Function at 0x14000cbe0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x14018d0c0]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor edi, edi
mov dword [rsp + 0x60], edi
lea rcx, str.appdata
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], dil
jne 0x14000cc35
call fcn.1400e0384
mov qword [rbp + 0x1d0], rsi
mov qword [rbp + 0x1d8], rbx
lea r8, [rbp + 0x1d0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1400093b0
nop
lea rdx, [rsp + 0x68]
lea rsi, [0x14018d278]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000ccbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ccb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ccb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
call fcn.1400e0384
lea rcx, str.Launcher_X
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1d8], 0xa
lea r8, [rbp + 0x1d0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1400093b0
nop
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000cd42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cd3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cd3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
call fcn.1400e0384
lea rcx, str.Auth_
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1d8], 5
lea r8, [rbp + 0x1d0]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1400093b0
nop
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000cdc6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cdc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cdc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
call fcn.14000a200
test al, al
je 0x14000d5f1
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
cmp qword [reloc.WS2_32.dll_getsockopt], 7
cmova rsi, qword [0x14018d278]
mov r14, qword [0x14018d288]
call fcn.1400e0384
mov r15d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140177db0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x60], 0x23f
test r14, r14
je 0x14000cea0
cmp r14, 0x7fffffff
ja 0x14000d62d
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, r14d
mov rdx, rsi
mov ecx, eax
call fcn.1400e03f4
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14000d633
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rsp + 0x30]
call fcn.14000fa30
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r9, qword [rsp + 0x30]
mov dword [rsp + 0x20], ebx
mov r8d, r14d
mov rdx, rsi
mov ecx, r15d
call fcn.1400e03f4
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14000d63f
lea rax, str.AuthCredentials.json
mov qword [rsp + 0x50], rax
mov r12d, reloc.WLDAP32.dll_Ordinal_22
mov qword [rsp + 0x58], r12
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rbp + 0x1d0], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x1d8], rax
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp - 0x50], xmm0
movabs rax, 0xc000000000000000
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x1d0], 1
lea rax, [rbp - 0x58]
mov qword [rbp + 0x1d8], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x1d0], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rbp + 0x1d0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.14001b340
nop
lea rbx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rbx, qword [rsp + 0x68]
lea rax, [0x140113c28]
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x60], 0xdff
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rsi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rsi
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0x14c], 0
mov byte [rbp + 0x141], 0
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x150], rdi
mov rax, qword [0x14018ed00]
mov qword [rbp + 0x144], rax
mov qword [rbp + 0x138], rdi
lea r8d, [r12 - 0x15]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.140010d40
test rax, rax
jne 0x14000d04b
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r12 - 0x14]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xc0], rsi
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0xbc], edx
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x14000d0b5
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d0b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d0b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
movdqa xmm0, xmmword [0x140177db0]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000d108
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d103
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d103
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx + 0xd0], 0
jne 0x14000d5e0
xor edx, edx
lea rcx, [rbp + 0x1d0]
call fcn.14000f7a0
lea rcx, [rbp + 0x1d0]
call fcn.14000f940
nop
mov qword [rbp - 0x60], rdi
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x108]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x30]
call fcn.1400150b0
nop
lea r8, [rbp + 0x1d0]
mov rcx, rax
call fcn.14000f440
nop
lea rcx, [rbp + 0x18]
call fcn.14000e6a0
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14000d1aa
mov rax, qword [rcx]
lea rdx, [rbp - 0x30]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
lea rcx, [rbp + 0xd0]
call fcn.140006a10
test rax, rax
jne 0x14000d1dd
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x140177db0]
movdqu xmmword [rbp + 0x210], xmm1
mov byte [rbp + 0x200], 0
movups xmmword [rbp + 0x1e0], xmm0
mov rsi, rdi
mov qword [rbp + 0x1f0], rdi
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f8], r13
mov byte [rbp + 0x1e0], sil
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
lea r8d, [r13 - 0xb]
lea rdx, str.Auth
lea rcx, [rsp + 0x68]
call fcn.140006fc0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
lea r8d, [r13 - 7]
lea rdx, str.Username
lea rcx, [rsp + 0x30]
call fcn.140006fc0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400197c0
lea rdx, [rbp - 0x58]
mov rcx, rax
call fcn.140014fe0
lea rcx, [rbp + 0x200]
cmp rcx, rax
je 0x14000d2c6
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x210], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r13
mov byte [rax], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14000d304
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d2ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x68]
call fcn.140006fc0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 8
lea rdx, str.Username
lea rcx, [rsp + 0x30]
call fcn.140006fc0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400197c0
lea rdx, [rbp - 0x58]
mov rcx, rax
call fcn.140014fe0
lea rcx, [rbp + 0x1e0]
cmp rcx, rax
je 0x14000d3c5
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r13, xmm0
movq rsi, xmm1
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14000d403
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d3fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d3fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
lea r15, [rbp + 0x1e0]
mov r14, qword [rbp + 0x1e0]
cmp r13, 0xf
cmova r15, r14
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x14000d621
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
cmp rsi, 0xf
ja 0x14000d46a
mov qword [rsp + 0x40], rsi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x30], xmm0
jmp 0x14000d4f9
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x14000d49f
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400e0b00
test rax, rax
je 0x14000d4c6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000d4da
mov rbx, rax
cmp rax, 0x16
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000d4cd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d627
jmp 0x14000d484
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000d4da
call fcn.1400e0b00
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rbx
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp + 0x200]
lea rcx, [rsp + 0x68]
call fcn.140006530
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [0x14018f030]
call fcn.14008bcd0
cmp byte [0x14018f260], 0
je 0x14000d53b
call fcn.14000bdc0
mov dword [reloc.WS2_32.dll_closesocket], 3
mov bl, 1
jmp 0x14000d53d
xor bl, bl
cmp r13, 0xf
jbe 0x14000d578
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d56f
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d56f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400e0d84
nop
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x14000d5bd
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d5b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d5b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
nop
lea rcx, [rbp + 0x1d0]
call fcn.14000f940
nop
movzx edx, byte [rbp + 0x1d0]
lea rcx, [rbp + 0x1d8]
call fcn.140010880
nop
jmp 0x14000d5e2
xor bl, bl
lea rcx, [rbp + 0xc0]
call fcn.14000bd00
movzx eax, bl
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400e0ae0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001830
nop
call fcn.140001790
nop
call fcn.140007660
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.140007930
int3
shr rcx, 0x20
call fcn.140007930
int3