Function at 0x1800773e0
Capabilities:
Query environment variable

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov rax, qword [0x1800e5c38]
xor rax, rsp
mov qword [rbp + 7], rax
mov r13d, dword [rbp + 0x7f]
mov rbx, r9
mov r10, qword [rbp - 0x51]
lea r9, [0x180000000]
mov r12, r8
mov qword [rbp - 0x29], r8
mov r8d, dword [rsp + 0x38]
mov rdi, rdx
lea r15d, [r13 + 0xc]
mov qword [rbp - 0x31], rbx
mov qword [rbp - 0x79], rcx
mov rdx, rcx
mov qword [rbp - 0x61], r10
mov r14d, r13d
mov dword [rsp + 0x30], r8d
cmp r13d, r15d
jae 0x18007783e
mov r12d, dword [rsp + 0x38]
lea esi, [r13 - 0x10e]
mov r13d, dword [rsp + 0x38]
nop dword [rax]
cmp esi, 0x27
ja case.0x18007747d.12
movzx eax, byte [r9 + rsi + 0x77b70]
mov ecx, dword [r9 + rax*4 + 0x77b3c]
add rcx, r9
jmp rcx
mov r12d, 1
mov r13d, 0x20000
jmp case.0x18007747d.12
mov rax, qword [rdi + 0x138]
mov r10, qword [rax + 8]
mov qword [rbp - 0x61], r10
jmp case.0x18007747d.12
mov rax, qword [rdi]
lea rdx, [rsp + 0x40]
mov dword [rbp - 0x71], r8d
lea rcx, [rbp - 0x71]
mov r8d, 0x6a
mov qword [rsp + 0x40], rax
call fcn.180098d40
sub eax, dword [rbx]
lea r9, [rbp - 0x59]
mov ebx, dword [rsp + 0x30]
lea r8, [rsp + 0x40]
mov dword [rbp - 0x71], eax
lea rcx, [rbp - 0x21]
mov rax, qword [rdi]
mov edx, 0xfa
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x59], ebx
call fcn.1800906c0
mov eax, 2
mov dword [rbp - 0x59], ebx
mov word [rbp - 0x71], ax
lea r8, [rbp - 0x59]
mov rax, qword [rdi]
mov r9d, 0x45
mov qword [rsp + 0x40], rax
xor edx, edx
lea rax, [rsp + 0x40]
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x20], rax
call fcn.180076040
mov r8d, ebx
jmp 0x180077815
mov rax, qword [rdx]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x40], rax
lea rdx, [rbp - 0x41]
mov rax, qword [rdi]
xor r8d, r8d
mov ecx, 0x91
mov qword [rbp - 0x41], rax
mov qword [rsp + 0x20], 0
call fcn.1800cbab0
cmp dword [rbx], 0
mov rcx, qword [rbp - 0x79]
mov dword [rsp + 0x30], eax
jle 0x1800775a3
mov rcx, qword [rcx]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov r8d, 0x107
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0x50]
lea rcx, [rbp - 0x51]
mov qword [rbp - 0x51], rdx
xor edx, edx
call fcn.18008b2d0
jmp 0x180077810
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov qword [rbp - 0x41], rax
mov r8d, 0xfc
mov rax, qword [rdi]
mov rcx, qword [rax + 0x50]
mov qword [rsp + 0x40], rcx
lea rcx, [rbp - 0x41]
call fcn.18004b6c0
jmp 0x180077810
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x16]
call fcn.1800893b0
mov eax, dword [rsp + 0x38]
lea r9, [rbp - 0x71]
mov rcx, qword [rbp - 0x79]
lea r8, [rbp - 0x41]
mov dword [rbp - 0x41], eax
lea rdx, [rsp + 0x40]
mov eax, dword [rbp - 0x39]
mov dword [rsp + 0x40], eax
lea rax, [rbp - 0x59]
mov rcx, qword [rcx]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd5
mov dword [rbp - 0x59], r13d
mov dword [rbp - 0x71], r12d
call fcn.1800bba80
jmp 0x180077810
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rbp - 0x49], rax
jmp 0x180077810
mov r9, rdi
xor edx, edx
xor ecx, ecx
mov r8d, 0xb1
call fcn.18009d190
cmp dword [rbp - 0x69], 0
mov rdx, qword [rbp - 0x79]
mov dword [rdx], eax
je 0x1800776a6
mov edx, dword [rbp - 0xd]
cmp eax, edx
ja 0x1800776a2
mov ecx, 0x3b
xor r8d, r8d
nop dword [rax]
mov eax, ecx
sub eax, 0x39
je case.0x180077866.6
sub eax, 1
je 0x18007768d
cmp eax, 1
jne 0x180077696
mov rax, qword [rbp - 0x29]
mov dword [rax], edx
jmp 0x180077696
mov eax, dword [rbp - 0x69]
mov dword [rbx], eax
mov dword [rbp - 0x49], r8d
dec ecx
cmp ecx, 0x38
ja 0x180077670
jmp 0x180077810
mov rdx, qword [rbp - 0x79]
mov r8d, dword [rsp + 0x30]
jmp 0x180077819
mov ecx, dword [rbp - 0x69]
test ecx, ecx
je case.0x18007747d.12
mov eax, dword [rdi + 0xe4]
lea r8, [rbp - 0x11]
and eax, 0x10
mov edx, ecx
mov r9d, 0x18
mov dword [rsp + 0x20], eax
mov rcx, rdi
call qword [r10]
cmp eax, 0xffffffff
jne 0x180077810
mov ebx, 0x9c
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x9c
je 0x180077704
cmp eax, 1
je case.0x180077866.6
jmp 0x18007771d
lea r8, str.const__pushValToArrayMax___process.binding_util__
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x110]
mov dword [rbp - 0x49], 0xffffffff
inc ebx
cmp ebx, 0x9e
jb 0x1800776f0
jmp 0x180077810
mov dword [rbp - 0x39], 0x80
mov dword [rsp + 0x38], 0
jmp case.0x18007747d.12
lea rax, [rbp - 0x69]
mov dword [rsp + 0x40], 0x2c
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
mov r9, rdi
mov dword [rsp + 0x20], 0x52
xor edx, edx
xor ecx, ecx
call fcn.1800c0d60
cmp eax, 0xffffffff
jne 0x1800777b2
mov ebx, 0xa1
mov eax, ebx
sub eax, 0xa1
je 0x180077796
sub eax, 1
je 0x18007778d
cmp eax, 1
je case.0x180077866.6
jmp 0x1800777a8
mov dword [rbp - 0x49], 0xffffffff
jmp 0x1800777a8
lea r8, str.CPsMemoryStcComObject_CPsLookupFieldMetadata_.ctor
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x110]
inc ebx
cmp ebx, 0xa4
jb 0x180077774
mov dword [rbp - 0xd], 0
jmp 0x180077810
cmp qword [0x1800ea430], 0
je case.0x18007747d.12
mov ebx, 0xe1
nop word [rax + rax]
mov eax, ebx
sub eax, 0xe1
je 0x1800777eb
cmp eax, 1
jne 0x180077806
mov qword [0x1800ea430], 0
jmp 0x180077806
mov rax, qword [0x1800ea430]
lea rcx, [rsp + 0x40]
mov edx, 0xc0
mov qword [rsp + 0x40], rax
call fcn.1800a6130
inc ebx
cmp ebx, 0xe3
jb 0x1800777d0
mov r8d, dword [rsp + 0x30]
mov rdx, qword [rbp - 0x79]
mov r10, qword [rbp - 0x61]
lea r9, [0x180000000]
mov rbx, qword [rbp - 0x31]
inc r14d
inc esi
cmp r14d, r15d
jb 0x180077460
mov r13d, dword [rbp + 0x7f]
mov r12, qword [rbp - 0x29]
lea r14d, [r13 + 0xb]
cmp r13d, r14d
jae case.0x180077866.6
lea esi, [r13 - 0x10e]
cmp esi, 0x1b
ja case.0x180077866.7
mov ecx, dword [r9 + rsi*4 + 0x77b98]
add rcx, r9
jmp rcx
mov ecx, dword [rbp - 0x69]
test ecx, ecx
je case.0x180077866.7
mov dword [rsp + 0x38], ecx
lea rdx, [rbp - 0x11]
lea rcx, [rsp + 0x38]
mov r9d, 0xee
mov r8, rdi
call fcn.1800c38b0
cmp eax, 0xffffffff
jne case.0x180077866.7
mov ebx, 0x6f
nop dword [rax]
mov eax, ebx
sub eax, 0x6d
je case.0x180077866.6
sub eax, 1
je 0x1800778c9
cmp eax, 1
jne 0x1800778d0
lea r8, str.null_gpu_info_field_in_Gpu_EstablishGpuChannel_ResponseParams
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x110]
jmp 0x1800778d0
mov dword [rbp - 0x49], 0xffffffff
dec ebx
cmp ebx, 0x6c
ja 0x1800778a0
jmp case.0x180077866.7
mov rax, qword [rdi]
lea r8, [rbp - 0x51]
xor edx, edx
mov qword [rbp - 0x51], rax
mov ecx, 0xd1
call fcn.18008cf70
mov rax, qword [rdi]
lea r9, [rbp - 0x51]
xor r8d, r8d
mov qword [rbp - 0x51], rax
xor edx, edx
mov ecx, 0x8d
call fcn.18008af50
jmp case.0x180077866.7
mov rcx, qword [rdi + 0x138]
mov eax, dword [rdi + 0x14]
mov dword [rcx + 0x28], eax
test byte [rdi + 0xe4], 0x10
je case.0x180077866.7
lea r9, [rbp - 0x69]
mov dword [rsp + 0x38], 4
mov r8d, 0x8d
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x38]
xor ecx, ecx
call fcn.1800c1f40
jmp case.0x180077866.7
mov r9, rdi
xor edx, edx
xor ecx, ecx
mov r8d, 0xb1
call fcn.18009d190
mov rcx, qword [rbp - 0x79]
mov dword [rcx], eax
mov ecx, dword [rdi + 0x140]
lea edx, [rcx + 0x17]
neg ecx
add edx, eax
and edx, ecx
sub edx, 0x18
mov dword [r12], edx
jmp case.0x180077866.7
mov r9, qword [rdi]
mov eax, 0xffffffff
xor r8d, r8d
mov ecx, dword [r9 + 0xb8]
mov r9, qword [r9 + 0x20]
lea edx, [r8 + 0x7b]
shl eax, cl
xor ecx, ecx
imul eax, dword [rbx]
cdqe
mov qword [rbp - 0x51], rax
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
call fcn.1800806f0
jmp case.0x180077866.7
mov rax, qword [rdi]
lea rcx, [rbp - 0x51]
mov dword [rsp + 0x38], r8d
mov r9d, 0x77
lea r8, [rsp + 0x38]
mov qword [rbp - 0x51], rax
xor edx, edx
call fcn.180086760
jmp case.0x180077866.7
mov ecx, dword [r12]
mov rax, qword [rdi + 0x138]
mov r8d, dword [rdi + 0x14]
add r8d, 0x18
mov edx, dword [rax + 0x28]
sub ecx, edx
add r8d, ecx
mov rcx, rdi
call qword [r10 + 0x20]
cmp eax, 0xffffffff
jne 0x180077a55
mov ebx, 0xa5
nop dword [rax + rax]
mov eax, ebx
sub eax, 0xa4
je case.0x180077866.6
cmp eax, 1
jne 0x180077a4b
lea r8, str.Invalid_parent_handle__cant_get_parent_process_times.
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x110]
mov dword [rbp - 0x49], 0xffffffff
dec ebx
cmp ebx, 0xa3
ja 0x180077a20
mov edx, dword [rdi + 0x14]
mov r8d, 1
mov rax, qword [rbp - 0x61]
inc edx
mov rcx, rdi
call qword [rax + 0x18]
jmp case.0x180077866.7
mov r9d, 4
lea r8, [rbp - 0x69]
mov rcx, rdi
lea edx, [r9 + 0x28]
call qword [r10 + 8]
cmp eax, 0xffffffff
jne 0x180077ac6
mov ebx, 0x30
nop
cmp ebx, 0x30
je 0x180077a9f
cmp ebx, 0x2130
je case.0x180077866.6
jmp 0x180077ab8
lea r8, str._____msg.vmrun.err.invalidArg_Invalid_argument:__s
xor edx, edx
mov rcx, rdi
call qword [rdi + 0x110]
mov dword [rbp - 0x49], 0xffffffff
add ebx, 0x2100
cmp ebx, 0x4200
jbe 0x180077a90
mov dword [rbp - 0x49], 0
jmp case.0x180077866.7
mov eax, dword [rdi + 0x14]
mov dword [rbx], eax
mov dword [rbp - 0x69], eax
jmp case.0x180077866.7
mov rcx, qword [rdi]
mov rax, qword [rcx + 0xf8]
test rax, rax
je case.0x180077866.7
mov r8d, dword [rbx]
mov rdx, qword [rdx]
call rax
mov rbx, qword [rbp - 0x31]
lea r9, [0x180000000]
mov r10, qword [rbp - 0x61]
inc r13d
mov rdx, qword [rbp - 0x79]
inc esi
mov r8d, dword [rsp + 0x30]
cmp r13d, r14d
jb 0x180077852
mov rax, qword [rbp - 0x49]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1800d0500
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret