Function at 0x180001220
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
mov rax, qword [0x180022008]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
mov rsi, rcx
mov qword [rsp + 0x70], rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov byte [rbp - 0x30], r12b
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rbp - 0x2f]
call fcn.180004bd0
mov ecx, dword [0x1800230b0]
mov rax, qword gs:[0x58]
mov rdx, qword [rax + rcx*8]
mov ecx, 0x1c4
mov eax, dword [rcx + rdx]
mov ebx, 0x1b8
add rbx, rdx
test al, 1
jne 0x1800012c4
or eax, 1
mov dword [rcx + rdx], eax
mov dword [rbx + 4], 0x14bf64f
mov dword [rbx], 0x4c989f76
lea rcx, [0x180012cd0]
call fcn.180002800
nop
cmp byte [rbx + 7], 0
je 0x1800012e9
xor byte [rbx], 0x53
xor byte [rbx + 1], 0xcb
xor byte [rbx + 2], 0xdd
xor byte [rbx + 3], 1
xor byte [rbx + 4], 0x1f
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x4b
mov byte [rbx + 7], 0
mov r8d, 0x400
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x30]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x180001315
movabs r15, 0x7fffffffffffffff
cmp rbx, r15
ja 0x1800017e2
mov qword [rsi + 0x18], 0xf
movabs r8, 0x8000000000000000
cmp rbx, 0x10
jae 0x180001365
mov qword [rsi + 0x10], rbx
mov r8, rbx
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.180008730
mov byte [rsi + rbx], 0
jmp 0x180001404
mov rdx, qword [rsi + 0x18]
mov rdi, rbx
or rdi, 0xf
cmp rdi, r15
ja 0x1800013ad
mov rcx, rdx
shr rcx, 1
mov rax, r15
sub rax, rcx
cmp rdx, rax
ja 0x1800013ad
lea rax, [rcx + rdx]
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1800013d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800017d6
jmp 0x1800013b4
mov rdi, r15
lea rax, [r8 + 0x27]
mov rcx, rax
call fcn.1800026e8
test rax, rax
je 0x1800017d0
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x1800013e5
test rcx, rcx
je 0x1800013e2
call fcn.1800026e8
mov r14, rax
jmp 0x1800013e5
mov r14, r12
mov qword [rsi], r14
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], rdi
mov r8, rbx
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.180008730
mov byte [r14 + rbx], 0
mov dword [rsp + 0x20], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov rbx, r12
mov qword [rbp - 0x68], rbx
mov edi, 0xf
mov qword [rbp - 0x60], rdi
mov byte [rbp - 0x78], bl
movups xmmword [rbp - 0x58], xmm0
lea ecx, [rdi + 0x31]
call fcn.1800026e8
mov r12, rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x48], 0x3e
mov qword [rbp - 0x40], 0x3f
movups xmm0, xmmword [str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x18001a9f8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x18001aa08]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x18001aa18]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x18001aa20]
mov dword [r12 + 0x38], eax
movzx eax, word [0x18001aa24]
mov word [r12 + 0x3c], ax
mov byte [r12 + 0x3e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [rsp + 0x78]
lea ecx, [rax + rax*2]
movzx eax, word [rsp + 0x7a]
lea ecx, [rax + rcx*4]
imul edx, ecx, 0x1f
movzx eax, word [rsp + 0x7e]
add edx, eax
lea ecx, [rdx + rdx*2]
movzx eax, word [rbp - 0x80]
lea ecx, [rax + rcx*8]
imul edx, ecx, 0x3c
movzx eax, word [rbp - 0x7c]
add edx, eax
movzx ecx, word [rbp - 0x7e]
add ecx, 0x421d0b
add ecx, edx
call fcn.180008dd4
mov r14d, edi
movabs r13, 0xc9714fbcda3ac11
call fcn.180008da8
movsxd rcx, eax
mov rax, r13
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x3d
sub rcx, rax
movzx r9d, byte [r12 + rcx]
cmp rbx, rdi
jae 0x180001541
lea rax, [rbx + 1]
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x78]
cmp rdi, 0x10
cmovae rax, qword [rbp - 0x78]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x18000154a
lea rcx, [rbp - 0x78]
call fcn.180002350
sub r14, 1
je 0x18000155a
mov rdi, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x68]
jmp 0x1800014f2
mov rax, r15
mov r13, qword [rbp - 0x68]
sub rax, r13
cmp rax, 4
jb 0x1800017e8
lea rdx, [rbp - 0x78]
mov r14, qword [rbp - 0x78]
mov r15, qword [rbp - 0x60]
cmp r15, 0x10
cmovae rdx, r14
mov qword [rsp + 0x28], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rax, [r13 + 4]
mov ebx, 0xf
lea rdi, [rsp + 0x30]
cmp rax, rbx
jbe 0x180001645
mov rbx, rax
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x1800015fe
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800026e8
test rax, rax
je 0x1800017f4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
lea rax, [r13 + 4]
mov rdx, qword [rsp + 0x28]
jmp 0x180001640
mov ecx, 0x16
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180001626
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800017dc
jmp 0x1800015d6
test rcx, rcx
je 0x18000163e
call fcn.1800026e8
mov rdi, rax
lea rax, [r13 + 4]
mov rdx, qword [rsp + 0x28]
jmp 0x180001640
xor edi, edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
mov dword [rdi], 0x706d745c
lea rcx, [rdi + 4]
mov r8, r13
call fcn.180008730
mov byte [rdi + r13 + 4], 0
mov dword [rsp + 0x20], 3
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rsp + 0x30]
call fcn.1800022d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x20], 7
lea rdx, [rsp + 0x50]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, rsi
call fcn.1800022d0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000171e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001718
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800017ee
call fcn.180002724
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18000175c
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001756
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800017f4
call fcn.180002724
nop
mov edx, 0x40
mov rcx, r12
call fcn.180002724
nop
cmp r15, 0x10
jb 0x18000179d
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x180001795
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800017d0
mov rcx, r14
call fcn.180002724
mov rax, rsi
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.180002660
lea r11, [rsp + 0x4e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800091fc
int3
call fcn.180001160
nop
call fcn.180001160
nop
call fcn.180001200
nop
call fcn.180001200
nop
call fcn.1800091fc
nop
call fcn.1800091fc
int3