{"type": "func", "start": 6443742188, "end": 6443742417, "name": "copy_environment", "pseudocode": "// \n// copy_environment from 0x18013b3ec to 0x18013b4d1 (229 bytes)\n// \n// 3 xrefs:\n// > common_set_variable_in_environment_nolock @ 0x18013ae1e\n// > common_set_variable_in_environment_nolock @ 0x18013ae6e\n// > @ 0x1802038e4\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n_BYTE *__fastcall copy_environment(const char **a1)\n{\n const char **v1; // rdi\n __int64 v3; // rcx\n const char **i; // rax\n _BYTE *v5; // rbx\n const char *v6; // rax\n signed __int64 v7; // r14\n __int64 v8; // rsi\n char *v9; // rcx\n\n v1 = a1;\n if ( !a1 )\n return nullptr;\n v3 = 0;\n for ( i = v1; *i; ++i )\n ++v3;\n v5 = calloc_base(v3 + 1, 8u);\n if ( !v5 )\nLABEL_15:\n abort();\n v6 = *v1;\n if ( *v1 )\n {\n v7 = v5 - (_BYTE *)v1;\n do\n {\n v8 = -1;\n do\n ++v8;\n while ( v6[v8] );\n *(const char **)((char *)v1 + v7) = (const char *)calloc_base(v8 + 1, 1u);\n free_base(nullptr);\n v9 = *(char **)((char *)v1 + v7);\n if ( !v9 )\n goto LABEL_15;\n if ( strcpy_s(v9, v8 + 1, *v1) )\n invoke_watson(nullptr, nullptr, nullptr, 0, 0);\n v6 = *++v1;\n }\n while ( *v1 );\n }\n free_base(nullptr);\n return v5;\n}", "assembly": "; \n; copy_environment from 0x18013b3ec to 0x18013b4d1 (229 bytes)\n; \n; 3 xrefs:\n; > common_set_variable_in_environment_nolock @ 0x18013ae1e\n; > common_set_variable_in_environment_nolock @ 0x18013ae6e\n; > @ 0x1802038e4\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_0], rbx ; +0x0, 0x18013b3ec\nmov [rsp+arg_8], rsi ; +0x5, 0x18013b3f1\nmov [rsp+arg_10], rdi ; +0xa, 0x18013b3f6\npush r14 ; +0xf, 0x18013b3fb\nsub rsp, 30h ; +0x11, 0x18013b3fd\nmov rdi, rcx ; +0x15, 0x18013b401\ntest rcx, rcx ; +0x18, 0x18013b404\njnz short loc_18013B421 ; +0x1b, 0x18013b407\nxor eax, eax ; +0x1d, 0x18013b409\nmov rbx, [rsp+38h+arg_0] ; +0x1f, 0x18013b40b\nmov rsi, [rsp+38h+arg_8] ; +0x24, 0x18013b410\nmov rdi, [rsp+38h+arg_10] ; +0x29, 0x18013b415\nadd rsp, 30h ; +0x2e, 0x18013b41a\npop r14 ; +0x32, 0x18013b41e\nretn ; +0x34, 0x18013b420\nxor ecx, ecx ; +0x35, 0x18013b421\nmov rax, rdi ; +0x37, 0x18013b423\ncmp [rdi], rcx ; +0x3a, 0x18013b426\njz short loc_18013B438 ; +0x3d, 0x18013b429\ninc rcx ; +0x3f, 0x18013b42b\nlea rax, [rax+8] ; +0x42, 0x18013b42e\ncmp qword ptr [rax], 0 ; +0x46, 0x18013b432\njnz short loc_18013B42B ; +0x4a, 0x18013b436\ninc rcx; Count ; +0x4c, 0x18013b438\nmov edx, 8; Size ; +0x4f, 0x18013b43b\ncall _calloc_base ; +0x54, 0x18013b440\nmov rbx, rax ; +0x59, 0x18013b445\ntest rax, rax ; +0x5c, 0x18013b448\njz short loc_18013B4CB ; +0x5f, 0x18013b44b\nmov rax, [rdi] ; +0x61, 0x18013b44d\ntest rax, rax ; +0x64, 0x18013b450\njz short loc_18013B4A6 ; +0x67, 0x18013b453\nmov r14, rbx ; +0x69, 0x18013b455\nsub r14, rdi ; +0x6c, 0x18013b458\nor rsi, 0FFFFFFFFFFFFFFFFh ; +0x6f, 0x18013b45b\ninc rsi ; +0x73, 0x18013b45f\ncmp byte ptr [rax+rsi], 0 ; +0x76, 0x18013b462\njnz short loc_18013B45F ; +0x7a, 0x18013b466\nmov edx, 1; Size ; +0x7c, 0x18013b468\nlea rcx, [rsi+1]; Count ; +0x81, 0x18013b46d\ncall _calloc_base ; +0x85, 0x18013b471\nxor ecx, ecx; Block ; +0x8a, 0x18013b476\nmov [r14+rdi], rax ; +0x8c, 0x18013b478\ncall _free_base ; +0x90, 0x18013b47c\nmov rcx, [r14+rdi]; Destination ; +0x95, 0x18013b481\ntest rcx, rcx ; +0x99, 0x18013b485\njz short loc_18013B4CB ; +0x9c, 0x18013b488\nmov r8, [rdi]; Source ; +0x9e, 0x18013b48a\nlea rdx, [rsi+1]; SizeInBytes ; +0xa1, 0x18013b48d\ncall strcpy_s ; +0xa5, 0x18013b491\ntest eax, eax ; +0xaa, 0x18013b496\njnz short loc_18013B4B5 ; +0xac, 0x18013b498\nadd rdi, 8 ; +0xae, 0x18013b49a\nmov rax, [rdi] ; +0xb2, 0x18013b49e\ntest rax, rax ; +0xb5, 0x18013b4a1\njnz short loc_18013B45B ; +0xb8, 0x18013b4a4\nxor ecx, ecx; Block ; +0xba, 0x18013b4a6\ncall _free_base ; +0xbc, 0x18013b4a8\nmov rax, rbx ; +0xc1, 0x18013b4ad\njmp loc_18013B40B ; +0xc4, 0x18013b4b0\nand [rsp+38h+var_18], 0 ; +0xc9, 0x18013b4b5\nxor r9d, r9d; LineNo ; +0xcf, 0x18013b4bb\nxor r8d, r8d; FileName ; +0xd2, 0x18013b4be\nxor edx, edx; FunctionName ; +0xd5, 0x18013b4c1\nxor ecx, ecx; Expression ; +0xd7, 0x18013b4c3\ncall _invoke_watson ; +0xd9, 0x18013b4c5\ndb 0CCh ; +0xde, 0x18013b4ca\ncall abort ; +0xdf, 0x18013b4cb\ndb 0CCh ; +0xe4, 0x18013b4d0", "xrefs": ["common_set_variable_in_environment_nolock @ 0x18013ae1e", "common_set_variable_in_environment_nolock @ 0x18013ae6e", " @ 0x1802038e4"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}