Function at 0x7ff8c49b222f
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov r15, r9
mov r14d, r8d
mov r12d, edx
mov rdi, rcx
mov rsi, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x110]
mov rax, qword [0x7ff8c4a32268]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsi + 8]
test rdx, rdx
je 0x7ff8c49b22dd
mov eax, dword [rsi]
test eax, eax
je 0x7ff8c49b22d5
mov ebx, 1
mov rdx, qword [rdx + rbx*8 - 8]
test rdx, rdx
je 0x7ff8c49b22c1
test rdi, rdi
je 0x7ff8c49b22aa
mov rax, qword [rdi + 0x3fe8]
test rax, rax
je 0x7ff8c49b22aa
mov rcx, qword [rdi + 0x3fd0]
call rax
jmp 0x7ff8c49b22b2
mov rcx, rdx
call fcn.7ff8c49f29a0
mov rax, qword [rsi + 8]
mov qword [rax + rbx*8 - 8], 0
mov eax, dword [rsi]
mov ecx, eax
cmp rbx, rcx
jae 0x7ff8c49b22d1
mov rdx, qword [rsi + 8]
inc rbx
jmp 0x7ff8c49b2284
mov rdx, qword [rsi + 8]
mov rcx, rdi
call fcn.7ff8c49ae72a
test r12d, r12d
setne r13b
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
test rbp, rbp
je 0x7ff8c49b238d
mov dword [rsp + 0x30], r12d
mov r12d, r14d
xor r15d, r15d
mov r13b, 1
mov rcx, rbp
call fcn.7ff8c49f5170
mov r14, rax
add r14, 3
test rdi, rdi
je 0x7ff8c49b2338
mov rax, qword [rdi + 0x3fd8]
test rax, rax
je 0x7ff8c49b2338
mov rcx, qword [rdi + 0x3fd0]
mov r8d, 8
mov rdx, r14
xor r9d, r9d
call rax
jmp 0x7ff8c49b2340
mov rcx, r14
call fcn.7ff8c49f34e8
mov rbx, rax
test rax, rax
je 0x7ff8c49b23e0
mov rcx, rbx
mov rdx, rbp
call fcn.7ff8c49f4f70
test r14, r14
je 0x7ff8c49b2375
mov qword [rsp + 0x20], rbx
lea r9, str.ReadDataFilesInSearchPaths:_Searching_the_following_paths_for_manifest_files:__s_n
mov rcx, rdi
mov edx, 0x10
call fcn.7ff8c49a4e82
mov rcx, rdi
mov rdx, rbx
mov r8d, r13d
mov r9, rsi
call fcn.7ff8c49b7dd8
mov ebp, eax
mov r14b, 1
jmp 0x7ff8c49b2401
test r15, r15
je 0x7ff8c49b24aa
mov rcx, r15
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x7ff8c49b24aa
mov ebx, eax
mov edx, eax
test rdi, rdi
je 0x7ff8c49b247b
mov rax, qword [rdi + 0x3fd8]
test rax, rax
je 0x7ff8c49b247b
mov rcx, qword [rdi + 0x3fd0]
mov r8d, 8
xor r9d, r9d
call rax
jmp 0x7ff8c49b2483
mov dword [rsp + 0x20], r14d
lea r9, str.ReadDataFilesInSearchPaths:_Failed_to_allocate_space_for_search_path_of_length__d
mov rcx, rdi
mov edx, 8
call fcn.7ff8c49a4e82
mov ebp, 0xffffffff
xor r14d, r14d
test r15, r15
je 0x7ff8c49b2432
test rdi, rdi
je 0x7ff8c49b242a
mov rax, qword [rdi + 0x3fe8]
test rax, rax
je 0x7ff8c49b242a
mov rcx, qword [rdi + 0x3fd0]
mov rdx, r15
call rax
test rbx, rbx
jne 0x7ff8c49b243c
jmp 0x7ff8c49b245e
mov rcx, r15
call fcn.7ff8c49f29a0
test rbx, rbx
je 0x7ff8c49b245e
test rdi, rdi
je 0x7ff8c49b2456
mov rax, qword [rdi + 0x3fe8]
test rax, rax
je 0x7ff8c49b2456
mov rcx, qword [rdi + 0x3fd0]
mov rdx, rbx
call rax
jmp 0x7ff8c49b245e
mov rcx, rbx
call fcn.7ff8c49f29a0
test ebp, ebp
jne 0x7ff8c49b27e3
xor ebp, ebp
test r14b, r14b
mov r14d, r12d
mov r12d, dword [rsp + 0x30]
jne 0x7ff8c49b2836
jmp 0x7ff8c49b24aa
mov rcx, rdx
call fcn.7ff8c49f34e8
mov rbp, rax
test rax, rax
je 0x7ff8c49b24aa
mov dword [rsp + 0x30], r12d
mov r12d, r14d
mov rcx, r15
mov rdx, rbp
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov r15, rbp
jmp 0x7ff8c49b2301
mov r15, qword [rsp + 0x118]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x34], 0x1000
lea rdx, str.SOFTWAREKhronosVulkanDrivers
mov r8d, 0x20
mov rcx, r15
call fcn.7ff8c49f53e0
test eax, eax
je 0x7ff8c49b2592
lea rdx, str.SOFTWAREKhronosVulkanExplicitLayers
mov r8d, 0x27
mov rcx, r15
call fcn.7ff8c49f53e0
test eax, eax
je 0x7ff8c49b2605
lea rdx, str.SOFTWAREKhronosVulkanImplicitLayers
mov r8d, 0x27
mov rcx, r15
call fcn.7ff8c49f53e0
xor ebp, ebp
test eax, eax
jne 0x7ff8c49b268a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, [0x7ff8c4a142ea]
lea r9, [0x7ff8c4a142ba]
cmove r9, rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x34]
mov rcx, rdi
call fcn.7ff8c49b8094
mov ebp, eax
cmp eax, 5
jne 0x7ff8c49b268a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, str.VulkanImplicitLayers
lea r9, str.VulkanImplicitLayersWow
jmp 0x7ff8c49b2672
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, [0x7ff8c4a141ea]
lea r9, [0x7ff8c4a141c2]
cmove r9, rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x34]
mov rcx, rdi
call fcn.7ff8c49b8094
mov ebp, eax
cmp eax, 5
jne 0x7ff8c49b268a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, str.VulkanDriverName
lea r9, str.VulkanDriverNameWow
jmp 0x7ff8c49b2672
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, [0x7ff8c4a14262]
lea r9, [0x7ff8c4a14232]
cmove r9, rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x34]
mov rcx, rdi
call fcn.7ff8c49b8094
mov ebp, eax
cmp eax, 5
jne 0x7ff8c49b268a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rbx, [rsp + 0x50]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [rbx], 0
lea rax, str.VulkanExplicitLayers
lea r9, str.VulkanExplicitLayersWow
cmove r9, rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x34]
mov rcx, rdi
call fcn.7ff8c49aed57
mov ebp, eax
cmp r12d, 1
jne 0x7ff8c49b270f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x48]
mov rcx, rax
mov edx, 0x18
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov bl, 1
test eax, eax
je 0x7ff8c49b2711
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x50]
mov edx, 0x19
mov r9d, 0x48
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x7ff8c49b285c
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_GetSidSubAuthorityCount]
movzx edx, byte [rax]
dec edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_GetSidSubAuthority]
mov ebx, dword [rax]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, 0x2001
setb bl
jmp 0x7ff8c49b2711
xor ebx, ebx
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x38]
mov rcx, rdi
mov rdx, r15
mov r8d, ebx
call fcn.7ff8c49af17c
mov ebx, eax
test eax, eax
setne al
test ebp, ebp
setne cl
test cl, al
jne 0x7ff8c49b275a
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x7ff8c49b275a
mov rcx, rdi
xor r8d, r8d
mov r9, rsi
call fcn.7ff8c49b7dd8
mov ebp, eax
jmp 0x7ff8c49b27b1
test r12d, r12d
je 0x7ff8c49b2794
test r14b, r14b
je 0x7ff8c49b2787
cmp r12d, 1
lea rax, str.ReadDataFilesInRegistry:_Registry_lookup_failed_to_get_layer_manifest_files.
lea r9, str.ReadDataFilesInRegistry:_Registry_lookup_failed_to_get_data_files.
cmove r9, rax
mov rcx, rdi
mov edx, 2
call fcn.7ff8c49a4e82
xor ebp, ebp
cmp ebx, 0xffffffff
sete bpl
neg ebp
jmp 0x7ff8c49b27b1
lea r9, str.ReadDataFilesInRegistry:_Registry_lookup_failed_to_get_ICD_manifest_files.__Possibly_missing_Vulkan_driver_
mov rcx, rdi
mov edx, 8
call fcn.7ff8c49a4e82
lea eax, [rbx + 1]
cmp eax, 2
cmovb ebp, ebx
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x7ff8c49b27df
test rdi, rdi
je 0x7ff8c49b27d7
mov rax, qword [rdi + 0x3fe8]
test rax, rax
je 0x7ff8c49b27d7
mov rcx, qword [rdi + 0x3fd0]
call rax
jmp 0x7ff8c49b27df
mov rcx, rdx
call fcn.7ff8c49f29a0
test ebp, ebp
je 0x7ff8c49b2834
mov rdx, qword [rsi + 8]
test rdx, rdx
je 0x7ff8c49b2836
cmp dword [rsi], 0
je 0x7ff8c49b2824
mov rdx, qword [rdx]
mov rcx, rdi
call fcn.7ff8c49ae72a
cmp dword [rsi], 2
jb 0x7ff8c49b2820
mov ebx, 1
mov rax, qword [rsi + 8]
mov rdx, qword [rax + rbx*8]
mov rcx, rdi
call fcn.7ff8c49ae72a
inc rbx
mov eax, dword [rsi]
cmp rbx, rax
jb 0x7ff8c49b2806
mov rdx, qword [rsi + 8]
mov rcx, rdi
call fcn.7ff8c49ae72a
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
jmp 0x7ff8c49b2836
xor ebp, ebp
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.7ff8c49e1750
mov eax, ebp
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x7ff8c49b2711