Function at 0x1400b04b0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov r12, r9
mov rbx, r8
mov r14, rdx
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
movzx edi, ax
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
or rsi, 0xffffffffffffffff
mov qword [rsp + 0x58], rax
mov rbp, rsi
inc rbp
cmp byte [r14 + rbp], 0
jne 0x1400b0505
mov eax, edi
lea ecx, [rbx + rbx*4]
shl ecx, 2
sub eax, ecx
add ebp, eax
mov rax, rsi
nop
inc rax
cmp byte [r14 + rax], 0
jne 0x1400b0520
mov rcx, rsi
nop dword [rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x1400b0530
mov r15, qword [rsp + 0xe8]
imul eax, ecx
mov rcx, rsi
nop dword [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400b0550
imul ecx, dword [rsp + 0xe0]
mov r13, qword [rsp + 0xf0]
sub eax, ecx
mov rcx, rsi
sub eax, edi
inc rcx
cmp byte [r13 + rcx], 0
jne 0x1400b0571
add eax, 0xffffffd3
mov edx, 0x1bb
add eax, ecx
xor ecx, ecx
lea r8d, [rcx + 9]
mov dword [rsp + 0x24], eax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
movzx edi, ax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r11, qword [rsp + 0xc0]
mov qword [rsp + 0x28], rax
lea rax, [0x1400ed4fc]
movzx r8d, dil
movsx r9, bl
mov rcx, rsi
mov qword [r11], rax
mov qword [rsp + 0xc0], r9
lea edi, [r8 + r8]
nop dword [rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x1400b05e0
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x1400b05f0
mov rbx, qword [rsp + 0x28]
imul ecx, eax
mov eax, r9d
imul ecx, dword [rsp + 0xe0]
mov rdx, rsi
imul eax, ebx
sub eax, 2
lea eax, [rax + rax*4]
add ecx, eax
mov eax, edi
imul eax, ebp
add ecx, eax
sub ecx, dword [rsp + 0x20]
inc rdx
cmp byte [r14 + rdx], 0
jne 0x1400b0626
mov r10, qword [rsp + 0xf8]
mov rax, rsi
add ecx, r10d
nop
inc rax
cmp byte [r13 + rax], 0
jne 0x1400b0640
mov rbp, qword [rsp + 0xd0]
add ecx, edx
mov qword [r11 + 0x10], rbx
add eax, ecx
mov rcx, rsi
add eax, ebp
mov dword [r11 + 8], eax
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400b0664
mov rax, rsi
inc rax
cmp byte [r13 + rax], 0
jne 0x1400b0671
imul ecx, eax
lea eax, [r8 + r8*4]
imul ecx, r10d
add ecx, eax
lea edx, [rcx + rbx*4]
mov rcx, rsi
sub edx, r9d
sub edx, ebp
inc rcx
cmp byte [r14 + rcx], 0
jne 0x1400b0694
mov r9d, dword [rsp + 0x24]
mov rax, rsi
add edx, r9d
nop dword [rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x1400b06b0
add edx, ecx
mov ecx, dword [rsp + 0x20]
add eax, edx
mov rdx, qword [rsp + 0xe0]
add ecx, 0xe
add eax, edx
add eax, ecx
mov rcx, rsi
mov dword [r11 + 0x18], eax
nop dword [rax + rax]
inc rcx
cmp byte [r13 + rcx], 0
jne 0x1400b06e0
imul eax, dword [rsp + 0x20], 0x32
imul ecx, r10d
add ecx, eax
mov rax, rsi
sub ecx, r8d
mov r8, qword [rsp + 0xc0]
sub ecx, ebx
add ecx, r8d
add ecx, r9d
add ecx, edx
add ecx, ebp
inc rax
cmp byte [r12 + rax], 0
jne 0x1400b0710
sub ecx, eax
mov rax, rsi
nop
inc rax
cmp byte [r15 + rax], 0
jne 0x1400b0720
sub ecx, eax
mov rax, rsi
nop
inc rax
cmp byte [r14 + rax], 0
jne 0x1400b0730
add eax, 0xffffffe9
add eax, ecx
mov dword [r11 + 0x1c], eax
mov rax, rsi
inc rax
cmp byte [r12 + rax], 0
jne 0x1400b0746
mov rcx, rsi
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400b0753
imul eax, ecx
mov rcx, rsi
inc rcx
cmp byte [r13 + rcx], 0
jne 0x1400b0763
imul edi, dword [rsp + 0x58]
imul eax, ecx
imul edi, dword [rsp + 0x20]
imul eax, edx
sub eax, edi
inc rsi
cmp byte [r14 + rsi], 0
jne 0x1400b0780
imul esi, ebp
mov qword [r11 + 0x28], rbx
add eax, esi
sub eax, r8d
add eax, 0xfffffff9
add eax, ebx
mov rbx, qword [rsp + 0xc8]
add eax, r10d
mov dword [r11 + 0x20], eax
mov rax, r11
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret