Function at 0x18004c6a0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x180081de0]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rsi, qword [rbp + 0x2e8]
mov eax, r8d
mov rdi, rdx
mov qword [rbp + 0x18], rdx
imul edx, r8d, 0x39c
mov r14d, r8d
mov qword [rbp + 0x38], r9
mov r9, qword [rbp + 0x2e0]
mov dword [rbp - 0x28], eax
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x10], r9
mov qword [rbp - 0x18], rsi
mov dword [rbp - 0x4c], eax
mov dword [rsp + 0x40], edx
cmp r8d, edx
ja 0x18004dd04
mov eax, dword [rsp + 0x40]
mov r10, qword [rbp - 0x38]
mov r8d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x40]
mov r13d, dword [rsp + 0x40]
mov r15d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x40]
mov ebx, dword [rsp + 0x40]
mov r12d, dword [rsp + 0x40]
mov dword [rbp + 0xc], eax
mov eax, dword [rsp + 0x40]
mov dword [rbp + 4], eax
mov eax, dword [rsp + 0x40]
mov dword [rbp + 8], eax
mov eax, dword [rsp + 0x40]
mov dword [rbp], eax
mov eax, dword [rsp + 0x40]
mov dword [rbp - 0x60], eax
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x10], eax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x48], rax
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x20], eax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x50], rax
mov eax, dword [rsp + 0x40]
mov dword [rbp - 0x30], eax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 8], rax
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x28]
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x70], r11d
mov qword [rsp + 0x68], r10
mov dword [rbp - 0x70], r13d
mov dword [rbp - 0x78], r15d
mov dword [rbp - 0x80], edx
mov dword [rbp - 0x64], ebx
mov dword [rbp - 0x50], r12d
cmp r14d, 0x3fdc
ja 0x18004d29e
je 0x18004d259
cmp r14d, 0xc2
ja 0x18004c848
je 0x18004c808
cmp r14d, 0x10
je 0x18004d4ba
cmp r14d, 0x46
je 0x18004d46c
cmp r14d, 0x51
jne 0x18004d431
mov qword [rbp + 0x70], rdi
jmp 0x18004d431
mov eax, dword [rsi + 0x504]
mov r10, qword [rsi + 0x510]
mov dword [rbp + 0xc], eax
mov rax, qword [rcx + 0x50]
mov qword [rsp + 0x68], r10
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 0x20]
mov qword [rbp + 0x48], rax
mov rcx, qword [rax + 0x1320]
lea r8, [rax + 0xb20]
mov qword [rbp + 0x50], r8
mov qword [rbp + 0x30], rcx
jmp 0x18004d431
cmp r14d, 0xf4
je 0x18004d23d
cmp r14d, 0x1533
je 0x18004d1f5
cmp r14d, 0x32c6
jne 0x18004d431
test r9, r9
je 0x18004dca9
movsxd rax, dword [rbp + 0xc]
mov r14d, 0x6e
mov dword [rbp - 0x68], r14d
mov qword [rbp - 0x20], rax
nop word [rax + rax]
cmp r14d, 0x6e
je 0x18004d0e5
cmp r14d, 0x11b
je 0x18004d0d6
cmp r14d, 0x1c8
je 0x18004cde9
cmp r14d, 0x275
je 0x18004cac6
cmp r14d, 0x322
jne 0x18004ca4f
mov esi, 0xe9
mov dword [rsp + 0x60], esi
nop word [rax + rax]
mov eax, esi
sub eax, 0xe9
je 0x18004caba
sub eax, 1
je 0x18004ca8e
sub eax, 1
je 0x18004c910
cmp eax, 1
jne 0x18004ca2b
mov dword [rbp - 0x58], 1
jmp 0x18004dd04
mov r14, qword [rbp - 0x18]
mov edi, 1
cmp dword [r14 + 0x504], edi
jle 0x18004c9e4
mov r12d, dword [rbp - 0x60]
lea rbx, [r14 + 0x108]
mov esi, dword [rbp + 0x10]
nop dword [rax]
nop dword [rax + rax]
movsxd rdx, dword [rbx]
mov r8d, r15d
mov ecx, dword [r9 + rdx*4]
and ecx, 0x7fff
cmp ecx, dword [r9 + rdx*4]
jne 0x18004c9bd
mov r13d, dword [r10 + rdx*4 + 0x344]
lea rax, [rsp + 0x78]
mov r15d, dword [r10 + 0x340]
lea rdx, [rsp + 0x50]
mov r9, qword [rbp + 0x38]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x60]
imul r15d, ecx
mov ecx, 0x11a
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x70]
mov dword [rbp - 0x60], r8d
lea r8, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x70], r13d
mov dword [rbp - 0x78], r15d
mov dword [rsp + 0x78], r12d
mov dword [rsp + 0x50], esi
call fcn.180047fa0
mov r9, qword [rbp - 0x10]
mov r12d, r13d
mov r10, qword [rsp + 0x68]
inc edi
add rbx, 4
cmp edi, dword [r14 + 0x504]
jl 0x18004c940
mov esi, dword [rsp + 0x60]
mov dword [rbp - 0x60], r12d
mov r12d, dword [rbp - 0x50]
mov dword [rbp - 0x70], r13d
mov dword [rbp - 0x78], r15d
mov r11, qword [rbp - 0x48]
mov r8d, r13d
mov eax, dword [r11 + 0x34]
cdq
sub eax, edx
sar eax, 1
cmp r13d, eax
jge 0x18004ca28
mov rcx, qword [rbp + 0x38]
movsxd rax, r13d
lea rcx, [rcx + rax*4]
nop dword [rax]
nop dword [rax + rax]
mov dword [rcx], r15d
lea rcx, [rcx + 4]
mov eax, dword [r11 + 0x34]
inc r8d
cdq
sub eax, edx
sar eax, 1
cmp r8d, eax
jl 0x18004ca10
mov rcx, r11
inc esi
mov dword [rsp + 0x60], esi
cmp esi, 0xed
jb 0x18004c8e0
mov r14d, dword [rbp - 0x68]
mov r11d, dword [rsp + 0x70]
mov r8d, dword [rsp + 0x58]
mov rax, qword [rbp - 0x20]
mov r9, qword [rbp - 0x10]
add r14d, 0xad
mov edx, dword [rbp - 0x80]
mov rsi, qword [rbp - 0x18]
mov ebx, dword [rbp - 0x64]
mov r15d, dword [rbp - 0x78]
mov rdi, qword [rbp + 0x18]
mov r13d, dword [rbp - 0x70]
mov rcx, qword [rbp - 0x48]
mov dword [rbp - 0x68], r14d
cmp r14d, 0x3cf
jb 0x18004c890
mov r14d, dword [rbp - 0x4c]
jmp 0x18004d431
mov rdx, qword [rbp + 0x48]
xor eax, eax
mov r15d, dword [r10 + 0x340]
imul r15d, dword [r9]
mov dword [rbp - 0x60], eax
movsxd rax, dword [rcx + 0x2c]
mov dword [rbp - 0x78], r15d
mov eax, dword [rdx + rax*4]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp + 0x10], eax
jmp 0x18004ca2b
xor r13d, r13d
mov dword [rbp - 0x70], r13d
jmp 0x18004ca2b
mov eax, dword [rsi + 0x50c]
lea rcx, [rsp + 0x50]
xor esi, esi
dec eax
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0x1f]
call fcn.1800317a0
mov dword [rsp + 0x50], eax
lea r9d, [rsi + 0x60]
mov eax, dword [rbp + 0xc4]
mov r8, rdi
mov dword [rsp + 0x78], eax
xor edx, edx
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
xor ecx, ecx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call fcn.18002bb20
mov r10, qword [rsp + 0x68]
mov eax, 2
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x60], eax
cmp dword [r10], esi
jle 0x18004ca41
lea rcx, [r10 + 4]
mov qword [rsp + 0x48], rcx
mov r13d, 0x125
nop word [rax + rax]
cmp r13d, 0x125
je 0x18004cdad
cmp r13d, 0x1cf
je 0x18004cd8d
cmp r13d, 0x279
je 0x18004cd66
cmp r13d, 0x323
jne 0x18004cdb4
movsxd r14, dword [rbp - 0x30]
xor esi, esi
movsxd r15, r12d
xor edi, edi
mov qword [rbp - 0x40], r15
movsxd r12, eax
test ebx, ebx
je 0x18004ccd1
movsxd rbx, dword [rbp + 0x20]
xor edx, edx
test rbx, rbx
jle 0x18004cbfd
lea r8, [r15 + 0xa]
mov r15, qword [rbp + 0x50]
shl r8, 5
nop word [rax + rax]
lea rax, [r8 + rdx*4]
movsxd rcx, dword [rax + r10]
test ecx, ecx
jns 0x18004cbe3
mov eax, 1
jmp 0x18004cbea
mov rcx, qword [r15 + rcx*8]
mov eax, dword [rcx + 4]
mov dword [rbp + rdx*4 + 0x98], eax
inc rdx
cmp rdx, rbx
jl 0x18004cbd0
mov r15, qword [rbp - 0x40]
xor r10d, r10d
test r14, r14
jle 0x18004cc90
mov r15d, dword [rbp - 0x64]
nop dword [rax]
lea r9, [r10*4]
mov edx, 0x2b
lea r11, [r9 + r12*4]
cmp edx, 0x2b
je 0x18004cc30
cmp edx, 0xc3
je 0x18004cc5c
jmp 0x18004cc76
xor ecx, ecx
xor eax, eax
test rbx, rbx
jle 0x18004cc76
mov r8d, dword [rbp + r11 + 0xc0]
cmp r8d, dword [rbp + rax*4 + 0x98]
jl 0x18004cc57
inc ecx
inc rax
cmp rax, rbx
jl 0x18004cc41
jmp 0x18004cc76
mov dword [rbp + r9 + 0x78], ecx
mov eax, dword [rbp + r9 + 0x78]
mov ecx, edi
shl eax, cl
mov edx, 0xc3
or esi, eax
mov dword [rbp - 0x4c], 0x32c6
add edi, r15d
add edx, 0x98
cmp edx, 0x15b
jb 0x18004cc21
inc r10
cmp r10, r14
jl 0x18004cc10
mov r15, qword [rbp - 0x40]
mov rax, qword [rsp + 0x68]
lea r8, [rsp + 0x50]
mov r9, qword [rbp + 0x18]
mov edx, 0x9e
mov dword [rsp + 0x50], esi
movsxd rax, dword [rax + r15*4 + 0x100]
imul rcx, rax, 0x58
add rcx, qword [rbp + 0x30]
call fcn.18005b6b0
mov rsi, qword [rbp - 0x18]
mov r10, qword [rsp + 0x68]
add dword [rsi + 0x518], eax
mov eax, dword [rsp + 0x60]
jmp 0x18004ccd5
mov rsi, qword [rbp - 0x18]
xor ebx, ebx
test r14, r14
jle 0x18004cd51
lea rdi, [r15*8 + 0x50]
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rbx*4]
movsxd rax, dword [rbp + rcx + 0x78]
add rax, rdi
movsxd rdx, dword [r10 + rax*4]
test edx, edx
js 0x18004cd45
lea rax, [rcx + r12*4]
mov r8d, dword [rbp + rax + 0xc0]
imul rcx, rdx, 0x58
add rcx, qword [rbp + 0x30]
cmp r8d, dword [rcx + 4]
jge 0x18004cd45
mov r9, qword [rbp + 0x18]
mov edx, 0x9e
mov dword [rsp + 0x50], r8d
lea r8, [rsp + 0x50]
call fcn.18005b6b0
add dword [rsi + 0x51c], eax
mov r10, qword [rsp + 0x68]
inc rbx
cmp rbx, r14
jl 0x18004ccf0
mov eax, dword [rsp + 0x60]
add eax, dword [rbp - 0x30]
mov rcx, qword [rsp + 0x48]
mov ebx, dword [rbp - 0x64]
mov r12d, dword [rbp - 0x50]
mov dword [rsp + 0x60], eax
jmp 0x18004cdb4
mov ecx, ebx
mov r8d, 1
shl r8d, cl
xorps xmm0, xmm0
mov rcx, qword [rsp + 0x48]
xorps xmm1, xmm1
mov dword [rbp + 0x20], r8d
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm1
jmp 0x18004cdb4
movsxd rax, r12d
mov r8d, dword [r10 + rax*4 + 0x80]
mov ebx, dword [r10 + rax*4 + 0xc0]
mov eax, dword [rsp + 0x60]
mov dword [rbp - 0x30], r8d
mov dword [rbp - 0x64], ebx
jmp 0x18004cdb4
mov r12d, dword [rcx]
mov dword [rbp - 0x50], r12d
add r13d, 0xaa
cmp r13d, 0x3cd
jb 0x18004cb60
mov edx, dword [rsp + 0x78]
add rcx, 4
inc edx
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x78], edx
cmp edx, dword [r10]
jl 0x18004cb51
jmp 0x18004ca3d
cmp rax, 2
jle 0x18004cff4
mov r13, r10
lea r14, [rbp + 0xc0]
sub r13, rsi
lea rbx, [r9 + 8]
mov r12, rsi
mov qword [rbp - 0x38], r13
sub r12, r9
sub r14, r9
add rax, 0xfffffffffffffffe
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x28], rax
nop dword [rax]
mov r15d, 1
nop word [rax + rax]
mov eax, r15d
sub eax, 1
je 0x18004cf94
cmp eax, 0x49
jne 0x18004cfc4
lea rax, [r12 + rbx]
movsxd rsi, r8d
mov ecx, dword [rax + r13 + 0x344]
lea r8, [rsp + 0x60]
movsxd rdi, r11d
lea rdx, [rbp - 0x40]
mov dword [rsp + 0x60], ecx
lea rcx, [rsp + 0x48]
mov eax, dword [r9 + rdi*4]
mov dword [rsp + 0x50], eax
mov eax, dword [r9 + rsi*4]
mov r9d, 0xa4
mov dword [rbp - 0x40], eax
mov eax, dword [rbp + 4]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 8]
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.18004eab0
mov r8d, eax
mov eax, dword [rbx]
bt eax, 0xf
jb 0x18004cf6f
cmp r8d, eax
je 0x18004cf6f
mov r13d, dword [rbp]
mov edx, 0x12a
mov r12, qword [rbp - 0x10]
nop word [rax + rax]
cmp edx, 0x12a
je 0x18004cf38
cmp edx, 0x1de
je 0x18004cefa
cmp edx, 0x292
jne 0x18004cf4f
and dword [r12 + rsi*4], 0x7fff
and dword [r12 + rdi*4], 0x7fff
jmp 0x18004cf4f
mov ecx, dword [rbx]
sub ecx, r8d
jns 0x18004cf22
mov eax, r13d
neg eax
cmp ecx, eax
jge 0x18004cf18
mov eax, r13d
sub eax, ecx
lea ecx, [rax - 1]
mov dword [r14 + rbx], ecx
jmp 0x18004cf4f
add ecx, ecx
not ecx
mov dword [r14 + rbx], ecx
jmp 0x18004cf4f
cmp ecx, r13d
jl 0x18004cf30
add ecx, r13d
mov dword [r14 + rbx], ecx
jmp 0x18004cf4f
add ecx, ecx
mov dword [r14 + rbx], ecx
jmp 0x18004cf4f
mov rax, qword [rbp - 0x18]
mov r13d, r8d
mov eax, dword [rax + 0x50c]
sub eax, r8d
cmp eax, r8d
cmovl r13d, eax
add edx, 0xb4
cmp edx, 0x346
jb 0x18004ced0
mov r12, qword [rbp + 0x60]
mov dword [rbp], r13d
mov r13, qword [rbp - 0x38]
jmp 0x18004cf7f
bts r8d, 0xf
mov dword [r14 + rbx], 0
mov dword [rbx], r8d
mov r9, qword [rbp - 0x10]
mov r10, qword [rsp + 0x68]
mov r8d, dword [rsp + 0x58]
mov r11d, dword [rsp + 0x70]
jmp 0x18004cfc4
movsxd r8, dword [r12 + rbx + 0x400]
movsxd r11, dword [r12 + rbx + 0x304]
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x70], r11d
mov eax, dword [r10 + r8*4 + 0x344]
mov dword [rbp + 8], eax
mov eax, dword [r10 + r11*4 + 0x344]
mov dword [rbp + 4], eax
add r15d, 0x49
cmp r15d, 0x92
jbe 0x18004ce30
add rbx, 4
sub qword [rbp + 0x28], 1
jne 0x18004ce20
mov rsi, qword [rbp - 0x18]
mov rdi, qword [rbp + 0x18]
mov r12d, dword [rbp - 0x50]
mov r14d, dword [rbp - 0x68]
xor ebx, ebx
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov r8, rdi
lea rax, [rbp - 0x40]
mov dword [rbp - 0x40], 1
mov qword [rsp + 0x28], rax
lea r9d, [rbx + 0x60]
xor edx, edx
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call fcn.18002bb20
mov eax, dword [rsi + 0x50c]
lea r9d, [rbx + 0x1f]
inc dword [rsi + 0x520]
lea rcx, [rsp + 0x48]
dec eax
mov qword [rsp + 0x28], rbx
xor r8d, r8d
mov dword [rsp + 0x48], eax
xor edx, edx
mov qword [rsp + 0x20], rbx
call fcn.1800317a0
add eax, eax
mov qword [rsp + 0x28], rbx
add dword [rsi + 0x51c], eax
lea r9d, [rbx + 0x1f]
mov eax, dword [rsi + 0x50c]
lea rcx, [rsp + 0x48]
dec eax
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov dword [rsp + 0x48], eax
xor edx, edx
call fcn.1800317a0
mov dword [rsp + 0x48], eax
lea r9d, [rbx + 0x60]
mov eax, dword [rbp + 0xc0]
mov r8, rdi
mov dword [rbp - 0x40], eax
xor edx, edx
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
xor ecx, ecx
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call fcn.18002bb20
mov r10, qword [rsp + 0x68]
jmp 0x18004ca41
mov eax, dword [r9 + 4]
mov dword [rbp + 0xc4], eax
jmp 0x18004ca4b
mov rbx, qword [rbp - 0x20]
xor r8d, r8d
test rbx, rbx
jle 0x18004d1df
nop word [rax + rax]
mov ecx, 0xa7
nop word [rax + rax]
mov eax, ecx
sub eax, 0xa7
je 0x18004d1b4
sub eax, 1
je 0x18004d13c
cmp eax, 1
jne 0x18004d1be
and dword [r9 + r8*4], 0x8000
or dword [r9 + r8*4], edx
jmp 0x18004d1be
mov ecx, dword [r10 + 0x340]
sub ecx, 1
je 0x18004d1a0
sub ecx, 1
je 0x18004d18c
sub ecx, 1
je 0x18004d16b
cmp ecx, 1
jne 0x18004d1a3
mov r14d, 0x32c6
sar edx, 4
mov dword [rbp - 0x4c], r14d
mov ecx, 0xa8
jmp 0x18004d1be
mov eax, 0x2aaaaaab
mov r14d, 0x32c6
imul edx
mov ecx, 0xa8
mov dword [rbp - 0x4c], r14d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
jmp 0x18004d1be
mov r14d, 0x32c6
sar edx, 3
mov dword [rbp - 0x4c], r14d
mov ecx, 0xa8
jmp 0x18004d1be
sar edx, 2
mov r14d, 0x32c6
mov ecx, 0xa8
mov dword [rbp - 0x4c], r14d
jmp 0x18004d1be
mov edx, dword [r9 + r8*4]
and edx, 0x7fff
inc ecx
cmp ecx, 0xaa
jb 0x18004d110
inc r8
mov dword [rbp - 0x80], edx
cmp r8, rbx
jl 0x18004d100
mov r14d, dword [rbp - 0x68]
mov eax, dword [r9]
mov r8d, dword [rsp + 0x58]
mov dword [rbp + 0xc0], eax
mov rax, rbx
jmp 0x18004ca4f
mov eax, dword [rcx]
xor r9d, r9d
mov ecx, 0xcf
mov dword [rbp + 0x68], eax
xor r8d, r8d
xor edx, edx
call fcn.1800248e0
mov rcx, rax
mov dword [rsp + 0x48], 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov r9d, 0x68
lea r8, [rbp + 0x40]
lea rdx, [rsp + 0x48]
mov dword [rbp + 0x40], eax
lea rcx, [rbp + 0x68]
call fcn.18003b870
jmp 0x18004d42c
mov rax, qword [rdi + 0x20]
mov ecx, 0x60
mov qword [rbp + 0x58], rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 8], rax
jmp 0x18004d42c
mov rdx, rcx
mov dword [rsp + 0x48], 8
lea rcx, [rsp + 0x48]
mov r8d, 0x10c
call fcn.18004fc60
mov rdi, qword [rbp - 8]
lea rcx, [rsp + 0x48]
mov rdx, qword [rbp - 0x48]
mov r8d, 0x10c
mov dword [rsp + 0x48], 0x10
mov dword [rdi], eax
call fcn.18004fc60
mov dword [rdi + 4], eax
jmp 0x18004d42c
cmp r14d, 0x13b7c
ja 0x18004d3ff
je 0x18004dd08
cmp r14d, 0x7ec4
je 0x18004d37b
cmp r14d, 0xbdac
je 0x18004d347
cmp r14d, 0xfc94
jne 0x18004d431
cmp dword [rax + 0x14], 1
jl 0x18004d370
xor edi, edi
lea rbx, [rax + 0x18]
nop dword [rax + rax]
mov rdx, rcx
mov dword [rsp + 0x48], 8
lea rcx, [rsp + 0x48]
mov r8d, 0x10c
call fcn.18004fc60
mov dword [rbx], eax
test eax, eax
js 0x18004d36b
mov rcx, qword [rbp + 0x58]
cmp eax, dword [rcx + 0x18]
jge 0x18004d36b
cdqe
mov rcx, qword [rcx + rax*8 + 0xb20]
cmp dword [rcx + 0x10], 0
je 0x18004d36b
cmp dword [rcx], 1
jl 0x18004d36b
mov rax, qword [rbp - 8]
inc edi
mov rcx, qword [rbp - 0x48]
add rbx, 4
cmp edi, dword [rax + 0x14]
jl 0x18004d2f0
jmp 0x18004d42c
mov rdi, qword [rbp - 8]
cmp dword [rdi], 1
jl 0x18004d370
cmp dword [rdi + 4], 1
jl 0x18004d370
cmp dword [rdi + 8], 1
jge 0x18004d431
mov r14d, 0x13b7c
jmp 0x18004d431
mov r10, qword [rsp + 0x68]
mov r14d, 0x13b7c
jmp 0x18004d431
mov rdx, rcx
mov dword [rsp + 0x48], 0x10
lea rcx, [rsp + 0x48]
mov r8d, 0x10c
call fcn.18004fc60
mov rdi, qword [rbp - 8]
lea rcx, [rsp + 0x48]
mov rbx, qword [rbp - 0x48]
mov r8d, 0x10c
mov rdx, rbx
mov dword [rsp + 0x48], 6
mov dword [rdi + 8], eax
call fcn.18004fc60
mov r8d, 0x10c
mov dword [rdi + 0xc], eax
mov rdx, rbx
mov dword [rsp + 0x48], 8
lea rcx, [rsp + 0x48]
call fcn.18004fc60
mov r8d, 0x10c
mov dword [rdi + 0x10], eax
mov rdx, rbx
mov dword [rsp + 0x48], 4
lea rcx, [rsp + 0x48]
call fcn.18004fc60
inc eax
mov dword [rdi + 0x14], eax
jmp 0x18004d42c
cmp r14d, 0x17a64
je 0x18004d417
cmp r14d, 0x1b94c
je 0x18004dd04
jmp 0x18004d431
mov rdx, rax
mov ecx, 0x44
call fcn.180006450
mov qword [rbp - 0x58], 0
mov r10, qword [rsp + 0x68]
imul eax, dword [rbp - 0x28], 0x42
add r14d, eax
mov dword [rbp - 0x4c], r14d
cmp r14d, dword [rsp + 0x40]
ja 0x18004dd04
mov r9, qword [rbp - 0x10]
mov edx, dword [rbp - 0x80]
mov ebx, dword [rbp - 0x64]
mov rdi, qword [rbp + 0x18]
mov r8d, dword [rsp + 0x58]
mov r11d, dword [rsp + 0x70]
mov rcx, qword [rbp - 0x48]
mov rax, qword [rbp - 8]
jmp 0x18004c7c3
mov eax, dword [rdi + 0x30]
test eax, eax
jne 0x18004d4b2
lea rcx, str.CK_FORK
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x18004c904
cmp byte [rax], 0x6e
jne 0x18004dd32
cmp byte [rax + 1], 0x6f
jne 0x18004dd32
cmp byte [rax + 2], 0
jne 0x18004dd32
mov dword [rbp - 0x58], 2
jmp 0x18004dd04
mov dword [rbp - 0x58], eax
jmp 0x18004dd04
movsd xmm0, qword [0x18007abd0]
lea r14, [0x180000000]
movaps xmmword [rsp + 0x370], xmm6
mov esi, 0x40
movaps xmmword [rsp + 0x360], xmm7
movaps xmmword [rsp + 0x350], xmm8
movaps xmmword [rsp + 0x340], xmm9
movsd xmm9, qword [rbp - 0x38]
movaps xmmword [rsp + 0x330], xmm10
movsd xmm10, qword [0x18007ac48]
movaps xmmword [rsp + 0x320], xmm11
movsd xmm11, qword [0x18007aca0]
movaps xmmword [rsp + 0x310], xmm12
movsd xmm12, qword [0x18007ab28]
movaps xmmword [rsp + 0x300], xmm13
movsd xmm13, qword [0x18007ab70]
movaps xmmword [rsp + 0x2f0], xmm14
movsd xmm14, qword [0x18007ab50]
movaps xmmword [rsp + 0x2e0], xmm15
nop dword [rax]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
xor ebx, ebx
movd xmm15, eax
cvtdq2pd xmm15, xmm15
lea edi, [rbx + 7]
cmp ebx, 6
ja case.default.0x18004d58a
mov ecx, dword [r14 + rbx*4 + 0x4dd4c]
add rcx, r14
jmp rcx
movaps xmm6, xmm9
mulsd xmm6, xmm0
movaps xmm0, xmm6
movaps xmm8, xmm6
mulsd xmm0, xmm6
divsd xmm8, xmm15
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movaps xmm0, xmm6
mulsd xmm0, xmm13
mulsd xmm7, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
mulsd xmm6, xmm14
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, xmm6
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm2, xmm9
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
movsd qword [rsp + 0x20], xmm8
mov r9d, esi
lea rdx, str.VoEBaseImpl::OnErrorIsReported_____VE_RUNTIME_REC_ERROR
call fcn.18005f710
movsd xmm0, qword [0x18007abd0]
jmp case.default.0x18004d58a
movsd xmm9, qword [0x18007acf8]
jmp case.default.0x18004d58a
movsd xmm8, qword [0x18007ad20]
movsd xmm0, qword [0x18007acb0]
divsd xmm8, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movsd xmm0, qword [0x18007ac90]
mulsd xmm7, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm10
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, qword [0x18007ac40]
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movsd xmm2, qword [0x18007ad38]
lea rdx, str._options___IO_MAINLOOP____DONT_CREATE_BROWSER_THREADS
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
mov r9d, esi
movsd qword [rsp + 0x20], xmm8
call fcn.18005f710
movsd xmm0, qword [0x18007abd0]
movsd xmm9, qword [0x18007ad28]
jmp case.default.0x18004d58a
movaps xmm6, xmm9
mulsd xmm6, xmm0
movaps xmm0, xmm6
movaps xmm8, xmm6
mulsd xmm0, xmm6
divsd xmm8, xmm15
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movaps xmm0, xmm6
mulsd xmm0, xmm13
mulsd xmm7, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
mulsd xmm6, xmm14
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, xmm6
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm2, xmm9
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
movsd qword [rsp + 0x20], xmm8
mov r9d, esi
lea rdx, str.uint8___OVERLOADABLE___shuffle2_uint16__uint16__ulong8__
call fcn.18005f710
movsd xmm8, qword [0x18007ad08]
movsd xmm0, qword [0x18007ac88]
divsd xmm8, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movsd xmm0, qword [0x18007ac50]
mulsd xmm7, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm10
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, qword [0x18007ac10]
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movsd xmm2, qword [0x18007ad20]
lea rdx, str.CRemoteReboot::UndoChanges___GetFileAttributes___failed_
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
mov r9d, esi
movsd qword [rsp + 0x20], xmm8
call fcn.18005f710
movsd xmm0, qword [0x18007abd0]
movsd xmm9, qword [0x18007ad18]
jmp case.default.0x18004d58a
movaps xmm6, xmm9
mulsd xmm6, xmm0
movaps xmm0, xmm6
movaps xmm8, xmm6
mulsd xmm0, xmm6
divsd xmm8, xmm15
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movaps xmm0, xmm6
mulsd xmm0, xmm13
mulsd xmm7, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
mulsd xmm6, xmm14
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, xmm6
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm2, xmm9
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
movsd qword [rsp + 0x20], xmm8
mov r9d, esi
lea rdx, str.void_data_models2::SuitabilityEngine::initTasksDataset__
call fcn.18005f710
movsd xmm8, qword [0x18007ace8]
movsd xmm0, qword [0x18007ac70]
movsd xmm9, qword [0x18007ad08]
divsd xmm8, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movsd xmm0, qword [0x18007abe0]
mulsd xmm7, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm10
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, qword [0x18007abd8]
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm2, xmm9
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
movsd qword [rsp + 0x20], xmm8
mov r9d, esi
lea rdx, str.encoder_line__d:_unsupported_GED_setter_DescRegFile___s_
call fcn.18005f710
movsd xmm0, qword [0x18007abd0]
jmp case.default.0x18004d58a
movaps xmm6, xmm9
mulsd xmm6, xmm0
movaps xmm0, xmm6
movaps xmm8, xmm6
mulsd xmm0, xmm6
divsd xmm8, xmm15
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm7, xmm0
movaps xmm0, xmm6
mulsd xmm0, xmm13
mulsd xmm7, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
mulsd xmm6, xmm14
addsd xmm7, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm7, xmm6
mulsd xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
movaps xmm6, xmm0
movaps xmm0, xmm8
mulsd xmm0, xmm13
mulsd xmm6, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan
mulsd xmm0, xmm11
movaps xmm1, xmm8
mov ecx, 2
mulsd xmm1, xmm14
addsd xmm6, xmm0
addsd xmm6, xmm1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
movaps xmm2, xmm9
movsd qword [rsp + 0x30], xmm7
movq r8, xmm2
movsd qword [rsp + 0x28], xmm6
mov rcx, rax
movsd qword [rsp + 0x20], xmm8
mov r9d, esi
lea rdx, str.GC_CONNECTEETYPE_HOSTVMKVNIC_PortConnectee_Dvs_Vim__2QBDB
call fcn.18005f710
movsd xmm0, qword [0x18007abd0]
jmp case.default.0x18004d58a
movsd xmm9, qword [0x18007ad40]
inc ebx
sub rdi, 1
jne 0x18004d576
add esi, esi
cmp esi, 0x7d00
jl 0x18004d560
movss xmm10, dword [0x18007ac28]
xorps xmm8, xmm8
movss xmm11, dword [0x18007acc0]
movss xmm12, dword [0x18007ab44]
movss xmm13, dword [0x18007ad64]
movss xmm14, dword [0x18007abb0]
movss xmm9, dword [0x18007ab90]
movsd xmm15, qword [0x18007acd8]
movaps xmm1, xmm10
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movaps xmm1, xmm11
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm1, xmm8
addss xmm6, xmm6
mulss xmm1, xmm13
movaps xmm7, xmm0
mulss xmm7, xmm12
movaps xmm0, xmm14
subss xmm1, xmm6
addss xmm7, xmm1
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm6, xmm6
mov ecx, 2
cvtss2sd xmm6, xmm8
subss xmm7, xmm9
cvtss2sd xmm7, xmm7
movaps xmm0, xmm7
divsd xmm0, qword [0x18007ad20]
mulsd xmm0, xmm15
cvttsd2si ebx, xmm0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [rsp + 0x28], ebx
lea rdx, str.MemoryTraceManager::initMemory
mov rcx, rax
movsd qword [rsp + 0x20], xmm7
movaps xmm3, xmm6
movq r9, xmm6
mov r8d, edi
call fcn.18005f710
movss xmm0, dword [0x18007ad5c]
addss xmm8, xmm9
inc edi
comiss xmm0, xmm8
ja 0x18004db90
movaps xmm15, xmmword [rsp + 0x2e0]
movaps xmm14, xmmword [rsp + 0x2f0]
movaps xmm13, xmmword [rsp + 0x300]
movaps xmm12, xmmword [rsp + 0x310]
movaps xmm11, xmmword [rsp + 0x320]
movaps xmm10, xmmword [rsp + 0x330]
movaps xmm9, xmmword [rsp + 0x340]
movaps xmm8, xmmword [rsp + 0x350]
movaps xmm7, xmmword [rsp + 0x360]
movaps xmm6, xmmword [rsp + 0x370]
mov dword [rbp - 0x58], 0
jmp 0x18004dd04
xor esi, esi
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov r8, rdi
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], esi
mov qword [rsp + 0x28], rax
lea r9d, [rsi + 0x60]
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.18002bb20
mov rbx, qword [rbp - 0x48]
mov rcx, qword [rbp + 0x38]
mov eax, dword [rbx + 0x34]
cdq
sub eax, edx
xor edx, edx
sar eax, 1
movsxd r8, eax
shl r8, 2
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x58], esi
mov rax, qword [rbp - 0x58]
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.18005fed0
mov rbx, qword [rsp + 0x3d0]
add rsp, 0x380
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor r8d, r8d
lea rdx, [0x180074bc1]
lea rcx, str.e_m:e_p:16:16_i32:16:32_a:16_n8:16
call fcn.18002dd00
int3