Function at 0x18002e360
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x208
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov dword [rsp + 0x15c], 8
mov dword [rsp + 0x164], 0xc
cmp dword [rsp + 0x164], 0
jle 0x18002e3f6
mov eax, dword [rsp + 0x164]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e3d8
mov dword [rsp + 0x15c], 4
mov eax, dword [rsp + 0x164]
dec eax
mov dword [rsp + 0x164], eax
jmp 0x18002e396
mov dword [rsp + 0x15c], 0
mov eax, dword [rsp + 0x164]
sub eax, 2
mov dword [rsp + 0x164], eax
jmp 0x18002e396
mov dword [rsp + 0x160], 5
mov dword [rsp + 0x158], 0xf
cmp dword [rsp + 0x158], 0
jle 0x18002e46b
mov eax, dword [rsp + 0x158]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e44e
mov dword [rsp + 0x160], 0
mov eax, dword [rsp + 0x158]
dec eax
mov dword [rsp + 0x158], eax
jmp 0x18002e40c
mov dword [rsp + 0x160], 4
mov eax, dword [rsp + 0x158]
dec eax
mov dword [rsp + 0x158], eax
jmp 0x18002e40c
mov dword [rsp + 0x154], 2
mov dword [rsp + 0x150], 5
mov eax, dword [rsp + 0x150]
test eax, eax
jle 0x18002e4f1
mov eax, dword [rsp + 0x150]
cmp eax, 1
jle 0x18002e4be
mov eax, dword [rsp + 0x154]
and eax, 0x204d
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x150]
sub eax, 2
mov dword [rsp + 0x150], eax
jmp 0x18002e481
mov eax, dword [rsp + 0x154]
cmp eax, 0x807
jle 0x18002e4df
mov eax, dword [rsp + 0x154]
and eax, 0x80
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x150]
dec eax
mov dword [rsp + 0x150], eax
jmp 0x18002e481
mov rax, qword [rsp + 0x220]
add rax, 0x1c
mov r8d, 0x104
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x18002e9a4
mov dword [rsp + 0x168], 4
mov dword [rsp + 0x188], 0x11
cmp dword [rsp + 0x188], 0
jle 0x18002e5a2
mov eax, dword [rsp + 0x188]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e585
mov dword [rsp + 0x168], 0
mov eax, dword [rsp + 0x188]
dec eax
mov dword [rsp + 0x188], eax
jmp 0x18002e543
mov dword [rsp + 0x168], 4
mov eax, dword [rsp + 0x188]
dec eax
mov dword [rsp + 0x188], eax
jmp 0x18002e543
mov dword [rsp + 0x180], 8
mov dword [rsp + 0x194], 0xc
cmp dword [rsp + 0x194], 0
jle 0x18002e618
mov eax, dword [rsp + 0x194]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e5fa
mov dword [rsp + 0x180], 4
mov eax, dword [rsp + 0x194]
dec eax
mov dword [rsp + 0x194], eax
jmp 0x18002e5b8
mov dword [rsp + 0x180], 0
mov eax, dword [rsp + 0x194]
sub eax, 2
mov dword [rsp + 0x194], eax
jmp 0x18002e5b8
mov dword [rsp + 0x184], 3
mov dword [rsp + 0x190], 9
mov eax, dword [rsp + 0x190]
test eax, eax
jle 0x18002e69e
mov eax, dword [rsp + 0x190]
cmp eax, 1
jle 0x18002e66b
mov eax, dword [rsp + 0x184]
and eax, 0x15f8
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x190]
sub eax, 2
mov dword [rsp + 0x190], eax
jmp 0x18002e62e
mov eax, dword [rsp + 0x184]
cmp eax, 0x80b
jle 0x18002e68c
mov eax, dword [rsp + 0x184]
and eax, 0x84
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x190]
dec eax
mov dword [rsp + 0x190], eax
jmp 0x18002e62e
mov dword [rsp + 0x17c], 7
mov dword [rsp + 0x178], 0xa
mov eax, dword [rsp + 0x178]
test eax, eax
jle 0x18002e724
mov eax, dword [rsp + 0x178]
cmp eax, 1
jle 0x18002e6f1
mov eax, dword [rsp + 0x17c]
and eax, 0x23c7
mov dword [rsp + 0x17c], eax
mov eax, dword [rsp + 0x178]
sub eax, 2
mov dword [rsp + 0x178], eax
jmp 0x18002e6b4
mov eax, dword [rsp + 0x17c]
cmp eax, 0x80c
jle 0x18002e712
mov eax, dword [rsp + 0x17c]
and eax, 0x85
mov dword [rsp + 0x17c], eax
mov eax, dword [rsp + 0x178]
dec eax
mov dword [rsp + 0x178], eax
jmp 0x18002e6b4
mov dword [rsp + 0x16c], 4
mov dword [rsp + 0x174], 3
mov eax, dword [rsp + 0x174]
test eax, eax
jle 0x18002e7a8
mov eax, dword [rsp + 0x174]
cmp eax, 1
jle 0x18002e777
mov eax, dword [rsp + 0x16c]
and eax, 0x1891
mov dword [rsp + 0x16c], eax
mov eax, dword [rsp + 0x174]
sub eax, 2
mov dword [rsp + 0x174], eax
jmp 0x18002e73a
mov eax, dword [rsp + 0x16c]
cmp eax, 0x805
jle 0x18002e796
mov eax, dword [rsp + 0x16c]
and eax, 0x7e
mov dword [rsp + 0x16c], eax
mov eax, dword [rsp + 0x174]
dec eax
mov dword [rsp + 0x174], eax
jmp 0x18002e73a
mov dword [rsp + 0x170], 9
mov dword [rsp + 0x18c], 4
mov eax, dword [rsp + 0x18c]
test eax, eax
jle 0x18002e82c
mov eax, dword [rsp + 0x18c]
cmp eax, 1
jle 0x18002e7fb
mov eax, dword [rsp + 0x170]
and eax, 0x197d
mov dword [rsp + 0x170], eax
mov eax, dword [rsp + 0x18c]
sub eax, 2
mov dword [rsp + 0x18c], eax
jmp 0x18002e7be
mov eax, dword [rsp + 0x170]
cmp eax, 0x806
jle 0x18002e81a
mov eax, dword [rsp + 0x170]
and eax, 0x7f
mov dword [rsp + 0x170], eax
mov eax, dword [rsp + 0x18c]
dec eax
mov dword [rsp + 0x18c], eax
jmp 0x18002e7be
mov dword [rsp + 0x198], 3
mov dword [rsp + 0x1ac], 0xf
cmp dword [rsp + 0x1ac], 0
jle 0x18002e8a3
mov eax, dword [rsp + 0x1ac]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e885
mov dword [rsp + 0x198], 0
mov eax, dword [rsp + 0x1ac]
sub eax, 2
mov dword [rsp + 0x1ac], eax
jmp 0x18002e842
mov dword [rsp + 0x198], 4
mov eax, dword [rsp + 0x1ac]
sub eax, 2
mov dword [rsp + 0x1ac], eax
jmp 0x18002e842
mov dword [rsp + 0x1a0], 2
mov dword [rsp + 0x1a4], 4
mov eax, dword [rsp + 0x1a4]
test eax, eax
jle 0x18002e927
mov eax, dword [rsp + 0x1a4]
cmp eax, 1
jle 0x18002e8f6
mov eax, dword [rsp + 0x1a0]
and eax, 0x1176
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
sub eax, 2
mov dword [rsp + 0x1a4], eax
jmp 0x18002e8b9
mov eax, dword [rsp + 0x1a0]
cmp eax, 0x806
jle 0x18002e915
mov eax, dword [rsp + 0x1a0]
and eax, 0x7f
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a4]
dec eax
mov dword [rsp + 0x1a4], eax
jmp 0x18002e8b9
mov dword [rsp + 0x1a8], 4
mov dword [rsp + 0x19c], 0x13
cmp dword [rsp + 0x19c], 0
jle 0x18002e99d
mov eax, dword [rsp + 0x19c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002e97f
mov dword [rsp + 0x1a8], 0
mov eax, dword [rsp + 0x19c]
dec eax
mov dword [rsp + 0x19c], eax
jmp 0x18002e93d
mov dword [rsp + 0x1a8], 0
mov eax, dword [rsp + 0x19c]
sub eax, 2
mov dword [rsp + 0x19c], eax
jmp 0x18002e93d
xor eax, eax
jmp 0x18002ecec
mov rax, qword [rsp + 0x220]
mov dword [rax], 1
mov dword [rsp + 0x1b8], 3
mov dword [rsp + 0x1c4], 0xf
cmp dword [rsp + 0x1c4], 0
jle 0x18002ea29
mov eax, dword [rsp + 0x1c4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002ea0b
mov dword [rsp + 0x1b8], 0
mov eax, dword [rsp + 0x1c4]
sub eax, 2
mov dword [rsp + 0x1c4], eax
jmp 0x18002e9c8
mov dword [rsp + 0x1b8], 4
mov eax, dword [rsp + 0x1c4]
sub eax, 2
mov dword [rsp + 0x1c4], eax
jmp 0x18002e9c8
mov dword [rsp + 0x1b4], 7
mov dword [rsp + 0x1b0], 0x10
cmp dword [rsp + 0x1b0], 0
jle 0x18002ea9f
mov eax, dword [rsp + 0x1b0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002ea82
mov dword [rsp + 0x1b4], 0
mov eax, dword [rsp + 0x1b0]
sub eax, 2
mov dword [rsp + 0x1b0], eax
jmp 0x18002ea3f
mov dword [rsp + 0x1b4], 0
mov eax, dword [rsp + 0x1b0]
dec eax
mov dword [rsp + 0x1b0], eax
jmp 0x18002ea3f
mov dword [rsp + 0x1c0], 7
mov dword [rsp + 0x1bc], 0xa
mov eax, dword [rsp + 0x1bc]
test eax, eax
jle 0x18002eb25
mov eax, dword [rsp + 0x1bc]
cmp eax, 1
jle 0x18002eaf2
mov eax, dword [rsp + 0x1c0]
and eax, 0x23c7
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x1bc]
sub eax, 2
mov dword [rsp + 0x1bc], eax
jmp 0x18002eab5
mov eax, dword [rsp + 0x1c0]
cmp eax, 0x80c
jle 0x18002eb13
mov eax, dword [rsp + 0x1c0]
and eax, 0x85
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x1bc]
dec eax
mov dword [rsp + 0x1bc], eax
jmp 0x18002eab5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x1e0]
lea rcx, [rsp + 0x20]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x220]
call fcn.180014750
mov dword [rsp + 0x1cc], 4
mov dword [rsp + 0x1d4], 3
mov eax, dword [rsp + 0x1d4]
test eax, eax
jle 0x18002ebeb
mov eax, dword [rsp + 0x1d4]
cmp eax, 1
jle 0x18002ebba
mov eax, dword [rsp + 0x1cc]
and eax, 0x1494
mov dword [rsp + 0x1cc], eax
mov eax, dword [rsp + 0x1d4]
sub eax, 2
mov dword [rsp + 0x1d4], eax
jmp 0x18002eb7d
mov eax, dword [rsp + 0x1cc]
cmp eax, 0x805
jle 0x18002ebd9
mov eax, dword [rsp + 0x1cc]
and eax, 0x7e
mov dword [rsp + 0x1cc], eax
mov eax, dword [rsp + 0x1d4]
dec eax
mov dword [rsp + 0x1d4], eax
jmp 0x18002eb7d
mov dword [rsp + 0x1dc], 4
mov dword [rsp + 0x1c8], 0x13
cmp dword [rsp + 0x1c8], 0
jle 0x18002ec61
mov eax, dword [rsp + 0x1c8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002ec43
mov dword [rsp + 0x1dc], 0
mov eax, dword [rsp + 0x1c8]
dec eax
mov dword [rsp + 0x1c8], eax
jmp 0x18002ec01
mov dword [rsp + 0x1dc], 0
mov eax, dword [rsp + 0x1c8]
sub eax, 2
mov dword [rsp + 0x1c8], eax
jmp 0x18002ec01
mov dword [rsp + 0x1d0], 7
mov dword [rsp + 0x1d8], 0xb
mov eax, dword [rsp + 0x1d8]
test eax, eax
jle 0x18002ece7
mov eax, dword [rsp + 0x1d8]
cmp eax, 1
jle 0x18002ecb4
mov eax, dword [rsp + 0x1d0]
and eax, 0x66b
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1d8]
sub eax, 2
mov dword [rsp + 0x1d8], eax
jmp 0x18002ec77
mov eax, dword [rsp + 0x1d0]
cmp eax, 0x80d
jle 0x18002ecd5
mov eax, dword [rsp + 0x1d0]
and eax, 0x86
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1d8]
dec eax
mov dword [rsp + 0x1d8], eax
jmp 0x18002ec77
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x208
pop rdi
pop rsi
ret