Function at 0x1800c90b0
Capabilities:
Query environment variable

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x1802247b8]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov r14, r8
mov rbx, rdx
cmp qword [rcx + 0x10], 0
jne 0x1800c90f8
xor al, al
jmp 0x1800c9471
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
cmp qword [rcx + 0x18], 8
jb 0x1800c9125
mov rax, qword [rcx]
jmp 0x1800c9128
mov rax, rcx
or r12, 0xffffffffffffffff
cmp word [rax], 0x40
jne 0x1800c91af
mov r8, qword [rcx + 0x10]
dec r8d
mov rdx, rcx
lea rcx, [rsp + 0x48]
call fcn.180022890
mov rdi, rax
lea rax, [rsp + 0x28]
cmp rax, rdi
je 0x1800c9187
cmp qword [rsp + 0x40], 8
jb 0x1800c9165
mov rcx, qword [rsp + 0x28]
call fcn.180139b7c
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
mov rdx, rdi
lea rcx, [rsp + 0x28]
call fcn.180005250
nop
cmp qword [rsp + 0x60], 8
jb 0x1800c9199
mov rcx, qword [rsp + 0x48]
call fcn.180139b7c
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], r15
mov word [rsp + 0x48], r15w
jmp 0x1800c91cc
lea rax, [rsp + 0x28]
cmp rax, rcx
je 0x1800c91cc
mov r9, r12
xor r8d, r8d
mov rdx, rcx
lea rcx, [rsp + 0x28]
call fcn.180005330
mov word [rbp - 0x70], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp - 0x6e]
call fcn.180140c00
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
mov r8d, 0x104
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov esi, eax
cmp eax, 0x104
jb 0x1800c9272
mov eax, 2
mul rsi
cmovo rax, r12
mov rcx, rax
call fcn.180112448
mov rdi, rax
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
mov r8d, esi
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp word [rdi], 0
jne 0x1800c924b
mov r8, r15
jmp 0x1800c925b
mov r8, r12
nop
inc r8
cmp word [rdi + r8*2], 0
jne 0x1800c9250
mov rdx, rdi
lea rcx, [rsp + 0x28]
call fcn.180005920
mov rcx, rdi
call fcn.18013a400
jmp 0x1800c929e
cmp word [rbp - 0x70], 0
jne 0x1800c927e
mov r8, r15
jmp 0x1800c9290
lea rax, [rbp - 0x70]
mov r8, r12
inc r8
cmp word [rax + r8*2], 0
jne 0x1800c9285
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x28]
call fcn.180005920
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r15
mov word [rsp + 0x68], r15w
mov r8d, 2
lea rdx, [0x1801b0c44]
lea rcx, [rsp + 0x68]
call fcn.180005920
nop
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rdx, qword [rsp + 0x68]
mov r9, qword [rsp + 0x78]
xor r8d, r8d
lea rcx, [rsp + 0x28]
call fcn.180023b00
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1800c9401
mov r8d, eax
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.180022830
mov rdi, rax
cmp rbx, rax
je 0x1800c9346
cmp qword [rbx + 0x18], 8
jb 0x1800c932a
mov rcx, qword [rbx]
call fcn.180139b7c
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
mov word [rbx], r15w
mov rdx, rdi
mov rcx, rbx
call fcn.180005250
nop
cmp qword [rsp + 0x60], 8
jb 0x1800c9358
mov rcx, qword [rsp + 0x48]
call fcn.180139b7c
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], r15
mov word [rsp + 0x48], r15w
test r14, r14
je 0x1800c93fd
mov r8d, dword [rsp + 0x38]
sub r8d, dword [rsp + 0x78]
sub r8d, esi
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.180022890
nop
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rdx, qword [rsp + 0x48]
mov r8, r15
movzx eax, word [rdx]
cmp ax, 0x30
jb 0x1800c93d4
nop
cmp ax, 0x39
ja 0x1800c93d4
movzx eax, ax
sub eax, 0x30
movsxd rcx, eax
lea rax, [r8 + r8*4]
lea r8, [rcx + rax*2]
add rdx, 2
movzx eax, word [rdx]
cmp ax, 0x30
jae 0x1800c93b0
mov dword [r14], r8d
cmp qword [rsp + 0x60], 8
jb 0x1800c93e9
mov rcx, qword [rsp + 0x48]
call fcn.180139b7c
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], r15
mov word [rsp + 0x48], r15w
mov bl, 1
jmp 0x1800c9424
lea rax, [rsp + 0x28]
cmp rbx, rax
je 0x1800c941e
mov r9, r12
xor r8d, r8d
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.180005330
test r14, r14
sete bl
cmp qword [rbp - 0x80], 8
jb 0x1800c9435
mov rcx, qword [rsp + 0x68]
call fcn.180139b7c
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r15
mov word [rsp + 0x68], r15w
cmp qword [rsp + 0x40], 8
jb 0x1800c945a
mov rcx, qword [rsp + 0x28]
call fcn.180139b7c
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
movzx eax, bl
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.180139310
add rsp, 0x2b0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret