Function at 0x1400a15d0
Capabilities:
Authenticate hmac
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x688
movdqa xmmword [rsp + 0x670], xmm6
mov qword [rsp + 0x98], r8
mov qword [rsp + 0x130], rcx
movzx eax, byte [rdx + 0xa0]
test al, al
sete cl
mov qword [rsp + 0xa8], rdx
mov rsi, qword [rdx + 0x98]
test rsi, rsi
sete dl
and dl, cl
mov byte [rsp + 0x87], dl
je 0x1400a1630
xor r13d, r13d
jmp 0x1400a32cd
mov ecx, dword [0x141dd0d48]
sub ecx, dword [0x141dd0d4c]
and ecx, 0x2c1ee2a5
imul ecx, ecx, 0x7b36a425
cmp ecx, 0x83106dd5
jae 0x1400a165c
mov qword [rsp + 0x210], 0
mov ecx, 0x9632314f
nop word cs:[rax + rax]
mov edx, dword [0x141dd0d50]
and edx, dword [0x141dd0d54]
add edx, 0xa9f72c64
imul rdx, rcx
shr rdx, 0x3d
imul edx, edx, 0xf2811aa8
mov qword [rsp + 0x210], 0
cmp edx, 0xb19999f6
jb 0x1400a1670
mov qword [rsp + 0x220], 0
test al, al
jne 0x1400a1c15
mov eax, dword [0x141dd0d58]
and eax, dword [0x141dd0d5c]
add eax, 0xfbdfbda0
imul rax, rax, 0x26560b4d
shr rax, 0x3c
xor eax, 0xdf2a793f
cmp eax, 0x3bfc562d
jae 0x1400a16e6
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
nop dword [rax]
mov ecx, dword [0x141dd0d60]
add ecx, dword [0x141dd0d64]
or ecx, 0x9238f748
add ecx, 0xee8d4b6e
cmp ecx, 0xfbc4bde3
ja 0x1400a16f0
mov qword [rsp + 0x188], rsi
test rax, rax
je 0x1400a3021
mov qword [rsp + 0x70], rax
cmp word [rax], 0
je 0x1400a1bc0
lea rbx, [rsp + 0x270]
lea r14, [rsp + 0x270]
lea r15, [rsp + 0xc0]
mov rdi, qword [rsp + 0x70]
jmp 0x1400a175c
mov rdi, r13
test ax, ax
je 0x1400a1bc0
mov rcx, 0xfffffffffffffffe
xor edx, edx
nop word cs:[rax + rax]
mov r12, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [rdi + r12*2], 0
jne 0x1400a1770
lea r13, [rdi + rdx*2]
cmp r12, 1
je 0x1400a17df
test r12, r12
je 0x1400a2ff8
xor ebp, ebp
nop word [rax + rax]
cmp word [rdi + rbp*2 + 2], 0x3d
je 0x1400a1820
nop dword [rax + rax]
mov ecx, dword [0x141dd0d88]
and ecx, dword [0x141dd0d8c]
add ecx, 0x6bca445c
or ecx, 0xf83949a
xor ecx, 0x4d2682dc
cmp ecx, 0x361073b6
ja 0x1400a17b0
inc rbp
add rax, 0xfffffffffffffffe
jne 0x1400a17a0
movzx eax, word [r13]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0da0]
or ecx, dword [0x141dd0da4]
imul ecx, ecx, 0x28d861d2
or ecx, 0xebc9b7b6
cmp ecx, 0x72239179
jb 0x1400a17f0
jmp 0x1400a1750
mov eax, dword [0x141dd0da8]
or eax, dword [0x141dd0dac]
imul eax, eax, 0xb4c6010f
add eax, 0x23639374
cmp eax, 0x6830bb4f
mov eax, dword [0x141dd0db0]
add eax, dword [0x141dd0db4]
or eax, 0xc7fbb0d3
imul rax, rax, 0x44bda4b9
shr rax, 0x3e
add eax, 0x4127f95
cmp eax, 0xa94215b
ja 0x1400a183c
cmp rbp, r12
jae case.default.0x1400a455a
lea r8, [rbp + 1]
mov rcx, r15
mov rdx, rdi
call fcn.14008b7e0
add rbp, 2
sub r12, rbp
jb 0x1400a2fbe
mov eax, dword [0x141dd0dc0]
imul eax, dword [0x141dd0dc4]
or eax, 0x4172ba22
add eax, 0xab843372
and eax, 0x85010ea1
cmp eax, 0x175dfa8d
jb 0x1400a1905
nop dword [rax]
mov eax, dword [0x141dd0dc8]
xor eax, dword [0x141dd0dcc]
imul esi, eax, 0x55034ad5
add esi, 0x6c008588
and esi, 0x77a521d3
lea rdx, [rdi + rbp*2]
mov rcx, rbx
mov r8, r12
call fcn.14008b7e0
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
cmp esi, 0x55631014
jbe 0x1400a1940
lea rdx, [rdi + rbp*2]
mov rcx, rbx
mov r8, r12
call fcn.14008b7e0
movups xmm0, xmmword [rsp + 0xc0]
movups xmm1, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
jmp 0x1400a18b0
mov rdi, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
movdqa xmm6, xmmword [rsp + 0x260]
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1c0], xmm1
mov eax, dword [0x141dd0dd0]
imul eax, dword [0x141dd0dd4]
xor eax, 0x5020140c
and eax, 0x5ba5941f
add eax, 0x338f712e
cmp eax, 0x3c61b3f7
jb 0x1400a1970
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x1400a1bc0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0de8]
or ecx, dword [0x141dd0dec]
xor ecx, 0x403604c1
or ecx, 0x2cc9611c
add ecx, 0x57f99adc
movq rax, xmm6
add rax, r12
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xc8], rax
cmp ecx, 0xf9771526
jbe 0x1400a1a00
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xc8], rax
jmp 0x1400a19b0
mov eax, dword [0x141dd0df0]
sub eax, dword [0x141dd0df4]
mov ecx, 0xa7ea9105
imul rax, rcx
shr rax, 0x3b
xor eax, 0x40920410
and eax, 0x40920414
cmp eax, 0x70d94816
jbe 0x1400a1a60
mov word [rsp + 0xd0], 0
mov rcx, r14
mov rdx, r15
call fcn.1400abec0
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], r12
movdqu xmmword [rsp + 0x260], xmm6
nop dword [rax + rax]
mov esi, dword [0x141dd0df8]
or esi, dword [0x141dd0dfc]
add esi, 0xdaea247b
and esi, 0x9fd37585
mov word [rsp + 0xd0], 0
mov rcx, r14
mov rdx, r15
call fcn.1400abec0
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], r12
movdqu xmmword [rsp + 0x260], xmm6
cmp esi, 0x7c74de7
ja 0x1400a1a60
mov rcx, r15
lea rdx, [rsp + 0x210]
lea r8, [rsp + 0x250]
lea r9, [rsp + 0x1b0]
call fcn.1400ac5a0
mov rax, qword [rsp + 0xc0]
shl rax, 1
test rax, rax
je 0x1400a1b7c
mov eax, dword [0x141dd0e00]
mov ecx, dword [0x141dd0e04]
add eax, ecx
add eax, 0x39e527f0
or eax, 0x9f3cc236
add eax, 0x39329286
cmp eax, 0x1c938bc9
jae 0x1400a1b10
mov rax, qword [0x141dda6a0]
nop dword [rax]
mov eax, dword [0x141dd0e08]
imul eax, dword [str.TJ]
add eax, 0xe7ac8792
xor eax, 0x831bd539
add eax, 0x6fb70e91
mov rdi, qword [rsp + 0xc8]
mov r12, qword [0x141dda6a0]
cmp eax, 0x4a3cf085
jb 0x1400a1b10
mov eax, dword [0x141dd0e10]
xor eax, dword [0x141dd0e14]
imul eax, eax, 0x9bfd624
add eax, 0x87dd3320
cmp eax, 0x3f3d612a
jae 0x1400a1b6e
mov rcx, r12
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r12
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
movzx eax, word [r13]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0e18]
add ecx, dword [0x141dd0e1c]
and ecx, 0xc2a08a28
add ecx, 0xca7435f9
cmp ecx, 0xa200ce0c
ja 0x1400a1b90
jmp 0x1400a1750
mov eax, dword [0x141dd0dd8]
and eax, dword [0x141dd0ddc]
cmp eax, 0x70279e97
je 0x1400a1bc0
mov eax, dword [0x141dd0de0]
and eax, dword [0x141dd0de4]
and eax, 0x212f5386
imul eax, eax, 0xd6b26a2d
xor eax, 0x19c0e34d
cmp eax, 0x1b02308a
mov rsi, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x70]
jae 0x1400a1c0c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rax + 0x88]
test rcx, rcx
setne dl
test rsi, rsi
setne al
and al, dl
nop word cs:[rax + rax]
mov edx, dword [0x141dd0d80]
and edx, dword [0x141dd0d84]
imul edx, edx, 0x522e2830
xor edx, 0x8df0d76d
add edx, 0x572d975a
cmp edx, 0xdc854f1a
ja 0x1400a1c40
test al, al
je 0x1400a2edc
mov rax, qword [rsp + 0xa8]
mov r9, qword [rax + 0x90]
nop dword [rax]
mov eax, dword [0x141dd0e20]
or eax, dword [0x141dd0e24]
and eax, 0xafe33ce3
xor eax, 0x34ab5c6b
imul eax, eax, 0x4e1835a8
cmp eax, 0xc25aa8eb
ja 0x1400a1c80
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e28]
imul eax, dword [0x141dd0e2c]
xor eax, 0xbfa61952
add eax, 0x782d2d10
xor eax, 0x11a0f2e7
cmp eax, 0x872e7a68
jb 0x1400a1cb0
xor r8d, r8d
xor r11d, r11d
jmp 0x1400a1d10
mov ecx, 0
mov rsi, qword [rsp + 0x188]
test rsi, rsi
mov r8d, 0
mov r11, qword [rsp + 0x88]
mov r9, qword [rsp + 0x68]
je 0x1400a2edc
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e30]
imul eax, dword [0x141dd0e34]
add eax, 0x8928e14e
and eax, 0x6d88c805
add eax, 0xb49a251
cmp eax, 0xc145a966
ja 0x1400a1d10
test r11, r11
je 0x1400a1d60
movzx eax, word [r11 + 0x3d2]
cmp r9, rax
jae 0x1400a1e50
mov r8, r9
mov rbp, r11
jmp 0x1400a1ea8
mov eax, dword [0x141dd0e38]
xor edx, edx
div dword [0x141dd0e3c]
xor eax, 0x4000040
or eax, 0xb1020c08
and eax, 0xf5834cc8
cmp eax, 0xa59284ca
jb 0x1400a1d60
test r9, r9
je 0x1400a1e30
mov edx, r9d
and edx, 7
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e40]
add eax, dword [0x141dd0e44]
or eax, 0x71c52086
add eax, 0x4982496b
or eax, 0x50c18640
cmp eax, 0xcd1e6e41
ja 0x1400a1da0
mov rax, r9
mov r11, rcx
test rdx, rdx
je 0x1400a1de7
xor ecx, ecx
nop
test r8b, r8b
jne 0x1400a1dd0
mov r11, qword [r11 + 0x3d8]
dec rax
inc rcx
dec rdx
jne 0x1400a1dd0
cmp r9, 8
jb 0x1400a1e33
nop dword [rax]
mov rcx, qword [r11 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r11, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400a1df0
jmp 0x1400a1e33
mov r11, rcx
xor r9d, r9d
xor ecx, ecx
movzx eax, word [r11 + 0x3d2]
cmp r9, rax
jb 0x1400a1d49
nop dword [rax]
mov rbp, qword [r11 + 0x160]
test rbp, rbp
je case.default.0x1400a455a
inc rcx
movzx r9d, word [r11 + 0x3d0]
movzx r8d, r9w
movzx r10d, word [rbp + 0x3d2]
nop word [rax + rax]
mov eax, dword [0x141dd0e48]
xor edx, edx
div dword [0x141dd0e4c]
add eax, 0xc2acae9c
or eax, 0x217c09ad
cmp eax, 0x2e254c96
jb 0x1400a1e80
mov r11, rbp
cmp r9w, r10w
jae 0x1400a1e50
test rcx, rcx
je 0x1400a1fb7
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e50]
sub eax, dword [0x141dd0e54]
add eax, 0x76957169
cmp eax, 0xd3037bcb
ja 0x1400a1ec0
mov r15, qword [rbp + r8*8 + 0x3e0]
mov rax, rcx
dec rax
je 0x1400a1fae
mov rdx, rax
and rdx, 7
je 0x1400a1f37
xor r9d, r9d
nop dword [rax + rax]
mov r10d, dword [0x141dd0e58]
sub r10d, dword [0x141dd0e5c]
and r10d, 0x8268414
xor r10d, 0x9c595d8a
cmp r10d, 0x4d1c6e81
jb 0x1400a1f00
dec rax
inc r9
mov r15, qword [r15 + 0x3d8]
cmp r9, rdx
jne 0x1400a1f00
add rcx, 0xfffffffffffffffe
nop dword [rax + rax]
mov edx, dword [0x141dd0e60]
add edx, dword [0x141dd0e64]
imul edx, edx, 0xe49f89fb
xor edx, 0x9881ff80
add edx, 0x93f01358
cmp edx, 0x8cf3a9fb
ja 0x1400a1f40
cmp rcx, 7
jb 0x1400a1fae
nop dword [rax]
mov rcx, qword [r15 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r15, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400a1f70
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x1400a1fc3
lea rax, [r8 + 1]
mov qword [rsp + 0x68], rax
mov r15, rbp
dec rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e68]
xor edx, edx
div dword [0x141dd0e6c]
add eax, 0x230e944c
xor eax, 0x5ab591c7
cmp eax, 0x349f7ef8
jb 0x1400a1fd0
imul rax, r8, 0x38
shl r8, 5
lea r14, [rax + rbp]
add r14, 0x168
movabs rax, 0x8000000000000000
cmp qword [rbp + r8], rax
mov qword [rsp + 0x188], rsi
mov qword [rsp + 0x88], r15
jne 0x1400a2208
mov rax, qword [rsp + 0x210]
test rax, rax
je 0x1400a1cdb
mov rsi, qword [r14 + 0x28]
mov rdi, qword [r14 + 0x30]
mov rcx, qword [rsp + 0x218]
xor edx, edx
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0xa0], rax
mov r8, rax
lea rbp, [r8 + 0x168]
mov qword [rsp + 0x58], r8
movzx eax, word [r8 + 0x3d2]
mov qword [rsp + 0x90], rax
imul rax, rax, 0x38
mov qword [rsp + 0x78], rax
mov r14, 0xffffffffffffffff
xor r12d, r12d
xor r15d, r15d
jmp 0x1400a20c8
inc r14
add r12, 0x38
inc r15
mov rbp, qword [rsp + 0x70]
cmp eax, 3
jne 0x1400a2180
cmp qword [rsp + 0x78], r12
je 0x1400a21a0
lea rax, [rbp + 0x38]
mov qword [rsp + 0x70], rax
mov eax, dword [0x141dd0f00]
xor eax, dword [0x141dd0f04]
xor eax, 0x22c00404
and eax, 0x27c97d6d
xor eax, 0xf4024d46
cmp eax, 0xbe2122a9
mov rbx, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
jb 0x1400a2150
nop word cs:[rax + rax]
mov r13d, dword [0x141dd0f08]
or r13d, dword [0x141dd0f0c]
or r13d, 0x50062001
and r13d, 0x70e62013
mov r8, qword [rbp + 0x28]
mov r9d, dword [rbp + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, edi
call rbx
cmp r13d, 0x6d12966b
jae 0x1400a20b0
mov rax, qword [rsp + 0x58]
mov r8, qword [rax + r12 + 0x190]
mov r9d, dword [rax + r12 + 0x198]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, edi
call rbx
jmp 0x1400a2110
cmp eax, 1
jne 0x1400a2267
mov rcx, qword [rsp + 0x140]
test rcx, rcx
jne 0x1400a21b9
jmp 0x1400a1cdb
mov r14, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x1400a1cdb
mov r8, qword [rsp + 0x58]
mov r8, qword [r8 + r14*8 + 0x3d8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f10]
xor edx, edx
div dword [0x141dd0f14]
imul eax, eax, 0xa0b34963
add eax, 0xdcbe7a11
cmp eax, 0xa193cbe2
jae 0x1400a21d0
dec rcx
mov qword [rsp + 0x140], rcx
inc qword [rsp + 0xb8]
jmp 0x1400a206d
add rbp, r8
mov rdi, qword [r14 + 0x10]
test rdi, rdi
js case.default.0x1400a455a
mov rbx, qword [r14 + 8]
je 0x1400a22bc
movzx eax, byte [0x141dda6b8]
xor ecx, ecx
mov rdx, rdi
call fcn.1400bf230
mov r12, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e70]
xor eax, dword [str.A_dM]
xor eax, 0x10010000
or eax, 0xab67be7
cmp eax, 0x8f55d524
ja 0x1400a2240
test r12, r12
jne 0x1400a22c2
jmp 0x1400a306e
cmp eax, 2
lea r15, [rsp + 0x250]
lea r12, [rsp + 0x230]
mov r13, qword [rsp + 0xb0]
mov r9, qword [rsp + 0x140]
jne 0x1400a2fef
mov eax, dword [0x141dd0f18]
sub eax, dword [0x141dd0f1c]
imul eax, eax, 0xd4086ff6
add eax, 0xe7b43dd8
cmp eax, 0x15f9218f
lea r8, [rsp + 0x67]
jb 0x1400a2580
jmp 0x1400a2421
mov r12d, 1
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r15, qword [r14 + 0x30]
test r15, r15
js case.default.0x1400a455a
lea rdx, [r15 + r15]
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp rdx, rax
ja case.default.0x1400a455a
movzx esi, byte [r14 + 0x18]
mov rcx, qword [r14 + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e78]
and eax, dword [0x141dd0e7c]
and eax, 0xdc7a6035
add eax, 0x75b52648
and eax, 0x85bec63d
cmp eax, 0x16940cb2
jb 0x1400a2310
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e80]
xor eax, dword [0x141dd0e84]
and eax, 0x75ec5703
imul eax, eax, 0xf2204e02
add eax, 0xb88d964e
cmp eax, 0x2c6a20dc
jb 0x1400a2340
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x78], rdi
mov r13d, esi
test rdx, rdx
je 0x1400a23d5
movzx eax, byte [0x141dda6b8]
xor ecx, ecx
mov rdi, rdx
call fcn.1400bf230
mov r14, rax
mov ecx, 0x8fdf9e23
nop word cs:[rax + rax]
mov eax, dword [0x141dd0e88]
sub eax, dword [0x141dd0e8c]
imul rax, rcx
shr rax, 0x3d
xor eax, 0x53598cde
add eax, 0xbe7df7cc
cmp eax, 0xcdcbb96
jb 0x1400a23a0
mov rbx, r15
mov rcx, r15
test r14, r14
jne 0x1400a23e3
jmp 0x1400a2e80
mov rdi, rdx
mov rbx, r15
mov r14d, 2
xor ecx, ecx
mov qword [rsp + 0x58], r12
mov eax, dword [0x141dd0e98]
xor edx, edx
div dword [0x141dd0e9c]
imul eax, eax, 0x4bc08a06
cmp eax, 0x8a2b7f58
mov byte [rsp + 0x70], r13b
mov r12, qword [rsp + 0x78]
mov r15, qword [rsp + 0x140]
mov r13, rcx
je 0x1400a2677
jmp 0x1400a2605
mov eax, dword [0x141dd0f20]
sub eax, dword [0x141dd0f24]
add eax, 0xe38b90cf
imul rax, rax, 0x22486df5
shr rax, 0x3b
or eax, 0x1e8da498
mov byte [rsp + 0x67], 0
cmp eax, 0xca7eca43
ja 0x1400a2580
test r9, r9
je 0x1400a258a
nop dword [rax + rax]
mov eax, dword [0x141dd0f28]
or eax, dword [0x141dd0f2c]
xor eax, 0x5dab0548
imul rax, rax, 0x5b94a9c3
shr rax, 0x3e
add eax, 0x79634379
cmp eax, 0x4fad0595
jb 0x1400a2460
mov rax, qword [rsp + 0x58]
mov rsi, qword [rax + r14*8 + 0x3d8]
dec r9
je 0x1400a25cd
mov rax, r9
and rax, 7
lea rbx, [rsp + 0x288]
je 0x1400a24da
xor ecx, ecx
nop word cs:[rax + rax]
movzx edx, word [rsi + 0x3d2]
mov rsi, qword [rsi + rdx*8 + 0x3d8]
dec r9
inc rcx
cmp rcx, rax
jne 0x1400a24c0
mov rax, r13
sub rax, qword [rsp + 0xb8]
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400a25d5
nop word cs:[rax + rax]
movzx eax, word [rsi + 0x3d2]
mov rax, qword [rsi + rax*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rsi, qword [rax + rcx*8 + 0x3d8]
add r9, 0xfffffffffffffff8
jne 0x1400a2500
jmp 0x1400a25d5
mov byte [rsp + 0x67], 0
jmp 0x1400a2421
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x658], rax
mov qword [rsp + 0x660], 0
mov qword [rsp + 0x668], r14
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x658]
call fcn.1400aff00
mov r8, qword [rsp + 0xa0]
jmp 0x1400a2bb2
lea rbx, [rsp + 0x288]
mov eax, dword [0x141dd0f30]
sub eax, dword [0x141dd0f34]
add eax, 0x15624575
and eax, 0xcf42cbb4
add eax, 0xe513bd1a
cmp eax, 0x993294a
lea r14, [rsp + 0x67]
jb 0x1400a299e
jmp 0x1400a28e8
mov eax, dword [0x141dd0ea0]
sub eax, dword [0x141dd0ea4]
imul esi, eax, 0xea4867a3
add esi, 0x899aace3
mov rcx, r14
mov rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, r13
mov qword [rsp + 0x250], r12
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x258], rcx
mov qword [rsp + 0x260], r12
movzx ecx, byte [rsp + 0x70]
mov byte [rsp + 0x268], cl
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], rbx
cmp esi, 0xfb9ac0a7
jbe 0x1400a26ce
mov rcx, r14
mov rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, r13
mov qword [rsp + 0x250], r12
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x258], rcx
mov qword [rsp + 0x260], r12
movzx ecx, byte [rsp + 0x70]
mov byte [rsp + 0x268], cl
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x280], rbx
jmp 0x1400a2605
mov rsi, qword [rbp + 0x10]
test rsi, rsi
js 0x1400a2f6b
mov rdi, qword [rbp + 8]
je 0x1400a2796
movzx eax, byte [0x141dda6b8]
mov eax, dword [0x141dd0eb8]
and eax, dword [str._bIDeN]
cmp eax, 0xa97e8c91
lea r15, [rsp + 0x250]
jne 0x1400a2720
xor ecx, ecx
mov rdx, rsi
call fcn.1400bf230
nop word cs:[rax + rax]
mov eax, dword [0x141dd0ec0]
mov ecx, dword [0x141dd0ec4]
lea r14d, [rax + rcx]
add r14d, 0xdd62dc1c
and r14d, 0x2b7c7676
xor r14d, 0x1a28c75
xor ecx, ecx
mov rdx, rsi
call fcn.1400bf230
cmp r14d, 0x68852b4a
ja 0x1400a2720
mov rbx, rax
nop dword [rax + rax]
mov eax, dword [0x141dd0ec8]
xor eax, dword [0x141dd0ecc]
imul rcx, rax, 0xaa1674d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
or eax, 0x58b35b43
cmp eax, 0x9afc6684
ja 0x1400a2760
test rbx, rbx
jne 0x1400a27a3
jmp 0x1400a2eb0
mov ebx, 1
lea r15, [rsp + 0x250]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [rbp + 0x18]
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rbx
mov qword [rsp + 0xd0], rsi
mov byte [rsp + 0xd8], al
lea rcx, [rsp + 0x1b0]
lea rdx, [rsp + 0x210]
mov r8, r15
lea r9, [rsp + 0xc0]
call fcn.1400ac5a0
mov rax, qword [rsp + 0x1b0]
shl rax, 1
test rax, rax
je 0x1400a28c0
mov eax, dword [0x141dd0ed8]
and eax, dword [0x141dd0edc]
add eax, 0xb2397e83
cmp eax, 0xd508bbaa
ja 0x1400a2853
mov eax, dword [0x141dd0ee0]
imul eax, dword [0x141dd0ee4]
imul eax, eax, 0x15798184
add eax, 0x3735b7e9
xor eax, 0x1ba862f8
mov rsi, qword [rsp + 0x1b8]
mov rdi, qword [0x141dda6a0]
cmp eax, 0x18975b18
jae 0x1400a285c
mov rax, qword [0x141dda6a0]
jmp 0x1400a2820
mov eax, dword [0x141dd0ee8]
sub eax, dword [0x141dd0eec]
imul eax, eax, 0xae5f55f0
add eax, 0x4e5579b0
cmp eax, 0x915b9940
jbe 0x1400a2888
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0ef0]
sub eax, dword [0x141dd0ef4]
and eax, 0x102489
add eax, 0x3d204ef9
cmp eax, 0xd6759258
ja 0x1400a28a0
nop dword [rax]
mov eax, dword [0x141dd0ef8]
and eax, dword [0x141dd0efc]
imul eax, eax, 0x414bcc42
or eax, 0x5d575a6a
add eax, 0x2dd3ea5e
cmp eax, 0x5abd1e4f
jbe 0x1400a28c0
jmp 0x1400a1cdb
mov eax, dword [0x141dd0f38]
add eax, dword [0x141dd0f3c]
mov ecx, 0xb256d097
imul rax, rcx
shr rax, 0x3f
imul edi, eax, 0xda2571a4
movzx eax, word [rsi + 0x3d2]
dec rax
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rax
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.1400aff00
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x180], rax
movups xmm0, xmmword [rsp + 0x250]
movups xmm1, xmmword [rsp + 0x260]
movups xmm2, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x170], xmm2
movaps xmmword [rsp + 0x160], xmm1
movaps xmmword [rsp + 0x150], xmm0
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x1a0], xmm1
cmp edi, 0xb02dcbf0
jae 0x1400a2a2e
movzx eax, word [rsi + 0x3d2]
dec rax
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], 0
mov qword [rsp + 0x240], rax
mov rcx, r15
mov rdx, r12
mov r8, r14
call fcn.1400aff00
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x180], rax
movups xmm0, xmmword [rsp + 0x250]
movups xmm1, xmmword [rsp + 0x260]
movups xmm2, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x170], xmm2
movaps xmmword [rsp + 0x160], xmm1
movaps xmmword [rsp + 0x150], xmm0
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rsp + 0x190], xmm0
movaps xmmword [rsp + 0x1a0], xmm1
jmp 0x1400a28e8
mov rdx, qword [rsp + 0x2a8]
mov rax, qword [rsp + 0x2b8]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1400a2a57
mov rcx, rdx
mov r8, qword [rsp + 0xa0]
jmp 0x1400a2a99
mov r9, qword [rsp + 0x2b0]
mov r8, qword [rsp + 0xa0]
nop word [rax + rax]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1400a2a94
inc r9
movzx eax, word [rdx + 0x3d0]
mov rdx, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1400a2a70
jmp 0x1400a2a99
mov rax, r9
xor ecx, ecx
imul rdx, rax, 0x38
shl rax, 5
mov r9, qword [rcx + rdx + 0x198]
mov qword [rsp + 0x1e0], r9
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0x1d0], xmm2
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
mov r9, qword [rsp + 0x180]
mov qword [rcx + rdx + 0x198], r9
movaps xmm0, xmmword [rsp + 0x150]
movaps xmm1, xmmword [rsp + 0x160]
movaps xmm2, xmmword [rsp + 0x170]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + rax]
movups xmm1, xmmword [rcx + rax + 0x10]
lea rdx, [rsp + 0x1e8]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
movaps xmm0, xmmword [rsp + 0x190]
movaps xmm1, xmmword [rsp + 0x1a0]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmmword [rcx + rax], xmm0
movaps xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movaps xmm2, xmmword [rsp + 0x1d0]
movaps xmm3, xmmword [rsp + 0x1e0]
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xf0], xmm3
movaps xmm0, xmmword [rsp + 0x1f0]
movaps xmmword [rsp + 0x100], xmm0
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x110], rax
mov eax, dword [0x141dd0f40]
xor edx, edx
div dword [0x141dd0f44]
add eax, 0x7f530102
xor eax, 0x18d89f3b
add eax, 0xe20da223
cmp eax, 0x892ace7c
mov eax, dword [0x141dd0f48]
imul eax, dword [0x141dd0f4c]
cmp eax, 0x8236b460
je 0x1400a2bd4
mov r14, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xf8]
mov eax, dword [0x141dd0f50]
sub eax, dword [0x141dd0f54]
mov r12, qword [rsp + 0x100]
add eax, 0xc70b42e4
xor eax, 0x16841cb1
cmp eax, 0x5ce5c2ab
jbe 0x1400a2c40
dec qword [rsp + 0x220]
nop dword [rax]
mov eax, dword [0x141dd0f58]
imul eax, dword [0x141dd0f5c]
imul eax, eax, 0xe6014ec2
or eax, 0xd6eaca74
add eax, 0x750cd416
dec qword [rsp + 0x220]
cmp eax, 0x98e69aea
ja 0x1400a2c40
cmp byte [rsp + 0x67], 0
je 0x1400a2d31
test r13, r13
je case.default.0x1400a455a
mov eax, dword [0x141dd0f60]
xor eax, dword [0x141dd0f64]
add eax, 0xca9f4b5c
and eax, 0x75d54ad0
add eax, 0xd32aef12
cmp eax, 0xe1935278
jbe 0x1400a2cd0
mov rax, qword [r8 + 0x3d8]
mov qword [rsp + 0x210], rax
lea rcx, [r13 - 1]
mov qword [rsp + 0x218], rcx
mov qword [rax + 0x160], 0
nop dword [rax + rax]
mov eax, dword [0x141dd0f68]
xor eax, dword [0x141dd0f6c]
imul rcx, rax, 0x6690dcad
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
lea rcx, [r13 - 1]
mov rdx, qword [r8 + 0x3d8]
mov qword [rsp + 0x210], rdx
mov qword [rsp + 0x218], rcx
shr eax, 0x1f
add eax, 0x418d7cc1
mov qword [rdx + 0x160], 0
cmp eax, 0x736dca9f
ja 0x1400a2cd0
mov rcx, qword [0x141dda6a0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400a1cdb
test r14, r14
je 0x1400a2de0
nop dword [rax]
mov eax, dword [0x141dd0f70]
add eax, dword [0x141dd0f74]
xor eax, 0x7478b99a
imul eax, eax, 0x67771fdb
xor eax, 0xddbfd879
cmp eax, 0x6143a048
ja 0x1400a2d50
mov eax, dword [0x141dd0f78]
or eax, dword [0x141dd0f7c]
imul eax, eax, 0x45afd9ee
cmp eax, 0xa3301872
jne 0x1400a2da0
mov rax, qword [0x141dda6a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f80]
imul eax, dword [0x141dd0f84]
add eax, 0x293a344
xor eax, 0xcbf4b05a
imul eax, eax, 0x20ec002f
mov rcx, qword [0x141dda6a0]
cmp eax, 0x678791c1
je 0x1400a2da0
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f88]
add eax, dword [0x141dd0f8c]
imul eax, eax, 0xb68fc1ee
add eax, 0x15f69a3d
cmp eax, 0x5e5e5d39
jb 0x1400a2de0
test rdi, rdi
je 0x1400a2e40
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f90]
add eax, dword [0x141dd0f94]
cmp eax, 0x1450b5bf
je 0x1400a2e20
nop word cs:[rax + rax]
mov eax, dword [0x141dd0f98]
sub eax, dword [0x141dd0f9c]
or eax, 0x318b1b2
add eax, 0x3a87edea
cmp eax, 0x4647f2c0
jb 0x1400a2e40
shl rbx, 1
test rbx, rbx
je 0x1400a1cdb
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400a1cdb
mov eax, dword [0x141dd0e90]
xor edx, edx
div dword [0x141dd0e94]
imul eax, eax, 0x7c535038
add eax, 0x15f187f8
ud2
mov eax, dword [0x141dd0ed0]
xor edx, edx
div dword [0x141dd0ed4]
or eax, 0x60758183
imul eax, eax, 0xa1395c42
add eax, 0x4180de5c
ud2
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x188], rax
mov rbx, qword [rsp + 0x218]
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x140], rax
movzx eax, byte [0x141dda6b8]
mov edx, 4
xor ecx, ecx
call fcn.1400bf230
test rax, rax
je 0x1400a306e
mov r14, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], rax
mov eax, dword [str.j_Tu_]
xor edx, edx
div dword [0x141dd0fa4]
imul eax, eax, 0xb7e5bfc7
add eax, 0x1c45bc7e
xor eax, 0xfa9dc3fa
cmp eax, 0x1a3364d7
jb 0x1400a30ae
jmp 0x1400a3072
mov eax, dword [0x141dd0ea8]
or eax, dword [0x141dd0eac]
imul rax, rax, 0x534c9163
shr rax, 0x3e
or eax, 0x3b03e23c
cmp eax, 0x8b50dfc
jae 0x1400a2f90
ud2
ud2
ud2
call fcn.1400914f0
ud2
mov eax, dword [0x141dd0d90]
xor edx, edx
div dword [0x141dd0d94]
imul eax, eax, 0x866bf365
add eax, 0x8272d636
cmp eax, 0x8ff6487f
ja 0x1400a5a73
jmp 0x1400a5a42
mov eax, dword [0x141dd0d68]
sub eax, dword [0x141dd0d6c]
add eax, 0xf138d550
or eax, 0x67ae88ef
cmp eax, 0xf696a6c4
jbe 0x1400a3043
call fcn.1400914f0
call fcn.1400914f0
mov eax, dword [0x141dd0d70]
add eax, dword [0x141dd0d74]
or eax, 0x4221290
and eax, 0x4671a90
cmp eax, 0xad8c555
ja 0x1400a5a3e
jmp 0x1400a5a0d
mov eax, dword [0x141dd0fa8]
and eax, dword [0x141dd0fac]
imul esi, eax, 0x5c7292f
mov word [rsp + 0xd0], 0
lea rdi, [rsp + 0x270]
lea rdx, [rsp + 0xc0]
mov rcx, rdi
call fcn.1400abec0
cmp esi, 0xf38c06cd
jne 0x1400a30cf
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0xc0]
call fcn.1400abec0
jmp 0x1400a3072
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x188]
test rax, rax
je 0x1400a3276
mov qword [rsp + 0x90], r14
mov ebp, dword [rsp + 0x280]
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x88], rbx
mov rcx, rax
lea r13, [rcx + 0x168]
movzx eax, word [rcx + 0x3d2]
mov qword [rsp + 0x68], rax
imul rax, rax, 0x38
mov qword [rsp + 0x58], rcx
lea rsi, [rcx + rax]
add rsi, 0x168
xor r12d, r12d
jmp 0x1400a316c
add r13, 0x38
lea r12, [rbx + 1]
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x70]
mov edx, ebp
mov r8, r14
mov r9d, r15d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
cmp eax, 3
jne 0x1400a3200
cmp r13, rsi
je 0x1400a3210
mov rbx, r12
nop dword [rax + rax]
mov eax, dword [0x141dd0fb0]
xor edx, edx
div dword [0x141dd0fb4]
xor eax, 0x251c7fb5
imul eax, eax, 0xab1f6485
add eax, 0xea82ca34
cmp eax, 0xb7477827
ja 0x1400a3180
mov r14, qword [r13 + 0x28]
mov r15, qword [r13 + 0x30]
mov eax, dword [0x141dd0fb8]
mov ecx, dword [0x141dd0fbc]
add eax, ecx
add eax, 0xb7387a6c
imul rax, rax, 0x5ff8c8c1
shr rax, 0x3b
imul eax, eax, 0xed3c4b77
cmp eax, 0x9b6b028f
jne 0x1400a3140
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x70]
mov edx, ebp
mov r8, r14
mov r9d, r15d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
jmp 0x1400a3140
cmp eax, 1
jne 0x1400a3246
mov rdx, rbx
jmp 0x1400a3215
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x88]
sub rax, 1
mov rbx, qword [rsp + 0x78]
jb 0x1400a3c54
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
jmp 0x1400a310c
cmp eax, 2
jne 0x1400a59da
shl rbx, 5
mov rax, qword [rsp + 0x58]
mov r13, qword [rax + rbx + 8]
mov rax, qword [rax + rbx + 0x10]
mov qword [rsp + 0x58], rax
mov rbx, qword [rsp + 0x78]
mov r14, qword [rsp + 0x90]
jmp 0x1400a3279
xor r13d, r13d
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rdi], 0
je 0x1400a32cd
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0fc8]
xor eax, dword [0x141dd0fcc]
or eax, 0x96583356
add eax, 0x8ac8339f
cmp eax, 0x4cd96b36
ja 0x1400a32b0
mov rax, qword [rsp + 0xa8]
mov r15, qword [rax + 0x10]
lea r14, [0x141db8710]
test r15, r15
mov rcx, qword [rsp + 0x98]
je 0x1400ab0d4
mov rbp, qword [rax + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0fd0]
xor eax, dword [0x141dd0fd4]
cmp eax, 0xf85d33e9
je 0x1400a3300
cmp r15, 4
jae 0x1400a3322
lea rax, [0x1400b0b90]
jmp 0x1400a337a
mov ecx, dword [rbp]
bswap ecx
xor eax, eax
cmp ecx, 0x5c5c3f5c
setb al
cmp ecx, 0x5c5c3f5d
adc eax, 0xffffffff
nop dword [rax + rax]
mov ecx, dword [0x141dd0fd8]
xor ecx, dword [0x141dd0fdc]
or ecx, 0x5a82c045
imul ecx, ecx, 0x99d42983
add ecx, 0x5488bea0
cmp ecx, 0x12584376
jb 0x1400a3340
test eax, eax
lea rcx, [0x1400b0b80]
lea rax, [0x1400b0b90]
cmove rax, rcx
movzx esi, byte [r15 + rbp - 1]
mov ecx, esi
call rax
test al, al
mov rcx, qword [rsp + 0x98]
jne 0x1400ab0d4
movabs r12, 0x8000000000000000
cmp r15, 3
mov qword [rsp + 0x78], rbx
jbe 0x1400a3452
nop dword [rax]
mov eax, dword [0x141dd1040]
mov ecx, dword [0x141dd1044]
lea edx, [rax + rcx]
add edx, 0x8ee200d8
xor edx, 0xc812286
or edx, 0xf03ecd59
movzx eax, byte [r15 + rbp - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
cmp edx, 0xf3993f1b
jb 0x1400a33b0
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400a349f
movzx eax, byte [rbp + r15 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
xor eax, eax
cmp cl, 0x65
jne 0x1400a34a1
nop word cs:[rax + rax]
test al, al
jne 0x1400a3420
movzx eax, byte [rbp + r15 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400a349f
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
cmp al, 0x65
sete al
jmp 0x1400a34a1
xor eax, eax
nop word cs:[rax + rax]
cmp r15, rax
je 0x1400a3729
nop dword [rax]
mov ecx, dword [0x141dd0fe0]
or ecx, dword [0x141dd0fe4]
cmp ecx, 0xc55b837b
je 0x1400a3470
movzx ecx, byte [rbp + rax]
cmp ecx, 0x2f
je 0x1400a3570
inc rax
cmp ecx, 0x5c
jne 0x1400a3460
jmp 0x1400a3570
xor eax, eax
lea rcx, [r15 + rbp]
nop word cs:[rax + rax]
mov edx, dword [0x141dd1048]
add edx, dword [0x141dd104c]
cmp edx, 0x40ad779a
je 0x1400a34b0
mov rdx, rbp
nop word [rax + rax]
mov r8d, dword [0x141dd1050]
xor r8d, dword [0x141dd1054]
add r8d, 0xb6a07ab8
and r8d, 0xda373300
cmp r8d, 0x4ea0e134
jb 0x1400a34d0
cmp rdx, rcx
je 0x1400a3729
movzx r8d, byte [rdx]
cmp r8d, 0x5c
je 0x1400a3511
inc rdx
cmp r8d, 0x2f
jne 0x1400a34d0
test al, al
je 0x1400a3570
lea rsi, [rsp + 0xc0]
mov r13, r12
mov eax, dword [0x141dd1058]
xor edx, edx
div dword [0x141dd105c]
xor eax, 0x1133fbb9
imul edi, eax, 0x89c3e06f
add edi, 0xebbe947a
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call fcn.140090680
cmp edi, 0xc66969a8
jbe 0x1400a3abc
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call fcn.140090680
jmp 0x1400a3520
mov eax, dword [0x141dd1028]
xor eax, dword [0x141dd102c]
xor eax, 0x68e498d3
add eax, 0xe023699b
and eax, 0xecd06340
cmp eax, 0x54ed8d30
jb 0x1400a3570
test r15, r15
js case.default.0x1400a455a
movzx eax, byte [0x141dda6b8]
mov r13, r12
nop word cs:[rax + rax]
mov edi, dword [0x141dd1030]
sub edi, dword [0x141dd1034]
and edi, 0x1656517f
add edi, 0x8a36a401
xor ecx, ecx
mov rdx, r15
call fcn.1400bf230
cmp edi, 0x172c086f
jb 0x1400a35b0
mov rsi, rax
nop dword [rax]
mov eax, dword [0x141dd1038]
sub eax, dword [0x141dd103c]
cmp eax, 0x2ab078c6
je 0x1400a35e0
test rsi, rsi
je case.default.0x1400a455a
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x250], r15
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x268], 0
lea rdx, [0x141db8728]
lea rcx, [rsp + 0x250]
mov r8d, 4
call fcn.140091d80
mov rdi, qword [rsp + 0x250]
mov rsi, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x260]
lea rcx, [rsp + 0xc0]
mov rdx, rsi
mov r8, rbx
call fcn.1400b0bd0
cmp qword [rsp + 0xc0], r13
jne 0x1400a3a4f
mov rcx, rsi
mov rdx, rbx
call fcn.1400a0ae0
nop dword [rax]
mov ecx, dword [str.Z_s_i]
add ecx, dword [0x141dd10a4]
imul rcx, rcx, 0x1727f665
shr rcx, 0x39
add ecx, 0x993cd61
cmp ecx, 0xbac6557b
ja 0x1400a3690
test rax, rax
je 0x1400a529c
cmp rdx, 2
jne 0x1400a3b0f
movzx ecx, word [rax]
nop dword [rax + rax]
mov r8d, dword [0x141dd10a8]
add r8d, dword [0x141dd10ac]
xor r8d, 0x50e06f38
imul r9, r8, 0x3eb4fdd
shr r9, 0x20
sub r8d, r9d
shr r8d, 1
add r8d, r9d
shr r8d, 0x1d
imul r8d, r8d, 0x6991f6a1
cmp r8d, 0xe181ca3d
ja 0x1400a36d0
movzx ecx, cx
cmp ecx, 0x2e2e
jne 0x1400a3b0f
mov ecx, 2
xor r8d, r8d
jmp 0x1400a517f
lea rax, [r15 + rbp]
nop dword [rax]
mov ecx, dword [0x141dd0fe8]
add ecx, dword [0x141dd0fec]
and ecx, 0x6a46c4f1
xor ecx, 0xa534be78
add ecx, 0x774b1225
cmp ecx, 0x7bd91c2f
ja 0x1400a3730
xor r11d, r11d
mov ecx, 0xe647f27f
lea r14, [0x141db86d8]
mov r9, rbp
mov qword [rsp + 0x70], r15
jmp 0x1400a377c
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x190], xmm0
mov rdi, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xc8]
cmp rdi, r13
jne 0x1400a3b96
nop word cs:[rax + rax]
mov eax, dword [0x141dd1078]
sub eax, dword [0x141dd107c]
imul eax, eax, 0x7f0b9f0a
mov qword [rsp + 0x198], rsi
cmp eax, 0x65289dbe
jae 0x1400a3bfb
mov qword [rsp + 0x198], rsi
jmp 0x1400a3ae0
mov ecx, 0x8fe1c817
nop word cs:[rax + rax]
add byte [rax], al
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400a3ba0
mov rbx, qword [rsp + 0xd0]
nop dword [rax]
mov eax, dword [0x141dd1060]
imul eax, dword [0x141dd1064]
or eax, 0x9353e748
xor eax, 0x5284dfe3
cmp eax, 0xbf8df18e
ja 0x1400a3bb0
mov eax, dword [0x141dd1068]
imul eax, dword [0x141dd106c]
and eax, 0xe2d3bce7
imul eax, eax, 0x59eda8df
add eax, 0x52a7e240
cmp eax, 0xeab29c03
jb 0x1400a5ad0
jmp 0x1400a5a77
mov eax, dword [0x141dd1080]
mov ecx, dword [0x141dd1084]
add eax, ecx
add eax, 0xd362029a
cmp eax, 0xf1a6256d
jae 0x1400a3c1d
mov qword [rsp + 0x190], r13
mov qword [rsp + 0x190], r13
nop word cs:[rax + rax]
mov eax, dword [0x141dd1088]
imul eax, dword [0x141dd108c]
imul eax, eax, 0xca70aca0
and eax, 0x81390040
cmp eax, 0x22d6bb4d
jb 0x1400a3c30
jmp 0x1400a5b02
xor r13d, r13d
jmp 0x1400a326c
call fcn.1400914f0
nop
mov eax, dword [0x141dd0fc0]
xor edx, edx
div dword [0x141dd0fc4]
imul eax, eax, 0x9ef1f3a4
add eax, 0xf2c23bb8
xor eax, 0x45fc6b68
ud2
mov eax, dword [0x141dd0d78]
sub eax, dword [0x141dd0d7c]
mov ecx, 0xddb3262f
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1b
imul eax, eax, 0x91f71903
ud2
ud2
mov eax, dword [0x141dd0d98]
xor edx, edx
div dword [0x141dd0d9c]
mov ecx, 0xa051148b
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x28f99ade
xor ecx, 0x3c99931c
ud2
ud2
mov eax, dword [0x141dd1070]
imul eax, dword [0x141dd1074]
imul rax, rax, 0x34a610ff
shr rax, 0x3c
imul ebp, eax, 0xfebdc44e
add ebp, 0xf28ac027
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rbx
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x250]
call fcn.1400b1360
cmp ebp, 0x6a762fc0
ja 0x1400a5b02
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x260], rbx
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x250]
call fcn.1400b1360
jmp 0x1400a5a77
mov rbx, qword [rsp + 0x78]
nop word [rax + rax]
mov eax, dword [0x141dd1090]
xor edx, edx
div dword [0x141dd1094]
or eax, 0x270cd820
and eax, 0x374dfea0
add eax, 0x817b11b3
cmp eax, 0xaf92a746
jae 0x1400a5b10