp + 0x38], 1
je 0x1400d863f
mov rax, qword [fcn.1400581d0]
mov rcx, r14
call qword [0x1402a7b00]
test byte [rsp + 0x30], 1
je 0x1400d8656
mov rax, qword [fcn.1400581d0]
mov rcx, rdi
call qword [0x1402a7b00]
mov rcx, rsi
call fcn.1401bcc74
mov rcx, qword [rsp + 0x1070]
xor rcx, rsp
cmp rcx, qword [0x1402b7040]
je 0x1400d8678
call fcn.14019f290
int3
mov eax, ebx
add rsp, 0x1078
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ebx, ebx
mov byte [r15], bl
mov rax, qword [rsp + 0x10e0]
mov byte [rax], bl
test byte [rsp + 0x38], 1
je 0x1400d86c2
mov rcx, qword [r12]
test rcx, rcx
je 0x1400d86ba
mov rax, qword [fcn.1400581d0]
call qword [0x1402a7b00]
mov qword [r12], r14
mov byte [r15], 1
test byte [rsp + 0x30], 1
je 0x1400d8656
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400d86e3
mov rax, qword [fcn.1400581d0]
call qword [0x1402a7b00]
mov rax, qword [rsp + 0x48]
mov qword [rax], rdi
mov rax, qword [rsp + 0x10e0]
mov byte [rax], 1
jmp 0x1400d8656
mov rcx, qword [rsp + 0x60]
mov rdx, r12
call fcn.1400b1550
xor edi, edi
test eax, eax
setne dil
mov eax, dword [rsp + 0x2c]
mov ecx, 0
cmovne eax, ecx
mov dword [rsp + 0x2c], eax
add edi, edi
xor ecx, ecx
mov rdx, rbx
mov r8, rbp
call fcn.1400cff20
mov r12, rax
test rax, rax
je 0x1400d85c3
test r14, r14
je 0x1400d875c
cmp byte [r14], 0
je 0x1400d875c
cmp qword [rsp + 0x40], 0
je 0x1400d875c
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x1400d860c
cmp edi, 2
je 0x1400d878a
cmp edi, 1
je 0x1400d86fb
lea rcx, str.machine
mov rdx, r12
call fcn.1400b1550
mov edi, 1
test eax, eax
jne 0x1400d8722
lea rcx, str.default
jmp 0x1400d8700
test r13b, r13b
je 0x1400d87b2
cmp byte [rsp + 0x3c], 0
je 0x1400d87e9
mov rcx, r14
mov rdx, r12
call fcn.1400b1550
mov dword [rsp + 0x34], eax
mov edi, 2
xor r13d, r13d
jmp 0x1400d8722
cmp byte [rsp + 0x28], 0
jne 0x1400d884b
lea rcx, str.login
mov rdx, r12
call fcn.1400b1550
mov edi, 2
test eax, eax
je 0x1400d8876
mov r13b, 1
mov dword [rsp + 0x28], 0
jmp 0x1400d8722
test r14, r14
je 0x1400d87fd
mov rcx, r14
mov rdx, r12
call fcn.1401c0540
test eax, eax
je 0x1400d87a5
test byte [rsp + 0x38], 1
je 0x1400d881c
mov rax, qword [fcn.1400581d0]
mov rcx, r14
call qword [0x1402a7b00]
mov dword [rsp + 0x38], 0
mov rax, qword [str._e_]
mov rcx, r12
call qword [0x1402a7b00]
xor r13d, r13d
test rax, rax
je 0x1400d8929
mov r14, rax
mov edi, 2
mov al, 1
mov dword [rsp + 0x38], eax
jmp 0x1400d8722
cmp dword [rsp + 0x34], 0
sete al
xor r13d, r13d
mov edi, 2
test byte [rsp + 0x3c], al
je 0x1400d88c9
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x34], 0
jmp 0x1400d8722
lea rcx, str.password
mov rdx, r12
call fcn.1400b1550
xor r13d, r13d
test eax, eax
je 0x1400d8897
mov al, 1
mov dword [rsp + 0x28], eax
jmp 0x1400d8722
lea rcx, str.machine
mov rdx, r12
call fcn.1400b1550
xor edi, edi
test eax, eax
sete dil
mov eax, dword [rsp + 0x34]
cmovne eax, r13d
mov dword [rsp + 0x34], eax
inc edi
jmp 0x1400d87dc
xor r13d, r13d
jmp 0x1400d87dc
mov r13, qword [rsp + 0x40]
test r13, r13
je 0x1400d88e2
mov rcx, r13
mov rdx, r12
call fcn.1401c0540
test eax, eax
je 0x1400d88c1
test byte [rsp + 0x30], 1
je 0x1400d8901
mov rax, qword [fcn.1400581d0]
mov rcx, r13
call qword [0x1402a7b00]
mov dword [rsp + 0x30], 0
mov rax, qword [str._e_]
mov rcx, r12
call qword [0x1402a7b00]
xor r13d, r13d
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400d893b
mov al, 1
mov dword [rsp + 0x30], eax
jmp 0x1400d87dc
mov ebx, 0xffffffff
xor r14d, r14d
mov rdi, qword [rsp + 0x40]
jmp 0x1400d8628
mov ebx, 0xffffffff
xor edi, edi
jmp 0x1400d8628