Function at 0x1400ea250
Capabilities:
Create process on windows
Encode data using base64
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x6a8
movdqa xmmword [rsp + 0x690], xmm6
mov r14, rcx
mov dword [rsp + 0x248], 0
movzx eax, byte [rdx + 0xa0]
test al, al
sete cl
mov qword [rsp + 0xb0], rdx
mov r8, qword [rdx + 0x98]
test r8, r8
sete dl
and dl, cl
mov byte [rsp + 0xc0], dl
je 0x1400ea2ae
xor r13d, r13d
jmp 0x1400eb02b
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x160], 0
test al, al
je 0x1400ea2ec
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x88]
test rax, rax
jne 0x1400ea4f3
jmp 0x1400eaea2
mov qword [rsp + 0x60], r8
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x1400ecf54
mov rdi, rax
cmp word [rax], 0
je 0x1400ea4ce
lea r14, [rsp + 0x290]
lea r12, [rsp + 0xd0]
lea rsi, [rsp + 0x670]
mov rbx, rdi
jmp 0x1400ea33e
cmp word [rbp], 0
mov rbx, rbp
je 0x1400ea4ce
mov r15, 0xffffffffffffffff
mov rcx, 0xfffffffffffffffe
nop dword [rax]
mov rax, rcx
cmp word [rbx + r15*2 + 2], 0
lea r15, [r15 + 1]
lea rcx, [rcx + 2]
jne 0x1400ea350
lea rbp, [rbx + r15*2]
add rbp, 2
cmp r15, 1
je 0x1400ea330
test r15, r15
je 0x1400ecdd6
xor r13d, r13d
nop
cmp word [rbx + r13*2 + 2], 0x3d
je 0x1400ea3a0
inc r13
add rax, 0xfffffffffffffffe
jne 0x1400ea380
jmp 0x1400ea330
cmp r13, r15
jae 0x1400ecdd6
lea r8, [r13 + 1]
mov rcx, r12
mov rdx, rbx
call fcn.1400ed5f0
add r13, 2
sub r15, r13
jb 0x1400ecdd6
lea rdx, [rbx + r13*2]
mov rcx, r14
mov r8, r15
call fcn.1400ed5f0
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x280], xmm1
movaps xmmword [rsp + 0x270], xmm0
mov rbx, qword [rsp + 0x270]
mov r15, qword [rsp + 0x278]
movdqa xmm6, xmmword [rsp + 0x280]
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movaps xmmword [rsp + 0x670], xmm0
movaps xmmword [rsp + 0x680], xmm1
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x1400ea4ce
movq rax, xmm6
add rax, r15
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xd8], rax
mov word [rsp + 0xe0], 0
lea rcx, [rsp + 0x290]
mov rdx, r12
call fcn.1400e99c0
mov qword [rsp + 0x270], rbx
mov qword [rsp + 0x278], r15
movdqu xmmword [rsp + 0x280], xmm6
mov rcx, r12
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x270]
mov r9, rsi
call fcn.1400e0070
mov rax, qword [rsp + 0xd0]
shl rax, 1
test rax, rax
je 0x1400ea330
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
jmp 0x1400ea330
mov rcx, rdi
call sub.KERNEL32.dll_FreeEnvironmentStringsW
mov r8, qword [rsp + 0x60]
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x88]
test rax, rax
je 0x1400eaea2
test r8, r8
je 0x1400eaea2
mov rcx, qword [rsp + 0xb0]
mov rbp, qword [rcx + 0x90]
xor r14d, r14d
jmp 0x1400ea541
mov r8, qword [rsp + 0x178]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
mov eax, 0
mov r8, qword [rsp + 0x60]
dec r8
mov rbp, qword [rsp + 0xb8]
je 0x1400eaea2
test r14, r14
je 0x1400ea560
movzx ecx, word [r14 + 0x3d2]
cmp rbp, rcx
jae 0x1400ea610
mov rbx, r14
jmp 0x1400ea637
test rbp, rbp
je 0x1400ea594
mov rdx, rbp
and rdx, 7
je 0x1400ea599
mov rcx, rbp
and rcx, 0xfffffffffffffff8
mov r14, rax
nop dword [rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rdx
jne 0x1400ea580
cmp rbp, 8
jae 0x1400ea5b0
jmp 0x1400ea5ee
mov r14, rax
jmp 0x1400ea5ee
mov r14, rax
mov rcx, rbp
cmp rbp, 8
jb 0x1400ea5ee
nop word cs:[rax + rax]
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400ea5b0
xor ebp, ebp
xor eax, eax
movzx ecx, word [r14 + 0x3d2]
cmp rbp, rcx
jb 0x1400ea557
nop word cs:[rax + rax]
mov rbx, qword [r14 + 0x160]
test rbx, rbx
je 0x1400ecdd6
inc rax
movzx ebp, word [r14 + 0x3d0]
mov r14, rbx
cmp bp, word [rbx + 0x3d2]
jae 0x1400ea610
test rax, rax
mov qword [rsp + 0x60], r8
je 0x1400ea6e0
mov r14, qword [rbx + rbp*8 + 0x3e0]
mov rcx, rax
dec rcx
je 0x1400ea6ce
mov rdx, rcx
and rdx, 7
je 0x1400ea685
mov rcx, rdx
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
dec rcx
jne 0x1400ea670
not rdx
add rdx, rax
mov rcx, rdx
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400ea6ce
nop
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400ea690
xor r13d, r13d
jmp 0x1400ea6e7
lea r13, [rbp + 1]
mov r14, rbx
imul rax, rbp, 0x38
lea r12, [rbx + rax]
add r12, 0x168
shl rbp, 5
movabs rax, 0x8000000000000000
cmp qword [rbx + rbp], rax
mov qword [rsp + 0xb8], r13
jne 0x1400ea800
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x1400ea526
mov rax, qword [rsp + 0x158]
mov rsi, qword [r12 + 0x28]
mov r15d, dword [r12 + 0x30]
lea ecx, [rax + 7]
mov dword [rsp + 0x68], ecx
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x70], rax
mov rbp, qword [rsp + 0xa8]
lea rcx, [rbp + 0x168]
movzx r13d, word [rbp + 0x3d2]
imul rbx, r13, 0x38
mov r12, 0xffffffffffffffff
nop word [rax + rax]
test rbx, rbx
je 0x1400ea7d0
lea rdi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rsi
mov edx, r15d
call sub.KERNEL32.dll_CompareStringOrdinal
add rbx, 0xffffffffffffffc8
inc r12
mov rcx, rdi
cmp eax, 3
je 0x1400ea780
cmp eax, 1
jne 0x1400ea840
mov rax, qword [rsp + 0x70]
test rax, rax
jne 0x1400ea7e1
jmp 0x1400ea526
mov r12, r13
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400ea526
mov rbp, qword [rbp + r12*8 + 0x3d8]
dec rax
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0x68]
add al, 7
mov dword [rsp + 0x68], eax
jmp 0x1400ea75d
mov r15, qword [r12 + 8]
mov rsi, qword [r12 + 0x10]
test rsi, rsi
je 0x1400eaa3f
js 0x1400ecdd6
movzx eax, byte [0x141934140]
xor ecx, ecx
mov rdx, rsi
call fcn.1400e65f0
mov rdi, rax
test rax, rax
jne 0x1400eaa44
jmp 0x1400ecdd6
cmp eax, 2
mov r9, qword [rsp + 0x70]
jne 0x1400ecf54
mov byte [rsp + 0x230], 0
test r9, r9
je 0x1400eaba9
mov rax, qword [rbp + r12*8 + 0x3d8]
mov rcx, r9
dec rcx
je 0x1400ea93e
test cl, 7
je 0x1400ea8b6
movzx ecx, byte [rsp + 0x68]
and ecx, 7
neg rcx
mov edx, 1
nop dword [rax + rax]
movzx r8d, word [rax + 0x3d2]
mov rax, qword [rax + r8*8 + 0x3d8]
lea r8, [rcx + rdx]
inc r8
inc rdx
cmp r8, 1
jne 0x1400ea890
mov rcx, r9
sub rcx, rdx
add r9, 0xfffffffffffffffe
cmp r9, 7
jb 0x1400ea93e
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400ea8c0
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x148], rcx
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x138]
lea r8, [rsp + 0x230]
call fcn.1400dd800
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x1a0], rax
movups xmm0, xmmword [rsp + 0x270]
movups xmm1, xmmword [rsp + 0x280]
movups xmm2, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x190], xmm2
movaps xmmword [rsp + 0x180], xmm1
movaps xmmword [rsp + 0x170], xmm0
lea rax, [rsp + 0x2a8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
mov r9, qword [rsp + 0x2c8]
mov r8, qword [rsp + 0x2d0]
mov rdx, qword [rsp + 0x2d8]
movzx eax, word [r9 + 0x3d2]
cmp rdx, rax
jae 0x1400eaa10
mov rax, r9
mov rcx, r8
jmp 0x1400eabf7
mov rax, qword [r9 + 0x160]
test rax, rax
je 0x1400eabef
inc r8
movzx edx, word [r9 + 0x3d0]
mov r9, rax
mov rcx, r8
cmp dx, word [rax + 0x3d2]
jae 0x1400eaa10
jmp 0x1400eabf7
mov edi, 1
mov rcx, rdi
mov rdx, r15
mov r8, rsi
call sub.msvcrt.dll_memcpy
movzx eax, byte [r12 + 0x18]
mov rdx, qword [r12 + 0x28]
mov r15, qword [r12 + 0x30]
test r15, r15
mov byte [rsp + 0x70], al
je 0x1400eaab0
mov qword [rsp + 0x68], rdi
mov rax, r15
shr rax, 0x3e
jne 0x1400ecdd6
mov rdi, rsi
mov rsi, rdx
lea r12, [r15 + r15]
movzx eax, byte [0x141934140]
xor ecx, ecx
mov rdx, r12
call fcn.1400e65f0
mov r13, rax
test rax, rax
mov rdx, rsi
mov rsi, rdi
mov rdi, qword [rsp + 0x68]
jne 0x1400eaab9
jmp 0x1400ecdd6
mov r13d, 2
xor r12d, r12d
add rbx, rbp
mov rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x290], r15
mov qword [rsp + 0x298], r13
mov qword [rsp + 0x2a0], r15
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], rdi
mov qword [rsp + 0x280], rsi
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x288], al
mov rdi, qword [rbx + 8]
mov rsi, qword [rbx + 0x10]
test rsi, rsi
je 0x1400eab34
js 0x1400ecdd6
movzx eax, byte [0x141934140]
xor ecx, ecx
mov rdx, rsi
call fcn.1400e65f0
mov r15, rax
test rax, rax
jne 0x1400eab3a
jmp 0x1400ecdd6
mov r15d, 1
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], rsi
movzx eax, byte [rbx + 0x18]
mov byte [rsp + 0xe8], al
lea rcx, [rsp + 0x170]
lea rdx, [rsp + 0x150]
lea r8, [rsp + 0x270]
lea r9, [rsp + 0xd0]
call fcn.1400e0070
mov rax, qword [rsp + 0x170]
shl rax, 1
test rax, rax
je 0x1400ea526
jmp 0x1400ea510
mov qword [rsp + 0xd0], rbp
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], r12
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x230]
call fcn.1400dd800
mov r9, qword [rsp + 0xc8]
jmp 0x1400eadc0
xor eax, eax
mov rcx, r9
mov rdx, r8
imul r8, rdx, 0x38
mov r9, rdx
shl r9, 5
mov r10, qword [rax + r8 + 0x198]
mov qword [rsp + 0x100], r10
movups xmm0, xmmword [rax + r8 + 0x168]
movups xmm1, xmmword [rax + r8 + 0x178]
movups xmm2, xmmword [rax + r8 + 0x188]
movaps xmmword [rsp + 0xf0], xmm2
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
mov r10, qword [rsp + 0x1a0]
mov qword [rax + r8 + 0x198], r10
movaps xmm0, xmmword [rsp + 0x170]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmmword [rsp + 0x190]
movups xmmword [rax + r8 + 0x188], xmm2
movups xmmword [rax + r8 + 0x178], xmm1
movups xmmword [rax + r8 + 0x168], xmm0
movups xmm0, xmmword [rax + r9]
movups xmm1, xmmword [rax + r9 + 0x10]
lea r8, [rsp + 0x108]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
movaps xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movups xmmword [rax + r9], xmm0
movups xmmword [rax + r9 + 0x10], xmm1
test rcx, rcx
je 0x1400ead50
mov rax, qword [rax + rdx*8 + 0x3e0]
mov rdx, rcx
dec rdx
mov r9, qword [rsp + 0xc8]
je 0x1400ead58
mov r8, rdx
and r8, 7
je 0x1400ead05
mov rdx, r8
nop dword [rax]
mov rax, qword [rax + 0x3d8]
dec rdx
jne 0x1400eacf0
not r8
add r8, rcx
mov rdx, r8
add rcx, 0xfffffffffffffffe
cmp rcx, 7
jb 0x1400ead58
nop
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
add rdx, 0xfffffffffffffff8
jne 0x1400ead10
jmp 0x1400ead58
mov r9, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x2c0], rcx
movaps xmm0, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x2b0], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmm1, xmmword [rsp + 0xe0]
movaps xmm2, xmmword [rsp + 0xf0]
movaps xmm3, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x280], xmm1
movaps xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x2c8], rax
mov r13, qword [rsp + 0x270]
mov r15, qword [rsp + 0x278]
mov r12, qword [rsp + 0x290]
mov rdi, qword [rsp + 0x298]
dec qword [rsp + 0x160]
mov rbx, qword [rsp + 0x2a8]
mov rsi, qword [rsp + 0x2b0]
cmp byte [rsp + 0x230], 0
je 0x1400eae46
test r9, r9
je 0x1400ecdd6
mov r8, qword [rsp + 0xa8]
mov rax, qword [r8 + 0x3d8]
mov qword [rsp + 0x150], rax
dec r9
mov qword [rsp + 0x158], r9
mov qword [rax + 0x160], 0
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
movabs rax, 0x8000000000000000
cmp r13, rax
je 0x1400ea526
test r13, r13
je 0x1400eae6f
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, r15
call fcn.1401034d0
test r12, r12
je 0x1400eae85
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rdi
call fcn.1401034d0
shl rbx, 1
test rbx, rbx
je 0x1400ea526
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
jmp 0x1400ea521
mov r12, qword [rsp + 0x150]
mov r13, qword [rsp + 0x158]
mov rsi, qword [rsp + 0x160]
movzx eax, byte [0x141934140]
mov edx, 4
xor ecx, ecx
call fcn.1400e65f0
test rax, rax
je 0x1400ecdd6
mov r15, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rsp + 0x270], r15
mov qword [rsp + 0x278], rax
mov word [rsp + 0x280], 0
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0x270]
call fcn.1400e99c0
mov rbp, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0xd8]
test r12, r12
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0x70], r13
je 0x1400eaffc
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0x68], r15
mov rdi, qword [rsp + 0xe0]
mov qword [rsp + 0x60], r12
lea rcx, [r12 + 0x168]
movzx r14d, word [r12 + 0x3d2]
imul r15, r14, 0x38
mov rbp, 0xffffffffffffffff
nop
test r15, r15
je 0x1400eafb0
lea rsi, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov edx, edi
call sub.KERNEL32.dll_CompareStringOrdinal
add r15, 0xffffffffffffffc8
inc rbp
mov rcx, rsi
cmp eax, 3
je 0x1400eaf70
cmp eax, 1
jne 0x1400eafcc
jmp 0x1400eafb3
mov rbp, r14
mov r14, qword [rsp + 0x78]
sub r13, 1
jb 0x1400eb41f
mov r12, qword [r12 + rbp*8 + 0x3d8]
jmp 0x1400eaf52
cmp eax, 2
mov r14, qword [rsp + 0x78]
jne 0x1400ecf54
shl rbp, 5
mov r13, qword [r12 + rbp + 8]
mov rdi, qword [r12 + rbp + 0x10]
mov r12, qword [rsp + 0x60]
mov r15, qword [rsp + 0x68]
mov rbp, qword [rsp + 0xa8]
jmp 0x1400eb004
xor r13d, r13d
mov r14, qword [rsp + 0x78]
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, r15
call fcn.1401034d0
test rbp, rbp
je 0x1400eb02b
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbx
call fcn.1401034d0
mov rax, qword [rsp + 0xb0]
mov r15, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], rbx
lea rsi, [0x141929278]
test rbx, rbx
je 0x1400ec85b
cmp rbx, 4
jae 0x1400eb079
lea rax, [0x1400eda60]
movzx ecx, byte [rbx + r15 - 1]
call rax
test al, al
je 0x1400eb0a2
jmp 0x1400ec85b
cmp dword [r15], 0x5c3f5c5c
lea rcx, [0x1400eda70]
lea rax, [0x1400eda60]
cmove rax, rcx
movzx ecx, byte [rbx + r15 - 1]
call rax
test al, al
jne 0x1400ec85b
mov qword [rsp + 0x60], r12
movabs r12, 0x8000000000000000
lea rax, [r15 + rbx]
cmp rbx, 3
jbe 0x1400eb19b
movzx ecx, byte [rax - 4]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2e
jne 0x1400eb1bd
movzx ecx, byte [rax - 3]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov cl, 1
cmp dl, 0x65
jne 0x1400eb128
movzx edx, byte [rax - 2]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x78
jne 0x1400eb128
movzx ecx, byte [rax - 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
setne cl
xor edx, edx
nop word [rax + rax]
cmp rbx, rdx
je 0x1400eb2c1
movzx r8d, byte [r15 + rdx]
cmp r8d, 0x2f
je 0x1400eb14d
inc rdx
cmp r8d, 0x5c
jne 0x1400eb130
test cl, cl
jne 0x1400eb1db
mov qword [rsp + 0x78], r14
lea rcx, [rsp + 0xd0]
mov rdx, r15
mov r8, rbx
call fcn.1400e3100
mov rax, qword [rsp + 0xd0]
cmp rax, r12
jne 0x1400eb441
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1c0], r12
jmp 0x1400eb516
xor ecx, ecx
nop dword [rax]
cmp rbx, rcx
je 0x1400eb2c1
movzx edx, byte [r15 + rcx]
cmp edx, 0x2f
je 0x1400eb1db
inc rcx
cmp edx, 0x5c
jne 0x1400eb1a0
jmp 0x1400eb1db
xor ecx, ecx
nop
cmp rbx, rcx
je 0x1400eb2c1
movzx edx, byte [r15 + rcx]
cmp edx, 0x2f
je 0x1400eb1db
inc rcx
cmp edx, 0x5c
jne 0x1400eb1c0
test rbx, rbx
js 0x1400ecdd6
movzx eax, byte [0x141934140]
xor ecx, ecx
mov rdx, rbx
call fcn.1400e65f0
test rax, rax
je 0x1400ecdd6
mov rsi, rax
mov rcx, rax
mov rdx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x270], rbx
mov qword [rsp + 0x278], rsi
mov qword [rsp + 0x280], rbx
mov byte [rsp + 0x288], 0
lea rdx, [0x141929290]
lea rcx, [rsp + 0x270]
mov r8d, 4
call fcn.1400e9cd0
mov rdi, qword [rsp + 0x270]
mov rbx, qword [rsp + 0x278]
mov rsi, qword [rsp + 0x280]
lea rcx, [rsp + 0x258]
mov rdx, rbx
mov r8, rsi
call fcn.1400e6640
cmp qword [rsp + 0x258], r12
mov qword [rsp + 0x78], r14
jne 0x1400eb396
mov rcx, rbx
mov rdx, rsi
call fcn.1400e2e10
test rax, rax
je 0x1400eb499
cmp rdx, 2
jne 0x1400eb3bb
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1400eb3bb
mov ecx, 2
xor r8d, r8d
jmp 0x1400eb479
xor r9d, r9d
lea rsi, [0x141929520]
mov rcx, r15
jmp 0x1400eb2dc
xor r9d, r9d
test dx, dx
je 0x1400ec856
mov dx, 1
test r9w, r9w
jne 0x1400eb2d0
cmp rcx, rax
je 0x1400eb3ea
movzx r9d, byte [rcx]
test r9b, r9b
js 0x1400eb300
inc rcx
mov r8d, r9d
jmp 0x1400eb361
mov r8d, r9d
and r8d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp r9b, 0xdf
jbe 0x1400eb356
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp r9b, 0xf0
jb 0x1400eb36c
movzx r9d, byte [rcx + 3]
add rcx, 4
and r8d, 7
shl r8d, 0x12
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
or r8d, r9d
cmp r8d, 0xffff
jbe 0x1400eb361
jmp 0x1400eb380
add rcx, 2
shl r8d, 6
or r8d, r11d
xor r9d, r9d
mov edx, r8d
jmp 0x1400eb2d3
add rcx, 3
shl r8d, 0xc
or r8d, r10d
cmp r8d, 0xffff
jbe 0x1400eb361
and r8d, 0x3ff
or r8d, 0xdc00
mov r9d, r8d
jmp 0x1400eb2d3
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x1d0], rax
movups xmm0, xmmword [rsp + 0x258]
movaps xmmword [rsp + 0x1c0], xmm0
jmp 0x1400eb500
mov rcx, rdx
nop
test rcx, rcx
je 0x1400eb418
mov r9, rcx
dec rcx
cmp byte [rax + r9 - 1], 0x2e
jne 0x1400eb3c0
test rcx, rcx
je 0x1400eb473
sub rdx, r9
mov r8, rax
add r8, r9
jmp 0x1400eb479
cmp rbx, 0xf
ja 0x1400eb42c
xor ebp, ebp
xor eax, eax
nop word cs:[rax + rax]
cmp byte [r15 + rax], 0x2e
je 0x1400eb852
inc rax
cmp rbx, rax
jne 0x1400eb400
jmp 0x1400eb857
mov r8, rax
xor eax, eax
jmp 0x1400eb479
mov r12, qword [rsp + 0x60]
xor r13d, r13d
jmp 0x1400eafed
mov cl, 0x2e
mov rdx, r15
mov r8, rbx
call fcn.14003cca0
mov rbp, rax
jmp 0x1400eb857
movups xmm0, xmmword [rsp + 0xd8]
mov qword [rsp + 0x270], rax
movups xmmword [rsp + 0x278], xmm0
lea rcx, [rsp + 0x1c0]
lea rdx, [rsp + 0x270]
call fcn.1400e8ad0
jmp 0x1400eb516
xor r8d, r8d
mov rcx, rdx
test rax, rax
cmovne r8, rax
test r8, r8
je 0x1400eb499
test rax, rax
cmove rcx, rdx
add r8, rcx
sub r8, rbx
cmp rsi, r8
cmovae rsi, r8
lea rcx, [rsp + 0x270]
mov rdx, rbx
mov r8, rsi
call fcn.1400e3100
mov rax, qword [rsp + 0x270]
cmp rax, r12
jne 0x1400eb4d3
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1c0], r12
jmp 0x1400eb500
movups xmm0, xmmword [rsp + 0x278]
mov qword [rsp + 0x270], rax
movups xmmword [rsp + 0x278], xmm0
lea rcx, [rsp + 0x1c0]
lea rdx, [rsp + 0x270]
call fcn.1400e8ad0
test rdi, rdi
je 0x1400eb516
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbx
call fcn.1401034d0
mov r14, qword [rsp + 0x1c0]
cmp r14, r12
jne 0x1400eb55e
movq xmm6, qword [rsp + 0x1c8]
mov r14, qword [rsp + 0x78]
movzx eax, byte [rsp + 0xc0]
mov r12, qword [rsp + 0x60]
test al, al
je 0x1400ec870
cmp dword [rsp + 0x248], 3
ja 0x1400ec8f8
mov edi, 2
jmp 0x1400ece06
mov rbx, qword [rsp + 0x1c8]
mov r15, qword [rsp + 0x1d0]
cmp r15, 5
jb case.0x1400ebfe7.68
lea rax, [rbx + r15*2]
mov rcx, rax
add rcx, 0xfffffffffffffff6
je case.0x1400ebfe7.68
cmp word [rcx], 0x2e
jne case.0x1400ebfe7.68
cmp word [rax - 2], 0
je 0x1400ebfc9
mov rax, qword [rsp + 0xb0]
mov r13, qword [rax + 8]
mov r15, qword [rax + 0x28]
mov r12, qword [rax + 0x30]
movzx esi, byte [rax + 0xc5]
mov rbp, qword [rax + 0x10]
add rbp, r13
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 2
mov qword [rsp + 0xe0], 0
lea rdi, [rsp + 0xd0]
mov rcx, rdi
xor edx, edx
call fcn.1400fdea0
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xe0]
mov word [rax + rcx*2], 0x22
inc rcx
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], rbp
mov word [rsp + 0x280], 0
lea rdx, [rsp + 0x270]
mov rcx, rdi
call fcn.1400e9830
mov rdx, qword [rsp + 0xe0]
cmp rdx, qword [rsp + 0xd0]
jne 0x1400eb65c
lea rcx, [rsp + 0xd0]
call fcn.1400fdea0
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xd8]
mov word [rax + rdx*2], 0x22
inc rdx
mov qword [rsp + 0xe0], rdx
shl r12, 3
lea r12, [r12 + r12*4]
lea rdi, [rsp + 0xd0]
jmp 0x1400eb6cb
lea r13, [r15 + 0x28]
mov rax, qword [rsp + 0xd8]
mov word [rax + rdx*2], 0x20
inc rdx
mov qword [rsp + 0xe0], rdx
mov rcx, rdi
mov rdx, r15
mov r8d, esi
call fcn.1400e8120
add r12, 0xffffffffffffffd8
mov r15, r13
test rax, rax
jne 0x1400eb7ad
test r12, r12
je 0x1400eb6f4
mov rdx, qword [rsp + 0xe0]
cmp rdx, qword [rsp + 0xd0]
jne 0x1400eb690
mov rcx, rdi
call fcn.1400fdea0
mov rdx, qword [rsp + 0xe0]
jmp 0x1400eb690
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd8]
movabs r12, 0x8000000000000000
cmp rdx, r12
je 0x1400eb7d4
mov rcx, qword [rsp + 0xe0]
mov r13b, 1
mov rbp, r14
mov r15, rbx
mov qword [rsp + 0x138], rdx
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rcx
cmp rcx, rdx
jne 0x1400eb762
lea rcx, [rsp + 0x138]
call fcn.1400fdea0
mov rax, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x148]
mov word [rax + rcx*2], 0
inc qword [rsp + 0x148]
mov rcx, qword [rsp + 0xb0]
cmp byte [rcx + 0xc4], 0
mov eax, 0x400
mov edi, 0x608
cmove edi, eax
or edi, dword [rcx + 0xc0]
cmp byte [rsp + 0xc0], 0
je 0x1400eb80e
mov rax, rcx
mov esi, 2
xor ecx, ecx
xor edx, edx
jmp 0x1400ec184
cmp qword [rsp + 0xd0], 0
je 0x1400eb7d4
mov r8, qword [rsp + 0xd8]
mov rcx, qword [0x1419340f0]
xor edx, edx
mov rsi, rax
call fcn.1401034d0
mov rax, rsi
mov r12, qword [rsp + 0x60]
movq xmm6, rax
test r14, r14
je 0x1400eb7f4
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbx
call fcn.1401034d0
mov r14, qword [rsp + 0x78]
movzx eax, byte [rsp + 0xc0]
test al, al
jne 0x1400eb546
jmp 0x1400ec870
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 2
mov qword [rsp + 0x90], 0
cmp qword [rsp + 0xb8], 0
je 0x1400ec05c
mov esi, 2
xor ebp, ebp
jmp 0x1400ec08f
mov ebp, 1
cmp rbp, 1
sete byte [rsp + 0x5f]
test r13, r13
mov qword [rsp + 0x78], r14
je 0x1400eb9b9
add rdi, r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rdi
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea rsi, [rsp + 0x270]
lea r13, [rsp + 0x170]
lea rdi, [rsp + 0xd0]
nop dword [rax + rax]
mov rcx, rsi
mov rdx, r13
call fcn.1400e8f60
mov rax, qword [rsp + 0x270]
cmp rax, r12
je 0x1400eb9b9
mov r8, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x280]
test rcx, rcx
jne 0x1400eb8f6
test rax, rax
je 0x1400eb8b0
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
jmp 0x1400eb8b0
mov rdx, qword [rsp + 0x288]
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xd0], rax
mov rcx, rdi
mov rdx, r15
mov r8, rbx
call fcn.1400e1b70
mov qword [rsp + 0x68], rbp
cmp rbp, 1
je 0x1400eb94c
mov r8d, 3
mov rcx, rdi
lea rdx, [0x1419292c0]
call fcn.1400e2f30
mov rbp, rdi
mov rdi, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
lea rcx, [rsp + 0x230]
mov rdx, rdi
call fcn.1400e6640
cmp qword [rsp + 0xd0], 0
je 0x1400eb98b
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rdi
call fcn.1401034d0
mov r14, qword [rsp + 0x230]
cmp r14, r12
mov rdi, rbp
mov rbp, qword [rsp + 0x68]
je 0x1400eb8b0
mov rbx, qword [rsp + 0x238]
mov r15, qword [rsp + 0x240]
jmp 0x1400eb56e
lea rcx, [rsp + 0xd0]
call fcn.1400e3280
mov rbx, qword [rsp + 0xd0]
cmp rbx, r12
jne 0x1400eba41
mov rax, qword [rsp + 0xd8]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x1400ebb1d
test rcx, rcx
je 0x1400ebb1d
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400eba2b
cmp qword [rbx + 0x10], 0x11
jb 0x1400eba1a
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rdi
call fcn.1401034d0
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
jmp 0x1400ebb1d
mov rsi, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov rcx, rsi
mov rdx, rdi
call fcn.1400e2790
cmp rdi, rdx
cmovb rdx, rdi
test rax, rax
cmove rdx, rdi
mov qword [rsp + 0x270], rbx
mov qword [rsp + 0x278], rsi
mov qword [rsp + 0x280], rdx
mov qword [rsp + 0x288], r14
mov rdx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1b8]
lea rcx, [rsp + 0x270]
call fcn.1400e1b70
cmp byte [rsp + 0x5f], 0
jne 0x1400ebad0
lea rdx, [0x1419292c0]
lea rcx, [rsp + 0x270]
mov r8d, 3
call fcn.1400e2f30
mov rsi, qword [rsp + 0x278]
mov r8, qword [rsp + 0x280]
lea rcx, [rsp + 0x150]
mov rdx, rsi
call fcn.1400e6640
cmp qword [rsp + 0x270], 0
je 0x1400ebb0c
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
mov r14, qword [rsp + 0x150]
cmp r14, r12
jne 0x1400ebfb4
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 2
mov qword [rsp + 0x90], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x68], rax
xor r15d, r15d
mov r13d, 0xffffffff
xor r12d, r12d
xor ebx, ebx
cmp r8, 0x201
jb 0x1400ebb7f
jmp 0x1400ebba0
jae 0x1400ebc59
cmp r8, 0x201
jae 0x1400ebba0
mov esi, 0x200
lea rdi, [rsp + 0x270]
mov r14, r8
jmp 0x1400ebbd1
sub r8, rbx
sub r12, rbx
cmp r12, r8
jb 0x1400ebc2f
cmp r15, r13
mov ebx, 0xffffffff
cmovb rbx, r15
mov qword [rsp + 0x90], rbx
mov r12, r15
mov rsi, rbx
mov rdi, qword [rsp + 0x68]
mov r14, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rdi
mov edx, r14d
call sub.KERNEL32.dll_GetSystemDirectoryW
mov ebp, eax
test eax, eax
jne 0x1400ebbf6
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x1400ebd3d
mov r8d, ebp
cmp r14, r8
jne 0x1400ebb70
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400ecdd6
add r14, r14
cmp r14, r13
cmovae r14, r13
mov r8, r14
cmp r8, 0x201
jae 0x1400ebba0
jmp 0x1400ebb7f
lea rcx, [rsp + 0x80]
mov rdx, rbx
call fcn.1400e3da0
mov r15, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x68], rax
jmp 0x1400ebbaf
cmp rsi, r8
jb 0x1400ecdd6
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov rdx, rdi
call fcn.1400ed5f0
mov rdx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1b8]
mov rcx, rsi
call fcn.1400e1b70
cmp byte [rsp + 0x5f], 0
movabs r12, 0x8000000000000000
jne 0x1400ebcb8
lea rdx, [0x1419292c0]
lea rcx, [rsp + 0xd0]
mov r8d, 3
call fcn.1400e2f30
mov rsi, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.1400e6640
cmp qword [rsp + 0xd0], 0
je 0x1400ebcf4
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
mov r14, qword [rsp + 0x170]
mov rbx, qword [rsp + 0x178]
mov r15, qword [rsp + 0x180]
cmp qword [rsp + 0x80], 0
je 0x1400ebd2d
mov r8, qword [rsp + 0x88]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
lea rax, [r12 + 2]
cmp r14, rax
jge 0x1400eb56e
jmp 0x1400ebd7c
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
cmp qword [rsp + 0x80], 0
je 0x1400ebd6d
mov r8, qword [rsp + 0x88]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
movabs r12, 0x8000000000000000
lea r14, [r12 + 1]
mov rcx, r14
mov rdx, rbx
call fcn.1400e6760
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x5f]
call fcn.1400e39e0
mov r14, qword [rsp + 0x270]
mov rbx, qword [rsp + 0x278]
lea rax, [r12 + 2]
cmp r14, rax
jge 0x1400ebfa7
mov rcx, r14
mov rdx, rbx
call fcn.1400e6760
lea rdx, [0x141929254]
lea rcx, [rsp + 0x80]
mov r8d, 4
call fcn.1400e91a0
mov rax, r12
mov r12, qword [rsp + 0x80]
cmp r12, rax
je 0x1400ec84a
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x90]
add rax, rsi
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rax
mov word [rsp + 0x180], 0
mov byte [rsp + 0x188], 1
lea rbx, [rsp + 0x270]
lea r15, [rsp + 0x170]
lea r13, [rsp + 0xd0]
lea rbp, [rsp + 0x138]
movabs rdi, 0x8000000000000000
mov rcx, rbx
mov rdx, r15
call fcn.1400e8f60
mov rax, qword [rsp + 0x270]
cmp rax, rdi
jne 0x1400ebe9a
jmp 0x1400ec834
mov rcx, rbx
mov rdx, r15
call fcn.1400e8f60
mov rax, qword [rsp + 0x270]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x1400ec834
mov r8, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x280]
test rcx, rcx
jne 0x1400ebec4
test rax, rax
je 0x1400ebe74
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
jmp 0x1400ebe74
mov rdx, qword [rsp + 0x288]
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xd0], rax
mov rdx, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1b8]
mov rcx, r13
call fcn.1400e1b70
cmp byte [rsp + 0x5f], 0
jne 0x1400ebf20
mov r8d, 3
mov rcx, r13
lea rdx, [0x1419292c0]
call fcn.1400e2f30
mov rdi, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
mov rcx, rbp
mov rdx, rdi
call fcn.1400e6640
cmp qword [rsp + 0xd0], 0
je 0x1400ebf57
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rdi
call fcn.1401034d0
mov r14, qword [rsp + 0x138]
movabs rdi, 0x8000000000000000
cmp r14, rdi
je 0x1400ebe57
mov rbx, qword [rsp + 0x140]
mov r15, qword [rsp + 0x148]
test r12, r12
je 0x1400ebf98
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
movabs r12, 0x8000000000000000
jmp 0x1400eb56e
mov r15, qword [rsp + 0x280]
jmp 0x1400eb56e
mov rbx, qword [rsp + 0x158]
mov r15, qword [rsp + 0x160]
jmp 0x1400eb56e
movzx ecx, word [rax - 8]
lea edx, [rcx - 0x42]
cmp edx, 0x21
ja case.0x1400ebfe7.68
lea r8, [0x140112260]
movsxd rdx, dword [r8 + rdx*4]
add rdx, r8
jmp rdx
movzx edx, word [rax - 6]
or edx, 0x20
cmp edx, 0x61
jne 0x1400ec001
movzx edx, word [rax - 4]
or edx, 0x20
cmp edx, 0x74
je 0x1400ec02b
cmp cx, 0x43
jne case.0x1400ebfe7.68
movzx ecx, word [rax - 6]
or ecx, 0x20
cmp ecx, 0x6d
jne case.0x1400ebfe7.68
movzx eax, word [rax - 4]
or eax, 0x20
cmp eax, 0x64
jne case.0x1400ebfe7.68
lea rcx, [rsp + 0x270]
call fcn.1400e67e0
mov rbp, qword [rsp + 0x270]
cmp rbp, r12
jne 0x1400eca17
movq xmm6, qword [rsp + 0x278]
mov r12, qword [rsp + 0x60]
jmp 0x1400eb7de
lea rcx, [rsp + 0x80]
xor edx, edx
call fcn.1400fdea0
mov rax, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x90]
mov rsi, rax
mov word [rax + rbp*2], 0
inc rbp
mov qword [rsp + 0x90], rbp
xor eax, eax
mov r8, qword [rsp + 0x60]
test r8, r8
setne al
mov rcx, qword [rsp + 0xb8]
cmove rcx, r8
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], r8
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x100], r8
mov qword [rsp + 0x108], rdx
mov qword [rsp + 0x110], rcx
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0xd0]
call fcn.1400df690
mov rax, qword [rsp + 0x270]
cmp rax, r12
jne 0x1400ec359
lea rcx, [rsp + 0xd0]
call fcn.1400e1430
mov rcx, qword [rsp + 0x80]
cmp rbp, rcx
jne 0x1400ec165
lea rcx, [rsp + 0x80]
mov rdx, rbp
call fcn.1400fdea0
mov rbp, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rax, qword [rsp + 0xb0]
mov word [rsi + rbp*2], 0
mov rdx, rsi
cmp rcx, r12
mov rbp, qword [rsp + 0x68]
je 0x1400ec7e0
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x60], rsi
lea rcx, [rax + 0x38]
mov rdx, rax
xor eax, eax
cmp qword [rdx + 0x38], r12
cmovne rax, rcx
jne 0x1400ec288
mov ecx, 2
xor r12d, r12d
xor eax, eax
mov qword [rsp + 0x1f8], rcx
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x68], rbp
mov dword [rsp + 0x70], r13d
mov qword [rsp + 0xa8], r15
xorps xmm0, xmm0
movaps xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], 0
lea rcx, [0x1419340e8]
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x220], 0
mov r13, qword [rsp + 0xb0]
lea rcx, [r13 + 0x58]
mov ebp, dword [r13 + 0x68]
cmp dword [r13 + 0x58], 6
lea r15, [rsp + 0x248]
cmove rcx, r15
lea rsi, [r13 + 0x78]
cmp dword [r13 + 0x78], 6
cmove rsi, r15
lea r8, [rsp + 0x200]
mov edx, 0xfffffff6
call fcn.1400e6bb0
test rax, rax
je 0x1400ec7ea
movq xmm6, rdx
mov r15, qword [rsp + 0xa8]
mov r13d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
jmp 0x1400ece56
mov rcx, qword [rdx + 0x40]
mov rdx, qword [rdx + 0x48]
add rdx, rcx
xor r10d, r10d
jmp 0x1400ec2a5
xor r10d, r10d
test r8w, r8w
je 0x1400ec734
mov r8w, 1
test r10w, r10w
jne 0x1400ec298
cmp rcx, rdx
je 0x1400ec933
movzx r10d, byte [rcx]
test r10b, r10b
js 0x1400ec2cd
inc rcx
mov r9d, r10d
jmp 0x1400ec34e
mov r9d, r10d
and r9d, 0x1f
movzx esi, byte [rcx + 1]
and esi, 0x3f
cmp r10b, 0xdf
jbe 0x1400ec317
movzx r11d, byte [rcx + 2]
shl esi, 6
and r11d, 0x3f
or r11d, esi
cmp r10b, 0xf0
jb 0x1400ec324
movzx r10d, byte [rcx + 3]
add rcx, 4
and r9d, 7
shl r9d, 0x12
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
or r9d, r10d
jmp 0x1400ec32f
add rcx, 2
shl r9d, 6
or r9d, esi
jmp 0x1400ec34e
add rcx, 3
shl r9d, 0xc
or r9d, r11d
cmp r9d, 0xffff
jbe 0x1400ec34e
and r9d, 0x3ff
or r9d, 0xdc00
mov r10d, r9d
jmp 0x1400ec29b
xor r10d, r10d
mov r8d, r9d
jmp 0x1400ec29b
mov qword [rsp + 0xa8], r15
mov r8, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x290]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0x298]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x2a0]
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x2a8]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x60], rcx
mov r12, qword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x280]
add rcx, r8
xor r11d, r11d
mov rdx, r8
jmp 0x1400ec3db
xor r11d, r11d
test r9w, r9w
je 0x1400ec745
mov r9w, 1
test r11w, r11w
jne 0x1400ec3ce
cmp rdx, rcx
je 0x1400ec495
movzx r11d, byte [rdx]
test r11b, r11b
js 0x1400ec403
inc rdx
mov r10d, r11d
jmp 0x1400ec48a
mov r10d, r11d
and r10d, 0x1f
movzx esi, byte [rdx + 1]
and esi, 0x3f
cmp r11b, 0xdf
jbe 0x1400ec450
mov r15d, r13d
movzx r13d, byte [rdx + 2]
shl esi, 6
and r13d, 0x3f
or r13d, esi
cmp r11b, 0xf0
jb 0x1400ec45d
movzx r11d, byte [rdx + 3]
add rdx, 4
and r10d, 7
shl r10d, 0x12
shl r13d, 6
and r11d, 0x3f
or r11d, r13d
or r10d, r11d
jmp 0x1400ec468
add rdx, 2
shl r10d, 6
or r10d, esi
jmp 0x1400ec48a
add rdx, 3
shl r10d, 0xc
or r10d, r13d
cmp r10d, 0xffff
mov r13d, r15d
jbe 0x1400ec48a
and r10d, 0x3ff
or r10d, 0xdc00
mov r11d, r10d
jmp 0x1400ec3d1
xor r11d, r11d
mov r9d, r10d
jmp 0x1400ec3d1
test rax, rax
je 0x1400ec4b0
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
mov rbp, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
sub rax, rbp
cmp rax, qword [rsp + 0xc0]
jb 0x1400ec70f
mov r15, qword [rsp + 0xc0]
lea r8, [r15 + r15]
lea rcx, [rbp*2]
add rcx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x70]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
add rbp, r15
mov qword [rsp + 0x90], rbp
cmp qword [rsp + 0xc8], 0
je 0x1400ec521
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
mov rbp, qword [rsp + 0x90]
cmp rbp, qword [rsp + 0x80]
mov r15, qword [rsp + 0xa8]
jne 0x1400ec54b
lea rcx, [rsp + 0x80]
mov rdx, rbp
call fcn.1400fdea0
mov rbp, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x88]
mov word [rax + rbp*2], 0x3d
inc rbp
mov qword [rsp + 0x90], rbp
add r12, rcx
xor r8d, r8d
mov rax, rcx
mov rbp, qword [rsp + 0x68]
jmp 0x1400ec58d
xor r8d, r8d
test cx, cx
je 0x1400ec9c2
mov cx, 1
test r8w, r8w
jne 0x1400ec581
cmp rax, r12
je 0x1400ec637
movzx r8d, byte [rax]
test r8b, r8b
js 0x1400ec5b1
inc rax
mov edx, r8d
jmp 0x1400ec62d
mov edx, r8d
and edx, 0x1f
movzx r10d, byte [rax + 1]
and r10d, 0x3f
cmp r8b, 0xdf
jbe 0x1400ec5fb
movzx r9d, byte [rax + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp r8b, 0xf0
jb 0x1400ec607
movzx r8d, byte [rax + 3]
add rax, 4
and edx, 7
shl edx, 0x12
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
or edx, r8d
jmp 0x1400ec611
add rax, 2
shl edx, 6
or edx, r10d
jmp 0x1400ec62d
add rax, 3
shl edx, 0xc
or edx, r9d
cmp edx, 0xffff
jbe 0x1400ec62d
and edx, 0x3ff
or edx, 0xdc00
mov r8d, edx
jmp 0x1400ec584
xor r8d, r8d
mov ecx, edx
jmp 0x1400ec584
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400ec7ad
mov rbp, qword [rsp + 0x60]
mov qword [rsp + 0x170], rbp
mov qword [rsp + 0x178], r12
mov word [rsp + 0x180], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x170]
call fcn.1400e9830
test rsi, rsi
je 0x1400ec694
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbp
call fcn.1401034d0
mov rbp, qword [rsp + 0x90]
cmp rbp, qword [rsp + 0x80]
movabs r12, 0x8000000000000000
jne 0x1400ec6c8
lea rcx, [rsp + 0x80]
mov rdx, rbp
call fcn.1400fdea0
mov rbp, qword [rsp + 0x90]
mov rax, qword [rsp + 0x88]
mov rsi, rax
mov word [rax + rbp*2], 0
inc rbp
mov qword [rsp + 0x90], rbp
lea rcx, [rsp + 0x270]
lea rdx, [rsp + 0xd0]
call fcn.1400df690
mov rax, qword [rsp + 0x270]
cmp rax, r12
jne 0x1400ec361
jmp 0x1400ec123
lea rcx, [rsp + 0x80]
mov rdx, rbp
mov r8, qword [rsp + 0xc0]
call fcn.1400e3da0
mov rbp, qword [rsp + 0x90]
jmp 0x1400ec4c9
lea r12, [0x141929520]
movq xmm6, r12
jmp 0x1400ececb
test rax, rax
je 0x1400ec758
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
cmp qword [rsp + 0xb8], 0
mov r15, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0x68]
je 0x1400ec783
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0x60]
call fcn.1401034d0
cmp qword [rsp + 0xc8], 0
mov r8, qword [rsp + 0x70]
je 0x1400ec7a1
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
lea rax, [0x141929520]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0xd0]
call fcn.1400e1430
cmp qword [rsp + 0x80], 0
je 0x1400ec7db
mov r8, qword [rsp + 0x88]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
mov rsi, qword [rsp + 0x60]
movq xmm6, rsi
jmp 0x1400ecee9
mov qword [rsp + 0x1d8], rdx
lea r8, [rsp + 0x210]
lea rcx, [r13 + 0x68]
cmp ebp, 6
cmove rcx, r15
mov edx, 0xfffffff5
call fcn.1400e6bb0
test rax, rax
je 0x1400ec9d5
movq xmm6, rdx
mov r15, qword [rsp + 0xa8]
mov r13d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
jmp 0x1400ece49
test r12, r12
je 0x1400ec84a
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
lea rsi, [0x1419292a8]
mov r14, qword [rsp + 0x78]
mov r12, qword [rsp + 0x60]
movq xmm6, rsi
movzx eax, byte [rsp + 0xc0]
test al, al
jne 0x1400eb546
test r12, r12
je 0x1400ec8c1
mov qword [rsp + 0x278], 0
mov qword [rsp + 0x280], r12
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x298], 0
mov qword [rsp + 0x2a0], r12
mov qword [rsp + 0x2a8], rax
mov eax, 1
mov rcx, qword [rsp + 0xb8]
jmp 0x1400ec8c5
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x2b0], rcx
lea rcx, [rsp + 0x270]
call fcn.1400e1430
cmp dword [rsp + 0x248], 3
jbe 0x1400eb554
mov edi, 2
mov rcx, qword [rsp + 0x250]
call sub.KERNEL32.dll_CloseHandle
cmp rdi, 2
je 0x1400ece06
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], rbp
mov qword [r14 + 0x20], rsi
mov qword [r14 + 0x28], r12
movdqu xmmword [r14 + 0x30], xmm6
jmp 0x1400ece0c
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
add rax, rcx
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
mov word [rsp + 0x280], 0
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0x270]
call fcn.1400e99c0
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xe0]
mov rsi, r12
cmp rdx, rax
jne 0x1400ec9a2
lea rcx, [rsp + 0xd0]
call fcn.1400fdea0
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xe0]
mov r12, qword [rsp + 0xd8]
mov word [r12 + rdx*2], 0
mov rcx, r12
cmp rax, rsi
jne 0x1400ec1ba
jmp 0x1400ec73b
mov r8, qword [rsp + 0x60]
test rsi, rsi
jne 0x1400ec793
jmp 0x1400ec7a1
mov qword [rsp + 0x168], rdx
lea r8, [rsp + 0x220]
mov rcx, rsi
mov edx, 0xfffffff4
call fcn.1400e6bb0
test rax, rax
mov r15, qword [rsp + 0xa8]
mov r13d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
je 0x1400ecaa7
movq xmm6, rdx
jmp 0x1400ece3c
mov rsi, qword [rsp + 0x278]
mov rcx, qword [rsp + 0xb0]
mov r9, qword [rcx + 0x28]
mov rax, qword [rcx + 0x30]
movzx ecx, byte [rcx + 0xc5]
mov byte [rsp + 0x28], cl
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x270]
mov rdx, rbx
mov r8, r15
call fcn.1400e8580
mov rdx, qword [rsp + 0x270]
cmp rdx, r12
jne 0x1400eca8c
movq xmm6, qword [rsp + 0x278]
test rbp, rbp
mov r12, qword [rsp + 0x60]
je 0x1400eb7de
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rsi
call fcn.1401034d0
jmp 0x1400eb7de
mov rax, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x280]
xor r13d, r13d
mov r15, rsi
jmp 0x1400eb728
xorps xmm0, xmm0
movups xmmword [rsp + 0x104], xmm0
movups xmmword [rsp + 0xf8], xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0x118], xmm0
movups xmmword [rsp + 0x128], xmm0
test rdx, rdx
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x168]
jne 0x1400ecaf9
test rcx, rcx
jne 0x1400ecaf9
test rax, rax
je 0x1400ecb1c
mov dword [rsp + 0x10c], 0x100
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rdx
mov rsi, rdx
mov rdx, qword [rsp + 0xb0]
mov rax, qword [rdx + 0xb8]
mov qword [rsp + 0x1f0], rax
test rax, rax
je 0x1400ecc0f
add rdx, 0xa8
mov dword [rsp + 0xd0], 0x70
lea rcx, [rsp + 0x80]
call fcn.1400e70a0
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1400ece2b
or edi, 0x80000
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movups xmm2, xmmword [rsp + 0xf0]
movups xmm3, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x270], xmm0
movaps xmmword [rsp + 0x280], xmm1
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x2a0], xmm3
movups xmm0, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x2b0], xmm0
movups xmm0, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x2c0], xmm0
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x1e8], rcx
mov qword [rsp + 0x2d8], rcx
lea rax, [rsp + 0x270]
jmp 0x1400ecc22
mov dword [rsp + 0xd0], 0x68
lea rax, [rsp + 0xd0]
mov rdx, qword [rsp + 0x140]
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
mov rcx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
je 0x1400ecda2
mov qword [rsp + 0xb0], rsi
movaps xmm6, xmmword [rsp + 0x170]
mov rdi, qword [rsp + 0x200]
mov r15, qword [rsp + 0x208]
mov r13, qword [rsp + 0x210]
mov rbp, qword [rsp + 0x218]
mov rsi, qword [rsp + 0x220]
mov r12, qword [rsp + 0x228]
cmp qword [rsp + 0x1f0], 0
je 0x1400eccd0
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rsp + 0x1e0]
call fcn.1400e73c0
mov rcx, qword [rsp + 0xb0]
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x168]
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x1d8]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [0x1419340e8]
call fcn.140103458
cmp qword [rsp + 0xc8], 0
je 0x1400ecd24
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0x1f8]
call fcn.1401034d0
cmp qword [rsp + 0xb8], 0
je 0x1400ecd42
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0x60]
call fcn.1401034d0
cmp qword [rsp + 0x138], 0
je 0x1400ecd63
mov r8, qword [rsp + 0x140]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
cmp qword [rsp + 0x68], 0
je 0x1400ecd81
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0xa8]
call fcn.1401034d0
test r14, r14
sete al
or al, byte [rsp + 0x70]
je 0x1400ecdd8
cmp dword [rsp + 0x248], 4
mov r14, qword [rsp + 0x78]
jae 0x1400ec8fd
jmp 0x1400ecdfc
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
movq xmm6, rax
cmp qword [rsp + 0x1f0], 0
je 0x1400ece34
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rsp + 0x1e0]
call fcn.1400e73c0
jmp 0x1400ece34
ud2
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbx
call fcn.1401034d0
cmp dword [rsp + 0x248], 4
mov r14, qword [rsp + 0x78]
jae 0x1400ec8fd
cmp rdi, 2
jne 0x1400ec914
movq qword [r14 + 8], xmm6
mov qword [r14], rdi
movaps xmm6, xmmword [rsp + 0x690]
add rsp, 0x6a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movq xmm6, qword [rsp + 0x88]
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x168]
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x1d8]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x200], 0
je 0x1400ece6e
mov rcx, qword [rsp + 0x208]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x210], 0
je 0x1400ece86
mov rcx, qword [rsp + 0x218]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x220], 0
je 0x1400ece9e
mov rcx, qword [rsp + 0x228]
call sub.KERNEL32.dll_CloseHandle
lea rcx, [0x1419340e8]
call fcn.140103458
cmp qword [rsp + 0xc8], 0
je 0x1400ececb
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0x1f8]
call fcn.1401034d0
cmp qword [rsp + 0xb8], 0
je 0x1400ecee9
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, qword [rsp + 0x60]
call fcn.1401034d0
cmp qword [rsp + 0x138], 0
je 0x1400ecf0a
mov r8, qword [rsp + 0x140]
mov rcx, qword [0x1419340f0]
xor edx, edx
call fcn.1401034d0
test rbp, rbp
je 0x1400ecf20
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, r15
call fcn.1401034d0
test r14, r14
sete al
or al, r13b
jne 0x1400ecf3c
mov rcx, qword [0x1419340f0]
xor edx, edx
mov r8, rbx
call fcn.1401034d0
mov r14, qword [rsp + 0x78]
cmp dword [rsp + 0x248], 3
jbe 0x1400eb554
jmp 0x1400ec8f8
call fcn.1400e7ef0
ud2