Function at 0x180061180
Capabilities:
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1800c37a8]
xor rax, rsp
mov qword [rbp + 0x170], rax
lea r15d, [r8 + 0x33c]
mov ebx, r8d
mov rdi, rdx
mov r14, rcx
cmp r8d, r15d
jae 0x180061655
mov rsi, qword [rsp + 0x30]
lea r13, str.part.tbl
mov edx, 0xf000
mov r8d, 0x8000
mov r12d, 0x1000
nop word [rax + rax]
cmp ebx, 0x11f
ja 0x1800615fe
je 0x18006168d
mov eax, ebx
sub eax, 0x38
je 0x180061543
sub eax, 0x19
je 0x180061317
cmp eax, 0x71
jne 0x180061646
movzx ecx, word [rsp + 0x46]
movzx eax, cx
and ax, dx
cmp ax, r8w
jne 0x18006127a
cmp dword [0x1800c3b08], 0
jne 0x18006127a
cmp byte [r14], 0x72
je 0x18006127a
lea r8, [rsp + 0x70]
lea rdx, str.Toast_experiment_is_disabled.
lea rcx, [rbp + 0x70]
call fcn.1800a0e90
xor r9d, r9d
lea rdx, [rbp + 0x70]
mov r8d, 0xfe
xor ecx, ecx
call fcn.1800a0b90
test eax, eax
je 0x180061684
movzx ecx, word [rsp + 0x46]
mov edx, 0xf000
and cx, dx
cmp cx, r12w
lea rcx, [rsp + 0x70]
jne 0x1800612cf
xor edx, edx
mov dword [rsp + 0x28], 0
cmp byte [r14], 0x72
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
setne dl
xor r9d, r9d
add edx, 0x100
lea r8d, [r9 + 0x40]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__sopen_dispatch]
mov ecx, dword [rsp + 0x38]
mov rdx, r14
test eax, eax
mov eax, 0xffffffff
cmovne ecx, eax
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll__fdopen]
jmp 0x1800612d8
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rsi, rax
test rax, rax
jne 0x18006163b
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea r9, [0x1800a3b9b]
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8, [rsp + 0x70]
lea rdx, str.Target_buffer_must_be_bound.
call fcn.1800a0de0
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [rdi + 0x18]
test ecx, ecx
je 0x18006134c
sub ecx, 1
je 0x1800613aa
sub ecx, 1
je 0x180061407
sub ecx, 1
je 0x18006145e
cmp ecx, 1
je 0x1800614bc
mov ebx, 0x51
jmp 0x18006163b
mov ebx, 0xeb
mov eax, ebx
sub eax, 0xeb
je 0x18006136f
cmp eax, 1
jne 0x1800613a0
mov qword [rdi + 0x20], 0x400
lea ebx, [rax + 0x50]
jmp 0x18006163b
xor r8d, r8d
mov rdx, rdi
mov ecx, 0x10a
call fcn.1800406e0
mov r8, rdi
mov dword [rsp + 0x30], 5
mov edx, 0xf7
lea rcx, [rsp + 0x30]
call fcn.18005f2c0
mov dword [rdi + 0x18], 1
inc ebx
cmp ebx, 0xed
jb 0x180061351
mov ebx, 0xa3
nop
cmp ebx, 0xa3
je 0x1800613df
cmp ebx, 0x21bf
je 0x1800613ce
cmp ebx, 0x42db
je 0x180061539
jmp 0x1800613f9
mov dword [rdi + 0x18], 2
mov qword [rdi + 0x20], 0x400
jmp 0x1800613f9
mov r8, rdi
mov dword [rsp + 0x30], 6
mov edx, 0xf7
lea rcx, [rsp + 0x30]
call fcn.18005f2c0
add ebx, 0x211c
cmp ebx, 0x6354
jbe 0x1800613b0
mov ebx, 0xa3
nop dword [rax]
mov eax, ebx
sub eax, 0xa3
je 0x18006143a
sub eax, 1
je 0x180061429
cmp eax, 1
je 0x180061539
jmp 0x180061454
mov dword [rdi + 0x18], 3
mov qword [rdi + 0x20], 0x800
jmp 0x180061454
mov r8, rdi
mov dword [rsp + 0x30], 7
mov edx, 0xf7
lea rcx, [rsp + 0x30]
call fcn.18005f2c0
inc ebx
cmp ebx, 0xa6
jb 0x180061410
mov ebx, 0xaf
mov eax, ebx
sub eax, 0xae
je 0x18006152e
cmp eax, 1
jne 0x1800614b2
lea r8d, [rax + 0x69]
mov rdx, rdi
xor ecx, ecx
call fcn.18005bd70
cmp eax, 1
jne 0x180061498
xor r8d, r8d
mov rdx, rdi
mov ecx, 0x10a
call fcn.1800406e0
mov r8, rdi
mov dword [rsp + 0x30], 8
mov edx, 0xf7
lea rcx, [rsp + 0x30]
call fcn.18005f2c0
dec ebx
cmp ebx, 0xad
ja 0x180061463
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x1800614da
sub eax, 0x4c
je 0x1800614d4
cmp eax, 0x4c
je 0x180061539
jmp 0x180061519
mov qword [rdi + 0x20], r12
jmp 0x180061519
mov r8d, 0x6a
mov rdx, rdi
xor ecx, ecx
call fcn.18005bd70
cmp eax, 1
jne 0x180061519
xor r8d, r8d
mov rdx, rdi
mov ecx, 0x10a
call fcn.1800406e0
mov r8, rdi
mov dword [rsp + 0x30], 8
mov edx, 0xf7
lea rcx, [rsp + 0x30]
call fcn.18005f2c0
add ebx, 0x4c
cmp ebx, 0x121
jb 0x1800614c1
mov ebx, 0x51
jmp 0x18006163b
mov dword [rdi + 0x18], 4
mov qword [rdi + 0x20], r12
mov ebx, 0x51
jmp 0x18006163b
movsxd rax, dword [rdi]
lea rcx, [rax + rax*8]
mov rdx, qword [r13 + rcx*8]
cmp byte [rdx], 0x5c
jne 0x180061570
lea rcx, [rsp + 0x70]
sub rcx, rdx
nop dword [rax]
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x180061560
jmp 0x1800615b4
mov r8d, 0x11f
lea rdx, str.DSS_PATH
lea rcx, [0x1800a5470]
call fcn.180061180
movsxd rcx, dword [rdi]
lea rdx, str._s_c_s
mov r9d, 0x5c
mov r8, rax
lea rcx, [rcx + rcx*8]
mov rcx, qword [r13 + rcx*8]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x70]
call fcn.1800a0e90
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
je 0x18006163b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
je 0x18006163b
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, [rsp + 0x70]
lea rdx, str.knl_cha_atype.txt
call fcn.1800a0de0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp ebx, 0x14c
je 0x180061613
cmp ebx, 0x1d6
jne 0x180061646
mov rax, rsi
jmp 0x18006165a
cmp dword [0x1800c3b0c], 0
je 0x180061646
cmp dword [0x1800c3b10], 0
je 0x180061646
movsxd rax, dword [rdi]
lea rcx, [rax + rax*8]
mov rax, qword [r13 + rcx*8 + 0x18]
test rax, rax
je 0x180061646
mov rcx, rsi
call rax
mov edx, 0xf000
mov r8d, 0x8000
add ebx, 0x8a
cmp ebx, r15d
jb 0x1800611f0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1800a1820
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x280
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [0x1800c5710], rax
test rax, rax
jne 0x18006165a
mov rax, r14
jmp 0x18006165a