Function at 0x1400023a0
Capabilities:
Query environment variable
Terminate process

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x190
lea rbp, [rsp + 0x80]
movups xmmword [rbp + 0x100], xmm6
mov qword [rbp + 0xf8], 0xfffffffffffffffe
lea rsi, [0x1400dd578]
lea rdx, [0x140036577]
mov rcx, rsi
call fcn.140002df0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140002bfe
mov rsi, rax
mov rdi, rax
cmp rax, 0xf
ja 0x14000244b
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 0xf
lea rcx, [rbp + 0xb0]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsi + rbp]
add rax, 0xb0
jmp 0x1400024c3
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov r15d, 0x16
cmovae r15, rax
cmp rax, 0xfff
jb 0x14000248e
lea rcx, [r15 + 0x28]
call fcn.1400338a8
test rax, rax
je 0x140002bf8
mov rcx, rax
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000249a
lea rcx, [r15 + 1]
call fcn.1400338a8
mov r14, rax
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], r15
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add rsi, r14
mov rax, rsi
mov byte [rax], 0
mov rsi, qword [rbp + 0xc0]
movabs rax, 0x7fffffffffffffe8
cmp rsi, rax
jge 0x140002c03
mov rbx, qword [rbp + 0xb0]
mov r14, qword [rbp + 0xc8]
xorps xmm6, xmm6
movups xmmword [rbp + 0xd0], xmm6
movups xmmword [rbp + 0xe0], xmm6
lea r15, [rsi + 0x18]
cmp r15, 0x10
jb 0x14000251b
cmp rsi, 0xffffffffffffffe8
jge 0x140002529
movabs rdi, 0x7fffffffffffffff
jmp 0x140002545
lea rdi, [rbp + 0xd0]
mov eax, 0xf
jmp 0x140002585
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov edi, 0x16
cmovae rdi, rax
cmp rax, 0xfff
jb 0x14000256a
lea rcx, [rdi + 0x28]
nop
call fcn.1400338a8
nop
test rax, rax
je 0x140002bf8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140002575
lea rcx, [rdi + 1]
nop
call fcn.1400338a8
nop
mov rcx, rax
mov qword [rbp + 0xd0], rax
mov rax, rdi
mov rdi, rcx
cmp r14, 0x10
lea rdx, [rbp + 0xb0]
cmovae rdx, rbx
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], rax
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400dd588]
lea rdx, [0x1400365ab]
call fcn.140002e70
movups xmm0, xmmword [0x1400dd588]
movups xmmword [rdi + rsi], xmm0
mov rax, qword [0x1400dd598]
mov qword [rdi + rsi + 0x10], rax
mov byte [rdi + rsi + 0x18], 0
movups xmmword [rbp - 0x50], xmm6
movups xmmword [rbp - 0x40], xmm6
lea rax, [rbp - 0x50]
mov qword [rbp + 0xf0], rax
nop
mov ecx, 0x30
call fcn.1400338a8
nop
mov rsi, rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], 0x2e
mov qword [rbp - 0x38], 0x2f
lea rcx, [0x1400dd5a8]
lea rdx, [0x1400365f8]
call fcn.140002ee0
movups xmm0, xmmword [0x1400dd5a8]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1400dd5b8]
movups xmmword [rsi + 0x10], xmm0
movups xmm0, xmmword [0x1400dd5c6]
movups xmmword [rsi + 0x1e], xmm0
mov byte [rsi + 0x2e], 0
lea rax, [rbp - 0x30]
movups xmmword [rbp - 0x20], xmm6
movups xmmword [rbp - 0x30], xmm6
mov qword [rbp + 0xf0], rax
nop
mov ecx, 0x40
call fcn.1400338a8
nop
mov rsi, rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], 0x3a
mov qword [rbp - 0x18], 0x3f
lea rcx, [0x1400dd5dc]
lea rdx, [0x140036660]
call fcn.140002f50
movups xmm0, xmmword [0x1400dd5dc]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1400dd5ec]
movups xmmword [rsi + 0x10], xmm0
movups xmm0, xmmword [0x1400dd5fc]
movups xmmword [rsi + 0x20], xmm0
movups xmm0, xmmword [0x1400dd606]
movups xmmword [rsi + 0x2a], xmm0
mov byte [rsi + 0x3a], 0
lea rax, [rbp - 0x10]
movups xmmword [rbp - 0x10], xmm6
movups xmmword [rbp], xmm6
mov qword [rbp + 0xf0], rax
nop
mov ecx, 0x40
call fcn.1400338a8
nop
mov rsi, rax
mov qword [rbp - 0x10], rax
mov qword [rbp], 0x39
mov qword [rbp + 8], 0x3f
lea rcx, [0x1400dd61c]
lea rdx, [0x1400366cf]
call fcn.140002fc0
movups xmm0, xmmword [0x1400dd61c]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1400dd62c]
movups xmmword [rsi + 0x10], xmm0
movups xmm0, xmmword [0x1400dd63c]
movups xmmword [rsi + 0x20], xmm0
movups xmm0, xmmword [0x1400dd645]
movups xmmword [rsi + 0x29], xmm0
mov byte [rsi + 0x39], 0
lea rax, [rbp + 0x10]
movups xmmword [rbp + 0x10], xmm6
movups xmmword [rbp + 0x20], xmm6
mov qword [rbp + 0xf0], rax
nop
mov ecx, 0x30
call fcn.1400338a8
nop
mov rsi, rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], 0x28
mov qword [rbp + 0x28], 0x2f
lea rcx, [0x1400dd65c]
lea rdx, [0x140036741]
call fcn.140003030
movups xmm0, xmmword [0x1400dd65c]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1400dd66c]
movups xmmword [rsi + 0x10], xmm0
mov rax, qword [0x1400dd67c]
mov qword [rsi + 0x20], rax
mov byte [rsi + 0x28], 0
lea rax, [rbp + 0x30]
movups xmmword [rbp + 0x40], xmm6
movups xmmword [rbp + 0x30], xmm6
mov qword [rbp + 0xf0], rax
nop
mov ecx, 0x30
call fcn.1400338a8
nop
mov rsi, rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x40], 0x20
mov qword [rbp + 0x48], 0x2f
lea rcx, [0x1400dd68c]
lea rdx, [0x140036796]
call fcn.1400030a0
movups xmm0, xmmword [0x1400dd68c]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1400dd69c]
movups xmmword [rsi + 0x10], xmm0
mov byte [rsi + 0x20], 0
lea rax, [rbp + 0x50]
mov rsi, qword [rbp + 0xe0]
movabs rcx, 0x7fffffffffffffed
cmp rsi, rcx
jge 0x140002c0a
mov r14, qword [rbp + 0xd0]
mov rbx, qword [rbp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
lea r15, [rsi + 0x13]
cmp r15, 0x10
jb 0x14000285a
cmp rsi, 0xffffffffffffffed
jge 0x140002861
movabs rdi, 0x7fffffffffffffff
jmp 0x14000287e
mov ecx, 0xf
jmp 0x1400028c3
mov rcx, r15
or rcx, 0xf
cmp rcx, 0x17
mov edi, 0x16
cmovae rdi, rcx
cmp rcx, 0xfff
jb 0x1400028aa
lea rcx, [rdi + 0x28]
mov qword [rbp + 0xf0], rax
nop
call fcn.1400338a8
nop
test rax, rax
je 0x140002bf8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400028bc
lea rcx, [rdi + 1]
mov qword [rbp + 0xf0], rax
nop
call fcn.1400338a8
nop
mov qword [rbp + 0x50], rax
mov rcx, rdi
mov rdi, rax
cmp rbx, 0x10
lea rbx, [rbp + 0xd0]
mov rdx, r14
cmovb rdx, rbx
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], rcx
mov rcx, rax
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400dd6b4]
lea rdx, [0x1400367ea]
call fcn.140003110
movups xmm0, xmmword [0x1400dd6b4]
movups xmmword [rdi + rsi], xmm0
mov eax, dword [0x1400dd6c3]
mov dword [rdi + rsi + 0xf], eax
mov byte [rdi + rsi + 0x13], 0
lea rax, [rbp + 0x70]
mov rsi, qword [rbp + 0xe0]
movabs rcx, 0x7fffffffffffffd7
cmp rsi, rcx
jge 0x140002c18
mov r14, qword [rbp + 0xd0]
mov r15, qword [rbp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
lea r12, [rsi + 0x29]
cmp r12, 0x10
jb 0x14000296a
cmp rsi, 0xffffffffffffffd7
jge 0x140002971
movabs rdi, 0x7fffffffffffffff
jmp 0x14000298e
mov ecx, 0xf
jmp 0x1400029d3
mov rcx, r12
or rcx, 0xf
cmp rcx, 0x17
mov edi, 0x16
cmovae rdi, rcx
cmp rcx, 0xfff
jb 0x1400029ba
lea rcx, [rdi + 0x28]
mov qword [rbp + 0xf0], rax
nop
call fcn.1400338a8
nop
test rax, rax
je 0x140002bf8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400029cc
lea rcx, [rdi + 1]
mov qword [rbp + 0xf0], rax
nop
call fcn.1400338a8
nop
mov qword [rbp + 0x70], rax
mov rcx, rdi
mov rdi, rax
cmp r15, 0x10
mov rdx, rbx
cmovae rdx, r14
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], rcx
mov rcx, rax
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400dd6cc]
lea rdx, [0x140036837]
call fcn.1400031a0
movups xmm0, xmmword [0x1400dd6cc]
movups xmmword [rdi + rsi], xmm0
movups xmm0, xmmword [0x1400dd6dc]
movups xmmword [rdi + rsi + 0x10], xmm0
movups xmm0, xmmword [0x1400dd6e5]
movups xmmword [rdi + rsi + 0x19], xmm0
mov byte [rdi + rsi + 0x29], 0
lea rsi, [rbp + 0x90]
lea rdi, [rbp - 0x60]
xor r15d, r15d
jmp 0x140002a8a
mov rax, rcx
mov rcx, rdx
mov rdx, rax
call fcn.1400338ec
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], 0
add r15, 0x20
test r14b, r14b
jne 0x140002bdf
cmp r15, 0xe0
je 0x140002b27
lea rbx, [r15 + rbp]
add rbx, 0xffffffffffffffb0
cmp qword [rbx + 0x18], 0x10
mov rax, rbx
jb 0x140002aac
mov rax, qword [rbx]
mov rcx, qword [rbx + 0x10]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rcx
call fcn.140034004
nop
mov rcx, rsi
mov edx, eax
mov r8, rdi
call fcn.140003210
nop
nop
mov rcx, rsi
call fcn.140003390
nop
mov r14d, eax
mov rax, qword [rbp + 0xa8]
cmp rax, 8
jb 0x140002a5e
mov rdx, qword [rbp + 0x90]
lea rcx, [rax*2 + 2]
cmp rcx, 0x1000
jb 0x140002a50
mov rcx, qword [rdx - 8]
add rdx, 0xfffffffffffffff8
sub rdx, rcx
cmp rdx, 0x20
jae 0x140002bf8
add rax, rax
add rax, 0x29
jmp 0x140002a56
inc dword [0x1400dd560]
lea rcx, [rbp - 0x50]
call fcn.140003560
mov rax, qword [rbp + 0xe8]
cmp rax, 0x10
jb 0x140002b80
mov rdx, qword [rbp + 0xd0]
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140002b72
mov rcx, qword [rdx - 8]
add rdx, 0xfffffffffffffff8
sub rdx, rcx
cmp rdx, 0x20
jae 0x140002bf8
add rax, 0x28
jmp 0x140002b78
mov rax, rcx
mov rcx, rdx
mov rdx, rax
call fcn.1400338ec
mov rax, qword [rbp + 0xc8]
cmp rax, 0x10
jb 0x140002bc6
mov rdx, qword [rbp + 0xb0]
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140002bb8
mov rcx, qword [rdx - 8]
add rdx, 0xfffffffffffffff8
sub rdx, rcx
cmp rdx, 0x20
jae 0x140002bf8
add rax, 0x28
jmp 0x140002bbe
mov rax, rcx
mov rcx, rdx
mov rdx, rax
call fcn.1400338ec
movups xmm6, xmmword [rbp + 0x100]
add rsp, 0x190
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
nop
lea rcx, [0x1400df2e8]
mov rdx, rbx
call fcn.1400034f0
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1400014c0
nop
call fcn.1400014c0
nop
mov qword [rbp + 0xf0], rax
nop
call fcn.1400014c0
nop
mov qword [rbp + 0xf0], rax
nop
call fcn.1400014c0
nop
int3