Function at 0x140074ff4
Capabilities:
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x270
mov r14b, byte [rcx + 0xd]
mov dil, byte [rsp + 0x2d0]
xor ebx, ebx
cmp r9d, ebx
mov rsi, r8
mov rbp, rdx
setl al
and r14b, 0x11
mov r13, rcx
mov byte [rsp + 0x40], r14b
mov byte [rsp + 0x54], al
cmp al, bl
jne 0x14007504c
test dil, dil
jns 0x140075053
mov r14b, bl
mov byte [rsp + 0x40], bl
mov r12, qword [rsp + 0x2d8]
and dil, 1
mov r15b, bl
mov byte [rsp + 0x2d0], dil
mov dword [rsp + 0x50], r15d
mov byte [rsp + 0x55], bl
cmp r12, rbx
je 0x140075080
mov al, byte [r12]
mov byte [rsp + 0x55], al
mov eax, 0x50
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x58], rbx
mov rdx, rax
mov qword [rsp + 0xb0], rax
call fcn.14005fa8c
lea rax, [rsp + 0xc0]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x98]
lea r8, [rsp + 0x2c8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xa8]
lea rcx, [rsp + 0xc8]
mov rdx, rsi
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xc0], rbx
call fcn.140068ee8
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x48]
xor r9d, r9d
mov r8d, 1
cmp rcx, qword [rsp + 0xa8]
jae 0x140075da0
cmp word [rbp], r9w
je 0x140075da0
lea rcx, [rsp + 0xc8]
call fcn.14006902c
mov r11d, 0x25
xor r9d, r9d
cmp word [rbp], r11w
je 0x140075189
mov rcx, qword [rsp + 0x48]
mov edx, 0x3dd
lea r8d, [r11 - 0x24]
movzx eax, word [rbp]
cmp ax, r9w
je 0x140075119
cmp r11w, ax
je 0x140075119
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rbp, 2
add rcx, 2
sub edx, r8d
mov qword [rsp + 0x48], rcx
jns 0x14007515d
jmp 0x140075119
mov rsi, rbp
mov qword [rsp + 0xa0], rbp
cmp dil, r9b
je 0x14007543e
cmp word [rbp + 2], r11w
jne 0x1400751c4
mov rax, qword [rsp + 0x48]
mov word [rax], r11w
mov rcx, qword [rsp + 0x48]
add rcx, 2
add rbp, 4
mov qword [rsp + 0x48], rcx
jmp 0x140075113
mov eax, 0x23
cmp word [rbp + 2], ax
jne 0x14007521e
mov rdx, qword [r13 + 0x68]
add rbp, 4
cmp rdx, r9
je 0x140075d45
movsxd rax, dword [r13 + 0x60]
mov rdx, qword [rdx + rax*8 + 0x10]
movzx eax, word [rdx]
cmp ax, r9w
je 0x140075d45
mov rcx, qword [rsp + 0x48]
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rdx, 2
add rcx, 2
mov qword [rsp + 0x48], rcx
mov ax, word [rdx]
cmp ax, r9w
jne 0x1400751fb
jmp 0x140075113
mov eax, 0x2a
cmp word [rbp + 2], ax
jne 0x1400752a2
mov rcx, qword [r13 + 0x68]
add rbp, 4
cmp rcx, r9
je 0x140075d45
movsxd rax, dword [r13 + 0x60]
mov rcx, qword [rcx + rax*8]
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
lea rcx, [rsp + 0xc8]
movsxd rdi, eax
lea edx, [rdi + 2]
call fcn.140068f80
movsxd r11, dword [r13 + 0x60]
mov rax, qword [r13 + 0x68]
mov rdx, qword [rax + r11*8]
mov r8d, 1
sub rdi, r8
mov qword [rsp + 0x58], rdi
js 0x140075d2b
mov rcx, qword [rsp + 0x48]
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub rdi, r8
mov qword [rsp + 0x48], rcx
jns 0x140075280
jmp 0x140075327
mov eax, pe_nt_image_headers64
cmp word [rbp + 2], ax
jne 0x140075331
mov rcx, qword [r13 + 0x68]
add rbp, 4
cmp rcx, r9
je 0x140075d45
movsxd rax, dword [r13 + 0x60]
mov rcx, qword [rcx + rax*8 + 8]
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
lea rcx, [rsp + 0xc8]
movsxd rdi, eax
lea edx, [rdi + 2]
call fcn.140068f80
movsxd r11, dword [r13 + 0x60]
mov rax, qword [r13 + 0x68]
mov rdx, qword [rax + r11*8 + 8]
mov r8d, 1
sub rdi, r8
mov qword [rsp + 0x58], rdi
js 0x140075d2b
mov rcx, qword [rsp + 0x48]
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub rdi, r8
mov qword [rsp + 0x48], rcx
jns 0x14007530a
mov qword [rsp + 0x58], rdi
jmp 0x140075d0b
movzx eax, word [rbp + 2]
sub ax, 0x30
cmp ax, 9
jbe 0x140075360
mov eax, 0x7e
cmp word [rbp + 2], ax
jb 0x14007543e
movzx eax, word [rbp + 4]
sub ax, 0x30
cmp ax, 9
ja 0x14007543e
mov eax, 0x7e
mov r12d, r9d
cmp word [rbp + 2], ax
jb 0x140075375
mov r12d, r11d
add rbp, 2
mov rsi, r9
add rbp, 2
movzx eax, word [rbp]
sub ax, 0x30
cmp ax, 9
ja 0x140075399
movzx eax, word [rbp]
lea rcx, [rsi + rsi*4]
lea rsi, [rax + rcx*2 - 0x30]
jmp 0x140075378
movsxd rax, dword [r13 + 0x60]
cmp rsi, rax
jae 0x140075d45
mov rax, qword [r13 + 0x68]
cmp rax, r9
je 0x140075d45
mov rsi, qword [rax + rsi*8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
xor ecx, ecx
movsxd rdi, eax
cmp r12d, ecx
je 0x1400753e6
cmp word [rsi], 0x22
jne 0x1400753e6
cmp word [rsi + rdi*2 - 2], 0x22
lea r8d, [rcx + 1]
jne 0x1400753df
sub rdi, r8
sub rdi, r8
add rsi, 2
lea edx, [rdi + 2]
lea rcx, [rsp + 0xc8]
call fcn.140068f80
mov r8d, 1
sub rdi, r8
mov qword [rsp + 0x58], rdi
js 0x140075d2b
mov rcx, qword [rsp + 0x48]
movzx eax, word [rsi]
add rsi, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub rdi, r8
mov qword [rsp + 0x48], rcx
jns 0x14007540f
mov r12, qword [rsp + 0x2d8]
mov qword [rsp + 0x58], rdi
jmp 0x140075d0b
add rbp, 2
mov eax, 0x26
mov r15, rbp
mov rdi, rbp
cmp ax, word [rbp]
jne 0x14007545c
add rdi, 2
cmp ax, word [rdi]
je 0x140075453
lea rdx, [0x140117af0]
mov r8d, 7
mov rcx, rdi
call qword [sym.imp.SHLWAPI.DLL_StrCmpNIW]
xor ecx, ecx
cmp eax, ecx
jne 0x14007548f
call fcn.14005a4e4
movabs rcx, 0x7fffffffffffffff
and rax, rcx
xor r9d, r9d
jmp 0x1400754b8
lea rdx, [0x140117ae0]
mov r8d, 7
mov rcx, rdi
call qword [sym.imp.SHLWAPI.DLL_StrCmpNIW]
xor r9d, r9d
cmp eax, r9d
jne 0x140075557
lea rax, [r13 + 0x75bd036]
lea rcx, [rsp + 0x100]
mov rdx, rax
lea rbp, [rdi + 0xe]
mov word [rsp + 0x100], r9w
call fcn.1400d9370
lea rcx, [rsp + 0x100]
xor esi, esi
mov word [rsp + 0x1a2], si
call qword [sym.imp.KERNEL32.DLL_lstrlenW]
lea r8d, [rsi + 1]
movsxd rdi, eax
lea rcx, [rsp + 0xc8]
cmp rdi, r8
cmovl rdi, rsi
lea edx, [rdi + 2]
call fcn.140068f80
lea r8d, [rsi + 1]
lea r11, [rsp + 0x100]
sub rdi, r8
mov qword [rsp + 0x58], rdi
js 0x140075d26
mov rcx, qword [rsp + 0x48]
movzx eax, word [r11]
add r11, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub rdi, r8
mov qword [rsp + 0x48], rcx
jns 0x14007552a
mov qword [rsp + 0x58], rdi
mov r15d, dword [rsp + 0x50]
jmp 0x140075d0b
mov r11d, 0x25
movzx eax, word [rbp]
cmp ax, r9w
je 0x140075579
cmp ax, r11w
je 0x140075579
cmp ax, 0x3d
je 0x140075579
add rbp, 2
jmp 0x14007555d
mov rdi, rbp
mov rdx, rbp
movsx eax, r14b
sub rdi, rsi
mov qword [rsp + 0x70], rdx
mov byte [rsp + 0x41], r9b
sar rdi, 1
mov dword [rsp + 0x80], eax
mov qword [rsp + 0x90], rdi
cmp word [rbp], r11w
jne 0x140075ab2
cmp byte [rsp + 0x54], r9b
jne 0x1400755fd
mov eax, 0x26
cmp word [r15], ax
je 0x1400755cd
cmp r14b, r9b
je 0x1400755fd
lea ecx, [rax + 0x38]
cmp cx, word [r15]
je 0x1400755fd
add rbp, 2
mov r10, r15
mov qword [rsp + 0xb8], r15
mov r14b, r9b
cmp word [r15], ax
jne 0x1400757c6
add r15, 2
mov dword [rsp + 0x80], 1
jmp 0x1400757c6
mov eax, 0x5e
add rbp, 2
cmp ax, word [r15]
jne 0x140075615
add r15, 2
mov byte [rsp + 0x41], 8
mov qword [rsp + 0xb8], r15
movabs rcx, 0x7fffffffffffffff
mov r13d, 0xcb
mov edi, r9d
mov word [rbx], r9w
mov rax, r15
mov r14, r9
mov r12, rcx
mov qword [rsp + 0x78], rcx
mov rsi, r9
mov qword [rsp + 0x68], r9
cmp r15, rdx
jae 0x1400756e5
cmp word [rax], r9w
je 0x1400756e5
mov ecx, 0x3a
cmp cx, word [rax]
jne 0x140075672
mov ecx, 0x7e
cmp cx, word [rax + 2]
je 0x14007567b
add rax, 2
cmp rax, rdx
jmp 0x14007564d
mov r14, rax
mov word [rax], r9w
add rax, 4
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], rax
call fcn.140064048
mov r11, qword [rsp + 0x60]
mov eax, 0x2c
cmp ax, word [r11]
je 0x1400756c0
mov eax, 0x3b
cmp ax, word [r11]
je 0x1400756c0
mov eax, 0x3a
cmp ax, word [r11]
jne 0x1400756dd
add r11, 2
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], r11
call fcn.140064048
mov r12, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
xor r9d, r9d
cmp byte [rsp + 0x55], r9b
jne 0x140075777
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov r13, qword [rsp + 0x70]
mov r8d, dword [rsp + 0xb0]
xor ecx, ecx
mov rdx, rbx
mov word [r13], cx
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableW]
mov edi, eax
xor eax, eax
cmp edi, eax
jle 0x140075761
cmp word [rbx], ax
jne 0x140075761
lea ebx, [rdi + 0x64]
lea rcx, [rsp + 0x88]
movsxd rdx, ebx
mov qword [rsp + 0xb0], rbx
call fcn.14005fb18
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov r8d, ebx
mov rbx, qword [rsp + 0x88]
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableW]
mov edi, eax
mov eax, 0x25
mov word [r13], ax
call qword [sym.imp.KERNEL32.DLL_GetLastError]
xor r9d, r9d
mov r13d, eax
cmp r14, r9
jne 0x140075c57
cmp edi, r9d
jg 0x140075bf9
cmp r13d, 0xcb
jne 0x140075bf9
mov r8d, 1
cmp byte [rsp + 0x41], r9b
jne 0x140075bcc
mov r14b, r8b
cmp byte [rsp + 0x54], r9b
jne 0x140075bcc
mov rdx, qword [rsp + 0x70]
mov r10, qword [rsp + 0xb8]
lea r11d, [r8 + 0x24]
movabs rax, 0x7fffffffffffffff
mov rsi, r10
mov r12, r9
mov r13, r9
mov qword [rsp + 0x68], r9
mov rdi, rax
mov qword [rsp + 0x78], rax
cmp r10, rdx
jae 0x140075963
mov r8d, 0x3f
movzx eax, word [rsi]
cmp ax, r9w
je 0x140075963
mov ecx, 0x3a
cmp cx, ax
jne 0x14007581c
mov ecx, 0x7e
cmp cx, word [rsi + 2]
je 0x140075835
mov ecx, 0x3a
add rsi, 2
cmp r8w, ax
je 0x140075900
cmp rsi, rdx
jae 0x140075963
jmp 0x1400757f5
mov r13, qword [rsp + 0x2b0]
mov word [rsi], r9w
mov qword [rsp + 0x20], r9
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, r10
mov rcx, r13
call fcn.140017c8c
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
mov r12, rax
mov eax, 0x3a
mov word [rsi], ax
add rsi, 4
mov qword [rsp + 0x60], rsi
call fcn.140064048
mov r11, qword [rsp + 0x60]
mov eax, 0x2c
cmp ax, word [r11]
je 0x1400758a1
mov eax, 0x3b
cmp ax, word [r11]
je 0x1400758a1
mov eax, 0x3a
cmp ax, word [r11]
jne 0x1400758c3
add r11, 2
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], r11
call fcn.140064048
mov r11, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x78]
movzx eax, word [r11]
xor r9d, r9d
cmp ax, r9w
je 0x1400758ed
lea ecx, [r9 + 0x25]
cmp cx, ax
je 0x1400758e9
add r11, 2
mov ax, word [r11]
cmp ax, r9w
jne 0x1400758d4
jmp 0x1400758ed
lea rbp, [r11 + 2]
cmp r12, r9
jne 0x1400759d7
mov rdx, qword [rsp + 0x70]
jmp 0x1400759b6
lea r12, [rsi - 2]
mov r13, r12
mov word [r12], r9w
jmp 0x140075917
add rsi, 2
cmp cx, ax
je 0x140075922
movzx eax, word [rsi]
cmp ax, r9w
jne 0x14007590e
jmp 0x140075925
mov r13, rsi
cmp word [rdx], r9w
je 0x140075963
cmp r11w, word [rdx + 2]
jne 0x140075963
lea rax, [rdx + 4]
mov ecx, 0x64
cmp cx, word [rax]
jne 0x140075963
jmp 0x14007594c
cmp r11w, cx
je 0x140075957
add rax, 2
movzx ecx, word [rax]
cmp cx, r9w
jne 0x140075942
jmp 0x140075963
mov rdx, rax
mov qword [rsp + 0x70], rax
lea rbp, [rax + 2]
mov rcx, qword [rsp + 0x2b0]
mov word [rdx], r9w
mov qword [rsp + 0x20], r9
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, r10
call fcn.140017c8c
mov rdx, qword [rsp + 0x70]
xor r9d, r9d
mov ecx, 0x25
mov word [rdx], cx
cmp r12, r9
je 0x1400759a5
lea ecx, [r9 + 0x3f]
mov word [r12], cx
add r12, 2
cmp rax, r9
jne 0x140075b21
mov r13, qword [rsp + 0x2b0]
cmp dword [rsp + 0x80], r9d
jne 0x140075d38
cmp r14b, r9b
jne 0x140075a82
mov byte [rsp + 0x41], 1
jmp 0x14007561d
mov rsi, qword [r12 + 8]
mov rax, qword [r12 + 0x18]
movabs rcx, 0x3fffffffffffffff
and rax, rcx
mov rcx, qword [rsp + 0x68]
mov rdx, rsi
cmp rcx, rax
lea r8, [rsi + rax*2]
cmovg rcx, rax
cmp rdi, rax
cmovg rdi, rax
cmp rcx, r9
jl 0x140075a43
cmp rdi, r9
jl 0x140075a43
cmp rcx, r9
jle 0x140075b4e
lea rax, [rsi + rcx*2]
cmp rsi, rax
jae 0x140075a79
cmp word [rdx], r9w
je 0x140075a35
add rdx, 2
cmp rdx, rax
jb 0x140075a24
jmp 0x140075a79
mov rcx, rdx
mov rdi, r9
sub rcx, rsi
sar rcx, 1
jmp 0x140075a79
cmp word [rsi], r9w
je 0x140075a58
cmp rdx, r8
jae 0x140075a58
add rdx, 2
cmp word [rdx], r9w
jne 0x140075a49
sub rdx, rsi
sar rdx, 1
cmp rcx, r9
jge 0x140075a6a
add rcx, rdx
cmovs rcx, r9
cmp rdi, r9
jge 0x140075a79
sub rdx, rcx
add rdi, rdx
cmovs rdi, r9
lea rsi, [rsi + rcx*2]
jmp 0x140075b4e
mov r14b, byte [rsp + 0x40]
mov r8d, 1
cmp r14b, r8b
je 0x140075d6a
sub rbp, 2
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x2d8]
lea edx, [rdi + 3]
lea rcx, [rsp + 0xc8]
call fcn.140068f80
mov r11d, 0x25
cmp r11w, word [rbp]
jne 0x140075d1b
movzx eax, word [rbp + 2]
cmp r11w, ax
je 0x140075b0f
lea edx, [r11 + 5]
cmp dx, ax
je 0x140075b0f
lea edx, [r11 + 0x1b]
cmp dx, ax
je 0x140075b0f
lea edx, [r11 - 2]
cmp dx, ax
je 0x140075b0f
lea edx, [r11 + 0x59]
cmp dx, ax
je 0x140075b0f
sub ax, 0x30
cmp ax, 9
ja 0x140075d1b
mov r8d, 1
add rbp, 2
add edi, r8d
jmp 0x140075d21
lea r9, [rsp + 0x1b0]
lea rdx, [rsp + 0x58]
mov r8, r12
mov rcx, rax
mov qword [rsp + 0x20], r13
call fcn.140073fa8
mov rdi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x2b0]
mov rsi, rax
lea edx, [rdi + 2]
lea rcx, [rsp + 0xc8]
call fcn.140068f80
mov r8d, 1
sub rdi, r8
mov qword [rsp + 0x58], rdi
js 0x140075d26
mov rcx, qword [rsp + 0x48]
xor r9d, r9d
movzx eax, word [rsi]
add rsi, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
mov qword [rsp + 0x48], rcx
cmp ax, r9w
je 0x140075ba4
sub rdi, r8
mov qword [rsp + 0x58], rdi
jns 0x140075b7a
jmp 0x140075bad
sub rcx, 2
mov qword [rsp + 0x48], rcx
mov r12, qword [rsp + 0x2d8]
mov r14b, byte [rsp + 0x40]
mov dil, byte [rsp + 0x2d0]
mov r15d, dword [rsp + 0x50]
jmp 0x140075119
mov r14b, byte [rsp + 0x40]
cmp r14b, r8b
jne 0x140075bdf
cmp r9b, r9b
je 0x140075d6a
mov r13, qword [rsp + 0x2b0]
sub rbp, 2
cmp r9b, r9b
je 0x140075a9a
jmp 0x140075a96
mov r12, qword [rsp + 0x2d8]
cmp r12, r9
je 0x140075c37
mov rax, qword [rsp + 0x2b0]
cmp byte [rax + 0xda], r9b
jne 0x140075c37
mov edx, 0x25
mov rcx, rbx
call qword [sym.imp.SHLWAPI.DLL_StrChrW]
xor r9d, r9d
lea r8d, [r9 + 1]
cmp rax, r9
je 0x140075c3d
mov byte [r12], r8b
jmp 0x140075c3d
mov r8d, 1
mov r15d, dword [rsp + 0x50]
cmp edi, r9d
mov rsi, rbx
movzx r15d, r15b
cmovg r15d, r8d
mov dword [rsp + 0x50], r15d
jmp 0x140075cc1
movsxd rdx, edi
mov eax, 0x3a
cmp rsi, rdx
mov word [r14], ax
cmovg rsi, rdx
cmp r12, rdx
cmovg r12, rdx
cmp rsi, r9
jge 0x140075c87
mov eax, edi
neg eax
movsxd rcx, eax
cmp rsi, rcx
cmovl rsi, rcx
add rsi, rdx
mov rax, rdx
sub rax, rsi
cmp r12, r9
jge 0x140075ca0
lea edi, [r12 + rax]
cmp edi, r9d
jge 0x140075cb0
mov edi, r9d
jmp 0x140075cb0
cmp rdx, rax
cmovg edi, eax
movsxd rax, edi
cmp rax, r12
cmovg edi, r12d
mov r12, qword [rsp + 0x2d8]
mov r15d, dword [rsp + 0x50]
lea rsi, [rbx + rsi*2]
lea edx, [rdi + 2]
lea rcx, [rsp + 0xc8]
call fcn.140068f80
mov r8d, 1
sub edi, r8d
js 0x140075d2b
mov rcx, qword [rsp + 0x48]
movzx eax, word [rsi]
add rsi, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub edi, r8d
mov qword [rsp + 0x48], rcx
jns 0x140075ce1
mov r13, qword [rsp + 0x2b0]
mov r14b, byte [rsp + 0x40]
mov dil, byte [rsp + 0x2d0]
xor r9d, r9d
jmp 0x140075119
mov r8d, 1
sub edi, r8d
jns 0x140075d79
mov r15d, dword [rsp + 0x50]
mov dil, byte [rsp + 0x2d0]
xor r9d, r9d
jmp 0x140075d4b
mov dil, byte [rsp + 0x2d0]
mov r15d, dword [rsp + 0x50]
mov r8d, 1
mov rcx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x2b0]
mov r12, qword [rsp + 0x2d8]
mov r14b, byte [rsp + 0x40]
jmp 0x140075119
mov dil, byte [rsp + 0x2d0]
mov r15d, dword [rsp + 0x50]
jmp 0x140075d4b
mov rcx, qword [rsp + 0x48]
movzx eax, word [rsi]
add rsi, 2
mov word [rcx], ax
mov rcx, qword [rsp + 0x48]
add rcx, 2
sub edi, r8d
mov qword [rsp + 0x48], rcx
jns 0x140075d7e
jmp 0x14007554d
mov word [rcx], r9w
cmp r15b, r9b
jne 0x140075dbb
cmp r12, r9
je 0x140075dbb
cmp byte [r13 + 0xda], r9b
jne 0x140075dbb
mov byte [r12], r8b
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x2c0]
sub rdx, qword [rsp + 0x98]
sar rdx, 1
add rdx, 2
call fcn.14005fb18
mov rbx, qword [rsp + 0x48]
lea rcx, [rsp + 0x88]
sub rbx, qword [rsp + 0x98]
sar rbx, 1
call fcn.140057768
mov rax, rbx
mov rbx, qword [rsp + 0x2b8]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret