Function at 0x140011438
Capabilities:
Query environment variable
Terminate process

Disassembly:
jmp 0x140019f80
push rbp
push rdi
sub rsp, 0x288
lea rbp, [rsp + 0x20]
lea rcx, [0x140029068]
call fcn.14001160e
lea rax, [rbp + 0xe4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0xe4]
call fcn.140013ec0
mov rcx, rax
call fcn.1400116e5
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.COMPUTERNAME
call qword [sym.imp.ucrtbased.dll_getenv]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x14001a161
mov rdx, qword [rbp + 8]
lea rcx, [rbp + 0x158]
call fcn.1400112b7
mov qword [rbp + 0x248], rax
mov rax, qword [rbp + 0x248]
mov qword [rbp + 0x250], rax
lea rdx, str.SADOR
mov rcx, qword [rbp + 0x250]
call fcn.140011276
mov byte [rbp + 0x134], al
lea rcx, [rbp + 0x158]
call fcn.140011127
movzx eax, byte [rbp + 0x134]
test eax, eax
je 0x14001a10a
mov byte [0x140023440], 1
lea rax, [rbp + 0x194]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x1b4]
lea rcx, [rbp + 0x194]
call fcn.140013fa0
mov rcx, rax
call fcn.1400116bd
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140011479
lea rax, [rbp + 0x1d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x1f4]
lea rcx, [rbp + 0x1d4]
call fcn.140014010
mov rcx, rax
call fcn.1400116bd
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14001155f
jmp 0x14001a15f
lea rax, [rbp + 0x214]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x234]
lea rcx, [rbp + 0x214]
call fcn.140014080
mov rcx, rax
call fcn.1400116bd
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
jmp 0x14001a169
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
xor eax, eax
lea rsp, [rbp + 0x268]
pop rdi
pop rbp
ret