Function at 0x61631e8
Capabilities:
Query environment variable
Terminate thread

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov ebx, 1
mov qword [0x061816f8], rcx
mov rsi, r8
mov rdi, rcx
cmp edx, ebx
jne 0x61634b4
call fcn.061512c8
call fcn.06151bdc
mov edx, 0x280
lea rcx, [0x061747b0]
mov r8d, 0x6b5
call fcn.06153ab4
lea edx, [rbx + 0x5f]
mov qword [0x06181700], rax
mov r8d, 0x84e
lea rcx, [0x061748f8]
call fcn.06153ab4
mov edx, 0xd8
mov qword [0x06181708], rax
mov r8d, 0x6c2
lea rcx, [0x06174930]
call fcn.06153ab4
lea edx, [rbx + 0x2f]
mov qword [0x06181710], rax
mov r8d, 0x1a5
lea rcx, [0x061749a0]
call fcn.06153ab4
mov edx, 0x1a8
mov qword [0x06181718], rax
mov r8d, 0x1006
lea rcx, [0x061749c0]
call fcn.06153ab4
lea edx, [rbx + 0x57]
mov qword [0x06181720], rax
mov r8d, 0xaa0
lea rcx, str.A_2_
call fcn.06153ab4
lea edx, [rbx + 0xf]
mov qword [0x06181728], rax
mov r8d, 0x10b2
lea rcx, [0x06174ac8]
call fcn.06153ab4
lea edx, [rbx + 0x1f]
mov qword [0x06181748], rax
mov r8d, 0x47b
lea rcx, [0x06174ad8]
call fcn.06153ab4
lea r8d, [rbx + 4]
mov qword [0x06181740], rax
mov rdx, rsi
mov rcx, rdi
call fcn.061547ec
mov qword [0x061816f0], rax
test rax, rax
je 0x61634ad
call fcn.06152a44
test eax, eax
je 0x61634ad
call fcn.06163080
test eax, eax
jne 0x61634ad
call fcn.061630dc
test eax, eax
je 0x61634ad
call fcn.06152e2c
mov ecx, 0x9a2
call fcn.0615675c
mov qword [rsp + 0x80], rax
test rax, rax
je 0x6163384
lea r9, [0x06181768]
xor r8d, r8d
mov dl, 0x3b
mov rcx, rax
call fcn.06152210
lea rcx, [rsp + 0x80]
mov qword [0x06181760], rax
call fcn.06151288
call fcn.06157c74
mov rcx, qword [0x061816f0]
mov rcx, qword [rcx + 0x1878]
call fcn.06163008
test eax, eax
je 0x61633b3
call fcn.061580ac
xor ecx, ecx
call fcn.06157d08
mov eax, ebx
jmp 0x6163575
call fcn.0615f5bc
call fcn.0615edbc
call fcn.06166cc8
call fcn.06163d2c
call fcn.0615765c
call fcn.061678e8
call fcn.0615dedc
call fcn.061639dc
call fcn.0615bc44
call fcn.061580ac
mov ecx, 0xf10
call fcn.06153638
mov r8d, 0x1f
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x6163471
mov ecx, 0xf85
call fcn.06153664
mov rcx, qword [0x061816f0]
lea rdx, [0x06178634]
add rcx, 0x1454
mov qword [rsp + 0x88], rax
xor r9d, r9d
mov r8, rax
call fcn.06152170
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x70], rax
call fcn.061512a8
mov rcx, qword [rsp + 0x70]
call fcn.061536b0
neg eax
mov rdx, 0xfffffffffffffffe
sbb ecx, ecx
and ebx, ecx
lea rcx, [rsp + 0x70]
call fcn.06151300
lea rcx, [rsp + 0x20]
call fcn.06151288
test ebx, ebx
je 0x61634a1
call fcn.06158098
call fcn.06158288
call fcn.061580c0
call fcn.0615801c
call fcn.061637a0
test eax, eax
je 0x61634a1
call fcn.06158274
xor ecx, ecx
call fcn.06157d08
jmp 0x6163570
xor eax, eax
jmp 0x6163575
test edx, edx
jne 0x6163570
call fcn.06157c24
call fcn.06164158
call fcn.0615f9ac
call fcn.06157648
call fcn.0615decc
lea rdx, [0x06181768]
lea rcx, [0x06181760]
call fcn.06152390
cmp dword [0x0617ffe4], 0
je 0x6163500
mov rcx, qword [0x06181778]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
xor edx, edx
lea rcx, [0x06181700]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181708]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181710]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181718]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181720]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181728]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181748]
call fcn.06151300
xor edx, edx
lea rcx, [0x06181740]
call fcn.06151300
mov eax, 1
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret