Function at 0x1800278e0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x648
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x630], rax
mov dword [rsp + 0x260], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rsp + 0x4d0]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4d0]
lea r8, [rsp + 0x4d0]
lea rdx, [rsp + 0x4c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
jne 0x180027c33
mov dword [rsp + 0x524], 5
mov dword [rsp + 0x51c], 0xf
cmp dword [rsp + 0x51c], 0
jle 0x1800279c1
mov eax, dword [rsp + 0x51c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800279a4
mov dword [rsp + 0x524], 0
mov eax, dword [rsp + 0x51c]
dec eax
mov dword [rsp + 0x51c], eax
jmp 0x180027962
mov dword [rsp + 0x524], 4
mov eax, dword [rsp + 0x51c]
dec eax
mov dword [rsp + 0x51c], eax
jmp 0x180027962
mov dword [rsp + 0x510], 7
mov dword [rsp + 0x508], 0x14
cmp dword [rsp + 0x508], 0
jle 0x180027a37
mov eax, dword [rsp + 0x508]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027a1a
mov dword [rsp + 0x510], 0
mov eax, dword [rsp + 0x508]
sub eax, 2
mov dword [rsp + 0x508], eax
jmp 0x1800279d7
mov dword [rsp + 0x510], 0
mov eax, dword [rsp + 0x508]
dec eax
mov dword [rsp + 0x508], eax
jmp 0x1800279d7
mov dword [rsp + 0x50c], 4
mov dword [rsp + 0x4fc], 0x15
cmp dword [rsp + 0x4fc], 0
jle 0x180027aae
mov eax, dword [rsp + 0x4fc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027a90
mov dword [rsp + 0x50c], 0
mov eax, dword [rsp + 0x4fc]
sub eax, 2
mov dword [rsp + 0x4fc], eax
jmp 0x180027a4d
mov dword [rsp + 0x50c], 0
mov eax, dword [rsp + 0x4fc]
sub eax, 2
mov dword [rsp + 0x4fc], eax
jmp 0x180027a4d
mov dword [rsp + 0x520], 1
mov dword [rsp + 0x518], 0x10
cmp dword [rsp + 0x518], 0
jle 0x180027b24
mov eax, dword [rsp + 0x518]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027b06
mov dword [rsp + 0x520], 4
mov eax, dword [rsp + 0x518]
dec eax
mov dword [rsp + 0x518], eax
jmp 0x180027ac4
mov dword [rsp + 0x520], 0
mov eax, dword [rsp + 0x518]
sub eax, 2
mov dword [rsp + 0x518], eax
jmp 0x180027ac4
mov dword [rsp + 0x514], 7
mov dword [rsp + 0x504], 4
mov eax, dword [rsp + 0x504]
test eax, eax
jle 0x180027ba8
mov eax, dword [rsp + 0x504]
cmp eax, 1
jle 0x180027b77
mov eax, dword [rsp + 0x514]
and eax, 0x21f3
mov dword [rsp + 0x514], eax
mov eax, dword [rsp + 0x504]
sub eax, 2
mov dword [rsp + 0x504], eax
jmp 0x180027b3a
mov eax, dword [rsp + 0x514]
cmp eax, 0x806
jle 0x180027b96
mov eax, dword [rsp + 0x514]
and eax, 0x7f
mov dword [rsp + 0x514], eax
mov eax, dword [rsp + 0x504]
dec eax
mov dword [rsp + 0x504], eax
jmp 0x180027b3a
mov dword [rsp + 0x4f8], 3
mov dword [rsp + 0x500], 0xa
mov eax, dword [rsp + 0x500]
test eax, eax
jle 0x180027c2e
mov eax, dword [rsp + 0x500]
cmp eax, 1
jle 0x180027bfb
mov eax, dword [rsp + 0x4f8]
and eax, 0x107d
mov dword [rsp + 0x4f8], eax
mov eax, dword [rsp + 0x500]
sub eax, 2
mov dword [rsp + 0x500], eax
jmp 0x180027bbe
mov eax, dword [rsp + 0x4f8]
cmp eax, 0x80c
jle 0x180027c1c
mov eax, dword [rsp + 0x4f8]
and eax, 0x85
mov dword [rsp + 0x4f8], eax
mov eax, dword [rsp + 0x500]
dec eax
mov dword [rsp + 0x500], eax
jmp 0x180027bbe
jmp 0x180028de7
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
jne 0x180027e4b
mov dword [rsp + 0x538], 6
mov dword [rsp + 0x52c], 7
mov eax, dword [rsp + 0x52c]
test eax, eax
jle 0x180027cd7
mov eax, dword [rsp + 0x52c]
cmp eax, 1
jle 0x180027ca4
mov eax, dword [rsp + 0x538]
and eax, 0x169a
mov dword [rsp + 0x538], eax
mov eax, dword [rsp + 0x52c]
sub eax, 2
mov dword [rsp + 0x52c], eax
jmp 0x180027c67
mov eax, dword [rsp + 0x538]
cmp eax, 0x809
jle 0x180027cc5
mov eax, dword [rsp + 0x538]
and eax, 0x82
mov dword [rsp + 0x538], eax
mov eax, dword [rsp + 0x52c]
dec eax
mov dword [rsp + 0x52c], eax
jmp 0x180027c67
mov dword [rsp + 0x534], 4
mov dword [rsp + 0x540], 3
mov eax, dword [rsp + 0x540]
test eax, eax
jle 0x180027d5b
mov eax, dword [rsp + 0x540]
cmp eax, 1
jle 0x180027d2a
mov eax, dword [rsp + 0x534]
and eax, 0x1891
mov dword [rsp + 0x534], eax
mov eax, dword [rsp + 0x540]
sub eax, 2
mov dword [rsp + 0x540], eax
jmp 0x180027ced
mov eax, dword [rsp + 0x534]
cmp eax, 0x805
jle 0x180027d49
mov eax, dword [rsp + 0x534]
and eax, 0x7e
mov dword [rsp + 0x534], eax
mov eax, dword [rsp + 0x540]
dec eax
mov dword [rsp + 0x540], eax
jmp 0x180027ced
mov dword [rsp + 0x53c], 0
mov dword [rsp + 0x530], 0x15
cmp dword [rsp + 0x530], 0
jle 0x180027dd1
mov eax, dword [rsp + 0x530]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027db3
mov dword [rsp + 0x53c], 4
mov eax, dword [rsp + 0x530]
dec eax
mov dword [rsp + 0x530], eax
jmp 0x180027d71
mov dword [rsp + 0x53c], 0
mov eax, dword [rsp + 0x530]
sub eax, 2
mov dword [rsp + 0x530], eax
jmp 0x180027d71
mov dword [rsp + 0x528], 4
mov dword [rsp + 0x544], 0x11
cmp dword [rsp + 0x544], 0
jle 0x180027e46
mov eax, dword [rsp + 0x544]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027e29
mov dword [rsp + 0x528], 0
mov eax, dword [rsp + 0x544]
dec eax
mov dword [rsp + 0x544], eax
jmp 0x180027de7
mov dword [rsp + 0x528], 4
mov eax, dword [rsp + 0x544]
dec eax
mov dword [rsp + 0x544], eax
jmp 0x180027de7
jmp 0x180028de7
mov dword [rsp + 0x550], 7
mov dword [rsp + 0x55c], 0xd
cmp dword [rsp + 0x55c], 0
jle 0x180027ec1
mov eax, dword [rsp + 0x55c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027ea4
mov dword [rsp + 0x550], 0
mov eax, dword [rsp + 0x55c]
sub eax, 2
mov dword [rsp + 0x55c], eax
jmp 0x180027e61
mov dword [rsp + 0x550], 4
mov eax, dword [rsp + 0x55c]
dec eax
mov dword [rsp + 0x55c], eax
jmp 0x180027e61
mov dword [rsp + 0x564], 3
mov dword [rsp + 0x568], 0xc
cmp dword [rsp + 0x568], 0
jle 0x180027f38
mov eax, dword [rsp + 0x568]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027f1a
mov dword [rsp + 0x564], 0
mov eax, dword [rsp + 0x568]
sub eax, 2
mov dword [rsp + 0x568], eax
jmp 0x180027ed7
mov dword [rsp + 0x564], 4
mov eax, dword [rsp + 0x568]
sub eax, 2
mov dword [rsp + 0x568], eax
jmp 0x180027ed7
mov dword [rsp + 0x54c], 4
mov dword [rsp + 0x558], 3
mov eax, dword [rsp + 0x558]
test eax, eax
jle 0x180027fbc
mov eax, dword [rsp + 0x558]
cmp eax, 1
jle 0x180027f8b
mov eax, dword [rsp + 0x54c]
and eax, 0x1891
mov dword [rsp + 0x54c], eax
mov eax, dword [rsp + 0x558]
sub eax, 2
mov dword [rsp + 0x558], eax
jmp 0x180027f4e
mov eax, dword [rsp + 0x54c]
cmp eax, 0x805
jle 0x180027faa
mov eax, dword [rsp + 0x54c]
and eax, 0x7e
mov dword [rsp + 0x54c], eax
mov eax, dword [rsp + 0x558]
dec eax
mov dword [rsp + 0x558], eax
jmp 0x180027f4e
mov dword [rsp + 0x56c], 5
mov dword [rsp + 0x554], 0xf
cmp dword [rsp + 0x554], 0
jle 0x180028031
mov eax, dword [rsp + 0x554]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028014
mov dword [rsp + 0x56c], 0
mov eax, dword [rsp + 0x554]
dec eax
mov dword [rsp + 0x554], eax
jmp 0x180027fd2
mov dword [rsp + 0x56c], 4
mov eax, dword [rsp + 0x554]
dec eax
mov dword [rsp + 0x554], eax
jmp 0x180027fd2
mov dword [rsp + 0x548], 4
mov dword [rsp + 0x560], 0x11
cmp dword [rsp + 0x560], 0
jle 0x1800280a6
mov eax, dword [rsp + 0x560]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028089
mov dword [rsp + 0x548], 0
mov eax, dword [rsp + 0x560]
dec eax
mov dword [rsp + 0x560], eax
jmp 0x180028047
mov dword [rsp + 0x548], 4
mov eax, dword [rsp + 0x560]
dec eax
mov dword [rsp + 0x560], eax
jmp 0x180028047
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
jne 0x180028338
mov dword [rsp + 0x580], 4
mov dword [rsp + 0x590], 0x11
cmp dword [rsp + 0x590], 0
jle 0x18002813a
mov eax, dword [rsp + 0x590]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002811c
mov dword [rsp + 0x580], 4
mov eax, dword [rsp + 0x590]
dec eax
mov dword [rsp + 0x590], eax
jmp 0x1800280da
mov dword [rsp + 0x580], 4
mov eax, dword [rsp + 0x590]
sub eax, 2
mov dword [rsp + 0x590], eax
jmp 0x1800280da
mov dword [rsp + 0x588], 7
mov dword [rsp + 0x58c], 9
mov eax, dword [rsp + 0x58c]
test eax, eax
jle 0x1800281c0
mov eax, dword [rsp + 0x58c]
cmp eax, 1
jle 0x18002818d
mov eax, dword [rsp + 0x588]
and eax, 0x19b6
mov dword [rsp + 0x588], eax
mov eax, dword [rsp + 0x58c]
sub eax, 2
mov dword [rsp + 0x58c], eax
jmp 0x180028150
mov eax, dword [rsp + 0x588]
cmp eax, 0x80b
jle 0x1800281ae
mov eax, dword [rsp + 0x588]
and eax, 0x84
mov dword [rsp + 0x588], eax
mov eax, dword [rsp + 0x58c]
dec eax
mov dword [rsp + 0x58c], eax
jmp 0x180028150
mov dword [rsp + 0x584], 1
mov dword [rsp + 0x57c], 0x15
cmp dword [rsp + 0x57c], 0
jle 0x180028236
mov eax, dword [rsp + 0x57c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028219
mov dword [rsp + 0x584], 4
mov eax, dword [rsp + 0x57c]
sub eax, 2
mov dword [rsp + 0x57c], eax
jmp 0x1800281d6
mov dword [rsp + 0x584], 0
mov eax, dword [rsp + 0x57c]
dec eax
mov dword [rsp + 0x57c], eax
jmp 0x1800281d6
mov dword [rsp + 0x578], 3
mov dword [rsp + 0x594], 0xf
cmp dword [rsp + 0x594], 0
jle 0x1800282ad
mov eax, dword [rsp + 0x594]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002828f
mov dword [rsp + 0x578], 0
mov eax, dword [rsp + 0x594]
sub eax, 2
mov dword [rsp + 0x594], eax
jmp 0x18002824c
mov dword [rsp + 0x578], 4
mov eax, dword [rsp + 0x594]
sub eax, 2
mov dword [rsp + 0x594], eax
jmp 0x18002824c
mov dword [rsp + 0x570], 3
mov dword [rsp + 0x574], 0xa
mov eax, dword [rsp + 0x574]
test eax, eax
jle 0x180028333
mov eax, dword [rsp + 0x574]
cmp eax, 1
jle 0x180028300
mov eax, dword [rsp + 0x570]
and eax, 0x107d
mov dword [rsp + 0x570], eax
mov eax, dword [rsp + 0x574]
sub eax, 2
mov dword [rsp + 0x574], eax
jmp 0x1800282c3
mov eax, dword [rsp + 0x570]
cmp eax, 0x80c
jle 0x180028321
mov eax, dword [rsp + 0x570]
and eax, 0x85
mov dword [rsp + 0x570], eax
mov eax, dword [rsp + 0x574]
dec eax
mov dword [rsp + 0x574], eax
jmp 0x1800282c3
jmp 0x180028de7
movzx eax, word [rsp + 0x480]
cdq
mov ecx, 0x64
idiv ecx
mov eax, edx
imul eax, eax, 0xf4240
movzx ecx, word [rsp + 0x482]
imul ecx, ecx, 0x2710
add eax, ecx
movzx ecx, word [rsp + 0x486]
imul ecx, ecx, 0x64
add eax, ecx
movzx ecx, word [rsp + 0x488]
add eax, ecx
mov dword [rsp + 0x260], eax
mov dword [rsp + 0x5a8], 4
mov dword [rsp + 0x59c], 0x13
cmp dword [rsp + 0x59c], 0
jle 0x1800283f4
mov eax, dword [rsp + 0x59c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800283d6
mov dword [rsp + 0x5a8], 0
mov eax, dword [rsp + 0x59c]
dec eax
mov dword [rsp + 0x59c], eax
jmp 0x180028394
mov dword [rsp + 0x5a8], 0
mov eax, dword [rsp + 0x59c]
sub eax, 2
mov dword [rsp + 0x59c], eax
jmp 0x180028394
mov dword [rsp + 0x5a4], 8
mov dword [rsp + 0x5ac], 0xc
cmp dword [rsp + 0x5ac], 0
jle 0x18002846a
mov eax, dword [rsp + 0x5ac]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002844c
mov dword [rsp + 0x5a4], 4
mov eax, dword [rsp + 0x5ac]
dec eax
mov dword [rsp + 0x5ac], eax
jmp 0x18002840a
mov dword [rsp + 0x5a4], 0
mov eax, dword [rsp + 0x5ac]
sub eax, 2
mov dword [rsp + 0x5ac], eax
jmp 0x18002840a
mov dword [rsp + 0x598], 4
mov dword [rsp + 0x5a0], 3
mov eax, dword [rsp + 0x5a0]
test eax, eax
jle 0x1800284ee
mov eax, dword [rsp + 0x5a0]
cmp eax, 1
jle 0x1800284bd
mov eax, dword [rsp + 0x598]
and eax, 0x1494
mov dword [rsp + 0x598], eax
mov eax, dword [rsp + 0x5a0]
sub eax, 2
mov dword [rsp + 0x5a0], eax
jmp 0x180028480
mov eax, dword [rsp + 0x598]
cmp eax, 0x805
jle 0x1800284dc
mov eax, dword [rsp + 0x598]
and eax, 0x7e
mov dword [rsp + 0x598], eax
mov eax, dword [rsp + 0x5a0]
dec eax
mov dword [rsp + 0x5a0], eax
jmp 0x180028480
mov rdx, qword [0x180063f80]
mov rcx, qword [0x180063f70]
call fcn.180047380
mov qword [rsp + 0x4c8], rax
cmp qword [rsp + 0x4c8], 0
jne 0x1800286af
mov dword [rsp + 0x5b0], 7
mov dword [rsp + 0x5c0], 8
mov eax, dword [rsp + 0x5c0]
test eax, eax
jle 0x18002859e
mov eax, dword [rsp + 0x5c0]
cmp eax, 1
jle 0x18002856b
mov eax, dword [rsp + 0x5b0]
and eax, 0x2542
mov dword [rsp + 0x5b0], eax
mov eax, dword [rsp + 0x5c0]
sub eax, 2
mov dword [rsp + 0x5c0], eax
jmp 0x18002852e
mov eax, dword [rsp + 0x5b0]
cmp eax, 0x80a
jle 0x18002858c
mov eax, dword [rsp + 0x5b0]
and eax, 0x83
mov dword [rsp + 0x5b0], eax
mov eax, dword [rsp + 0x5c0]
dec eax
mov dword [rsp + 0x5c0], eax
jmp 0x18002852e
mov dword [rsp + 0x5bc], 3
mov dword [rsp + 0x5c4], 9
mov eax, dword [rsp + 0x5c4]
test eax, eax
jle 0x180028624
mov eax, dword [rsp + 0x5c4]
cmp eax, 1
jle 0x1800285f1
mov eax, dword [rsp + 0x5bc]
and eax, 0x15f8
mov dword [rsp + 0x5bc], eax
mov eax, dword [rsp + 0x5c4]
sub eax, 2
mov dword [rsp + 0x5c4], eax
jmp 0x1800285b4
mov eax, dword [rsp + 0x5bc]
cmp eax, 0x80b
jle 0x180028612
mov eax, dword [rsp + 0x5bc]
and eax, 0x84
mov dword [rsp + 0x5bc], eax
mov eax, dword [rsp + 0x5c4]
dec eax
mov dword [rsp + 0x5c4], eax
jmp 0x1800285b4
mov dword [rsp + 0x5b8], 7
mov dword [rsp + 0x5b4], 0xa
mov eax, dword [rsp + 0x5b4]
test eax, eax
jle 0x1800286aa
mov eax, dword [rsp + 0x5b4]
cmp eax, 1
jle 0x180028677
mov eax, dword [rsp + 0x5b8]
and eax, 0x23c7
mov dword [rsp + 0x5b8], eax
mov eax, dword [rsp + 0x5b4]
sub eax, 2
mov dword [rsp + 0x5b4], eax
jmp 0x18002863a
mov eax, dword [rsp + 0x5b8]
cmp eax, 0x80c
jle 0x180028698
mov eax, dword [rsp + 0x5b8]
and eax, 0x85
mov dword [rsp + 0x5b8], eax
mov eax, dword [rsp + 0x5b4]
dec eax
mov dword [rsp + 0x5b4], eax
jmp 0x18002863a
jmp 0x180028de7
mov dword [rsp + 0x5fc], 5
mov dword [rsp + 0x5f4], 0xf
cmp dword [rsp + 0x5f4], 0
jle 0x180028724
mov eax, dword [rsp + 0x5f4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028707
mov dword [rsp + 0x5fc], 0
mov eax, dword [rsp + 0x5f4]
dec eax
mov dword [rsp + 0x5f4], eax
jmp 0x1800286c5
mov dword [rsp + 0x5fc], 4
mov eax, dword [rsp + 0x5f4]
dec eax
mov dword [rsp + 0x5f4], eax
jmp 0x1800286c5
mov dword [rsp + 0x5d8], 3
mov dword [rsp + 0x5e8], 8
mov eax, dword [rsp + 0x5e8]
test eax, eax
jle 0x1800287aa
mov eax, dword [rsp + 0x5e8]
cmp eax, 1
jle 0x180028777
mov eax, dword [rsp + 0x5d8]
and eax, 0x11d0
mov dword [rsp + 0x5d8], eax
mov eax, dword [rsp + 0x5e8]
sub eax, 2
mov dword [rsp + 0x5e8], eax
jmp 0x18002873a
mov eax, dword [rsp + 0x5d8]
cmp eax, 0x80a
jle 0x180028798
mov eax, dword [rsp + 0x5d8]
and eax, 0x83
mov dword [rsp + 0x5d8], eax
mov eax, dword [rsp + 0x5e8]
dec eax
mov dword [rsp + 0x5e8], eax
jmp 0x18002873a
mov dword [rsp + 0x5f0], 7
mov dword [rsp + 0x5f8], 0xb
mov eax, dword [rsp + 0x5f8]
test eax, eax
jle 0x180028830
mov eax, dword [rsp + 0x5f8]
cmp eax, 1
jle 0x1800287fd
mov eax, dword [rsp + 0x5f0]
and eax, 0x66b
mov dword [rsp + 0x5f0], eax
mov eax, dword [rsp + 0x5f8]
sub eax, 2
mov dword [rsp + 0x5f8], eax
jmp 0x1800287c0
mov eax, dword [rsp + 0x5f0]
cmp eax, 0x80d
jle 0x18002881e
mov eax, dword [rsp + 0x5f0]
and eax, 0x86
mov dword [rsp + 0x5f0], eax
mov eax, dword [rsp + 0x5f8]
dec eax
mov dword [rsp + 0x5f8], eax
jmp 0x1800287c0
mov dword [rsp + 0x5e4], 0
mov dword [rsp + 0x5cc], 0xd
cmp dword [rsp + 0x5cc], 0
jle 0x1800288a6
mov eax, dword [rsp + 0x5cc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028888
mov dword [rsp + 0x5e4], 4
mov eax, dword [rsp + 0x5cc]
dec eax
mov dword [rsp + 0x5cc], eax
jmp 0x180028846
mov dword [rsp + 0x5e4], 0
mov eax, dword [rsp + 0x5cc]
sub eax, 2
mov dword [rsp + 0x5cc], eax
jmp 0x180028846
mov dword [rsp + 0x5e0], 2
mov dword [rsp + 0x5c8], 5
mov eax, dword [rsp + 0x5c8]
test eax, eax
jle 0x18002892c
mov eax, dword [rsp + 0x5c8]
cmp eax, 1
jle 0x1800288f9
mov eax, dword [rsp + 0x5e0]
and eax, 0x204d
mov dword [rsp + 0x5e0], eax
mov eax, dword [rsp + 0x5c8]
sub eax, 2
mov dword [rsp + 0x5c8], eax
jmp 0x1800288bc
mov eax, dword [rsp + 0x5e0]
cmp eax, 0x807
jle 0x18002891a
mov eax, dword [rsp + 0x5e0]
and eax, 0x80
mov dword [rsp + 0x5e0], eax
mov eax, dword [rsp + 0x5c8]
dec eax
mov dword [rsp + 0x5c8], eax
jmp 0x1800288bc
mov dword [rsp + 0x5ec], 9
mov dword [rsp + 0x5d0], 5
mov eax, dword [rsp + 0x5d0]
test eax, eax
jle 0x1800289b2
mov eax, dword [rsp + 0x5d0]
cmp eax, 1
jle 0x18002897f
mov eax, dword [rsp + 0x5ec]
and eax, 0x10a2
mov dword [rsp + 0x5ec], eax
mov eax, dword [rsp + 0x5d0]
sub eax, 2
mov dword [rsp + 0x5d0], eax
jmp 0x180028942
mov eax, dword [rsp + 0x5ec]
cmp eax, 0x807
jle 0x1800289a0
mov eax, dword [rsp + 0x5ec]
and eax, 0x80
mov dword [rsp + 0x5ec], eax
mov eax, dword [rsp + 0x5d0]
dec eax
mov dword [rsp + 0x5d0], eax
jmp 0x180028942
mov dword [rsp + 0x5dc], 1
mov dword [rsp + 0x5d4], 0x15
cmp dword [rsp + 0x5d4], 0
jle 0x180028a28
mov eax, dword [rsp + 0x5d4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028a0b
mov dword [rsp + 0x5dc], 4
mov eax, dword [rsp + 0x5d4]
sub eax, 2
mov dword [rsp + 0x5d4], eax
jmp 0x1800289c8
mov dword [rsp + 0x5dc], 0
mov eax, dword [rsp + 0x5d4]
dec eax
mov dword [rsp + 0x5d4], eax
jmp 0x1800289c8
mov rcx, qword [rsp + 0x4c8]
call fcn.180047740
mov r8d, 0x104
lea rdx, [rsp + 0x270]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rsp + 0x60c], 2
mov dword [rsp + 0x610], 0xa
mov eax, dword [rsp + 0x610]
test eax, eax
jle 0x180028ad2
mov eax, dword [rsp + 0x610]
cmp eax, 1
jle 0x180028a9f
mov eax, dword [rsp + 0x60c]
and eax, 0x2106
mov dword [rsp + 0x60c], eax
mov eax, dword [rsp + 0x610]
sub eax, 2
mov dword [rsp + 0x610], eax
jmp 0x180028a62
mov eax, dword [rsp + 0x60c]
cmp eax, 0x80c
jle 0x180028ac0
mov eax, dword [rsp + 0x60c]
and eax, 0x85
mov dword [rsp + 0x60c], eax
mov eax, dword [rsp + 0x610]
dec eax
mov dword [rsp + 0x610], eax
jmp 0x180028a62
mov dword [rsp + 0x608], 8
mov dword [rsp + 0x618], 0x12
cmp dword [rsp + 0x618], 0
jle 0x180028b48
mov eax, dword [rsp + 0x618]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028b2a
mov dword [rsp + 0x608], 4
mov eax, dword [rsp + 0x618]
dec eax
mov dword [rsp + 0x618], eax
jmp 0x180028ae8
mov dword [rsp + 0x608], 0
mov eax, dword [rsp + 0x618]
sub eax, 2
mov dword [rsp + 0x618], eax
jmp 0x180028ae8
mov dword [rsp + 0x624], 7
mov dword [rsp + 0x628], 8
mov eax, dword [rsp + 0x628]
test eax, eax
jle 0x180028bce
mov eax, dword [rsp + 0x628]
cmp eax, 1
jle 0x180028b9b
mov eax, dword [rsp + 0x624]
and eax, 0x2542
mov dword [rsp + 0x624], eax
mov eax, dword [rsp + 0x628]
sub eax, 2
mov dword [rsp + 0x628], eax
jmp 0x180028b5e
mov eax, dword [rsp + 0x624]
cmp eax, 0x80a
jle 0x180028bbc
mov eax, dword [rsp + 0x624]
and eax, 0x83
mov dword [rsp + 0x624], eax
mov eax, dword [rsp + 0x628]
dec eax
mov dword [rsp + 0x628], eax
jmp 0x180028b5e
mov dword [rsp + 0x620], 0
mov dword [rsp + 0x604], 0xd
cmp dword [rsp + 0x604], 0
jle 0x180028c44
mov eax, dword [rsp + 0x604]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028c26
mov dword [rsp + 0x620], 4
mov eax, dword [rsp + 0x604]
dec eax
mov dword [rsp + 0x604], eax
jmp 0x180028be4
mov dword [rsp + 0x620], 0
mov eax, dword [rsp + 0x604]
sub eax, 2
mov dword [rsp + 0x604], eax
jmp 0x180028be4
mov dword [rsp + 0x614], 3
mov dword [rsp + 0x62c], 0xf
cmp dword [rsp + 0x62c], 0
jle 0x180028cbb
mov eax, dword [rsp + 0x62c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028c9d
mov dword [rsp + 0x614], 0
mov eax, dword [rsp + 0x62c]
sub eax, 2
mov dword [rsp + 0x62c], eax
jmp 0x180028c5a
mov dword [rsp + 0x614], 4
mov eax, dword [rsp + 0x62c]
sub eax, 2
mov dword [rsp + 0x62c], eax
jmp 0x180028c5a
mov dword [rsp + 0x61c], 4
mov dword [rsp + 0x600], 0x15
cmp dword [rsp + 0x600], 0
jle 0x180028d32
mov eax, dword [rsp + 0x600]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180028d14
mov dword [rsp + 0x61c], 0
mov eax, dword [rsp + 0x600]
sub eax, 2
mov dword [rsp + 0x600], eax
jmp 0x180028cd1
mov dword [rsp + 0x61c], 0
mov eax, dword [rsp + 0x600]
sub eax, 2
mov dword [rsp + 0x600], eax
jmp 0x180028cd1
lea rax, [rsp + 0x490]
lea rcx, [0x18005c178]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x1f
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x1a64
lea r9, [rsp + 0x4b8]
lea r8, [rsp + 0x4d8]
mov edx, 0x1e
lea rcx, [rsp + 0x490]
call fcn.18003bca0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x260]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x270]
lea r8, [rsp + 0x4d8]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.180028e70
lea rcx, [rsp + 0x50]
call fcn.18001ce70
mov r8, qword [rsp + 0x668]
mov rdx, qword [rsp + 0x660]
lea rcx, [rsp + 0x50]
call fcn.180026ed0
xor eax, eax
test eax, eax
jne 0x180027910
mov rcx, qword [rsp + 0x630]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x648
pop rdi
pop rsi
ret