Function at 0x1800050b0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x3b8
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x3a8], rax
cmp dword [rsp + 0x3d8], 0xf1a7d42b
jne 0x18000538c
mov dword [rsp + 0x2b8], 7
mov dword [rsp + 0x2cc], 0xb
mov eax, dword [rsp + 0x2cc]
test eax, eax
jle 0x18000516c
mov eax, dword [rsp + 0x2cc]
cmp eax, 1
jle 0x180005139
mov eax, dword [rsp + 0x2b8]
and eax, 0x66b
mov dword [rsp + 0x2b8], eax
mov eax, dword [rsp + 0x2cc]
sub eax, 2
mov dword [rsp + 0x2cc], eax
jmp 0x1800050fc
mov eax, dword [rsp + 0x2b8]
cmp eax, 0x80d
jle 0x18000515a
mov eax, dword [rsp + 0x2b8]
and eax, 0x86
mov dword [rsp + 0x2b8], eax
mov eax, dword [rsp + 0x2cc]
dec eax
mov dword [rsp + 0x2cc], eax
jmp 0x1800050fc
mov dword [rsp + 0x2c4], 3
mov dword [rsp + 0x2d4], 9
mov eax, dword [rsp + 0x2d4]
test eax, eax
jle 0x1800051f2
mov eax, dword [rsp + 0x2d4]
cmp eax, 1
jle 0x1800051bf
mov eax, dword [rsp + 0x2c4]
and eax, 0x15f8
mov dword [rsp + 0x2c4], eax
mov eax, dword [rsp + 0x2d4]
sub eax, 2
mov dword [rsp + 0x2d4], eax
jmp 0x180005182
mov eax, dword [rsp + 0x2c4]
cmp eax, 0x80b
jle 0x1800051e0
mov eax, dword [rsp + 0x2c4]
and eax, 0x84
mov dword [rsp + 0x2c4], eax
mov eax, dword [rsp + 0x2d4]
dec eax
mov dword [rsp + 0x2d4], eax
jmp 0x180005182
mov dword [rsp + 0x2b0], 6
mov dword [rsp + 0x2d0], 0xa
mov eax, dword [rsp + 0x2d0]
test eax, eax
jle 0x180005278
mov eax, dword [rsp + 0x2d0]
cmp eax, 1
jle 0x180005245
mov eax, dword [rsp + 0x2b0]
and eax, 0x1f29
mov dword [rsp + 0x2b0], eax
mov eax, dword [rsp + 0x2d0]
sub eax, 2
mov dword [rsp + 0x2d0], eax
jmp 0x180005208
mov eax, dword [rsp + 0x2b0]
cmp eax, 0x80c
jle 0x180005266
mov eax, dword [rsp + 0x2b0]
and eax, 0x85
mov dword [rsp + 0x2b0], eax
mov eax, dword [rsp + 0x2d0]
dec eax
mov dword [rsp + 0x2d0], eax
jmp 0x180005208
mov dword [rsp + 0x2b4], 7
mov dword [rsp + 0x2c0], 9
mov eax, dword [rsp + 0x2c0]
test eax, eax
jle 0x1800052fe
mov eax, dword [rsp + 0x2c0]
cmp eax, 1
jle 0x1800052cb
mov eax, dword [rsp + 0x2b4]
and eax, 0x19b6
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2c0]
sub eax, 2
mov dword [rsp + 0x2c0], eax
jmp 0x18000528e
mov eax, dword [rsp + 0x2b4]
cmp eax, 0x80b
jle 0x1800052ec
mov eax, dword [rsp + 0x2b4]
and eax, 0x84
mov dword [rsp + 0x2b4], eax
mov eax, dword [rsp + 0x2c0]
dec eax
mov dword [rsp + 0x2c0], eax
jmp 0x18000528e
mov dword [rsp + 0x2bc], 2
mov dword [rsp + 0x2c8], 4
mov eax, dword [rsp + 0x2c8]
test eax, eax
jle 0x180005382
mov eax, dword [rsp + 0x2c8]
cmp eax, 1
jle 0x180005351
mov eax, dword [rsp + 0x2bc]
and eax, 0x1176
mov dword [rsp + 0x2bc], eax
mov eax, dword [rsp + 0x2c8]
sub eax, 2
mov dword [rsp + 0x2c8], eax
jmp 0x180005314
mov eax, dword [rsp + 0x2bc]
cmp eax, 0x806
jle 0x180005370
mov eax, dword [rsp + 0x2bc]
and eax, 0x7f
mov dword [rsp + 0x2bc], eax
mov eax, dword [rsp + 0x2c8]
dec eax
mov dword [rsp + 0x2c8], eax
jmp 0x180005314
mov eax, 1
jmp 0x180006178
mov rcx, qword [rsp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov qword [rsp + 0x150], 0
lea rcx, [rsp + 0x150]
call section..text
test eax, eax
jne 0x18000559a
mov dword [rsp + 0x2e4], 8
mov dword [rsp + 0x2f4], 0xc
cmp dword [rsp + 0x2f4], 0
jle 0x180005431
mov eax, dword [rsp + 0x2f4]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005413
mov dword [rsp + 0x2e4], 4
mov eax, dword [rsp + 0x2f4]
dec eax
mov dword [rsp + 0x2f4], eax
jmp 0x1800053d1
mov dword [rsp + 0x2e4], 0
mov eax, dword [rsp + 0x2f4]
sub eax, 2
mov dword [rsp + 0x2f4], eax
jmp 0x1800053d1
mov dword [rsp + 0x2e0], 2
mov dword [rsp + 0x2ec], 0x10
cmp dword [rsp + 0x2ec], 0
jle 0x1800054a7
mov eax, dword [rsp + 0x2ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005489
mov dword [rsp + 0x2e0], 4
mov eax, dword [rsp + 0x2ec]
dec eax
mov dword [rsp + 0x2ec], eax
jmp 0x180005447
mov dword [rsp + 0x2e0], 4
mov eax, dword [rsp + 0x2ec]
sub eax, 2
mov dword [rsp + 0x2ec], eax
jmp 0x180005447
mov dword [rsp + 0x2dc], 3
mov dword [rsp + 0x2f0], 0xf
cmp dword [rsp + 0x2f0], 0
jle 0x18000551e
mov eax, dword [rsp + 0x2f0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005500
mov dword [rsp + 0x2dc], 0
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x1800054bd
mov dword [rsp + 0x2dc], 4
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x1800054bd
mov dword [rsp + 0x2d8], 4
mov dword [rsp + 0x2e8], 0x11
cmp dword [rsp + 0x2e8], 0
jle 0x180005593
mov eax, dword [rsp + 0x2e8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005576
mov dword [rsp + 0x2d8], 0
mov eax, dword [rsp + 0x2e8]
dec eax
mov dword [rsp + 0x2e8], eax
jmp 0x180005534
mov dword [rsp + 0x2d8], 4
mov eax, dword [rsp + 0x2e8]
dec eax
mov dword [rsp + 0x2e8], eax
jmp 0x180005534
xor eax, eax
jmp 0x180006178
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x3d0]
call fcn.1800035a0
mov byte [rsp + 0x40], 0
lea rax, [rsp + 0x41]
mov rdi, rax
xor eax, eax
mov ecx, 0x103
rep stosb byte [rdi], al
mov dword [rsp + 0x310], 4
mov dword [rsp + 0x318], 3
mov eax, dword [rsp + 0x318]
test eax, eax
jle 0x180005649
mov eax, dword [rsp + 0x318]
cmp eax, 1
jle 0x180005618
mov eax, dword [rsp + 0x310]
and eax, 0xdd8
mov dword [rsp + 0x310], eax
mov eax, dword [rsp + 0x318]
sub eax, 2
mov dword [rsp + 0x318], eax
jmp 0x1800055db
mov eax, dword [rsp + 0x310]
cmp eax, 0x805
jle 0x180005637
mov eax, dword [rsp + 0x310]
and eax, 0x7e
mov dword [rsp + 0x310], eax
mov eax, dword [rsp + 0x318]
dec eax
mov dword [rsp + 0x318], eax
jmp 0x1800055db
mov dword [rsp + 0x304], 3
mov dword [rsp + 0x30c], 8
mov eax, dword [rsp + 0x30c]
test eax, eax
jle 0x1800056cf
mov eax, dword [rsp + 0x30c]
cmp eax, 1
jle 0x18000569c
mov eax, dword [rsp + 0x304]
and eax, 0x11d0
mov dword [rsp + 0x304], eax
mov eax, dword [rsp + 0x30c]
sub eax, 2
mov dword [rsp + 0x30c], eax
jmp 0x18000565f
mov eax, dword [rsp + 0x304]
cmp eax, 0x80a
jle 0x1800056bd
mov eax, dword [rsp + 0x304]
and eax, 0x83
mov dword [rsp + 0x304], eax
mov eax, dword [rsp + 0x30c]
dec eax
mov dword [rsp + 0x30c], eax
jmp 0x18000565f
mov dword [rsp + 0x314], 5
mov dword [rsp + 0x308], 5
mov eax, dword [rsp + 0x308]
test eax, eax
jle 0x180005755
mov eax, dword [rsp + 0x308]
cmp eax, 1
jle 0x180005722
mov eax, dword [rsp + 0x314]
and eax, 0x152b
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x308]
sub eax, 2
mov dword [rsp + 0x308], eax
jmp 0x1800056e5
mov eax, dword [rsp + 0x314]
cmp eax, 0x807
jle 0x180005743
mov eax, dword [rsp + 0x314]
and eax, 0x80
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x308]
dec eax
mov dword [rsp + 0x308], eax
jmp 0x1800056e5
mov dword [rsp + 0x300], 7
mov dword [rsp + 0x2f8], 0x10
cmp dword [rsp + 0x2f8], 0
jle 0x1800057cb
mov eax, dword [rsp + 0x2f8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800057ae
mov dword [rsp + 0x300], 0
mov eax, dword [rsp + 0x2f8]
sub eax, 2
mov dword [rsp + 0x2f8], eax
jmp 0x18000576b
mov dword [rsp + 0x300], 0
mov eax, dword [rsp + 0x2f8]
dec eax
mov dword [rsp + 0x2f8], eax
jmp 0x18000576b
mov dword [rsp + 0x2fc], 4
mov dword [rsp + 0x31c], 0x11
cmp dword [rsp + 0x31c], 0
jle 0x180005841
mov eax, dword [rsp + 0x31c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005823
mov dword [rsp + 0x2fc], 4
mov eax, dword [rsp + 0x31c]
dec eax
mov dword [rsp + 0x31c], eax
jmp 0x1800057e1
mov dword [rsp + 0x2fc], 4
mov eax, dword [rsp + 0x31c]
sub eax, 2
mov dword [rsp + 0x31c], eax
jmp 0x1800057e1
lea rax, [rsp + 0x290]
lea rcx, [0x18005b5a0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x1c
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x61e
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x158]
mov edx, 0x1b
lea rcx, [rsp + 0x290]
call fcn.18003bca0
lea r9, [0x180063a60]
lea r8, [rsp + 0x158]
mov edx, 0x104
lea rcx, [rsp + 0x40]
call fcn.180006e90
mov byte [rsp + 0x180], 0
lea rax, [rsp + 0x181]
mov rdi, rax
xor eax, eax
mov ecx, 0x103
rep stosb byte [rdi], al
mov dword [rsp + 0x324], 8
mov dword [rsp + 0x330], 0x12
cmp dword [rsp + 0x330], 0
jle 0x180005934
mov eax, dword [rsp + 0x330]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005916
mov dword [rsp + 0x324], 4
mov eax, dword [rsp + 0x330]
dec eax
mov dword [rsp + 0x330], eax
jmp 0x1800058d4
mov dword [rsp + 0x324], 0
mov eax, dword [rsp + 0x330]
sub eax, 2
mov dword [rsp + 0x330], eax
jmp 0x1800058d4
mov dword [rsp + 0x344], 6
mov dword [rsp + 0x320], 7
mov eax, dword [rsp + 0x320]
test eax, eax
jle 0x1800059ba
mov eax, dword [rsp + 0x320]
cmp eax, 1
jle 0x180005987
mov eax, dword [rsp + 0x344]
and eax, 0x169a
mov dword [rsp + 0x344], eax
mov eax, dword [rsp + 0x320]
sub eax, 2
mov dword [rsp + 0x320], eax
jmp 0x18000594a
mov eax, dword [rsp + 0x344]
cmp eax, 0x809
jle 0x1800059a8
mov eax, dword [rsp + 0x344]
and eax, 0x82
mov dword [rsp + 0x344], eax
mov eax, dword [rsp + 0x320]
dec eax
mov dword [rsp + 0x320], eax
jmp 0x18000594a
mov dword [rsp + 0x348], 9
mov dword [rsp + 0x328], 5
mov eax, dword [rsp + 0x328]
test eax, eax
jle 0x180005a40
mov eax, dword [rsp + 0x328]
cmp eax, 1
jle 0x180005a0d
mov eax, dword [rsp + 0x348]
and eax, 0x10a2
mov dword [rsp + 0x348], eax
mov eax, dword [rsp + 0x328]
sub eax, 2
mov dword [rsp + 0x328], eax
jmp 0x1800059d0
mov eax, dword [rsp + 0x348]
cmp eax, 0x807
jle 0x180005a2e
mov eax, dword [rsp + 0x348]
and eax, 0x80
mov dword [rsp + 0x348], eax
mov eax, dword [rsp + 0x328]
dec eax
mov dword [rsp + 0x328], eax
jmp 0x1800059d0
mov dword [rsp + 0x334], 4
mov dword [rsp + 0x34c], 3
mov eax, dword [rsp + 0x34c]
test eax, eax
jle 0x180005ac4
mov eax, dword [rsp + 0x34c]
cmp eax, 1
jle 0x180005a93
mov eax, dword [rsp + 0x334]
and eax, 0x1494
mov dword [rsp + 0x334], eax
mov eax, dword [rsp + 0x34c]
sub eax, 2
mov dword [rsp + 0x34c], eax
jmp 0x180005a56
mov eax, dword [rsp + 0x334]
cmp eax, 0x805
jle 0x180005ab2
mov eax, dword [rsp + 0x334]
and eax, 0x7e
mov dword [rsp + 0x334], eax
mov eax, dword [rsp + 0x34c]
dec eax
mov dword [rsp + 0x34c], eax
jmp 0x180005a56
mov dword [rsp + 0x338], 7
mov dword [rsp + 0x350], 8
mov eax, dword [rsp + 0x350]
test eax, eax
jle 0x180005b4a
mov eax, dword [rsp + 0x350]
cmp eax, 1
jle 0x180005b17
mov eax, dword [rsp + 0x338]
and eax, 0x2542
mov dword [rsp + 0x338], eax
mov eax, dword [rsp + 0x350]
sub eax, 2
mov dword [rsp + 0x350], eax
jmp 0x180005ada
mov eax, dword [rsp + 0x338]
cmp eax, 0x80a
jle 0x180005b38
mov eax, dword [rsp + 0x338]
and eax, 0x83
mov dword [rsp + 0x338], eax
mov eax, dword [rsp + 0x350]
dec eax
mov dword [rsp + 0x350], eax
jmp 0x180005ada
mov dword [rsp + 0x340], 6
mov dword [rsp + 0x354], 0xa
mov eax, dword [rsp + 0x354]
test eax, eax
jle 0x180005bd0
mov eax, dword [rsp + 0x354]
cmp eax, 1
jle 0x180005b9d
mov eax, dword [rsp + 0x340]
and eax, 0x1f29
mov dword [rsp + 0x340], eax
mov eax, dword [rsp + 0x354]
sub eax, 2
mov dword [rsp + 0x354], eax
jmp 0x180005b60
mov eax, dword [rsp + 0x340]
cmp eax, 0x80c
jle 0x180005bbe
mov eax, dword [rsp + 0x340]
and eax, 0x85
mov dword [rsp + 0x340], eax
mov eax, dword [rsp + 0x354]
dec eax
mov dword [rsp + 0x354], eax
jmp 0x180005b60
mov dword [rsp + 0x32c], 3
mov dword [rsp + 0x33c], 8
mov eax, dword [rsp + 0x33c]
test eax, eax
jle 0x180005c56
mov eax, dword [rsp + 0x33c]
cmp eax, 1
jle 0x180005c23
mov eax, dword [rsp + 0x32c]
and eax, 0x11d0
mov dword [rsp + 0x32c], eax
mov eax, dword [rsp + 0x33c]
sub eax, 2
mov dword [rsp + 0x33c], eax
jmp 0x180005be6
mov eax, dword [rsp + 0x32c]
cmp eax, 0x80a
jle 0x180005c44
mov eax, dword [rsp + 0x32c]
and eax, 0x83
mov dword [rsp + 0x32c], eax
mov eax, dword [rsp + 0x33c]
dec eax
mov dword [rsp + 0x33c], eax
jmp 0x180005be6
mov r8d, 0x104
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea rcx, [rsp + 0x180]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
jne 0x180005fe6
mov dword [rsp + 0x38c], 4
mov dword [rsp + 0x368], 0x13
cmp dword [rsp + 0x368], 0
jle 0x180005cfc
mov eax, dword [rsp + 0x368]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005cde
mov dword [rsp + 0x38c], 0
mov eax, dword [rsp + 0x368]
dec eax
mov dword [rsp + 0x368], eax
jmp 0x180005c9c
mov dword [rsp + 0x38c], 0
mov eax, dword [rsp + 0x368]
sub eax, 2
mov dword [rsp + 0x368], eax
jmp 0x180005c9c
mov dword [rsp + 0x36c], 7
mov dword [rsp + 0x37c], 0xd
cmp dword [rsp + 0x37c], 0
jle 0x180005d72
mov eax, dword [rsp + 0x37c]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005d55
mov dword [rsp + 0x36c], 0
mov eax, dword [rsp + 0x37c]
sub eax, 2
mov dword [rsp + 0x37c], eax
jmp 0x180005d12
mov dword [rsp + 0x36c], 4
mov eax, dword [rsp + 0x37c]
dec eax
mov dword [rsp + 0x37c], eax
jmp 0x180005d12
mov dword [rsp + 0x380], 1
mov dword [rsp + 0x374], 0x10
cmp dword [rsp + 0x374], 0
jle 0x180005de8
mov eax, dword [rsp + 0x374]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005dca
mov dword [rsp + 0x380], 4
mov eax, dword [rsp + 0x374]
dec eax
mov dword [rsp + 0x374], eax
jmp 0x180005d88
mov dword [rsp + 0x380], 0
mov eax, dword [rsp + 0x374]
sub eax, 2
mov dword [rsp + 0x374], eax
jmp 0x180005d88
mov dword [rsp + 0x388], 7
mov dword [rsp + 0x384], 0x11
cmp dword [rsp + 0x384], 0
jle 0x180005e5d
mov eax, dword [rsp + 0x384]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005e40
mov dword [rsp + 0x388], 0
mov eax, dword [rsp + 0x384]
dec eax
mov dword [rsp + 0x384], eax
jmp 0x180005dfe
mov dword [rsp + 0x388], 0
mov eax, dword [rsp + 0x384]
dec eax
mov dword [rsp + 0x384], eax
jmp 0x180005dfe
mov dword [rsp + 0x364], 8
mov dword [rsp + 0x378], 0x11
cmp dword [rsp + 0x378], 0
jle 0x180005ed3
mov eax, dword [rsp + 0x378]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180005eb5
mov dword [rsp + 0x364], 4
mov eax, dword [rsp + 0x378]
dec eax
mov dword [rsp + 0x378], eax
jmp 0x180005e73
mov dword [rsp + 0x364], 4
mov eax, dword [rsp + 0x378]
sub eax, 2
mov dword [rsp + 0x378], eax
jmp 0x180005e73
mov dword [rsp + 0x358], 2
mov dword [rsp + 0x35c], 0xa
mov eax, dword [rsp + 0x35c]
test eax, eax
jle 0x180005f59
mov eax, dword [rsp + 0x35c]
cmp eax, 1
jle 0x180005f26
mov eax, dword [rsp + 0x358]
and eax, 0x2106
mov dword [rsp + 0x358], eax
mov eax, dword [rsp + 0x35c]
sub eax, 2
mov dword [rsp + 0x35c], eax
jmp 0x180005ee9
mov eax, dword [rsp + 0x358]
cmp eax, 0x80c
jle 0x180005f47
mov eax, dword [rsp + 0x358]
and eax, 0x85
mov dword [rsp + 0x358], eax
mov eax, dword [rsp + 0x35c]
dec eax
mov dword [rsp + 0x35c], eax
jmp 0x180005ee9
mov dword [rsp + 0x360], 3
mov dword [rsp + 0x370], 8
mov eax, dword [rsp + 0x370]
test eax, eax
jle 0x180005fdf
mov eax, dword [rsp + 0x370]
cmp eax, 1
jle 0x180005fac
mov eax, dword [rsp + 0x360]
and eax, 0x11d0
mov dword [rsp + 0x360], eax
mov eax, dword [rsp + 0x370]
sub eax, 2
mov dword [rsp + 0x370], eax
jmp 0x180005f6f
mov eax, dword [rsp + 0x360]
cmp eax, 0x80a
jle 0x180005fcd
mov eax, dword [rsp + 0x360]
and eax, 0x83
mov dword [rsp + 0x360], eax
mov eax, dword [rsp + 0x370]
dec eax
mov dword [rsp + 0x370], eax
jmp 0x180005f6f
xor eax, eax
jmp 0x180006178
mov dword [rsp + 0x39c], 7
mov dword [rsp + 0x394], 4
mov eax, dword [rsp + 0x394]
test eax, eax
jle 0x18000606a
mov eax, dword [rsp + 0x394]
cmp eax, 1
jle 0x180006039
mov eax, dword [rsp + 0x39c]
and eax, 0x21f3
mov dword [rsp + 0x39c], eax
mov eax, dword [rsp + 0x394]
sub eax, 2
mov dword [rsp + 0x394], eax
jmp 0x180005ffc
mov eax, dword [rsp + 0x39c]
cmp eax, 0x806
jle 0x180006058
mov eax, dword [rsp + 0x39c]
and eax, 0x7f
mov dword [rsp + 0x39c], eax
mov eax, dword [rsp + 0x394]
dec eax
mov dword [rsp + 0x394], eax
jmp 0x180005ffc
mov dword [rsp + 0x398], 6
mov dword [rsp + 0x390], 7
mov eax, dword [rsp + 0x390]
test eax, eax
jle 0x1800060f0
mov eax, dword [rsp + 0x390]
cmp eax, 1
jle 0x1800060bd
mov eax, dword [rsp + 0x398]
and eax, 0x169a
mov dword [rsp + 0x398], eax
mov eax, dword [rsp + 0x390]
sub eax, 2
mov dword [rsp + 0x390], eax
jmp 0x180006080
mov eax, dword [rsp + 0x398]
cmp eax, 0x809
jle 0x1800060de
mov eax, dword [rsp + 0x398]
and eax, 0x82
mov dword [rsp + 0x398], eax
mov eax, dword [rsp + 0x390]
dec eax
mov dword [rsp + 0x390], eax
jmp 0x180006080
mov dword [rsp + 0x3a4], 7
mov dword [rsp + 0x3a0], 0xa
mov eax, dword [rsp + 0x3a0]
test eax, eax
jle 0x180006176
mov eax, dword [rsp + 0x3a0]
cmp eax, 1
jle 0x180006143
mov eax, dword [rsp + 0x3a4]
and eax, 0x23c7
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x3a0]
sub eax, 2
mov dword [rsp + 0x3a0], eax
jmp 0x180006106
mov eax, dword [rsp + 0x3a4]
cmp eax, 0x80c
jle 0x180006164
mov eax, dword [rsp + 0x3a4]
and eax, 0x85
mov dword [rsp + 0x3a4], eax
mov eax, dword [rsp + 0x3a0]
dec eax
mov dword [rsp + 0x3a0], eax
jmp 0x180006106
xor eax, eax
mov rcx, qword [rsp + 0x3a8]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x3b8
pop rdi
pop rsi
ret