Function at 0x18007dd30
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rbp + 0x40], rax
lea ebx, [r8 - 4]
mov qword [rbp - 0x70], r9
mov qword [rsp + 0x38], rdx
mov eax, r8d
mov dword [rsp + 0x78], eax
mov r13, rdx
mov qword [rbp - 0x48], rcx
mov r11, rcx
mov dword [rsp + 0x60], ebx
cmp r8d, ebx
jbe 0x18007e758
mov r15, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov r14, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x60]
sub eax, 0x59
je 0x18007e783
sub eax, 1
je 0x18007e65f
sub eax, 3
je 0x18007e751
cmp eax, 1
jne 0x18007e739
cmp dword [r13 + 0x30], 0
jne 0x18007e163
mov rax, qword [r13 + 0x10]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x40]
xor ecx, ecx
call qword [rax + 0x20]
test eax, eax
je 0x18007e163
nop
mov rcx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x60]
mov eax, dword [r13 + 0x30]
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x60], rdx
mov qword [rsp + 0x68], r15
cmp dword [r13 + 0x34], eax
jg 0x18007e0f5
mov rcx, qword [r13 + 0x18]
add eax, 0xa
mov dword [r13 + 0x34], eax
mov r13d, 0x42
cdqe
shl rax, 3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rcx
nop dword [rax]
cmp r13d, 0x42
je 0x18007debb
cmp r13d, 0xf6
je 0x18007de7a
cmp r13d, 0x13da
je 0x18007df07
cmp r13d, 0x49fe
jne 0x18007def3
mov dword [rdx + 0x24], 0
mov r15, rdx
mov qword [rsp + 0x68], rdx
jmp 0x18007def3
xor r9d, r9d
mov qword [rsp + 0x48], PathMakeUniqueName
lea rax, [rsp + 0x48]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov rdx, rax
mov qword [rbp - 0x60], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007dee9
test rcx, rcx
je 0x18007decb
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007ded4
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x68], rax
mov r15, rax
test rax, rax
je 0x18007e78f
mov rdx, qword [rbp - 0x60]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007de40
mov rdx, qword [rsp + 0x38]
mov r13d, 0x42
mov r8, qword [rbp - 0x80]
movsxd rax, dword [rdx + 0x34]
mov rcx, qword [rdx + 0x20]
shl rax, 3
mov qword [rsp + 0x30], rax
mov qword [rdx + 0x18], r15
mov qword [rsp + 0x40], rcx
cmp r13d, 0x42
je 0x18007dfb5
cmp r13d, 0xf6
je 0x18007df74
cmp r13d, 0x13da
je 0x18007dffc
cmp r13d, 0x49fe
je 0x18007df67
cmp r13d, 0x9306
je 0x18007dffc
jmp 0x18007dfe8
mov dword [r8 + 0x24], 0
mov r12, r8
jmp 0x18007dfe8
xor r9d, r9d
mov qword [rsp + 0x48], PathMakeUniqueName
lea rax, [rsp + 0x48]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov r8, rax
mov qword [rbp - 0x80], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007dfde
test rcx, rcx
je 0x18007dfc5
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007dfce
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
test rax, rax
je 0x18007e78f
mov r8, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007df30
mov rcx, qword [rsp + 0x38]
mov r13d, 0x42
movsxd rax, dword [rcx + 0x34]
mov qword [rcx + 0x20], r12
mov rcx, qword [rcx + 0x28]
shl rax, 3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rcx
cmp r13d, 0x42
je 0x18007e0a3
cmp r13d, 0xf6
je 0x18007e065
cmp r13d, 0x13da
je 0x18007e0e6
cmp r13d, 0x49fe
je 0x18007e055
cmp r13d, 0x9306
je 0x18007e0e6
jmp 0x18007e0d2
mov rdx, qword [rbp - 0x58]
mov r14, rdx
mov dword [rdx + 0x24], 0
jmp 0x18007e0d2
xor r9d, r9d
mov qword [rsp + 0x48], PathMakeUniqueName
lea rax, [rsp + 0x48]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov qword [rbp - 0x58], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007e0c8
test rcx, rcx
je 0x18007e0b3
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007e0bc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x18007e78f
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007e021
mov r13, qword [rsp + 0x38]
mov eax, dword [r13 + 0x30]
mov qword [r13 + 0x28], r14
jmp 0x18007e106
mov qword [rbp - 0x60], rdx
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x58], rcx
mov rcx, qword [r13 + 0x18]
movsxd rdx, eax
mov rax, qword [rbp - 0x50]
mov qword [rcx + rdx*8], rax
movsxd rdx, dword [r13 + 0x30]
mov rcx, qword [r13 + 0x20]
mov rax, qword [rbp - 0x40]
mov qword [rcx + rdx*8], rax
mov edx, 1
mov rax, qword [r13 + 0x10]
mov rcx, qword [rbp - 0x50]
call qword [rax + 0x30]
movsxd rcx, dword [r13 + 0x30]
lea r8, [rbp - 0x50]
mov rdx, rax
mov rax, qword [r13 + 0x28]
mov qword [rax + rcx*8], rdx
lea rdx, [rbp - 0x40]
inc dword [r13 + 0x30]
mov rax, qword [r13 + 0x10]
mov ecx, dword [r13 + 0x30]
call qword [rax + 0x20]
test eax, eax
jne 0x18007ddf0
mov eax, 0x8f
mov dword [rsp + 0x40], eax
nop dword [rax]
sub eax, 0x8e
je 0x18007e204
cmp eax, 1
jne 0x18007e641
mov r8, qword [r13 + 0x10]
lea rdx, str.BankNumber
lea rcx, [rbp - 0x10]
mov r8, qword [r8]
call fcn.1800bf030
movzx eax, byte [rbp - 0x10]
xor ecx, ecx
test al, al
je 0x18007e1fa
lea r13, [rbp - 0x10]
mov r15d, ecx
nop dword [rax]
movzx ecx, al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
jne 0x18007e1d0
movzx ecx, byte [r13]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rbp + r15 - 0x10], al
inc r15
movzx eax, byte [r13 + 1]
inc r13
test al, al
jne 0x18007e1b0
mov qword [rsp + 0x30], r15
mov rcx, qword [rsp + 0x30]
mov r15, qword [rsp + 0x68]
cmp rcx, 0x50
jae 0x18007e789
mov r13, qword [rsp + 0x38]
mov byte [rbp + rcx - 0x10], 0
jmp 0x18007e641
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x18007e641
mov r9, rax
xor r8d, r8d
mov edx, ILAppendID
xor ecx, ecx
call fcn.18000f200
mov qword [rsp + 0x70], rax
mov rdx, rax
movzx eax, byte [rax]
test al, al
je 0x18007e632
nop dword [rax]
mov qword [rbp - 0x20], rdx
movzx ecx, al
cmp al, 0x3a
je 0x18007e259
movzx eax, byte [rdx + 1]
inc rdx
movzx ecx, al
test al, al
jne 0x18007e244
mov qword [rsp + 0x30], rdx
test cl, cl
je 0x18007e26d
mov byte [rdx], 0
inc rdx
mov qword [rsp + 0x30], rdx
movzx eax, byte [rdx]
mov r13, rdx
test al, al
je 0x18007e2aa
movzx ecx, al
nop word [rax + rax]
movzx eax, cl
cmp cl, 0x3a
je 0x18007e296
movzx eax, byte [rdx + 1]
inc rdx
movzx ecx, al
test al, al
jne 0x18007e280
mov qword [rsp + 0x30], rdx
test al, al
je 0x18007e2aa
mov byte [rdx], 0
inc rdx
mov qword [rsp + 0x30], rdx
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + 0x10]
call qword [rax + 0x18]
mov qword [rsp + 0x48], rax
mov rdx, r13
mov rax, qword [rsp + 0x38]
mov r13, qword [rsp + 0x48]
mov rcx, r13
mov rax, qword [rax + 0x10]
call qword [rax + 0x28]
mov rcx, qword [rsp + 0x38]
mov edx, 1
mov rax, qword [rcx + 0x10]
mov rcx, r13
call qword [rax + 0x60]
test rax, rax
je 0x18007e304
mov rax, qword [rsp + 0x38]
mov rcx, r13
mov rax, qword [rax + 0x10]
call qword [rax + 0x38]
mov r13, qword [rsp + 0x38]
jmp 0x18007e622
mov rdx, qword [rsp + 0x38]
mov eax, dword [rdx + 0x30]
cmp dword [rdx + 0x34], eax
jg 0x18007e5cc
mov rcx, qword [rdx + 0x18]
add eax, 0xa
mov dword [rdx + 0x34], eax
mov r13d, 0x42
cdqe
shl rax, 3
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
cmp r13d, 0x42
je 0x18007e3a6
cmp r13d, 0xf6
je 0x18007e36a
cmp r13d, 0x13da
je 0x18007e3e9
cmp r13d, 0x49fe
jne 0x18007e3d5
mov rdx, qword [rbp - 0x38]
mov rdi, rdx
mov dword [rdx + 0x24], 0
jmp 0x18007e3d5
xor r9d, r9d
mov qword [rbp - 0x68], PathMakeUniqueName
lea rax, [rbp - 0x68]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov qword [rbp - 0x38], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007e3cb
test rcx, rcx
je 0x18007e3b6
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007e3bf
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x18007e78f
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007e335
mov rdx, qword [rsp + 0x38]
mov r13d, 0x42
movsxd rax, dword [rdx + 0x34]
mov rcx, qword [rdx + 0x20]
shl rax, 3
mov qword [rsp + 0x58], rax
mov qword [rdx + 0x18], rdi
mov qword [rsp + 0x50], rcx
nop
cmp r13d, 0x42
je 0x18007e490
cmp r13d, 0xf6
je 0x18007e454
cmp r13d, 0x13da
je 0x18007e4d3
cmp r13d, 0x49fe
je 0x18007e444
cmp r13d, 0x9306
je 0x18007e4d3
jmp 0x18007e4bf
mov rdx, qword [rbp - 0x30]
mov rsi, rdx
mov dword [rdx + 0x24], 0
jmp 0x18007e4bf
xor r9d, r9d
mov qword [rbp - 0x68], PathMakeUniqueName
lea rax, [rbp - 0x68]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov qword [rbp - 0x30], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007e4b5
test rcx, rcx
je 0x18007e4a0
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007e4a9
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
je 0x18007e78f
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007e410
mov rcx, qword [rsp + 0x38]
mov r13d, 0x42
movsxd rax, dword [rcx + 0x34]
mov qword [rcx + 0x20], rsi
mov rcx, qword [rcx + 0x28]
shl rax, 3
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rcx
cmp r13d, 0x42
je 0x18007e578
cmp r13d, 0xf6
je 0x18007e53c
cmp r13d, 0x13da
je 0x18007e5bb
cmp r13d, 0x49fe
je 0x18007e52c
cmp r13d, 0x9306
je 0x18007e5bb
jmp 0x18007e5a7
mov rdx, qword [rbp - 0x28]
mov rbx, rdx
mov dword [rdx + 0x24], 0
jmp 0x18007e5a7
xor r9d, r9d
mov qword [rbp - 0x68], PathMakeUniqueName
lea rax, [rbp - 0x68]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov qword [rbp - 0x28], rax
mov dword [rax], 0
mov dword [rax + 0x20], 1
mov dword [rax + 0x1c], 1
jmp 0x18007e59d
test rcx, rcx
je 0x18007e588
mov rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
jmp 0x18007e591
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x18007e78f
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
add r13d, 0x1398
cmp r13d, 0x61f8
jbe 0x18007e4f8
mov rdx, qword [rsp + 0x38]
mov r13, qword [rsp + 0x48]
mov eax, dword [rdx + 0x30]
mov qword [rdx + 0x28], rbx
mov r9, qword [rbp - 0x20]
xor r8d, r8d
movsxd rcx, eax
mov rax, qword [rdx + 0x18]
mov edx, ILAppendID
mov qword [rax + rcx*8], r13
xor ecx, ecx
call fcn.18000f200
mov r8, qword [rsp + 0x38]
movsxd rdx, dword [r8 + 0x30]
mov rcx, qword [r8 + 0x20]
mov qword [rcx + rdx*8], rax
mov edx, 1
mov rax, qword [r8 + 0x10]
mov rcx, r13
call qword [rax + 0x30]
mov r13, qword [rsp + 0x38]
mov rdx, rax
movsxd rcx, dword [r13 + 0x30]
mov rax, qword [r13 + 0x28]
mov qword [rax + rcx*8], rdx
inc dword [r13 + 0x30]
mov rdx, qword [rsp + 0x30]
movzx eax, byte [rdx]
test al, al
jne 0x18007e240
mov rdx, qword [rsp + 0x70]
mov ecx, 0x22
call fcn.1800b73a0
mov eax, dword [rsp + 0x40]
dec eax
mov dword [rsp + 0x40], eax
cmp eax, 0x8d
ja 0x18007e170
mov r11, qword [rbp - 0x48]
jmp 0x18007e731
mov eax, dword [r11]
mov r10, r13
mov qword [rbp - 0x78], r13
xor edx, edx
xor r13d, r13d
test eax, eax
js 0x18007e739
mov r15, qword [rsp + 0x38]
cmp r13d, eax
mov qword [rsp + 0x48], r9
jge 0x18007e695
movzx r8d, byte [r9]
test r8d, r8d
jne 0x18007e69b
inc edx
jmp 0x18007e715
mov r8d, 0xffffffff
test edx, edx
je 0x18007e6d3
jle 0x18007e6e8
mov r11d, 0x7a
nop word [rax + rax]
cmp edx, 0x1a
lea ecx, [rdx + 0x60]
mov eax, 0x60
cmova ecx, r11d
sub eax, ecx
mov byte [r10], cl
add edx, eax
inc r10
test edx, edx
jg 0x18007e6b0
mov r11, qword [rbp - 0x48]
jmp 0x18007e6e4
cmp r10, r15
jbe 0x18007e6e8
test r8d, r8d
jle 0x18007e713
mov byte [r10], 0x5f
inc r10
mov qword [rbp - 0x78], r10
test r8d, r8d
jle 0x18007e713
lea rdx, [0x18034293c]
mov rcx, r10
call fcn.1800bf030
mov r10, qword [rbp - 0x78]
mov r9, qword [rsp + 0x48]
mov r11, qword [rbp - 0x48]
movsxd rcx, eax
add r10, rcx
mov qword [rbp - 0x78], r10
xor edx, edx
mov eax, dword [r11]
inc r9
inc r13d
mov qword [rsp + 0x48], r9
cmp r13d, eax
jle 0x18007e683
mov r15, qword [rsp + 0x68]
mov r9, qword [rbp - 0x70]
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x78]
dec eax
mov dword [rsp + 0x78], eax
cmp eax, ecx
jbe 0x18007e758
mov r13, qword [rsp + 0x38]
jmp 0x18007dda7
mov eax, dword [r13 + 0x30]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp - 0x70]
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1800bfa40
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rbp - 0x78]
jmp 0x18007e75c
call fcn.1800bf72c
int3
lea rcx, str.set_ReadyList
call fcn.18005dc00
int3