Function at 0x140027b10
Capabilities:
Query environment variable

Disassembly:
mov dword [rsp + 8], ecx
sub rsp, 0x1d8
mov byte [rsp + 0x27], 0x8f
mov dword [rsp + 0x38], 0x236
mov byte [rsp + 0x22], 0xf5
mov dword [rsp + 0x30], 0x217
mov byte [rsp + 0x25], 0x4b
mov byte [rsp + 0x29], 0x1b
mov dword [rsp + 0x2c], 0xb5
mov byte [rsp + 0x28], 0xd
mov byte [rsp + 0x20], 0x5a
mov byte [rsp + 0x21], 0x5f
mov byte [rsp + 0x24], 0x71
mov byte [rsp + 0x23], 0x18
mov dword [rsp + 0x34], 0x15d
mov byte [rsp + 0x26], 0x2d
mov dword [rsp + 0x44], 0x11a
mov dword [rsp + 0x44], 0x28
jmp 0x140027b89
mov eax, dword [rsp + 0x44]
dec eax
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 6
jle 0x140027bc1
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x28]
sub eax, ecx
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [0x140074a68]
shl eax, cl
mov ecx, dword [0x140074c30]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
jmp 0x140027b7f
movzx eax, byte [rsp + 0x23]
movsx ecx, byte [rsp + 0x21]
sar eax, cl
movzx ecx, byte [rsp + 0x25]
shl eax, cl
movzx ecx, byte [0x140074c89]
and eax, ecx
mov ecx, dword [0x140074a6c]
or ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
cmp dword [0x140074c3c], 0
jne 0x140027c10
cmp dword [rsp + 0x30], 0
jne 0x140027c10
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x140027c10
mov dword [rsp + 0x7c], 0
jmp 0x140027c18
mov dword [rsp + 0x7c], 1
mov eax, dword [rsp + 0x7c]
mov ecx, dword [0x140074c30]
and ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
mov dword [rsp + 0x48], 0xd5
mov dword [rsp + 0x48], 4
jmp 0x140027c48
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x1df
jge 0x140027c81
movzx eax, byte [0x140074c6d]
movsx ecx, byte [rsp + 0x24]
mov dword [rsp + 0x17c], ecx
mov edx, dword [rsp + 0x34]
movzx ecx, dl
mov edx, dword [rsp + 0x17c]
shl edx, cl
mov ecx, edx
and eax, ecx
mov dword [0x140074c60], eax
jmp 0x140027c3e
movsx eax, byte [0x140074c5d]
sub eax, dword [rsp + 0x2c]
movsx ecx, byte [rsp + 0x22]
shr eax, cl
mov dword [0x140074c80], eax
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x29]
and eax, ecx
mov ecx, dword [0x140074c3c]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140027cd2
movzx eax, byte [rsp + 0x29]
movsx ecx, byte [0x140074c6e]
or eax, ecx
test eax, eax
je 0x140027cd2
mov dword [rsp + 0x80], 1
jmp 0x140027cdd
mov dword [rsp + 0x80], 0
mov eax, dword [rsp + 0x80]
mov ecx, dword [0x140074a64]
and ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
movzx eax, byte [0x140074c5c]
test eax, eax
je 0x140027d40
movzx eax, byte [rsp + 0x25]
test eax, eax
je 0x140027d40
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [rsp + 0x25]
mov dword [rsp + 0x180], ecx
mov edx, dword [0x140074a64]
movzx ecx, dl
mov edx, dword [rsp + 0x180]
sar edx, cl
mov ecx, edx
and eax, ecx
test eax, eax
je 0x140027d40
mov dword [rsp + 0x84], 1
jmp 0x140027d4b
mov dword [rsp + 0x84], 0
movsx eax, byte [0x140074c90]
and eax, dword [rsp + 0x84]
mov byte [0x140074c90], al
movsx eax, byte [rsp + 0x27]
mov ecx, dword [0x140074c2c]
lea eax, [rax + rcx*2]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x184]
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0
je 0x140027daf
cmp dword [rsp + 0x4c], 1
je 0x140027dcf
cmp dword [rsp + 0x4c], 2
je 0x140027def
cmp dword [rsp + 0x4c], 3
je 0x140027e80
jmp 0x140027eb0
movsx eax, byte [0x140074c6e]
or eax, dword [rsp + 0x34]
mov ecx, dword [0x140074c30]
and ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
jmp 0x140027ef7
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 3
div ecx
mov ecx, dword [0x140074a68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140027ef7
movsx eax, byte [0x140074c5e]
movzx ecx, byte [rsp + 0x23]
shl eax, cl
mov ecx, dword [rsp + 0x34]
shl eax, cl
movsx ecx, byte [rsp + 0x24]
sar eax, cl
mov ecx, dword [0x140074c60]
sar eax, cl
movzx ecx, byte [0x140074c6d]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c6d], al
movzx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x140027e5c
cmp dword [rsp + 0x34], 0
jne 0x140027e5c
movsx eax, byte [rsp + 0x27]
test eax, eax
je 0x140027e4f
cmp dword [0x140074c4c], 0
jne 0x140027e5c
mov dword [rsp + 0x88], 0
jmp 0x140027e67
mov dword [rsp + 0x88], 1
mov eax, dword [rsp + 0x88]
mov ecx, dword [0x140074c4c]
or ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
jmp 0x140027ef7
movzx eax, byte [0x140074b8f]
mov dword [rsp + 0x188], eax
movzx ecx, byte [rsp + 0x23]
mov eax, ecx
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [rsp + 0x188]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
jmp 0x140027ef7
movzx eax, byte [rsp + 0x23]
movsx ecx, byte [rsp + 0x22]
sub eax, ecx
movsx ecx, byte [rsp + 0x27]
and eax, ecx
cmp dword [0x140074c60], eax
jne 0x140027ed8
mov dword [rsp + 0x8c], 1
jmp 0x140027ee3
mov dword [rsp + 0x8c], 0
movsx eax, byte [0x140074c6c]
and eax, dword [rsp + 0x8c]
mov byte [0x140074c6c], al
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x23]
mov dword [rsp + 0x18c], ecx
movzx edx, byte [rsp + 0x28]
movzx ecx, dl
mov edx, dword [rsp + 0x18c]
sar edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movzx eax, byte [0x140074c5f]
cmp eax, dword [rsp + 0x38]
je 0x140027f50
movsx eax, byte [rsp + 0x24]
test eax, eax
jne 0x140027f50
mov dword [rsp + 0x90], 0
jmp 0x140027f5b
mov dword [rsp + 0x90], 1
mov eax, dword [rsp + 0x90]
mov ecx, dword [0x140074c3c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
movsx eax, byte [rsp + 0x27]
movsx ecx, byte [0x140074a62]
imul ecx, ecx, 7
add eax, ecx
xor eax, eax
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
je 0x140027fc4
cmp dword [rsp + 0x50], 1
je 0x14002805d
cmp dword [rsp + 0x50], 2
je 0x1400280f8
cmp dword [rsp + 0x50], 3
je 0x140028166
jmp 0x14002818e
movzx eax, byte [rsp + 0x26]
movsx ecx, byte [rsp + 0x24]
cmp eax, ecx
je 0x140027fe8
movsx eax, byte [rsp + 0x21]
test eax, eax
jne 0x140027fe8
mov dword [rsp + 0x94], 0
jmp 0x140027ff3
mov dword [rsp + 0x94], 1
mov eax, dword [rsp + 0x94]
movzx ecx, al
mov eax, dword [0x140074c8c]
shr eax, cl
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movzx eax, byte [0x140074b8f]
test eax, eax
je 0x140028036
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x140028036
mov dword [rsp + 0x98], 1
jmp 0x140028041
mov dword [rsp + 0x98], 0
mov eax, dword [rsp + 0x98]
mov ecx, dword [0x140074c64]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
jmp 0x140028230
movsx eax, byte [rsp + 0x21]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [0x140074c84]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
cmp dword [0x140074a68], 0
je 0x1400280d1
movzx eax, byte [rsp + 0x29]
movsx ecx, byte [rsp + 0x24]
sub ecx, dword [rsp + 0x30]
cmp eax, ecx
jne 0x1400280a3
mov dword [rsp + 0x9c], 1
jmp 0x1400280ae
mov dword [rsp + 0x9c], 0
movzx eax, byte [0x140074c88]
mov ecx, dword [rsp + 0x9c]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x1400280d1
mov dword [rsp + 0xa0], 1
jmp 0x1400280dc
mov dword [rsp + 0xa0], 0
mov eax, dword [rsp + 0xa0]
mov ecx, dword [0x140074c50]
add ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
jmp 0x140028230
movzx eax, byte [0x140074b8e]
movzx ecx, byte [rsp + 0x23]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov byte [rsp + 0x20], al
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shr eax, cl
cmp eax, dword [rsp + 0x2c]
jne 0x140028135
mov dword [rsp + 0xa4], 1
jmp 0x140028140
mov dword [rsp + 0xa4], 0
mov eax, dword [rsp + 0xa4]
mov ecx, dword [0x140074c80]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c80]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
jmp 0x140028230
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c50]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x21]
add ecx, dword [0x140074c8c]
add ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
jmp 0x140028230
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x25]
and eax, ecx
mov ecx, dword [0x140074c30]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x1400281c6
movzx eax, byte [rsp + 0x26]
mov ecx, dword [0x140074c28]
shl eax, cl
test eax, eax
jne 0x1400281c6
mov dword [rsp + 0xa8], 0
jmp 0x1400281d1
mov dword [rsp + 0xa8], 1
mov eax, dword [rsp + 0xa8]
mov ecx, dword [0x140074c64]
or ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x29]
shl eax, cl
test eax, eax
je 0x14002820e
movsx eax, byte [rsp + 0x24]
test eax, eax
je 0x14002820e
mov dword [rsp + 0xac], 1
jmp 0x140028219
mov dword [rsp + 0xac], 0
mov eax, dword [rsp + 0xac]
mov ecx, dword [0x140074c38]
or ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074a64]
lea eax, [rax + rcx*2]
xor edx, edx
mov ecx, 2
div ecx
mov eax, edx
mov word [rsp + 0x78], ax
movsx eax, word [rsp + 0x78]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0
je 0x140028283
cmp dword [rsp + 0x54], 1
je 0x140028318
cmp dword [rsp + 0x54], 2
je 0x14002837a
cmp dword [rsp + 0x54], 3
je 0x1400283ac
jmp 0x1400283ff
movzx eax, byte [0x140074b8e]
test eax, eax
jne 0x1400282b3
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x29]
shl eax, cl
test eax, eax
jne 0x1400282b3
mov dword [rsp + 0xb0], 0
jmp 0x1400282be
mov dword [rsp + 0xb0], 1
mov eax, dword [rsp + 0xb0]
mov ecx, dword [0x140074c34]
or ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
cmp dword [0x140074c30], 0
je 0x1400282fb
movzx eax, byte [rsp + 0x29]
movzx ecx, byte [rsp + 0x23]
xor eax, ecx
test eax, eax
je 0x1400282fb
mov dword [rsp + 0xb4], 1
jmp 0x140028306
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xb4]
mov dword [0x140074c84], eax
jmp 0x1400283ff
movzx eax, byte [0x140074c89]
movsx ecx, byte [rsp + 0x24]
add eax, ecx
mov dword [0x140074c2c], eax
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x140074c48]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x140028353
cmp dword [rsp + 0x38], 0
jne 0x140028353
mov dword [rsp + 0xb8], 0
jmp 0x14002835e
mov dword [rsp + 0xb8], 1
mov eax, dword [rsp + 0xb8]
mov ecx, dword [0x140074a6c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
jmp 0x1400283ff
movzx eax, byte [0x140074c5c]
test eax, eax
je 0x14002839a
movzx eax, byte [rsp + 0x25]
movsx ecx, byte [rsp + 0x21]
cmp eax, ecx
jne 0x14002839a
mov byte [rsp + 0x3c], 1
jmp 0x14002839f
mov byte [rsp + 0x3c], 0
movzx eax, byte [rsp + 0x3c]
mov byte [0x140074c88], al
jmp 0x1400283ff
movzx eax, byte [0x140074b8e]
test eax, eax
je 0x1400283db
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x2c]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x1400283db
movsx eax, byte [rsp + 0x21]
cmp eax, dword [0x140074c64]
jne 0x1400283db
mov byte [rsp + 0x3d], 1
jmp 0x1400283e0
mov byte [rsp + 0x3d], 0
movzx eax, byte [rsp + 0x3d]
mov byte [0x140074c90], al
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c84]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
mov dword [rsp + 0x58], 0x28
mov dword [rsp + 0x58], 0x295
jmp 0x14002841b
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0x38
jle 0x14002866d
cmp dword [0x140074c30], 0
je 0x14002848e
movzx eax, byte [rsp + 0x25]
test eax, eax
je 0x14002848e
movsx eax, byte [rsp + 0x21]
test eax, eax
jne 0x14002844c
movzx eax, byte [0x140074c5f]
test eax, eax
je 0x14002848e
cmp dword [rsp + 0x34], 0
je 0x14002846d
movsx eax, byte [rsp + 0x27]
or eax, dword [rsp + 0x2c]
test eax, eax
je 0x14002846d
mov dword [rsp + 0xbc], 1
jmp 0x140028478
mov dword [rsp + 0xbc], 0
movsx eax, byte [0x140074c90]
mov ecx, dword [rsp + 0xbc]
shl eax, cl
mov dword [0x140074c2c], eax
movzx eax, byte [rsp + 0x28]
movsx ecx, byte [rsp + 0x24]
mov edx, dword [rsp + 0x38]
xor edx, ecx
mov ecx, edx
or eax, ecx
cmp dword [0x140074c38], eax
jne 0x1400284b7
mov dword [rsp + 0xc0], 1
jmp 0x1400284c2
mov dword [rsp + 0xc0], 0
movsx eax, byte [0x140074c6c]
add eax, dword [rsp + 0xc0]
mov byte [0x140074c6c], al
movzx eax, byte [0x140074c88]
test eax, eax
je 0x1400284f5
cmp dword [rsp + 0x38], 0
je 0x1400284f5
mov dword [rsp + 0xc4], 1
jmp 0x140028500
mov dword [rsp + 0xc4], 0
mov eax, dword [rsp + 0xc4]
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
movsx eax, byte [0x140074c5e]
mov ecx, dword [rsp + 0x34]
sar eax, cl
movzx ecx, byte [0x140074b8f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
movsx eax, byte [rsp + 0x24]
movsx ecx, byte [rsp + 0x22]
and eax, ecx
mov ecx, dword [0x140074c38]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x26]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov byte [rsp + 0x28], al
movzx eax, byte [0x140074c6d]
sub eax, dword [rsp + 0x34]
or eax, dword [rsp + 0x38]
test eax, eax
jne 0x1400285a8
movsx eax, byte [rsp + 0x27]
test eax, eax
jne 0x1400285a8
cmp dword [0x140074a68], 0
jne 0x1400285a8
mov dword [rsp + 0xc8], 0
jmp 0x1400285b3
mov dword [rsp + 0xc8], 1
movsx eax, byte [0x140074c5e]
sub eax, dword [rsp + 0xc8]
mov byte [0x140074c5e], al
mov eax, dword [rsp + 0x30]
cmp dword [0x140074c34], eax
jne 0x1400285e0
mov dword [rsp + 0xcc], 1
jmp 0x1400285eb
mov dword [rsp + 0xcc], 0
mov eax, dword [rsp + 0x38]
cmp dword [rsp + 0xcc], eax
jne 0x140028605
mov dword [rsp + 0xd0], 1
jmp 0x140028610
mov dword [rsp + 0xd0], 0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
movsx eax, byte [rsp + 0x22]
movsx ecx, byte [rsp + 0x27]
add ecx, dword [rsp + 0x2c]
cmp eax, ecx
jne 0x140028646
mov dword [rsp + 0xd4], 1
jmp 0x140028651
mov dword [rsp + 0xd4], 0
mov eax, dword [rsp + 0xd4]
mov ecx, dword [0x140074c3c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
jmp 0x140028411
movsx eax, byte [rsp + 0x27]
movsx ecx, byte [0x140074c6e]
cmp eax, ecx
jne 0x14002868a
mov dword [rsp + 0xd8], 1
jmp 0x140028695
mov dword [rsp + 0xd8], 0
movsx eax, byte [rsp + 0x24]
cmp eax, dword [rsp + 0xd8]
jge 0x1400286b0
mov dword [rsp + 0xdc], 1
jmp 0x1400286bb
mov dword [rsp + 0xdc], 0
mov eax, dword [rsp + 0xdc]
cmp dword [0x140074c8c], eax
jne 0x1400287c1
movzx eax, byte [0x140074b8f]
movzx ecx, byte [rsp + 0x20]
and eax, ecx
movsx ecx, byte [0x140074c6f]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movzx eax, byte [0x140074c6d]
movzx ecx, byte [rsp + 0x23]
add eax, ecx
and eax, dword [rsp + 0x2c]
movsx ecx, byte [0x140074a62]
or ecx, eax
mov eax, ecx
mov byte [0x140074a62], al
movsx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x20]
cmp eax, ecx
jne 0x14002872b
mov dword [rsp + 0xe0], 1
jmp 0x140028736
mov dword [rsp + 0xe0], 0
movsx eax, byte [0x140074c5e]
and eax, dword [rsp + 0xe0]
mov ecx, dword [0x140074c34]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 4
div ecx
mov ecx, dword [0x140074c64]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x28]
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
test eax, eax
je 0x140028795
movsx eax, byte [rsp + 0x27]
test eax, eax
je 0x140028795
mov dword [rsp + 0xe4], 1
jmp 0x1400287a0
mov dword [rsp + 0xe4], 0
mov eax, dword [rsp + 0xe4]
mov ecx, dword [0x140074c80]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c70]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
movzx eax, byte [rsp + 0x20]
cmp eax, dword [rsp + 0x30]
jbe 0x140028810
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x1400287f1
movsx eax, byte [rsp + 0x24]
mov ecx, dword [rsp + 0x38]
shl eax, cl
test eax, eax
jne 0x1400287f1
mov dword [rsp + 0xe8], 0
jmp 0x1400287fc
mov dword [rsp + 0xe8], 1
movsx eax, byte [0x140074c90]
or eax, dword [rsp + 0xe8]
mov byte [0x140074b8f], al
movzx eax, byte [rsp + 0x25]
add eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c8c]
or ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c6c]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
movsx eax, byte [rsp + 0x22]
sub eax, dword [rsp + 0x30]
sub eax, dword [rsp + 0x2c]
add eax, dword [0x140074c38]
mov ecx, dword [0x140074c80]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a6c]
and ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
movzx eax, byte [0x140074c88]
and eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
mov dword [rsp + 0x5c], 0x146
mov dword [rsp + 0x5c], 0xa
jmp 0x140028898
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0x10a0
jge 0x1400288c1
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [0x140074c84]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x26], al
jmp 0x14002888e
movzx eax, byte [0x140074c5f]
sub eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
add eax, ecx
movsx ecx, byte [0x140074c5e]
shl eax, cl
mov ecx, dword [0x140074c4c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c34]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140028929
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x23]
sub ecx, dword [0x140074c30]
sar eax, cl
test eax, eax
je 0x140028929
mov dword [rsp + 0xec], 1
jmp 0x140028934
mov dword [rsp + 0xec], 0
mov eax, dword [rsp + 0xec]
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
test eax, eax
je 0x140028972
movsx eax, byte [rsp + 0x24]
test eax, eax
je 0x140028972
mov dword [rsp + 0xf0], 1
jmp 0x14002897d
mov dword [rsp + 0xf0], 0
mov eax, dword [rsp + 0xf0]
movzx ecx, al
mov eax, dword [0x140074c60]
shl eax, cl
movsx ecx, byte [0x140074c5d]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5d], al
movsx eax, byte [rsp + 0x27]
mov ecx, dword [0x140074c2c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov byte [rsp + 0x25], al
mov dword [rsp + 0x60], 0x79
mov dword [rsp + 0x60], 0x10
jmp 0x1400289d9
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0xec9
jae 0x140028a05
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x140074c68]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
add ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
jmp 0x1400289cf
cmp dword [0x140074c8c], 0
je 0x140028a1c
cmp dword [rsp + 0x34], 0
je 0x140028a1c
mov byte [rsp + 0x3e], 1
jmp 0x140028a21
mov byte [rsp + 0x3e], 0
movzx eax, byte [rsp + 0x3e]
mov byte [0x140074b8e], al
movzx eax, byte [0x140074c88]
mov dword [rsp + 0x194], eax
movsx ecx, byte [rsp + 0x22]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x194]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
movzx eax, byte [0x140074b8f]
test eax, eax
jne 0x140028a7c
movsx eax, byte [rsp + 0x21]
test eax, eax
jne 0x140028a7c
mov dword [rsp + 0xf4], 0
jmp 0x140028a87
mov dword [rsp + 0xf4], 1
mov eax, dword [rsp + 0xf4]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
movzx eax, byte [rsp + 0x28]
movsx ecx, byte [0x140074c6e]
imul ecx, ecx, 5
add eax, ecx
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
je 0x140028af0
cmp dword [rsp + 0x64], 1
je 0x140028b12
cmp dword [rsp + 0x64], 2
je 0x140028b34
cmp dword [rsp + 0x64], 3
je 0x140028b98
jmp 0x140028bfe
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c60]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov dword [rsp + 0x30], eax
jmp 0x140028c41
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c80]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov byte [rsp + 0x24], al
jmp 0x140028c41
movzx eax, byte [0x140074b8f]
movsx ecx, byte [rsp + 0x22]
movsx edx, byte [rsp + 0x22]
and ecx, edx
or eax, ecx
movsx ecx, byte [rsp + 0x21]
and ecx, dword [0x140074c48]
or eax, ecx
mov ecx, dword [0x140074c34]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x2c]
shl eax, cl
movsx ecx, byte [rsp + 0x27]
xor eax, ecx
mov ecx, dword [0x140074c4c]
and ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c6c]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
jmp 0x140028c41
movsx eax, byte [0x140074c5d]
cmp eax, dword [rsp + 0x2c]
jne 0x140028bac
mov byte [rsp + 0x3f], 1
jmp 0x140028bb1
mov byte [rsp + 0x3f], 0
movzx eax, byte [rsp + 0x3f]
mov byte [0x140074c5e], al
movzx eax, byte [0x140074b8f]
test eax, eax
je 0x140028bdd
movzx eax, byte [rsp + 0x26]
test eax, eax
je 0x140028bdd
mov dword [rsp + 0xf8], 1
jmp 0x140028be8
mov dword [rsp + 0xf8], 0
movsx eax, byte [0x140074c90]
add eax, dword [rsp + 0xf8]
mov byte [0x140074c90], al
jmp 0x140028c41
cmp dword [0x140074c64], 0
je 0x140028c17
movsx eax, byte [rsp + 0x24]
test eax, eax
je 0x140028c17
mov byte [rsp + 0x40], 1
jmp 0x140028c1c
mov byte [rsp + 0x40], 0
movzx eax, byte [rsp + 0x40]
mov byte [0x140074c5d], al
mov eax, dword [0x140074c2c]
imul eax, dword [rsp + 0x30]
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov byte [rsp + 0x26], al
movzx eax, byte [rsp + 0x20]
cmp dword [0x140074c68], eax
jne 0x140028c5b
mov dword [rsp + 0xfc], 1
jmp 0x140028c66
mov dword [rsp + 0xfc], 0
movzx eax, byte [rsp + 0x28]
mov ecx, dword [rsp + 0xfc]
and ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c5d]
add ecx, eax
mov eax, ecx
mov byte [0x140074c5d], al
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c8b]
or ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c70]
lea eax, [rax + rcx*2]
xor edx, edx
mov ecx, 0xa
div ecx
mov eax, edx
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x19c]
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 0
je 0x140028cff
cmp dword [rsp + 0x68], 1
je 0x140028d24
cmp dword [rsp + 0x68], 2
je 0x140028d70
cmp dword [rsp + 0x68], 3
je 0x140028dc1
jmp 0x140028e36
mov eax, dword [rsp + 0x38]
movzx ecx, al
mov eax, dword [0x140074a68]
shl eax, cl
movzx ecx, byte [0x140074c88]
and ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
jmp 0x140028e72
movsx eax, byte [rsp + 0x27]
cmp eax, dword [0x140074c74]
jne 0x140028d3e
mov dword [rsp + 0x100], 1
jmp 0x140028d49
mov dword [rsp + 0x100], 0
movsx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c50]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x34]
shl eax, cl
or eax, dword [rsp + 0x100]
mov dword [0x140074c8c], eax
jmp 0x140028e72
movsx eax, byte [0x140074c5e]
test eax, eax
jne 0x140028d9a
movzx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [rsp + 0x30]
shl eax, cl
test eax, eax
jne 0x140028d9a
mov dword [rsp + 0x104], 0
jmp 0x140028da5
mov dword [rsp + 0x104], 1
mov eax, dword [rsp + 0x104]
mov ecx, dword [0x140074c3c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
jmp 0x140028e72
cmp dword [0x140074a64], 0
jne 0x140028df8
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [rsp + 0x38]
shl eax, cl
movsx ecx, byte [rsp + 0x22]
or eax, ecx
movzx ecx, byte [0x140074c8b]
or eax, ecx
test eax, eax
jne 0x140028df8
mov dword [rsp + 0x108], 0
jmp 0x140028e03
mov dword [rsp + 0x108], 1
movzx eax, byte [0x140074c5c]
add eax, dword [rsp + 0x108]
mov byte [0x140074c5c], al
movzx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c80]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 3
div ecx
mov byte [rsp + 0x27], al
jmp 0x140028e72
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movzx eax, byte [rsp + 0x29]
mov ecx, dword [0x140074c2c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov byte [rsp + 0x26], al
movzx eax, byte [rsp + 0x20]
imul ecx, dword [0x140074c50], 5
add eax, ecx
xor edx, edx
mov ecx, 2
div ecx
mov eax, edx
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0
je 0x140028eca
cmp dword [rsp + 0x6c], 1
je 0x140028f38
cmp dword [rsp + 0x6c], 2
je 0x140028f85
cmp dword [rsp + 0x6c], 3
je 0x140028fe2
jmp 0x140029059
movzx eax, byte [0x140074c8b]
movsx ecx, byte [rsp + 0x22]
mov edx, dword [rsp + 0x34]
shl edx, cl
mov ecx, edx
or ecx, dword [rsp + 0x30]
and eax, ecx
mov dword [0x140074c80], eax
cmp dword [0x140074c48], 0
jne 0x140028f11
movzx eax, byte [rsp + 0x29]
mov ecx, dword [rsp + 0x34]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x140028f11
mov dword [rsp + 0x10c], 0
jmp 0x140028f1c
mov dword [rsp + 0x10c], 1
mov eax, dword [rsp + 0x10c]
mov ecx, dword [0x140074c70]
or ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
jmp 0x140029108
movsx eax, byte [0x140074c6c]
movzx ecx, byte [rsp + 0x29]
add eax, ecx
movzx ecx, byte [rsp + 0x29]
add eax, ecx
movsx ecx, byte [rsp + 0x22]
mov dword [rsp + 0x1a4], ecx
movsx edx, byte [0x140074c6c]
movzx ecx, dl
mov edx, dword [rsp + 0x1a4]
sar edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c84]
add ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
jmp 0x140029108
cmp dword [0x140074c74], 0
jne 0x140028fbb
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x38]
and ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x2c]
test eax, eax
jne 0x140028fbb
movzx eax, byte [0x140074c88]
test eax, eax
jne 0x140028fbb
mov dword [rsp + 0x110], 0
jmp 0x140028fc6
mov dword [rsp + 0x110], 1
mov eax, dword [rsp + 0x110]
mov ecx, dword [0x140074a68]
and ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
jmp 0x140029108
movzx eax, byte [0x140074c88]
test eax, eax
je 0x140029019
movzx eax, byte [rsp + 0x29]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x23]
sub eax, ecx
movzx ecx, byte [0x140074b8f]
cmp eax, ecx
jne 0x140029019
mov dword [rsp + 0x114], 1
jmp 0x140029024
mov dword [rsp + 0x114], 0
movsx eax, byte [0x140074a63]
and eax, dword [rsp + 0x114]
mov byte [0x140074a63], al
movsx eax, byte [0x140074a63]
and eax, dword [rsp + 0x2c]
movzx ecx, byte [0x140074c6d]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c6d], al
jmp 0x140029108
movzx eax, byte [0x140074c8b]
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x34]
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [rsp + 0x1a8]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x23], al
movzx eax, byte [rsp + 0x26]
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [0x140074c84]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
movsx eax, byte [0x140074c90]
test eax, eax
je 0x1400290e9
movsx eax, byte [rsp + 0x24]
test eax, eax
je 0x1400290e9
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x20]
mov dword [rsp + 0x1ac], ecx
mov edx, dword [0x140074c48]
movzx ecx, dl
mov edx, dword [rsp + 0x1ac]
sar edx, cl
mov ecx, edx
xor eax, ecx
test eax, eax
je 0x1400290e9
mov dword [rsp + 0x118], 1
jmp 0x1400290f4
mov dword [rsp + 0x118], 0
movzx eax, byte [0x140074c6d]
or eax, dword [rsp + 0x118]
mov byte [0x140074c6d], al
mov dword [rsp + 0x70], 0x7d
mov dword [rsp + 0x70], 0x1b0
jmp 0x140029124
mov eax, dword [rsp + 0x70]
dec eax
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0x26
jbe 0x1400291f4
movzx eax, byte [0x140074c5c]
movzx ecx, byte [rsp + 0x28]
imul eax, ecx
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov dword [rsp + 0x2c], eax
movzx eax, byte [0x140074c89]
imul eax, dword [rsp + 0x34]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov byte [rsp + 0x26], al
movsx eax, byte [0x140074c6e]
movsx ecx, byte [rsp + 0x22]
and eax, ecx
test eax, eax
je 0x14002918f
movzx eax, byte [rsp + 0x26]
test eax, eax
je 0x14002918f
mov dword [rsp + 0x11c], 1
jmp 0x14002919a
mov dword [rsp + 0x11c], 0
movzx eax, byte [0x140074c8a]
add eax, dword [rsp + 0x11c]
mov byte [0x140074c8a], al
movsx eax, byte [0x140074c90]
movzx ecx, byte [rsp + 0x28]
imul eax, ecx
cdq
mov ecx, 3
idiv ecx
mov dword [rsp + 0x34], eax
movzx eax, byte [0x140074b8e]
movsx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x25]
sub ecx, edx
sar eax, cl
movsx ecx, byte [0x140074c6c]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
jmp 0x14002911a
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x140029206
movsx eax, byte [rsp + 0x24]
test eax, eax
je 0x140029233
movzx eax, byte [0x140074c89]
mov dword [rsp + 0x1b0], eax
movzx ecx, byte [rsp + 0x20]
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [rsp + 0x1b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
cmp dword [0x140074c68], 0
jne 0x14002927f
movzx eax, byte [rsp + 0x20]
cmp eax, dword [0x140074a64]
jne 0x140029256
mov dword [rsp + 0x120], 1
jmp 0x140029261
mov dword [rsp + 0x120], 0
movsx eax, byte [rsp + 0x24]
movsx ecx, byte [rsp + 0x24]
and eax, ecx
or eax, dword [rsp + 0x120]
test eax, eax
jne 0x14002927f
mov byte [rsp + 0x41], 0
jmp 0x140029284
mov byte [rsp + 0x41], 1
movzx eax, byte [rsp + 0x41]
mov byte [0x140074b8f], al
movsx eax, byte [rsp + 0x21]
and eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x28]
or eax, ecx
cmp dword [0x140074c50], eax
jne 0x1400292b4
mov dword [rsp + 0x124], 1
jmp 0x1400292bf
mov dword [rsp + 0x124], 0
mov eax, dword [rsp + 0x124]
mov dword [0x140074c84], eax
movzx eax, byte [0x140074b8f]
movzx ecx, byte [rsp + 0x26]
xor eax, ecx
mov ecx, dword [0x140074c3c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074a64]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c84]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x2c], eax
movsx eax, byte [0x140074a63]
movzx ecx, byte [rsp + 0x25]
or eax, ecx
test eax, eax
je 0x14002934c
cmp dword [rsp + 0x2c], 0
je 0x14002934c
mov dword [rsp + 0x128], 1
jmp 0x140029357
mov dword [rsp + 0x128], 0
mov eax, dword [rsp + 0x128]
mov ecx, dword [0x140074a68]
and ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
movzx eax, byte [0x140074c88]
movzx ecx, byte [rsp + 0x23]
and eax, ecx
test eax, eax
jne 0x1400293a7
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [0x140074c88]
sub eax, ecx
mov ecx, dword [rsp + 0x2c]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x1400293a7
mov dword [rsp + 0x12c], 0
jmp 0x1400293b2
mov dword [rsp + 0x12c], 1
movzx eax, byte [0x140074c8a]
or eax, dword [rsp + 0x12c]
mov byte [0x140074c8a], al
mov eax, dword [0x140074c30]
imul eax, dword [rsp + 0x2c]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x20], al
movsx eax, byte [rsp + 0x21]
movzx ecx, al
mov eax, dword [0x140074a64]
shr eax, cl
movzx ecx, byte [rsp + 0x20]
or eax, ecx
mov ecx, dword [0x140074c50]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [0x140074a62]
movzx ecx, byte [rsp + 0x20]
imul eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov byte [rsp + 0x23], al
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x28]
sar eax, cl
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
add ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movsx eax, byte [rsp + 0x21]
movzx ecx, al
mov eax, dword [0x140074c70]
sar eax, cl
movzx ecx, byte [rsp + 0x23]
mov edx, dword [rsp + 0x30]
sub edx, ecx
mov ecx, edx
sar eax, cl
movsx ecx, byte [0x140074a63]
sar eax, cl
mov byte [0x140074c8a], al
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c60]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x24]
sub eax, ecx
cmp eax, dword [rsp + 0x30]
jne 0x1400294b6
mov dword [rsp + 0x130], 1
jmp 0x1400294c1
mov dword [rsp + 0x130], 0
movzx eax, byte [0x140074b8e]
mov ecx, dword [rsp + 0x130]
and ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c6f]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movzx eax, byte [rsp + 0x29]
test eax, eax
je 0x1400294f6
movzx eax, byte [rsp + 0x25]
test eax, eax
jne 0x140029505
movzx eax, byte [0x140074b8f]
test eax, eax
je 0x1400297c9
movsx eax, byte [rsp + 0x27]
mov ecx, dword [0x140074c50]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c5f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
movzx eax, byte [rsp + 0x29]
mov ecx, dword [0x140074c4c]
add ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x38]
shl edx, cl
mov ecx, edx
mov dword [rsp + 0x1b4], ecx
mov edx, dword [0x140074c4c]
movzx ecx, dl
mov edx, dword [rsp + 0x1b4]
shr edx, cl
mov ecx, edx
or eax, ecx
mov ecx, dword [0x140074c80]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 4
div ecx
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x28]
add eax, ecx
movsx ecx, byte [rsp + 0x22]
cmp eax, ecx
jne 0x1400295ab
mov dword [rsp + 0x134], 1
jmp 0x1400295b6
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x134]
mov ecx, dword [0x140074c2c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
movzx eax, byte [0x140074c6d]
test eax, eax
je 0x140029601
movsx eax, byte [rsp + 0x27]
movzx ecx, byte [rsp + 0x25]
sar eax, cl
mov ecx, dword [rsp + 0x30]
shl eax, cl
xor eax, dword [0x140074c50]
test eax, eax
je 0x140029601
mov dword [rsp + 0x138], 1
jmp 0x14002960c
mov dword [rsp + 0x138], 0
mov eax, dword [rsp + 0x138]
mov ecx, dword [0x140074c84]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x20]
sar eax, cl
mov ecx, dword [0x140074c50]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x26]
movsx edx, byte [0x140074a63]
sub ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c48]
add ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [rsp + 0x29]
movzx ecx, byte [rsp + 0x28]
cmp eax, ecx
jne 0x140029674
mov dword [rsp + 0x13c], 1
jmp 0x14002967f
mov dword [rsp + 0x13c], 0
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c80]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074b8f]
mov edx, dword [rsp + 0x13c]
and edx, ecx
mov ecx, edx
or eax, ecx
mov byte [0x140074c6c], al
movsx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c38]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c80]
and ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
movzx eax, byte [rsp + 0x26]
mov ecx, dword [0x140074c84]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074b8e]
add ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x14002970d
movzx eax, byte [rsp + 0x28]
test eax, eax
jne 0x14002970d
mov dword [rsp + 0x140], 0
jmp 0x140029718
mov dword [rsp + 0x140], 1
mov eax, dword [rsp + 0x140]
movzx ecx, al
mov eax, dword [0x140074c28]
shl eax, cl
mov ecx, dword [0x140074c28]
add ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movzx eax, byte [0x140074c8a]
xor eax, dword [rsp + 0x38]
mov ecx, dword [0x140074a6c]
or ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
cmp dword [0x140074c60], 0
jne 0x140029784
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [rsp + 0x25]
sar eax, cl
test eax, eax
je 0x140029777
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140029784
mov dword [rsp + 0x144], 0
jmp 0x14002978f
mov dword [rsp + 0x144], 1
mov eax, dword [rsp + 0x144]
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movzx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c8c]
xor ecx, eax
mov eax, ecx
xor eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c50]
or ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x20]
add ecx, edx
xor eax, ecx
movzx ecx, al
mov eax, dword [0x140074c3c]
shl eax, cl
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movzx eax, byte [rsp + 0x29]
movzx ecx, al
mov eax, dword [0x140074c74]
shr eax, cl
movsx ecx, byte [rsp + 0x21]
shr eax, cl
mov ecx, dword [0x140074a64]
or ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
movzx eax, byte [rsp + 0x26]
mov ecx, dword [0x140074a64]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 3
div ecx
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x28]
imul ecx, dword [0x140074c3c], 3
add eax, ecx
xor edx, edx
mov ecx, 0xa
div ecx
mov eax, edx
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x1b8]
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x74], 0
je 0x140029893
cmp dword [rsp + 0x74], 1
je 0x140029943
cmp dword [rsp + 0x74], 2
je 0x1400299d5
cmp dword [rsp + 0x74], 3
je 0x140029a26
jmp 0x140029aa6
cmp dword [rsp + 0x34], 0
je 0x1400298b9
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x1400298b9
movzx eax, byte [rsp + 0x25]
test eax, eax
je 0x1400298b9
mov dword [rsp + 0x148], 1
jmp 0x1400298c4
mov dword [rsp + 0x148], 0
mov eax, dword [rsp + 0x148]
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c4c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c68]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x140029906
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x38]
shl eax, cl
test eax, eax
jne 0x14002991c
cmp dword [0x140074c30], 0
jne 0x14002991c
mov dword [rsp + 0x14c], 0
jmp 0x140029927
mov dword [rsp + 0x14c], 1
mov eax, dword [rsp + 0x14c]
mov ecx, dword [0x140074c70]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
jmp 0x140029aa6
cmp dword [0x140074c8c], 0
je 0x140029977
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x30]
shr eax, cl
movzx ecx, byte [rsp + 0x23]
sub ecx, dword [0x140074a64]
shr eax, cl
test eax, eax
je 0x140029977
mov dword [rsp + 0x150], 1
jmp 0x140029982
mov dword [rsp + 0x150], 0
mov eax, dword [rsp + 0x150]
mov ecx, dword [0x140074c68]
or ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
movsx eax, byte [0x140074c5e]
test eax, eax
jne 0x1400299b8
cmp dword [rsp + 0x38], 0
jne 0x1400299b8
mov dword [rsp + 0x154], 0
jmp 0x1400299c3
mov dword [rsp + 0x154], 1
mov eax, dword [rsp + 0x154]
mov dword [0x140074c38], eax
jmp 0x140029aa6
cmp dword [0x140074c64], 0
je 0x140029a02
cmp dword [rsp + 0x34], 0
jne 0x1400299f5
movsx eax, byte [rsp + 0x27]
movsx ecx, byte [rsp + 0x21]
and eax, ecx
test eax, eax
je 0x140029a02
mov dword [rsp + 0x158], 1
jmp 0x140029a0d
mov dword [rsp + 0x158], 0
movsx eax, byte [0x140074a63]
add eax, dword [rsp + 0x158]
mov byte [0x140074a63], al
jmp 0x140029aa6
movsx eax, byte [0x140074c6e]
mov dword [rsp + 0x1bc], eax
movzx ecx, byte [rsp + 0x29]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x1bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
movzx eax, byte [0x140074c88]
or eax, dword [rsp + 0x2c]
test eax, eax
jne 0x140029a87
movsx eax, byte [rsp + 0x21]
cmp dword [rsp + 0x30], eax
je 0x140029a87
movzx eax, byte [0x140074b8e]
test eax, eax
jne 0x140029a87
mov dword [rsp + 0x15c], 0
jmp 0x140029a92
mov dword [rsp + 0x15c], 1
movzx eax, byte [0x140074c8a]
and eax, dword [rsp + 0x15c]
mov byte [0x140074c8a], al
movsx eax, byte [0x140074a63]
cmp eax, dword [rsp + 0x34]
jne 0x140029bf6
cmp dword [rsp + 0x30], 0
je 0x140029bf6
movzx eax, byte [0x140074c88]
test eax, eax
je 0x140029bf6
cmp dword [rsp + 0x34], 0
je 0x140029bf6
cmp dword [0x140074c30], 0
jne 0x140029b10
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x30]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x140029b10
movsx eax, byte [0x140074a63]
cmp dword [rsp + 0x34], eax
je 0x140029b10
mov dword [rsp + 0x160], 0
jmp 0x140029b1b
mov dword [rsp + 0x160], 1
mov eax, dword [rsp + 0x160]
mov dword [0x140074c3c], eax
cmp dword [rsp + 0x30], 0
je 0x140029b4d
movzx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0x2c]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140029b4d
mov dword [rsp + 0x164], 1
jmp 0x140029b58
mov dword [rsp + 0x164], 0
mov eax, dword [rsp + 0x164]
mov ecx, dword [0x140074c4c]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c88]
add ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
cmp dword [0x140074c50], 0
je 0x140029bd4
movzx eax, byte [rsp + 0x28]
movsx ecx, byte [rsp + 0x27]
cmp eax, ecx
jne 0x140029b9e
mov dword [rsp + 0x168], 1
jmp 0x140029ba9
mov dword [rsp + 0x168], 0
movsx eax, byte [0x140074c90]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x168]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140029bd4
mov dword [rsp + 0x16c], 1
jmp 0x140029bdf
mov dword [rsp + 0x16c], 0
mov eax, dword [rsp + 0x16c]
mov ecx, dword [0x140074c68]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
cmp dword [0x140074c68], 0
je 0x140029c08
movsx eax, byte [rsp + 0x27]
test eax, eax
jne 0x140029c1e
movzx eax, byte [rsp + 0x25]
test eax, eax
jne 0x140029c1e
mov dword [rsp + 0x170], 0
jmp 0x140029c29
mov dword [rsp + 0x170], 1
mov eax, dword [rsp + 0x170]
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x30], eax
jbe 0x140029c66
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x20]
imul eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [0x140074c54]
shl eax, cl
xor eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c28]
or ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movzx eax, byte [rsp + 0x25]
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x38]
shr edx, cl
mov ecx, edx
mov dword [rsp + 0x1c0], ecx
mov edx, dword [0x140074c4c]
movzx ecx, dl
mov edx, dword [rsp + 0x1c0]
shl edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c8c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c28]
or ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movzx eax, byte [rsp + 0x20]
movsx ecx, byte [rsp + 0x22]
cmp eax, ecx
jne 0x140029cec
mov dword [rsp + 0x174], 1
jmp 0x140029cf7
mov dword [rsp + 0x174], 0
movzx eax, byte [0x140074b8e]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x174]
and edx, ecx
mov ecx, edx
add eax, ecx
mov dword [0x140074c68], eax
mov eax, dword [rsp + 0x38]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shl eax, cl
movzx ecx, byte [0x140074c8a]
cmp eax, ecx
jne 0x140029d3a
mov dword [rsp + 0x178], 1
jmp 0x140029d45
mov dword [rsp + 0x178], 0
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
xor eax, dword [rsp + 0x178]
movzx ecx, byte [0x140074b8f]
add ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
movzx r8d, byte [0x140074b8e]
movzx edx, byte [0x140074a6c]
mov ecx, dword [0x140074c54]
call fcn.140025bc0
movsx eax, byte [rsp + 0x24]
add eax, dword [rsp + 0x38]
add rsp, 0x1d8
ret