Function at 0x140025430
Capabilities:
Allocate thread local storage
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov byte [rsp + 0x10], dl
mov byte [rsp + 8], cl
sub rsp, 0x1e8
mov dword [rsp + 0x34], 0x13f
mov dword [rsp + 0x3c], 0x234
mov byte [rsp + 0x23], 0x33
mov dword [rsp + 0x28], 0x1a1
mov dword [rsp + 0x38], 0x245
mov dword [rsp + 0x44], 0x1bd
mov dword [rsp + 0x48], 0xe7
mov byte [rsp + 0x22], 0x7d
mov dword [rsp + 0x40], 0x23a
mov byte [rsp + 0x25], 0xe1
mov byte [rsp + 0x21], 0x6a
mov dword [rsp + 0x2c], 0x1a5
mov byte [rsp + 0x24], 9
mov byte [rsp + 0x20], 0x51
mov byte [rsp + 0x26], 0x98
mov dword [rsp + 0x30], 0x50
mov dword [rsp + 0x78], 0xfffffe02
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x188], 0
je 0x140025837
cmp dword [rsp + 0x38], 0
je 0x140025764
movsx eax, byte [rsp + 0x22]
cmp eax, dword [0x14007d218]
jne 0x140025764
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x14007d23c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov byte [rsp + 0x24], al
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [0x14007d228]
shr eax, cl
mov ecx, dword [0x14007d208]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d208], eax
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [0x14007d248]
shr eax, cl
xor eax, dword [rsp + 0x2c]
movsx ecx, byte [0x14007d25c]
and ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140025579
movzx eax, byte [rsp + 0x23]
cmp dword [rsp + 0x38], eax
je 0x140025579
mov dword [rsp + 0x84], 0
jmp 0x140025584
mov dword [rsp + 0x84], 1
movzx eax, byte [0x14007d202]
xor eax, dword [rsp + 0x84]
mov dword [0x14007d230], eax
movsx eax, byte [0x14007d203]
movzx ecx, byte [rsp + 0x20]
cmp eax, ecx
jne 0x1400255b5
mov dword [rsp + 0x88], 1
jmp 0x1400255c0
mov dword [rsp + 0x88], 0
movsx eax, byte [0x14007d22e]
and eax, dword [rsp + 0x88]
mov byte [0x14007d22e], al
movsx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x23]
and eax, ecx
xor eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [0x14007d204]
shr eax, cl
mov ecx, dword [0x14007d230]
and ecx, eax
mov eax, ecx
mov dword [0x14007d230], eax
movsx eax, byte [0x14007d21c]
movzx ecx, byte [rsp + 0x21]
sub eax, ecx
mov ecx, dword [rsp + 0x38]
shl eax, cl
mov ecx, dword [0x14007d234]
and ecx, eax
mov eax, ecx
mov dword [0x14007d234], eax
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x14007d24c]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x34]
movsx ecx, byte [0x14007d21c]
add ecx, eax
mov eax, ecx
mov byte [0x14007d21c], al
mov eax, dword [rsp + 0x34]
cmp dword [0x14007d218], eax
jne 0x140025660
mov dword [rsp + 0x8c], 1
jmp 0x14002566b
mov dword [rsp + 0x8c], 0
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x8c], eax
jne 0x140025685
mov dword [rsp + 0x90], 1
jmp 0x140025690
mov dword [rsp + 0x90], 0
mov eax, dword [rsp + 0x90]
mov dword [0x14007d248], eax
cmp dword [0x14007d258], 0
je 0x1400256e3
movzx eax, byte [rsp + 0x21]
and eax, dword [rsp + 0x34]
movsx ecx, byte [rsp + 0x22]
mov dword [rsp + 0x18c], ecx
movsx edx, byte [0x14007d22d]
movzx ecx, dl
mov edx, dword [rsp + 0x18c]
shl edx, cl
mov ecx, edx
xor eax, ecx
test eax, eax
je 0x1400256e3
mov dword [rsp + 0x94], 1
jmp 0x1400256ee
mov dword [rsp + 0x94], 0
movzx eax, byte [0x14007d202]
xor eax, dword [rsp + 0x94]
mov byte [0x14007d202], al
movzx eax, byte [0x14007d22c]
mov dword [rsp + 0x190], eax
movzx ecx, byte [rsp + 0x23]
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [rsp + 0x190]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
mov eax, dword [0x14007d248]
imul eax, dword [rsp + 0x40]
xor edx, edx
mov ecx, 3
div ecx
mov dword [rsp + 0x3c], eax
xor edx, edx
mov eax, dword [rsp + 0x38]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [0x14007d230]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
movzx eax, byte [0x14007d21f]
mov ecx, dword [rsp + 0x28]
mov edx, dword [rsp + 0x40]
sub edx, ecx
mov ecx, edx
sar eax, cl
mov ecx, dword [0x14007d230]
and ecx, eax
mov eax, ecx
mov dword [0x14007d230], eax
cmp dword [0x14007d220], 0
je 0x1400257dc
movzx eax, byte [rsp + 0x21]
cmp eax, dword [0x14007d240]
jne 0x1400257ac
mov dword [rsp + 0x98], 1
jmp 0x1400257b7
mov dword [rsp + 0x98], 0
movsx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x98]
test eax, eax
je 0x1400257dc
mov dword [rsp + 0x9c], 1
jmp 0x1400257e7
mov dword [rsp + 0x9c], 0
mov eax, dword [rsp + 0x9c]
mov ecx, dword [0x14007d23c]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d23c], eax
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x14007d20c]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x14007d21e]
add ecx, eax
mov eax, ecx
mov byte [0x14007d21e], al
mov eax, dword [rsp + 0x34]
mov ecx, dword [0x14007d220]
and ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
jmp 0x1400254b7
mov dword [rsp + 0x7c], 0x10a
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x7c]
dec eax
mov dword [rsp + 0x7c], eax
cmp dword [rsp + 0x194], 0
je 0x1400258af
movzx eax, byte [0x14007d22c]
sub eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x30]
shr eax, cl
cmp eax, dword [rsp + 0x28]
jne 0x14002588b
cmp dword [0x14007d204], 0
je 0x14002588b
mov dword [rsp + 0xa0], 1
jmp 0x140025896
mov dword [rsp + 0xa0], 0
mov eax, dword [rsp + 0xa0]
mov ecx, dword [0x14007d254]
or ecx, eax
mov eax, ecx
mov dword [0x14007d254], eax
jmp 0x14002583f
movzx eax, byte [0x14007d21f]
test eax, eax
je 0x1400258dc
movzx eax, byte [rsp + 0x23]
sub eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x1400258dc
mov dword [rsp + 0xa4], 1
jmp 0x1400258e7
mov dword [rsp + 0xa4], 0
mov eax, dword [rsp + 0xa4]
mov ecx, dword [0x14007d240]
and ecx, eax
mov eax, ecx
mov dword [0x14007d240], eax
mov eax, dword [0x14007d248]
imul eax, dword [rsp + 0x40]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x22], al
mov eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [0x14007d204]
shr eax, cl
movsx ecx, byte [0x14007d22d]
xor ecx, eax
mov eax, ecx
mov byte [0x14007d22d], al
cmp dword [0x14007d204], 0
jne 0x140025955
cmp dword [rsp + 0x2c], 0
jne 0x140025955
mov dword [rsp + 0xa8], 0
jmp 0x140025960
mov dword [rsp + 0xa8], 1
mov eax, dword [rsp + 0xa8]
mov ecx, dword [0x14007d218]
add ecx, eax
mov eax, ecx
mov dword [0x14007d218], eax
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x140025987
cmp dword [rsp + 0x34], 0
jne 0x140025994
cmp dword [0x14007d224], 0
je 0x140025b4b
movsx eax, byte [rsp + 0x22]
add eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
mov ecx, dword [0x14007d220]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d238]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
movsx eax, byte [0x14007d25c]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x25], al
mov eax, dword [0x14007d258]
imul eax, dword [rsp + 0x40]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x24], al
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x14007d224]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
shr eax, cl
movsx ecx, byte [0x14007d25c]
add ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
cmp dword [rsp + 0x2c], 0
je 0x140025a3e
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x30]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x140025a3e
mov dword [rsp + 0xac], 1
jmp 0x140025a49
mov dword [rsp + 0xac], 0
movsx eax, byte [0x14007d22f]
xor eax, dword [rsp + 0xac]
movsx ecx, byte [0x14007d21c]
sub ecx, eax
mov eax, ecx
mov byte [0x14007d21c], al
movsx eax, byte [0x14007d21c]
mov dword [rsp + 0x198], eax
xor edx, edx
mov eax, dword [rsp + 0x3c]
mov ecx, 5
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x198]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x25], al
movzx eax, byte [0x14007d21e]
movzx ecx, byte [rsp + 0x24]
mov dword [rsp + 0x19c], ecx
mov edx, dword [rsp + 0x3c]
movzx ecx, dl
mov edx, dword [rsp + 0x19c]
sar edx, cl
mov ecx, edx
or eax, ecx
movsx ecx, byte [0x14007d21c]
sub ecx, eax
mov eax, ecx
mov byte [0x14007d21c], al
mov eax, dword [0x14007d254]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x22], al
movzx eax, byte [0x14007d202]
test eax, eax
je 0x140025b0b
movsx eax, byte [rsp + 0x25]
add eax, dword [rsp + 0x38]
test eax, eax
je 0x140025b0b
mov dword [rsp + 0xb0], 1
jmp 0x140025b16
mov dword [rsp + 0xb0], 0
mov eax, dword [rsp + 0xb0]
mov dword [0x14007d228], eax
movzx eax, byte [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x14007d250]
shl eax, cl
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
movzx ecx, byte [0x14007d22c]
or ecx, eax
mov eax, ecx
mov byte [0x14007d22c], al
cmp dword [rsp + 0x34], 0
jne 0x140025b5f
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x140025bf6
movsx eax, byte [rsp + 0x25]
mov ecx, dword [0x14007d218]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x40]
and edx, ecx
mov ecx, edx
and ecx, dword [0x14007d248]
xor eax, ecx
mov dword [0x14007d254], eax
movzx eax, byte [0x14007d21e]
mov ecx, dword [rsp + 0x2c]
mov edx, dword [rsp + 0x3c]
shr edx, cl
mov ecx, edx
mov edx, dword [rsp + 0x2c]
or edx, ecx
mov ecx, edx
shl eax, cl
movsx ecx, byte [0x14007d22d]
and ecx, eax
mov eax, ecx
mov byte [0x14007d22d], al
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x14007d234]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d204], eax
movzx eax, byte [0x14007d21f]
mov dword [rsp + 0x1a0], eax
movsx ecx, byte [rsp + 0x26]
mov eax, ecx
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [rsp + 0x1a0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
mov eax, 0xef
mov word [rsp + 0x54], ax
mov eax, 9
mov word [rsp + 0x54], ax
jmp 0x140025c1f
movzx eax, word [rsp + 0x54]
inc ax
mov word [rsp + 0x54], ax
movsx eax, word [rsp + 0x54]
cmp eax, 0x39d
jge 0x140025d86
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d218]
and ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x21]
mov dword [rsp + 0x1a4], ecx
movzx edx, byte [0x14007d21f]
movzx ecx, dl
mov edx, dword [rsp + 0x1a4]
shl edx, cl
mov ecx, edx
xor eax, ecx
movsx ecx, byte [0x14007d201]
sub ecx, eax
mov eax, ecx
mov byte [0x14007d201], al
movzx eax, byte [rsp + 0x24]
sub eax, dword [rsp + 0x2c]
cmp dword [rsp + 0x34], eax
jne 0x140025c95
mov dword [rsp + 0xb4], 1
jmp 0x140025ca0
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xb4]
mov ecx, dword [0x14007d248]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d244]
and ecx, eax
mov eax, ecx
mov dword [0x14007d244], eax
movzx eax, byte [0x14007d21f]
test eax, eax
je 0x140025ce2
movzx eax, byte [rsp + 0x24]
test eax, eax
je 0x140025ce2
mov dword [rsp + 0xb8], 1
jmp 0x140025ced
mov dword [rsp + 0xb8], 0
movsx eax, byte [0x14007d203]
xor eax, dword [rsp + 0xb8]
mov byte [0x14007d203], al
mov eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [0x14007d23c]
shl eax, cl
movsx ecx, byte [0x14007d22d]
add ecx, eax
mov eax, ecx
mov byte [0x14007d22d], al
movsx eax, byte [0x14007d201]
test eax, eax
je 0x140025d49
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140025d49
mov dword [rsp + 0xbc], 1
jmp 0x140025d54
mov dword [rsp + 0xbc], 0
movsx eax, byte [0x14007d22e]
and eax, dword [rsp + 0xbc]
mov byte [0x14007d22e], al
mov eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [0x14007d214]
sar eax, cl
or eax, dword [rsp + 0x28]
mov byte [0x14007d21d], al
jmp 0x140025c12
call qword [sym.imp.KERNEL32.dll_FlushProcessWriteBuffers]
cmp dword [0x14007d208], 0
je 0x140025db1
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x48]
shl eax, cl
test eax, eax
je 0x140025db1
mov dword [rsp + 0xc0], 1
jmp 0x140025dbc
mov dword [rsp + 0xc0], 0
mov eax, dword [rsp + 0xc0]
mov ecx, dword [0x14007d23c]
and ecx, eax
mov eax, ecx
mov dword [0x14007d23c], eax
movzx eax, byte [0x14007d202]
movsx ecx, byte [rsp + 0x26]
add eax, ecx
test eax, eax
je 0x140025dfb
movsx eax, byte [rsp + 0x26]
test eax, eax
je 0x140025dfb
mov dword [rsp + 0xc4], 1
jmp 0x140025e06
mov dword [rsp + 0xc4], 0
mov eax, dword [rsp + 0xc4]
mov ecx, dword [0x14007d248]
and ecx, eax
mov eax, ecx
mov dword [0x14007d248], eax
xor edx, edx
mov eax, dword [rsp + 0x34]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [0x14007d254]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
movzx eax, byte [rsp + 0x20]
sub eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d234]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d238]
sub ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
movzx eax, byte [0x14007d202]
mov dword [rsp + 0x1a8], eax
movzx ecx, byte [rsp + 0x20]
mov eax, ecx
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [rsp + 0x1a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movzx eax, byte [rsp + 0x21]
movzx ecx, al
mov eax, dword [rsp + 0x44]
sar eax, cl
cmp dword [rsp + 0x40], eax
jne 0x140025ec0
mov dword [rsp + 0xc8], 1
jmp 0x140025ecb
mov dword [rsp + 0xc8], 0
mov eax, dword [rsp + 0xc8]
mov ecx, dword [0x14007d208]
xor ecx, eax
mov eax, ecx
mov byte [0x14007d21f], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x14007d228]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x140025f0b
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140025f0b
mov dword [rsp + 0xcc], 0
jmp 0x140025f16
mov dword [rsp + 0xcc], 1
movsx eax, byte [0x14007d201]
and eax, dword [rsp + 0xcc]
mov byte [0x14007d201], al
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x14007d228]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x25]
cmp eax, ecx
jne 0x140025f4f
mov dword [rsp + 0xd0], 1
jmp 0x140025f5a
mov dword [rsp + 0xd0], 0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [0x14007d254]
and ecx, eax
mov eax, ecx
mov dword [0x14007d254], eax
cmp dword [0x14007d24c], 0
je 0x140025fa4
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x24]
sub ecx, dword [rsp + 0x44]
or eax, ecx
test eax, eax
je 0x140025fa4
cmp dword [0x14007d234], 0
je 0x140025fa4
mov dword [rsp + 0xd4], 1
jmp 0x140025faf
mov dword [rsp + 0xd4], 0
mov eax, dword [rsp + 0xd4]
mov ecx, dword [0x14007d23c]
or ecx, eax
mov eax, ecx
mov dword [0x14007d23c], eax
mov eax, dword [rsp + 0x38]
cmp dword [0x14007d254], eax
jne 0x140025fdf
mov dword [rsp + 0xdc], 1
jmp 0x140025fea
mov dword [rsp + 0xdc], 0
movsx eax, byte [0x14007d22d]
cmp dword [rsp + 0x48], eax
jne 0x140026004
mov dword [rsp + 0xd8], 1
jmp 0x14002600f
mov dword [rsp + 0xd8], 0
mov eax, dword [rsp + 0xd8]
cmp dword [rsp + 0xdc], eax
je 0x140026064
movsx eax, byte [rsp + 0x26]
test eax, eax
je 0x140026045
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x23]
add eax, ecx
test eax, eax
je 0x140026045
mov dword [rsp + 0xe0], 1
jmp 0x140026050
mov dword [rsp + 0xe0], 0
movsx eax, byte [0x14007d22d]
or eax, dword [rsp + 0xe0]
mov byte [0x14007d21f], al
movsx eax, byte [0x14007d22d]
and eax, dword [rsp + 0x28]
movzx ecx, byte [rsp + 0x21]
mov dword [rsp + 0x1ac], ecx
movzx edx, byte [rsp + 0x23]
movzx ecx, dl
mov edx, dword [rsp + 0x1ac]
sar edx, cl
mov ecx, edx
xor eax, ecx
test eax, eax
je 0x1400260a6
movsx eax, byte [0x14007d22f]
test eax, eax
je 0x1400260a6
mov byte [rsp + 0x4c], 1
jmp 0x1400260ab
mov byte [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x4c]
mov byte [0x14007d202], al
movsx eax, byte [rsp + 0x25]
and eax, dword [rsp + 0x2c]
test eax, eax
jne 0x1400260d7
cmp dword [rsp + 0x34], 0
jne 0x1400260d7
mov dword [rsp + 0xe4], 0
jmp 0x1400260e2
mov dword [rsp + 0xe4], 1
mov eax, dword [rsp + 0xe4]
movzx ecx, al
mov eax, dword [0x14007d204]
shl eax, cl
mov ecx, dword [0x14007d250]
or ecx, eax
mov eax, ecx
mov dword [0x14007d250], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x14007d210]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d230]
and ecx, eax
mov eax, ecx
mov dword [0x14007d230], eax
mov dword [rsp + 0x80], 0xffffff99
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x1b0], eax
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x1b0], 0
je 0x140026364
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x3c], eax
jne 0x140026252
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x24]
sar eax, cl
test eax, eax
je 0x14002618c
cmp dword [rsp + 0x40], 0
je 0x14002618c
mov dword [rsp + 0xe8], 1
jmp 0x140026197
mov dword [rsp + 0xe8], 0
mov eax, dword [rsp + 0xe8]
movzx ecx, al
mov eax, dword [0x14007d23c]
shr eax, cl
mov byte [0x14007d200], al
movsx eax, byte [0x14007d25c]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x14007d24c]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d23c]
and ecx, eax
mov eax, ecx
mov dword [0x14007d23c], eax
movzx eax, byte [rsp + 0x21]
movzx ecx, al
mov eax, dword [0x14007d23c]
shr eax, cl
mov ecx, dword [rsp + 0x48]
shl eax, cl
mov ecx, dword [0x14007d208]
or ecx, eax
mov eax, ecx
mov dword [0x14007d208], eax
movsx eax, byte [0x14007d21c]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x28]
shl edx, cl
mov ecx, edx
movzx edx, byte [rsp + 0x20]
or ecx, edx
shl eax, cl
mov ecx, dword [0x14007d220]
and ecx, eax
mov eax, ecx
mov dword [0x14007d220], eax
movzx eax, byte [0x14007d21f]
add eax, dword [rsp + 0x3c]
movsx ecx, byte [rsp + 0x22]
add eax, ecx
mov byte [0x14007d22d], al
movsx eax, byte [0x14007d201]
mov dword [rsp + 0x1b4], eax
movzx ecx, byte [rsp + 0x23]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x1b4]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x23], al
movzx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [rsp + 0x30]
shl eax, cl
movsx ecx, byte [rsp + 0x26]
xor eax, ecx
mov ecx, dword [0x14007d204]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d22e]
xor ecx, eax
mov eax, ecx
mov byte [0x14007d22e], al
movzx eax, byte [rsp + 0x24]
mov ecx, dword [0x14007d208]
and ecx, eax
mov eax, ecx
mov dword [0x14007d254], eax
movzx eax, byte [rsp + 0x21]
cmp dword [0x14007d214], eax
jne 0x1400262e0
mov dword [rsp + 0xec], 1
jmp 0x1400262eb
mov dword [rsp + 0xec], 0
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0xec]
xor ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d22f]
or ecx, eax
mov eax, ecx
mov byte [0x14007d22f], al
movzx eax, byte [0x14007d21e]
mov dword [rsp + 0x1b8], eax
movsx ecx, byte [rsp + 0x22]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x1b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
movsx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0x30]
sar eax, cl
mov ecx, dword [0x14007d24c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d24c]
add ecx, eax
mov eax, ecx
mov dword [0x14007d24c], eax
jmp 0x14002612d
movzx eax, byte [0x14007d21f]
movzx ecx, byte [rsp + 0x20]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov byte [rsp + 0x20], al
movsx eax, byte [0x14007d22e]
test eax, eax
je 0x140026404
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x140026404
movzx eax, byte [rsp + 0x20]
cmp eax, dword [0x14007d248]
jbe 0x140026404
movsx eax, byte [rsp + 0x26]
test eax, eax
je 0x1400263c6
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
test eax, eax
je 0x1400263c6
mov dword [rsp + 0xf0], 1
jmp 0x1400263d1
mov dword [rsp + 0xf0], 0
mov eax, dword [rsp + 0xf0]
mov ecx, dword [0x14007d238]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d254], eax
movsx eax, byte [0x14007d21d]
movsx ecx, byte [rsp + 0x25]
imul eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov byte [rsp + 0x26], al
imul eax, dword [0x14007d204], 7
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
xor eax, eax
mov word [rsp + 0x74], ax
movsx eax, word [rsp + 0x74]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x14002644c
cmp dword [rsp + 0x60], 1
je 0x140026475
cmp dword [rsp + 0x60], 2
je 0x1400264bc
cmp dword [rsp + 0x60], 3
je 0x14002650c
jmp 0x140026575
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x14007d224]
and ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x30]
movzx ecx, byte [0x14007d22c]
or ecx, eax
mov eax, ecx
mov byte [0x14007d22c], al
jmp 0x140026575
movsx eax, byte [0x14007d25c]
sub eax, dword [rsp + 0x28]
movsx ecx, byte [rsp + 0x26]
add eax, ecx
mov dword [0x14007d224], eax
movsx eax, byte [rsp + 0x26]
add eax, dword [rsp + 0x3c]
movsx ecx, byte [rsp + 0x25]
sub eax, ecx
mov ecx, dword [0x14007d228]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d20c]
sub ecx, eax
mov eax, ecx
mov dword [0x14007d20c], eax
jmp 0x140026575
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x14007d230]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
shr eax, cl
test eax, eax
je 0x1400264f2
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x14007d1fc]
sar eax, cl
test eax, eax
je 0x1400264f2
mov dword [rsp + 0xf4], 1
jmp 0x1400264fd
mov dword [rsp + 0xf4], 0
mov eax, dword [rsp + 0xf4]
mov dword [0x14007d240], eax
jmp 0x140026575
movsx eax, byte [0x14007d22f]
movsx ecx, byte [rsp + 0x25]
mov edx, dword [rsp + 0x3c]
add edx, ecx
mov ecx, edx
movsx edx, byte [rsp + 0x22]
or ecx, edx
cmp eax, ecx
jne 0x140026538
mov dword [rsp + 0xf8], 1
jmp 0x140026543
mov dword [rsp + 0xf8], 0
movsx eax, byte [0x14007d25c]
or eax, dword [rsp + 0xf8]
mov byte [0x14007d25c], al
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x14007d20c]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d234]
and ecx, eax
mov eax, ecx
mov dword [0x14007d234], eax
movsx eax, byte [0x14007d200]
or eax, dword [rsp + 0x44]
mov dword [0x14007d204], eax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x2c], eax
jne 0x1400265b1
movsx eax, byte [rsp + 0x22]
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [0x14007d234]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
movzx eax, byte [rsp + 0x24]
mov ecx, dword [0x14007d228]
sub ecx, eax
mov eax, ecx
test eax, eax
je 0x1400265e9
movsx eax, byte [rsp + 0x22]
add eax, dword [rsp + 0x38]
test eax, eax
je 0x1400265e9
movzx eax, byte [0x14007d202]
test eax, eax
je 0x1400265e9
mov dword [rsp + 0xfc], 1
jmp 0x1400265f4
mov dword [rsp + 0xfc], 0
movsx eax, byte [0x14007d22e]
or eax, dword [rsp + 0xfc]
mov byte [0x14007d22e], al
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x14007d20c]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x14007d202]
xor ecx, eax
mov eax, ecx
mov byte [0x14007d202], al
movsx eax, byte [0x14007d201]
test eax, eax
jne 0x140026661
mov eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [rsp + 0x30]
sar eax, cl
mov ecx, dword [rsp + 0x30]
sar eax, cl
test eax, eax
jne 0x140026661
movsx eax, byte [0x14007d201]
test eax, eax
jne 0x140026661
mov dword [rsp + 0x100], 0
jmp 0x14002666c
mov dword [rsp + 0x100], 1
mov eax, dword [rsp + 0x100]
mov ecx, dword [0x14007d24c]
and ecx, eax
mov eax, ecx
mov dword [0x14007d24c], eax
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x14007d224]
and ecx, eax
mov eax, ecx
xor eax, dword [rsp + 0x2c]
mov dword [0x14007d20c], eax
movsx eax, byte [0x14007d22d]
sub eax, dword [rsp + 0x44]
mov ecx, dword [0x14007d240]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d240], eax
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x14007d248]
or ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
cmp dword [0x14007d250], 0
jne 0x1400266f5
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x1400266e8
movzx eax, byte [rsp + 0x21]
cmp dword [rsp + 0x34], eax
je 0x1400266f5
mov dword [rsp + 0x104], 0
jmp 0x140026700
mov dword [rsp + 0x104], 1
mov eax, dword [rsp + 0x104]
mov ecx, dword [0x14007d234]
add ecx, eax
mov eax, ecx
mov dword [0x14007d234], eax
mov eax, dword [rsp + 0x44]
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [0x14007d258]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x26], al
movsx eax, byte [0x14007d25c]
mov dword [rsp + 0x1bc], eax
xor edx, edx
mov eax, dword [rsp + 0x34]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x1bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
movzx eax, byte [rsp + 0x24]
mov ecx, dword [0x14007d218]
lea eax, [rax + rcx*2]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x1c0]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
je 0x1400267b4
cmp dword [rsp + 0x64], 1
je 0x140026840
cmp dword [rsp + 0x64], 2
je 0x140026880
cmp dword [rsp + 0x64], 3
je 0x1400268ba
jmp 0x14002695e
movsx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
mov ecx, dword [rsp + 0x28]
shl eax, cl
mov ecx, dword [0x14007d208]
and ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d201]
and eax, ecx
mov ecx, dword [0x14007d234]
add ecx, eax
mov eax, ecx
mov dword [0x14007d234], eax
cmp dword [rsp + 0x48], 0
jne 0x14002680f
movzx eax, byte [rsp + 0x24]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
test eax, eax
jne 0x14002680f
mov dword [rsp + 0x108], 0
jmp 0x14002681a
mov dword [rsp + 0x108], 1
mov eax, dword [rsp + 0x108]
mov ecx, dword [0x14007d250]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d218]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d218], eax
jmp 0x14002695e
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [0x14007d244]
shr eax, cl
movzx ecx, byte [rsp + 0x21]
sub ecx, dword [rsp + 0x38]
add ecx, dword [0x14007d244]
xor eax, ecx
mov byte [0x14007d201], al
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [0x14007d250]
shl eax, cl
mov byte [0x14007d21e], al
jmp 0x14002695e
movsx eax, byte [0x14007d22e]
movzx ecx, byte [rsp + 0x20]
cmp eax, ecx
jne 0x14002689d
mov dword [rsp + 0x10c], 1
jmp 0x1400268a8
mov dword [rsp + 0x10c], 0
mov eax, dword [rsp + 0x10c]
mov dword [0x14007d1fc], eax
jmp 0x14002695e
movsx eax, byte [0x14007d22d]
mov ecx, dword [rsp + 0x38]
sar eax, cl
movsx ecx, byte [rsp + 0x25]
and eax, ecx
test eax, eax
je 0x1400268f1
mov eax, dword [0x14007d250]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x1400268f1
mov dword [rsp + 0x110], 1
jmp 0x1400268fc
mov dword [rsp + 0x110], 0
mov eax, dword [rsp + 0x110]
mov ecx, dword [0x14007d218]
add ecx, eax
mov eax, ecx
mov dword [0x14007d218], eax
cmp dword [0x14007d234], 0
jne 0x14002693f
movsx eax, byte [rsp + 0x26]
test eax, eax
je 0x140026932
movsx eax, byte [rsp + 0x25]
sub eax, dword [rsp + 0x3c]
test eax, eax
jne 0x14002693f
mov dword [rsp + 0x114], 0
jmp 0x14002694a
mov dword [rsp + 0x114], 1
movsx eax, byte [0x14007d22f]
and eax, dword [rsp + 0x114]
mov byte [0x14007d22f], al
cmp dword [0x14007d254], 0
je 0x140026986
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x21]
sub eax, ecx
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140026986
mov byte [rsp + 0x4d], 1
jmp 0x14002698b
mov byte [rsp + 0x4d], 0
movzx eax, byte [rsp + 0x4d]
mov byte [0x14007d202], al
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x14007d240]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2c]
shl eax, cl
mov ecx, dword [0x14007d210]
add ecx, eax
mov eax, ecx
mov dword [0x14007d210], eax
cmp dword [rsp + 0x34], 0
je 0x140026a06
cmp dword [rsp + 0x44], 0
je 0x140026a06
cmp dword [0x14007d244], 0
je 0x1400269ee
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x34]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x1400269ee
mov dword [rsp + 0x118], 1
jmp 0x1400269f9
mov dword [rsp + 0x118], 0
mov eax, dword [rsp + 0x118]
mov dword [0x14007d1fc], eax
mov eax, dword [0x14007d220]
imul eax, dword [rsp + 0x2c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov byte [rsp + 0x25], al
movsx eax, byte [0x14007d25c]
movsx ecx, byte [rsp + 0x25]
and eax, ecx
test eax, eax
jne 0x140026a3e
cmp dword [rsp + 0x38], 0
jne 0x140026a3e
mov byte [rsp + 0x4e], 0
jmp 0x140026a43
mov byte [rsp + 0x4e], 1
movzx eax, byte [rsp + 0x4e]
mov byte [0x14007d21d], al
movzx eax, byte [0x14007d21f]
movzx ecx, byte [rsp + 0x21]
mov dword [rsp + 0x1c4], ecx
mov edx, dword [rsp + 0x38]
movzx ecx, dl
mov edx, dword [rsp + 0x1c4]
shl edx, cl
mov ecx, edx
and eax, ecx
movsx ecx, byte [0x14007d22d]
and ecx, eax
mov eax, ecx
mov byte [0x14007d22d], al
movsx eax, byte [0x14007d200]
movsx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x21]
add ecx, edx
movzx edx, byte [rsp + 0x20]
xor ecx, edx
or eax, ecx
mov ecx, dword [0x14007d238]
or ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
movzx eax, byte [0x14007d22c]
mov dword [rsp + 0x1c8], eax
movsx ecx, byte [rsp + 0x25]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x1c8]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
movzx eax, byte [rsp + 0x24]
cmp dword [rsp + 0x34], eax
jne 0x140026b8c
mov eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [0x14007d238]
sar eax, cl
movzx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x3c]
add edx, ecx
mov ecx, edx
sar eax, cl
movsx ecx, byte [0x14007d200]
cmp eax, ecx
jne 0x140026b26
mov dword [rsp + 0x11c], 1
jmp 0x140026b31
mov dword [rsp + 0x11c], 0
mov eax, dword [rsp + 0x11c]
mov ecx, dword [0x14007d24c]
add ecx, eax
mov eax, ecx
mov dword [0x14007d24c], eax
cmp dword [0x14007d234], 0
je 0x140026b6d
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x2c]
shl eax, cl
test eax, eax
je 0x140026b6d
mov dword [rsp + 0x120], 1
jmp 0x140026b78
mov dword [rsp + 0x120], 0
movzx eax, byte [0x14007d21e]
sub eax, dword [rsp + 0x120]
mov byte [0x14007d21e], al
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [0x14007d210]
sar eax, cl
mov ecx, dword [rsp + 0x3c]
shl eax, cl
mov dword [0x14007d220], eax
mov eax, 0xffffffd9
mov word [rsp + 0x58], ax
movsx eax, word [rsp + 0x58]
mov dword [rsp + 0x1cc], eax
movzx eax, word [rsp + 0x58]
inc ax
mov word [rsp + 0x58], ax
cmp dword [rsp + 0x1cc], 0
je 0x140026bf9
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x14007d244]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x38], eax
jmp 0x140026bb7
movsx eax, byte [0x14007d201]
sub eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x20]
sar eax, cl
movzx ecx, byte [rsp + 0x20]
sub ecx, dword [0x14007d20c]
and eax, ecx
mov dword [0x14007d224], eax
cmp dword [rsp + 0x30], 0
je 0x140026c44
movzx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
test eax, eax
je 0x140026c44
mov dword [rsp + 0x124], 1
jmp 0x140026c4f
mov dword [rsp + 0x124], 0
mov eax, dword [rsp + 0x124]
cmp dword [0x14007d234], eax
jne 0x140026c6b
mov dword [rsp + 0x128], 1
jmp 0x140026c76
mov dword [rsp + 0x128], 0
movsx eax, byte [0x14007d21c]
sub eax, dword [rsp + 0x128]
mov byte [0x14007d21c], al
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
movsx eax, byte [0x14007d200]
mov ecx, dword [rsp + 0x2c]
mov edx, dword [rsp + 0x40]
sub edx, ecx
mov ecx, edx
sub ecx, dword [rsp + 0x40]
cmp eax, ecx
jne 0x140026cc9
movsx eax, byte [0x14007d21d]
test eax, eax
je 0x140026cc9
mov dword [rsp + 0x12c], 1
jmp 0x140026cd4
mov dword [rsp + 0x12c], 0
mov eax, dword [rsp + 0x12c]
mov ecx, dword [0x14007d258]
sub ecx, eax
mov eax, ecx
mov dword [0x14007d258], eax
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x24]
sar eax, cl
test eax, eax
jne 0x140026d0f
cmp dword [rsp + 0x28], 0
jne 0x140026d0f
mov dword [rsp + 0x130], 0
jmp 0x140026d1a
mov dword [rsp + 0x130], 1
mov eax, dword [rsp + 0x130]
cmp dword [0x14007d240], eax
jne 0x140026d30
mov byte [rsp + 0x4f], 1
jmp 0x140026d35
mov byte [rsp + 0x4f], 0
movzx eax, byte [rsp + 0x4f]
mov byte [0x14007d22d], al
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [0x14007d230]
shl eax, cl
movsx ecx, byte [0x14007d200]
mov edx, dword [rsp + 0x2c]
add edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x40]
shl edx, cl
mov ecx, edx
and eax, ecx
mov ecx, dword [0x14007d218]
and ecx, eax
mov eax, ecx
mov dword [0x14007d218], eax
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x140026db4
movzx eax, byte [rsp + 0x21]
movzx ecx, byte [0x14007d22c]
cmp eax, ecx
jge 0x140026db4
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [0x14007d244]
shl eax, cl
or eax, dword [rsp + 0x30]
mov ecx, dword [0x14007d240]
and ecx, eax
mov eax, ecx
mov dword [0x14007d240], eax
movzx eax, byte [0x14007d21e]
movzx ecx, byte [rsp + 0x20]
and eax, ecx
test eax, eax
je 0x140026de4
movsx eax, byte [rsp + 0x22]
add eax, dword [0x14007d250]
cmp dword [rsp + 0x2c], eax
jne 0x140026de4
mov dword [rsp + 0x134], 1
jmp 0x140026def
mov dword [rsp + 0x134], 0
mov eax, dword [rsp + 0x134]
mov ecx, dword [0x14007d238]
and ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
mov eax, dword [rsp + 0x2c]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [0x14007d220]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x23], al
cmp dword [rsp + 0x28], 0
je 0x140026e46
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140026e46
mov dword [rsp + 0x138], 1
jmp 0x140026e51
mov dword [rsp + 0x138], 0
mov eax, dword [rsp + 0x138]
mov ecx, dword [0x14007d224]
and ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d25c]
xor ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
movsx eax, byte [0x14007d25c]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
movzx ecx, byte [rsp + 0x20]
shl eax, cl
mov byte [0x14007d202], al
call qword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
cmp dword [0x14007d230], 0
je 0x140026eb7
movsx eax, byte [rsp + 0x22]
xor eax, dword [rsp + 0x30]
test eax, eax
je 0x140026eb7
mov dword [rsp + 0x13c], 1
jmp 0x140026ec2
mov dword [rsp + 0x13c], 0
movsx eax, byte [0x14007d22f]
xor eax, dword [rsp + 0x13c]
mov byte [0x14007d22f], al
movzx eax, byte [0x14007d21f]
mov ecx, dword [rsp + 0x3c]
shl eax, cl
movsx ecx, byte [0x14007d22e]
or ecx, eax
mov eax, ecx
mov byte [0x14007d22e], al
call qword [sym.imp.KERNEL32.dll_TlsAlloc]
movzx eax, byte [rsp + 0x21]
imul ecx, dword [0x14007d214], 3
add eax, ecx
cdq
and edx, 7
add eax, edx
and eax, 7
sub eax, edx
mov dword [rsp + 0x1d0], eax
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 0
je 0x140026f4a
cmp dword [rsp + 0x68], 1
je 0x140026f6b
cmp dword [rsp + 0x68], 2
je 0x140026faa
cmp dword [rsp + 0x68], 3
je 0x140026fe2
jmp 0x14002703a
movsx eax, byte [0x14007d22e]
movsx ecx, byte [rsp + 0x22]
imul eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x28], eax
jmp 0x1400270b0
xor edx, edx
mov eax, dword [rsp + 0x38]
mov ecx, 3
div ecx
mov ecx, dword [0x14007d244]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x22], al
movzx eax, byte [0x14007d22c]
movsx ecx, byte [rsp + 0x25]
shl eax, cl
movsx ecx, byte [0x14007d203]
sub ecx, eax
mov eax, ecx
mov byte [0x14007d203], al
jmp 0x1400270b0
movzx eax, byte [0x14007d21f]
test eax, eax
je 0x140026fcd
movzx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x30]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140026fcd
mov byte [rsp + 0x50], 1
jmp 0x140026fd2
mov byte [rsp + 0x50], 0
movzx eax, byte [rsp + 0x50]
mov byte [0x14007d201], al
jmp 0x1400270b0
cmp dword [0x14007d228], 0
jne 0x140027016
movsx eax, byte [rsp + 0x25]
cmp dword [rsp + 0x38], eax
jne 0x140027009
mov eax, dword [0x14007d224]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shl eax, cl
test eax, eax
jne 0x140027016
mov dword [rsp + 0x140], 0
jmp 0x140027021
mov dword [rsp + 0x140], 1
mov eax, dword [rsp + 0x140]
mov ecx, dword [0x14007d258]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d258], eax
jmp 0x1400270b0
movsx eax, byte [0x14007d200]
movsx ecx, byte [rsp + 0x25]
sar eax, cl
mov byte [0x14007d202], al
movsx eax, byte [0x14007d200]
add eax, dword [rsp + 0x28]
test eax, eax
je 0x140027071
cmp dword [rsp + 0x38], 0
je 0x140027071
mov dword [rsp + 0x144], 1
jmp 0x14002707c
mov dword [rsp + 0x144], 0
mov eax, dword [rsp + 0x144]
mov ecx, dword [0x14007d224]
or ecx, eax
mov eax, ecx
mov dword [0x14007d224], eax
movsx eax, byte [rsp + 0x25]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x14007d1fc]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x14007d258]
lea eax, [rax + rcx*2]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov word [rsp + 0x70], ax
movsx eax, word [rsp + 0x70]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
je 0x140027100
cmp dword [rsp + 0x5c], 1
je 0x140027131
cmp dword [rsp + 0x5c], 2
je 0x14002717f
cmp dword [rsp + 0x5c], 3
je 0x1400271ab
jmp 0x1400271c6
movsx eax, byte [0x14007d21d]
mov dword [rsp + 0x1d4], eax
xor edx, edx
mov eax, dword [rsp + 0x38]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x1d4]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
jmp 0x1400271c6
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x28], eax
jne 0x140027148
mov dword [rsp + 0x148], 1
jmp 0x140027153
mov dword [rsp + 0x148], 0
mov eax, dword [rsp + 0x148]
mov ecx, dword [rsp + 0x34]
or ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [0x14007d208]
shr eax, cl
mov ecx, dword [0x14007d240]
and ecx, eax
mov eax, ecx
mov dword [0x14007d240], eax
jmp 0x1400271c6
movsx eax, byte [0x14007d22e]
movzx ecx, byte [rsp + 0x21]
movsx edx, byte [rsp + 0x25]
sub ecx, edx
add ecx, dword [rsp + 0x30]
and eax, ecx
movsx ecx, byte [0x14007d22f]
and ecx, eax
mov eax, ecx
mov byte [0x14007d22f], al
jmp 0x1400271c6
xor edx, edx
mov eax, dword [rsp + 0x38]
mov ecx, 3
div ecx
mov ecx, dword [0x14007d20c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
movsx eax, byte [0x14007d22e]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x28], eax
movsx eax, byte [0x14007d203]
movsx ecx, byte [rsp + 0x22]
add eax, ecx
mov dword [0x14007d240], eax
mov dword [rsp + 0x6c], 0x30
mov dword [rsp + 0x6c], 0x27
jmp 0x140027211
mov eax, dword [rsp + 0x6c]
dec eax
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0x2a
jbe 0x14002746a
movzx eax, byte [rsp + 0x24]
cmp dword [0x14007d234], eax
jne 0x140027236
mov dword [rsp + 0x150], 1
jmp 0x140027241
mov dword [rsp + 0x150], 0
cmp dword [rsp + 0x40], 0
jne 0x14002725e
cmp dword [0x14007d210], 0
jne 0x14002725e
mov dword [rsp + 0x14c], 0
jmp 0x140027269
mov dword [rsp + 0x14c], 1
mov eax, dword [rsp + 0x14c]
cmp dword [rsp + 0x150], eax
jne 0x140027286
mov dword [rsp + 0x154], 1
jmp 0x140027291
mov dword [rsp + 0x154], 0
movzx eax, byte [rsp + 0x24]
cmp dword [rsp + 0x154], eax
je 0x1400272b4
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x14007d230]
sub ecx, eax
mov eax, ecx
mov dword [0x14007d220], eax
movsx eax, byte [rsp + 0x25]
movsx ecx, byte [rsp + 0x26]
mov edx, dword [rsp + 0x44]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x1400272d7
mov dword [rsp + 0x158], 1
jmp 0x1400272e2
mov dword [rsp + 0x158], 0
movsx eax, byte [0x14007d203]
or eax, dword [rsp + 0x158]
mov dword [0x14007d258], eax
cmp dword [0x14007d210], 0
jne 0x140027328
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x34]
sar eax, cl
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
xor eax, dword [0x14007d234]
test eax, eax
jne 0x140027328
mov dword [rsp + 0x15c], 0
jmp 0x140027333
mov dword [rsp + 0x15c], 1
mov eax, dword [rsp + 0x15c]
mov ecx, dword [0x14007d248]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d248], eax
movsx eax, byte [0x14007d21d]
or eax, dword [rsp + 0x3c]
movzx ecx, byte [rsp + 0x21]
or eax, ecx
mov ecx, dword [0x14007d230]
and ecx, eax
mov eax, ecx
mov dword [0x14007d230], eax
movzx eax, byte [0x14007d21e]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x44]
add edx, ecx
mov ecx, edx
xor eax, ecx
mov byte [0x14007d201], al
movzx eax, byte [rsp + 0x21]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x14007d244]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x3c]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x14007d208]
and ecx, eax
mov eax, ecx
and eax, dword [rsp + 0x3c]
movsx ecx, byte [0x14007d25c]
or eax, ecx
mov ecx, dword [0x14007d228]
xor ecx, eax
mov eax, ecx
mov dword [0x14007d228], eax
cmp dword [rsp + 0x3c], 0
je 0x1400273fd
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x3c]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x1400273fd
mov dword [rsp + 0x160], 1
jmp 0x140027408
mov dword [rsp + 0x160], 0
movsx eax, byte [0x14007d201]
mov ecx, dword [rsp + 0x160]
sar eax, cl
movsx ecx, byte [0x14007d203]
or ecx, eax
mov eax, ecx
mov byte [0x14007d203], al
movzx eax, byte [rsp + 0x21]
cmp dword [0x14007d210], eax
jne 0x140027443
mov dword [rsp + 0x164], 1
jmp 0x14002744e
mov dword [rsp + 0x164], 0
mov eax, dword [rsp + 0x164]
mov ecx, dword [0x14007d224]
add ecx, eax
mov eax, ecx
mov dword [0x14007d224], eax
jmp 0x140027207
cmp dword [0x14007d210], 0
jne 0x14002749d
cmp dword [rsp + 0x30], 0
jne 0x14002749d
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
sub eax, dword [0x14007d234]
test eax, eax
jne 0x14002749d
mov dword [rsp + 0x168], 0
jmp 0x1400274a8
mov dword [rsp + 0x168], 1
mov eax, dword [rsp + 0x168]
mov dword [0x14007d238], eax
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x40], eax
je 0x1400274d4
cmp dword [rsp + 0x38], 0
jne 0x1400274d4
mov dword [rsp + 0x16c], 0
jmp 0x1400274df
mov dword [rsp + 0x16c], 1
mov eax, dword [rsp + 0x16c]
mov ecx, dword [0x14007d254]
xor ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d25c]
sub ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
movsx eax, byte [rsp + 0x22]
cmp dword [0x14007d234], eax
jne 0x14002759a
cmp dword [rsp + 0x48], 0
je 0x14002752f
cmp dword [0x14007d230], 0
je 0x14002752f
mov dword [rsp + 0x170], 1
jmp 0x14002753a
mov dword [rsp + 0x170], 0
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x170], eax
jge 0x14002759a
cmp dword [0x14007d210], 0
jne 0x140027578
movsx eax, byte [rsp + 0x22]
sub eax, dword [rsp + 0x28]
movsx ecx, byte [rsp + 0x22]
xor eax, ecx
xor eax, dword [0x14007d258]
test eax, eax
jne 0x140027578
mov dword [rsp + 0x174], 0
jmp 0x140027583
mov dword [rsp + 0x174], 1
mov eax, dword [rsp + 0x174]
mov ecx, dword [0x14007d240]
sub ecx, eax
mov eax, ecx
mov dword [0x14007d240], eax
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x3c]
shl eax, cl
mov ecx, dword [0x14007d244]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [0x14007d22f]
and ecx, eax
mov eax, ecx
mov byte [0x14007d22f], al
mov eax, dword [rsp + 0x38]
movzx ecx, al
mov eax, dword [0x14007d250]
shl eax, cl
movsx ecx, byte [0x14007d25c]
add ecx, eax
mov eax, ecx
mov byte [0x14007d25c], al
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x30]
shl eax, cl
test eax, eax
jne 0x14002760d
cmp dword [rsp + 0x44], 0
jne 0x14002760d
mov dword [rsp + 0x178], 0
jmp 0x140027618
mov dword [rsp + 0x178], 1
mov eax, dword [rsp + 0x178]
cmp dword [0x14007d224], eax
jne 0x140027634
mov dword [rsp + 0x17c], 1
jmp 0x14002763f
mov dword [rsp + 0x17c], 0
movsx eax, byte [0x14007d21d]
and eax, dword [rsp + 0x17c]
mov byte [0x14007d21d], al
movsx eax, byte [rsp + 0x25]
movsx ecx, byte [rsp + 0x22]
mov edx, dword [rsp + 0x28]
sub edx, ecx
mov ecx, edx
xor eax, ecx
movzx ecx, al
mov eax, dword [0x14007d240]
shl eax, cl
mov ecx, dword [0x14007d238]
add ecx, eax
mov eax, ecx
mov dword [0x14007d238], eax
movzx eax, byte [0x14007d202]
mov dword [rsp + 0x1d8], eax
xor edx, edx
mov eax, dword [rsp + 0x3c]
mov ecx, 5
div ecx
mov ecx, dword [rsp + 0x1d8]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x23], al
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x1400276be
movsx eax, byte [rsp + 0x22]
test eax, eax
jne 0x1400276d2
cmp dword [rsp + 0x40], 0
jne 0x1400276d2
mov dword [rsp + 0x180], 0
jmp 0x1400276dd
mov dword [rsp + 0x180], 1
mov eax, dword [rsp + 0x180]
cmp dword [0x14007d24c], eax
jne 0x1400276f9
mov dword [rsp + 0x184], 1
jmp 0x140027704
mov dword [rsp + 0x184], 0
mov eax, dword [rsp + 0x184]
mov ecx, dword [0x14007d250]
and ecx, eax
mov eax, ecx
mov dword [0x14007d250], eax
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x2c]
sub edx, ecx
mov ecx, edx
sar eax, cl
mov ecx, dword [0x14007d250]
xor ecx, eax
mov eax, ecx
or eax, dword [0x14007d220]
movzx ecx, byte [0x14007d22c]
or ecx, eax
mov eax, ecx
mov byte [0x14007d22c], al
mov eax, dword [rsp + 0x30]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [0x14007d240]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x26], al
movzx r8d, byte [0x14007d248]
movzx edx, byte [0x14007d21c]
mov ecx, dword [0x14007d238]
call fcn.1400277a0
movzx eax, byte [rsp + 0x23]
movsx ecx, byte [rsp + 0x26]
and eax, ecx
add rsp, 0x1e8
ret