Function at 0x1400bc3b0
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
or r15, 0xffffffffffffffff
mov byte [rsp + 0x40], r9b
mov rsi, r8
mov qword [rsp + 0x78], r8
mov rbx, rdx
mov r13, rcx
mov rbp, r15
inc rbp
cmp byte [rdx + rbp], 0
jne 0x1400bc3f0
add ebp, ecx
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
mov rcx, qword [rsi]
mov r14, r15
movsxd rdi, eax
mov dword [rsp + 0x4c], edi
inc r14
cmp byte [rcx + r14], 0
jne 0x1400bc413
add r14d, r13d
cmp dil, bpl
jg 0x1400bc447
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ecx, ecx
lea r8d, [rcx + 0x13]
mov edx, 0x98
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movsx rsi, dil
mov rcx, r15
mov qword [rsp + 0x70], rsi
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400bc453
lea eax, [rsi + rsi*8]
mov r12d, r13d
mov edx, 0x3ab
sub r12d, eax
add r12d, r13d
sub r12d, ecx
xor ecx, ecx
lea r8d, [rcx + 8]
sub r12d, 9
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, r15
mov qword [rsp + 0x60], rax
nop dword [rax + rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400bc490
mov edi, r13d
sub edi, r14d
add edi, ebp
sub edi, edx
mov dword [rsp + 0x44], edi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
lea r8d, [rcx + 0x19]
mov edx, 0x24d
mov qword [rsp + 0x50], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
mov qword [rsp + 0x58], rax
cmp ebp, edi
je 0x1400bc623
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
lea rcx, [rsp + 0x90]
mov edx, 0x104
lea edi, [rax + 0xb]
mov dword [rsp + 0x48], eax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov qword [rsp + 0x80], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x68], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov eax, dword [rsp + 0x48]
movzx esi, byte [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x28], eax
xor r9d, r9d
mov r8, r13
mov rdx, r13
mov rcx, r13
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
xor ecx, ecx
mov edx, 0x367
lea r8d, [rcx + 1]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movsx edx, byte [rsp + 0x4c]
mov rcx, qword [rsp + 0x50]
imul esi, r13d
mov r8, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x48]
mov eax, ecx
imul eax, dword [rsp + 0x44]
sub esi, eax
movzx r10d, dil
sub esi, edx
mov rdx, r15
sub esi, r8d
add esi, 0xfffffff3
add esi, r10d
add esi, r9d
add esi, r12d
add esi, ebp
nop dword [rax + rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400bc590
mov rdi, qword [rsp + 0x68]
mov eax, ecx
imul edx, ebp
imul eax, r8d
add edi, 0xfffffffb
lea ecx, [rax + rax*8]
sub ecx, edx
mov edx, 0x104
imul eax, r10d, 0xb
add ecx, eax
sub ecx, dword [rsp + 0x80]
sub ecx, dword [rsp + 0x58]
sub ecx, r9d
sub ecx, r14d
add ecx, r13d
add edi, ecx
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
movsx eax, byte [rsp + 0x4c]
sub esi, edi
xor r9d, r9d
mov dword [rsp + 0x30], eax
mov r8, r13
mov rdx, r13
mov rcx, r13
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov edi, dword [rsp + 0x44]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x70]
inc r15
cmp byte [rbx + r15], 0
jne 0x1400bc623
movzx eax, byte [rsp + 0x40]
imul edx, dword [rsp + 0x50]
mov rcx, qword [rsp + 0x78]
mov ecx, dword [rcx + 0x18]
add edx, edx
imul ecx, eax
lea eax, [r14 + r14*4]
imul ecx, ebp
sub ecx, edx
add ecx, esi
add eax, ecx
add eax, r13d
add eax, dword [rsp + 0x60]
add eax, edi
sub eax, r15d
add eax, 0xd
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.1400dd340
add rsp, 0x1b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret