Function at 0x1400a4880
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x608
movdqa xmmword [rsp + 0x5f0], xmm6
mov qword [rsp + 0x1c0], r8
mov qword [rsp + 0x100], rcx
movzx ecx, byte [rdx + 0xa0]
test cl, cl
sete al
mov qword [rsp + 0x108], rdx
mov rbx, qword [rdx + 0x98]
test rbx, rbx
sete dl
and dl, al
mov byte [rsp + 0x6e], dl
je 0x1400a48f0
xor r12d, r12d
mov rax, qword [rsp + 0x108]
jmp 0x1400a6239
mov eax, dword [0x141dd5150]
imul eax, dword [0x141dd5154]
add eax, 0xb145a007
and eax, 0x750a2e47
imul eax, eax, 0x71fffa00
cmp eax, 0xa2307db3
ja 0x1400a48f0
mov eax, dword [0x141dd5158]
sub eax, dword [0x141dd515c]
imul eax, eax, 0xbbf09fbc
or eax, 0x2eabc5b2
cmp eax, 0xf897c902
jb 0x1400a496f
mov eax, dword [0x141dd5160]
xor edx, edx
div dword [0x141dd5164]
xor eax, 0x64640408
and eax, 0xec64150e
imul eax, eax, 0xed7626cf
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d8], 0
cmp eax, 0xc0a825a6
jbe 0x1400a4989
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d8], 0
jmp 0x1400a4932
test cl, cl
jne 0x1400a4d20
mov qword [rsp + 0x60], rbx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x1400a8156
mov rsi, rax
cmp word [rax], 0
je 0x1400a4d10
lea rdi, [rsp + 0x210]
nop word [rax + rax]
mov eax, dword [0x141dd5168]
sub eax, dword [0x141dd516c]
or eax, 0x935f85ea
imul eax, eax, 0xe79827f8
add eax, 0x9cfd21b0
cmp eax, 0x67014960
jb 0x1400a49c0
lea r14, [rsp + 0x90]
mov rbx, rsi
jmp 0x1400a49ff
cmp word [r12], 0
mov rbx, r12
je 0x1400a4d10
xor eax, eax
nop word cs:[rax + rax]
mov rbp, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5178]
and eax, dword [0x141dd517c]
and eax, 0x2f0edce9
imul eax, eax, 0x99d8f377
add eax, 0xbec6dcb7
cmp eax, 0xe0dd9e68
ja 0x1400a4a20
lea rax, [rbp + 1]
cmp word [rbx + rbp*2], 0
jne 0x1400a4a10
nop
mov ecx, dword [0x141dd5180]
xor ecx, dword [0x141dd5184]
or ecx, 0xb1978ea3
xor ecx, 0xad050ffb
add ecx, 0x533dd754
cmp ecx, 0xe419925f
ja 0x1400a4a50
lea r12, [rbx + rax*2]
cmp rbp, 1
je 0x1400a49f0
test rbp, rbp
je 0x1400a81b7
lea rax, [rbx + rbp*2]
lea rcx, [rbx + 2]
xor r13d, r13d
nop dword [rax + rax]
cmp word [rcx], 0x3d
je 0x1400a4ae0
add rcx, 2
inc r13
nop dword [rax]
mov edx, dword [0x141dd5188]
add edx, dword [0x141dd518c]
or edx, 0x75f6fffe
xor edx, 0xbdbefbe2
cmp edx, 0x8140af90
ja 0x1400a4ab0
cmp rcx, rax
jne 0x1400a4aa0
jmp 0x1400a49f0
mov eax, dword [0x141dd51a0]
imul eax, dword [0x141dd51a4]
imul rcx, rax, 0xfe5d521
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xb450420
cmp eax, 0x16849d10
mov eax, dword [0x141dd51a8]
sub eax, dword [0x141dd51ac]
imul eax, eax, 0x89fcb025
add eax, 0x3527775b
xor eax, 0xc0ceb162
cmp eax, 0xf22f30b9
ja 0x1400a4b0b
cmp r13, rbp
jae 0x1400a94a5
nop word [rax + rax]
mov eax, dword [0x141dd51b0]
and eax, dword [0x141dd51b4]
xor eax, 0xa0c00808
or eax, 0x17315774
imul r15d, eax, 0x65a8d9e3
lea r8, [r13 + 1]
mov rcx, r14
mov rdx, rbx
call fcn.14008ea20
cmp r15d, 0x1dbad588
jb 0x1400a4b40
add r13, 2
sub rbp, r13
jb 0x1400a8133
lea rdx, [rbx + r13*2]
mov rcx, rdi
mov r8, rbp
call fcn.14008ea20
movups xmm0, xmmword [rsp + 0x90]
movups xmm1, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x200], xmm1
movaps xmmword [rsp + 0x1f0], xmm0
mov rbx, qword [rsp + 0x1f0]
mov r13, qword [rsp + 0x1f8]
movdqa xmm6, xmmword [rsp + 0x200]
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0x140], xmm0
movaps xmmword [rsp + 0x150], xmm1
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x1400a4d10
movq rax, xmm6
add rax, r13
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], rax
mov word [rsp + 0xa0], 0
mov rcx, rdi
mov rdx, r14
call fcn.1400af080
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x1f8], r13
movdqu xmmword [rsp + 0x200], xmm6
mov rcx, r14
lea rdx, [rsp + 0x1c8]
lea r8, [rsp + 0x1f0]
lea r9, [rsp + 0x140]
call fcn.1400af8c0
mov rax, qword [rsp + 0x90]
shl rax, 1
test rax, rax
je 0x1400a4cda
nop word [rax + rax]
mov eax, dword [str.A_rs]
imul eax, dword [0x141dd51c4]
xor eax, 0x62a9d510
or eax, 0x851022ef
imul eax, eax, 0x1453978b
cmp eax, 0xb3f299c3
jb 0x1400a4c70
mov r8, qword [rsp + 0x98]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dd51c8]
sub eax, dword [0x141dd51cc]
xor eax, 0x65f631ac
shr eax, 1
imul rax, rax, 0x13cc8b01
shr rax, 0x3a
add eax, 0xecb8af4d
cmp eax, 0x22c1d237
jb 0x1400a4cb0
movzx ecx, word [r12]
nop
mov eax, dword [0x141dd51d0]
xor edx, edx
div dword [0x141dd51d4]
and eax, 0x18203090
or eax, 0x87c6cf4d
xor eax, 0xbfa831ab
cmp eax, 0x7eb22e8e
ja 0x1400a4ce0
mov rbx, r12
test cx, cx
jne 0x1400a49ff
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rbx, qword [rsp + 0x60]
nop
mov eax, dword [0x141dd5170]
xor edx, edx
div dword [0x141dd5174]
imul eax, eax, 0x5f6f5e1c
add eax, 0x57c5e15d
cmp eax, 0x9469adf7
ja 0x1400a4d20
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax + 0x88]
test rbx, rbx
setne dl
test rcx, rcx
setne al
and al, dl
xor edx, edx
nop
test dl, dl
jne 0x1400a4d60
test al, al
je 0x1400a5f27
mov rax, qword [rsp + 0x108]
mov r9, qword [rax + 0x90]
mov r11d, 0x9137e8fb
xor r14d, r14d
jmp 0x1400a4dae
mov ecx, 0
mov rbx, qword [rsp + 0x60]
test rbx, rbx
mov r11d, 0x9137e8fb
mov r9, qword [rsp + 0x70]
je 0x1400a5f27
test r14, r14
je 0x1400a4dd0
movzx eax, word [r14 + 0x3d2]
cmp r9, rax
jae 0x1400a4ee0
mov r8, r9
mov rsi, r14
jmp 0x1400a4f49
test r9, r9
je 0x1400a4e43
mov eax, r9d
and eax, 7
nop dword [rax + rax]
mov edx, dword [0x141dd51d8]
xor edx, dword [0x141dd51dc]
imul edx, edx, 0x2e7828fe
or edx, 0xbe52ea74
xor edx, 0x55505eeb
cmp edx, 0x65130bc2
jb 0x1400a4de0
test rax, rax
je 0x1400a4e48
mov rdx, r9
mov r14, rcx
xor ecx, ecx
nop word cs:[rax + rax]
mov r14, qword [r14 + 0x3d8]
inc rcx
dec rdx
cmp rax, rcx
jne 0x1400a4e20
mov r8, r9
sub r8, rcx
cmp r9, 8
jae 0x1400a4e60
jmp 0x1400a4ec2
mov r14, rcx
jmp 0x1400a4ec2
mov r8, r9
mov r14, rcx
cmp r9, 8
jb 0x1400a4ec2
nop word cs:[rax + rax]
mov eax, dword [0x141dd51e0]
xor edx, edx
div dword [0x141dd51e4]
add eax, 0xb1bd8bf2
or eax, 0x108a7517
and eax, 0x968bf71f
cmp eax, 0x8ce602f6
jb 0x1400a4e60
mov rax, qword [r14 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r14, qword [rax + 0x3d8]
add r8, 0xfffffffffffffff8
jne 0x1400a4e60
xor r9d, r9d
xor ecx, ecx
movzx eax, word [r14 + 0x3d2]
cmp r9, rax
jb 0x1400a4dc4
nop dword [rax + rax]
mov rsi, qword [r14 + 0x160]
test rsi, rsi
je 0x1400a80b8
mov eax, dword [0x141dd51e8]
or eax, dword [0x141dd51ec]
add eax, 0x8f6ded1c
xor eax, 0x2df9d954
cmp eax, 0x42abe9f4
ja 0x1400a4ef0
inc rcx
movzx r8d, word [r14 + 0x3d0]
movzx eax, word [rsi + 0x3d2]
nop
mov edx, dword [0x141dd51f0]
and edx, dword [0x141dd51f4]
or edx, 0x5f9fdfef
imul edx, edx, 0x2716272
cmp edx, 0xd08b4482
ja 0x1400a4f20
mov r14, rsi
cmp r8w, ax
jae 0x1400a4ee0
dec rbx
nop dword [rax]
mov eax, dword [0x141dd5200]
xor edx, edx
div dword [0x141dd5204]
add eax, 0xdd8bb564
imul rax, rax, 0x2103df23
shr rax, 0x3b
imul eax, eax, 0xa6ba8e3
cmp eax, 0x10cbcba9
je 0x1400a4f50
test rcx, rcx
je 0x1400a50b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5208]
add eax, dword [0x141dd520c]
or eax, 0x354c657a
imul eax, eax, 0xf40948f6
add eax, 0x4bc071da
cmp eax, 0x6305179f
ja 0x1400a4f90
mov r14, qword [rsi + r8*8 + 0x3e0]
mov rax, rcx
dec rax
je 0x1400a509e
nop word [rax + rax]
mov edx, dword [0x141dd5210]
sub edx, dword [0x141dd5214]
add edx, 0xeaa91ff4
imul rdx, rdx, 0x3225104f
shr rdx, 0x3b
imul edx, edx, 0x1491f3ef
cmp edx, 0xb6443a3f
ja 0x1400a4fd0
mov edx, eax
and edx, 7
je 0x1400a504e
xor r9d, r9d
nop word cs:[rax + rax]
mov r10d, dword [0x141dd5218]
xor r10d, dword [0x141dd521c]
add r10d, 0x2c00dd2a
or r10d, 0xdac46901
add r10d, 0x4f9d2080
cmp r10d, 0x75261e32
ja 0x1400a5010
dec rax
inc r9
mov r14, qword [r14 + 0x3d8]
cmp r9, rdx
jne 0x1400a5010
add rcx, 0xfffffffffffffffe
cmp rcx, 7
jb 0x1400a509e
nop dword [rax + rax]
mov rcx, qword [r14 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r14, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400a5060
xor r15d, r15d
jmp 0x1400a50c0
lea r15, [r8 + 1]
mov r14, rsi
nop word [rax + rax]
mov eax, dword [0x141dd5220]
imul eax, dword [0x141dd5224]
imul rax, rax, 0x2106b6d1
shr rax, 0x3d
or eax, 0xc0779540
cmp eax, 0x4d9453b
jb 0x1400a50c0
imul rax, r8, 0x38
shl r8, 5
lea r13, [rsi + rax]
add r13, 0x168
movabs rax, 0x8000000000000000
cmp qword [rsi + r8], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], r15
jne 0x1400a52a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5288]
add eax, dword [0x141dd528c]
imul eax, eax, 0xfd0a4cd8
and eax, 0xc13de358
xor eax, 0x7d03921f
cmp eax, 0x90c0c1ff
jb 0x1400a5120
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xf8], rax
test rax, rax
je 0x1400a4d90
mov rbx, qword [r13 + 0x28]
mov r12, qword [r13 + 0x30]
mov rsi, qword [rsp + 0x1d0]
nop dword [rax]
mov eax, dword [0x141dd5290]
or eax, dword [0x141dd5294]
xor eax, 0x59690000
or eax, 0x2086be9f
add eax, 0xd43a712c
cmp eax, 0x3d80e909
jb 0x1400a5170
xor eax, eax
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x58], rsi
mov rdi, qword [rsp + 0xf8]
movzx eax, word [rdi + 0x3d2]
mov qword [rsp + 0x50], rax
imul rbp, rax, 0x38
mov r15, 0xffffffffffffffff
xor r13d, r13d
nop word cs:[rax + rax]
cmp rbp, r13
je 0x1400a5250
nop word cs:[rax + rax]
mov eax, dword [0x141dd5298]
xor eax, dword [0x141dd529c]
imul rax, rax, 0x6f2fda09
shr rax, 0x3e
or eax, 0x13eba42a
xor eax, 0x51fdf3bc
cmp eax, 0x52db2084
ja 0x1400a51e0
mov r8, qword [rdi + r13 + 0x190]
mov r9d, dword [rdi + r13 + 0x198]
mov dword [rsp + 0x20], 1
mov rcx, rbx
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
inc r15
add r13, 0x38
cmp eax, 3
je 0x1400a51d0
cmp eax, 1
jne 0x1400a5380
test rsi, rsi
jne 0x1400a5260
jmp 0x1400a4d90
mov r15, qword [rsp + 0x50]
test rsi, rsi
je 0x1400a4d90
nop
mov eax, dword [str.c_q_C]
xor edx, edx
div dword [0x141dd52b4]
xor eax, 0x5efd9f94
add eax, 0xfebd4d77
xor eax, 0x5ad7cd74
cmp eax, 0xd3727c24
jae 0x1400a5260
dec rsi
inc qword [rsp + 0x80]
mov rdi, qword [rdi + r15*8 + 0x3d8]
jmp 0x1400a51a9
add rsi, r8
nop word cs:[rax + rax]
mov eax, dword [0x141dd5228]
sub eax, dword [0x141dd522c]
imul eax, eax, 0xd0ba33bb
imul rax, r11
shr rax, 0x3e
imul eax, eax, 0x4aaa42b5
cmp eax, 0x447f837c
jb 0x1400a52b0
mov rdi, qword [r13 + 0x10]
test rdi, rdi
js 0x1400a80de
mov r12, qword [r13 + 8]
je 0x1400a54b3
nop
mov eax, dword [0x141dd5238]
or eax, dword [0x141dd523c]
add eax, 0x5a265743
movzx ecx, byte [0x141dde6f8]
cmp eax, 0xe87710b2
ja 0x1400a52f0
mov eax, dword [0x141dd5240]
and eax, dword [0x141dd5244]
and eax, 0xa4481080
imul eax, eax, 0x436a12bd
cmp eax, 0x1870f768
jae 0x1400a5337
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
mov rbp, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd5248]
xor eax, dword [0x141dd524c]
xor eax, 0xc2761c3e
imul eax, eax, 0x70a8f207
cmp eax, 0xce425ed9
jb 0x1400a5350
test rbp, rbp
jne 0x1400a54b8
jmp 0x1400a807d
cmp eax, 2
mov rbp, qword [rsp + 0x58]
jne 0x1400a8186
mov byte [rsp + 0x6f], 0
test rsi, rsi
lea rbx, [rsp + 0xc8]
je 0x1400a5552
mov rax, qword [rdi + r15*8 + 0x3d8]
dec rsi
je 0x1400a5578
mov rcx, rsi
and rcx, 7
mov r12, qword [rsp + 0xf8]
je 0x1400a5410
xor edx, edx
nop dword [rax + rax]
mov r8d, dword [0x141dd52c8]
add r8d, dword [0x141dd52cc]
or r8d, 0xff7bf7fe
add r8d, 0xb008964a
cmp r8d, 0x49e09703
jb 0x1400a53d0
dec rsi
inc rdx
movzx r8d, word [rax + 0x3d2]
mov rax, qword [rax + r8*8 + 0x3d8]
cmp rdx, rcx
jne 0x1400a53d0
mov rcx, rbp
sub rcx, qword [rsp + 0x80]
add rcx, 0xfffffffffffffffe
cmp rcx, 7
jb 0x1400a5580
nop dword [rax]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
movzx ecx, word [rax + 0x3d2]
mov rax, qword [rax + rcx*8 + 0x3d8]
add rsi, 0xfffffffffffffff8
jne 0x1400a5430
jmp 0x1400a5580
mov ebp, 1
mov rcx, rbp
mov rdx, r12
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [r13 + 0x30]
test rbx, rbx
js 0x1400a94a5
lea r12, [rbx + rbx]
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp r12, rax
ja 0x1400a94a5
movzx ecx, byte [r13 + 0x18]
mov rdx, qword [r13 + 0x28]
nop word [rax + rax]
mov eax, dword [0x141dd5258]
add eax, dword [0x141dd525c]
or eax, 0xcd180173
xor eax, 0xcf900110
or eax, 0x3027ce8c
cmp eax, 0xb9edaadd
ja 0x1400a5500
mov qword [rsp + 0xf8], rdx
test r12, r12
mov byte [rsp + 0x50], cl
mov r13, rbp
je 0x1400a5545
xor eax, eax
test al, al
jne 0x1400a5974
jmp 0x1400a5940
mov ebp, 2
xor r15d, r15d
jmp 0x1400a5999
mov eax, dword [0x141dd52b8]
and eax, dword [0x141dd52bc]
add eax, 0x7e745524
xor eax, 0xed9d7da5
cmp eax, 0xe5a0b6a
jb 0x1400a5bc6
jmp 0x1400a5ba0
mov r12, qword [rsp + 0xf8]
movzx ecx, word [rax + 0x3d2]
dec rcx
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], rcx
lea rcx, [rsp + 0x1f0]
lea rdx, [rsp + 0x180]
lea r8, [rsp + 0x6f]
call fcn.1400b33e0
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x170], rax
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movups xmm2, xmmword [rsp + 0x210]
movaps xmmword [rsp + 0x160], xmm2
movaps xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x140], xmm0
lea rax, [rsp + 0x228]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x120], xmm1
mov r8, qword [rsp + 0x248]
mov rax, qword [rsp + 0x258]
movzx ecx, word [r8 + 0x3d2]
cmp rax, rcx
jae 0x1400a5641
mov rcx, r8
jmp 0x1400a56aa
mov rax, qword [rsp + 0x250]
nop dword [rax]
mov rcx, qword [r8 + 0x160]
test rcx, rcx
je 0x1400a56a8
movzx edx, word [r8 + 0x3d0]
inc rax
mov r8, rcx
cmp dx, word [rcx + 0x3d2]
jae 0x1400a5650
nop word cs:[rax + rax]
mov eax, dword [0x141dd52d0]
and eax, dword [0x141dd52d4]
imul eax, eax, 0xec29c52b
xor eax, 0xb3511293
or eax, 0x40ae6c4c
cmp eax, 0xfd9ceb07
jae 0x1400a5680
mov rax, rdx
jmp 0x1400a56aa
xor ecx, ecx
mov edx, dword [0x141dd52d8]
imul edx, dword [0x141dd52dc]
imul edx, edx, 0x91640610
cmp edx, 0x3a066cc5
jae 0x1400a57f0
imul rdx, rax, 0x38
mov r8, rax
shl r8, 5
mov r9, qword [rcx + rdx + 0x198]
mov qword [rsp + 0xc0], r9
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movaps xmmword [rsp + 0xb0], xmm2
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov r9, qword [rsp + 0x170]
mov qword [rcx + rdx + 0x198], r9
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmm2, xmmword [rsp + 0x160]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + r8]
movups xmm1, xmmword [rcx + r8 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
movaps xmm0, xmmword [rsp + 0x110]
movaps xmm1, xmmword [rsp + 0x120]
movups xmmword [rcx + r8 + 0x10], xmm1
movups xmmword [rcx + r8], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movaps xmm1, xmmword [rsp + 0xa0]
movaps xmm2, xmmword [rsp + 0xb0]
movaps xmm3, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmmword [rsp + 0x200], xmm1
movaps xmmword [rsp + 0x210], xmm2
movaps xmmword [rsp + 0x220], xmm3
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x230], xmm0
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 0x240], rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dd52e0]
or edx, dword [0x141dd52e4]
and edx, 0xc2b08206
add edx, 0xef5cb0d8
imul r8, rax, 0x38
mov r9, qword [rcx + r8 + 0x198]
mov qword [rsp + 0xc0], r9
movups xmm0, xmmword [rcx + r8 + 0x168]
movups xmm1, xmmword [rcx + r8 + 0x178]
movups xmm2, xmmword [rcx + r8 + 0x188]
movaps xmmword [rsp + 0xb0], xmm2
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov r9, qword [rsp + 0x170]
mov qword [rcx + r8 + 0x198], r9
mov r9, rax
shl r9, 5
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmm2, xmmword [rsp + 0x160]
movups xmmword [rcx + r8 + 0x188], xmm2
movups xmmword [rcx + r8 + 0x178], xmm1
movups xmmword [rcx + r8 + 0x168], xmm0
movups xmm0, xmmword [rcx + r9]
movups xmm1, xmmword [rcx + r9 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
movaps xmm0, xmmword [rsp + 0x110]
movaps xmm1, xmmword [rsp + 0x120]
movups xmmword [rcx + r9 + 0x10], xmm1
movups xmmword [rcx + r9], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movaps xmm1, xmmword [rsp + 0xa0]
movaps xmm2, xmmword [rsp + 0xb0]
movaps xmm3, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x1f0], xmm0
movaps xmmword [rsp + 0x200], xmm1
movaps xmmword [rsp + 0x210], xmm2
movaps xmmword [rsp + 0x220], xmm3
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x230], xmm0
mov r8, qword [rsp + 0xe0]
mov qword [rsp + 0x240], r8
cmp edx, 0x5f9e3a5e
jb 0x1400a57f0
jmp 0x1400a5c06
mov eax, dword [0x141dd5260]
or eax, dword [0x141dd5264]
xor eax, 0xf5d43a54
shr eax, 1
mov ecx, 0x880acee1
imul rax, rcx
shr rax, 0x3c
imul eax, eax, 0xa95942f1
movzx ecx, byte [0x141dde6f8]
cmp eax, 0xd79a1ad3
jne 0x1400a5980
movzx eax, byte [0x141dde6f8]
jmp 0x1400a5940
xor ecx, ecx
mov rdx, r12
call fcn.1400c29b0
mov rbp, rax
mov r15, rbx
test rax, rax
je 0x1400a94a5
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x58], r14
mov eax, dword [0x141dd5268]
imul eax, dword [0x141dd526c]
imul eax, eax, 0xf71632fc
xor eax, 0x62a0f976
add eax, 0xc2d782b8
cmp eax, 0x2554cde7
jae 0x1400a5a19
mov rcx, rbp
mov rdx, qword [rsp + 0xf8]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], r13
mov qword [rsp + 0x200], rdi
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x208], al
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbp
mov qword [rsp + 0x220], rbx
mov r14, rbx
mov rbx, r13
mov rsi, qword [rsp + 0xf8]
nop word [rax + rax]
mov eax, dword [0x141dd5270]
add eax, dword [0x141dd5274]
and eax, 0x2dc91967
imul r13d, eax, 0x28907909
add r13d, 0x680ba6c1
mov rcx, rbp
mov rdx, rsi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rbx
mov qword [rsp + 0x200], rdi
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x208], al
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbp
mov qword [rsp + 0x220], r14
cmp r13d, 0xac1c454d
jb 0x1400a5a30
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsi + 0x10]
test rdi, rdi
js 0x1400a80da
mov rbx, qword [rsi + 8]
mov r14, qword [rsp + 0x58]
je 0x1400a5b12
nop word cs:[rax + rax]
mov eax, dword [0x141dd5278]
sub eax, dword [0x141dd527c]
and eax, 0x4ab85702
xor eax, 0xcc9b5c32
imul ebp, eax, 0x79753
movzx eax, byte [0x141dde6f8]
xor ecx, ecx
mov rdx, rdi
call fcn.1400c29b0
cmp ebp, 0x77dde772
je 0x1400a5ad0
mov r12, rax
test rax, rax
jne 0x1400a5b18
jmp 0x1400a5f02
mov r12d, 1
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [rsi + 0x18]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0xa8], al
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x1c8]
lea r8, [rsp + 0x1f0]
lea r9, [rsp + 0x90]
call fcn.1400af8c0
mov rax, qword [rsp + 0x140]
shl rax, 1
test rax, rax
je 0x1400a4d90
mov r8, qword [rsp + 0x148]
mov rcx, qword [0x141dde6e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400a4d90
mov eax, dword [0x141dd52c0]
sub eax, dword [0x141dd52c4]
and eax, 0x6331b8da
imul eax, eax, 0x1952f661
mov qword [rsp + 0x90], rdi
cmp eax, 0xe2a71cb0
jne 0x1400a5bd0
mov qword [rsp + 0x90], rdi
jmp 0x1400a5ba0
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], r15
lea rcx, [rsp + 0x1f0]
lea rdx, [rsp + 0x90]
lea r8, [rsp + 0x6f]
call fcn.1400b33e0
mov r12, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0x1f0]
mov rdx, qword [rsp + 0x1f8]
mov rsi, qword [rsp + 0x210]
mov r13, qword [rsp + 0x218]
dec qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x228]
mov rbx, qword [rsp + 0x230]
cmp byte [rsp + 0x6f], 0
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0xf8], rdx
je 0x1400a5d40
nop word cs:[rax + rax]
mov eax, dword [0x141dd52f0]
xor eax, dword [0x141dd52f4]
or eax, 0x24d30a37
imul eax, eax, 0x85d46b2e
add eax, 0x85c24452
cmp eax, 0x40a15fec
jb 0x1400a5c60
nop word cs:[rax + rax]
mov eax, dword [0x141dd52f8]
or eax, dword [0x141dd52fc]
add eax, 0x8b9228af
or eax, 0x4cb9435f
add eax, 0xc0af5b8c
cmp eax, 0x1bc869dd
jb 0x1400a5c90
test rbp, rbp
je 0x1400a810f
nop dword [rax + rax]
mov eax, dword [0x141dd5308]
xor eax, dword [0x141dd530c]
add eax, 0x87c38247
or eax, 0x2aee5c19
add eax, 0xe232b7c3
cmp eax, 0x99ea3d96
ja 0x1400a5cc0
mov r15, qword [r12 + 0x3d8]
mov qword [rsp + 0x1c8], r15
dec rbp
mov qword [rsp + 0x1d0], rbp
nop dword [rax]
mov eax, dword [0x141dd5310]
xor eax, dword [0x141dd5314]
imul ebp, eax, 0x350e2f8f
xor ebp, 0x742c00d2
mov qword [r15 + 0x160], 0
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebp, 0xf8cc93e5
ja 0x1400a5d00
jmp 0x1400a5d68
mov eax, dword [0x141dd52e8]
or eax, dword [0x141dd52ec]
imul rax, rax, 0x180d7c75
shr rax, 0x3c
xor eax, 0xac6961f7
add eax, 0x1bf455cf
cmp eax, 0x1c36c0df
jbe 0x1400a5d40
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x1400a4d90
test rdi, rdi
je 0x1400a5dcc
mov ecx, 0x943466a5
nop word cs:[rax + rax]
mov eax, dword [0x141dd5318]
and eax, dword [0x141dd531c]
or eax, 0x2d4a4f1
imul rax, rcx
shr rax, 0x3f
add eax, 0x5c6cd03f
cmp eax, 0xc4cc88f5
ja 0x1400a5d90
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5320]
xor edx, edx
div dword [0x141dd5324]
add eax, 0xa8e0fdbc
xor eax, 0x783ec8bd
add eax, 0xb37d0706
cmp eax, 0x46d17aa3
jb 0x1400a5de0
test rsi, rsi
je 0x1400a5e50
mov eax, dword [str._1Qk]
or eax, dword [0x141dd532c]
imul eax, eax, 0x27b399e7
and eax, 0xa5d17e3f
imul eax, eax, 0x4ebc3e6b
cmp eax, 0x4b1015e6
jne 0x1400a5e34
mov rax, qword [0x141dde6e0]
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5330]
or eax, dword [0x141dd5334]
imul rcx, rax, 0x12a5bdc7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0x7e182f59
imul eax, eax, 0x17c10598
cmp eax, 0x49f37521
jb 0x1400a5e50
shl rdi, 1
test rdi, rdi
je 0x1400a4d90
mov eax, dword [0x141dd5338]
imul eax, dword [0x141dd533c]
imul eax, eax, 0xe56709e5
and eax, 0x1247520d
add eax, 0xb4272ec0
cmp eax, 0x91a3d33f
jae 0x1400a5eb9
mov rax, qword [0x141dde6e0]
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141dd5340]
and eax, dword [0x141dd5344]
imul esi, eax, 0xa0c79bfd
add esi, 0xe9bd3a4e
and esi, 0xf4cb4d90
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xccff4a74
ja 0x1400a5ec0
jmp 0x1400a4d90
mov eax, dword [0x141dd5280]
imul eax, dword [0x141dd5284]
add eax, 0xd2c86b94
xor eax, 0x8165307b
ud2
mov rsi, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1e8], rax
movzx eax, byte [0x141dde6f8]
mov edx, 4
xor ecx, ecx
call fcn.1400c29b0
test rax, rax
je 0x1400a94a5
mov rcx, rax
mov r14, rax
mov eax, dword [0x141dd5348]
and eax, dword [0x141dd534c]
add eax, 0xd4e21323
xor eax, 0x50008a28
and eax, 0xd826eab8
cmp eax, 0x204fa3fe
jae 0x1400a5fa2
mov dword [r14], 0x48544150
mov qword [rsp + 0x90], r14
mov dword [r14], 0x48544150
add rcx, 4
mov qword [rsp + 0x90], r14
mov eax, dword [0x141dd5350]
xor edx, edx
div dword [0x141dd5354]
imul eax, eax, 0xa8b02d27
add eax, 0x9f96b03
cmp eax, 0x164fcd3
jae 0x1400a5fe0
mov qword [rsp + 0x98], rcx
nop dword [rax]
mov eax, dword [0x141dd5358]
imul eax, dword [0x141dd535c]
imul rax, rax, 0x6d00f9c5
shr rax, 0x3b
add eax, 0x3cdca039
mov qword [rsp + 0x98], rcx
cmp eax, 0xac549f34
ja 0x1400a5fe0
mov word [rsp + 0xa0], 0
lea rcx, [rsp + 0x210]
lea rdx, [rsp + 0x90]
call fcn.1400af080
mov rdi, qword [rsp + 0x218]
test rsi, rsi
je 0x1400a61c9
mov qword [rsp + 0x70], r14
mov ebx, dword [rsp + 0x220]
mov r15, qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0xf8], rsi
mov r14, rsi
lea rcx, [r14 + 0x168]
movzx eax, word [r14 + 0x3d2]
mov qword [rsp + 0x60], rax
imul rax, rax, 0x38
lea r13, [r14 + rax]
add r13, 0x168
xor ebp, ebp
nop dword [rax]
cmp rcx, r13
je 0x1400a60d0
mov rsi, rbp
lea r12, [rcx + 0x38]
inc rbp
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
mov dword [rsp + 0x20], 1
mov rcx, rdi
mov edx, ebx
call r15
mov rcx, r12
cmp eax, 3
je 0x1400a6090
cmp eax, 1
jne 0x1400a6127
mov rdx, rsi
jmp 0x1400a60d5
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
mov rsi, qword [rsp + 0xf8]
je 0x1400a6cc9
nop dword [rax + rax]
mov eax, dword [0x141dd5370]
and eax, dword [0x141dd5374]
add eax, 0x899da571
xor eax, 0xd07eae8f
add eax, 0xa4b02703
cmp eax, 0xef2a86d
jb 0x1400a60f0
mov r14, qword [r14 + rdx*8 + 0x3d8]
dec rcx
mov qword [rsp + 0x50], rcx
jmp 0x1400a6067
cmp eax, 2
jne 0x1400a6170
shl rsi, 5
mov eax, dword [0x141dd5378]
sub eax, dword [0x141dd537c]
and eax, 0x8005a0
add eax, 0x97f02d32
cmp eax, 0xc6c11a70
ja 0x1400a6130
mov rbx, qword [r14 + rsi + 8]
mov r13, qword [r14 + rsi + 0x10]
mov rsi, qword [rsp + 0xf8]
mov r14, qword [rsp + 0x70]
jmp 0x1400a61cb
mov eax, dword [0x141dd5360]
xor eax, dword [0x141dd5364]
xor eax, 0xa7bc90a9
imul esi, eax, 0x8d410a0f
add esi, 0xbcdfc0d4
call sub.KERNEL32.dll_GetLastError
cmp esi, 0x8bca7273
ja 0x1400a6170
nop word [rax + rax]
mov eax, dword [0x141dd5368]
xor eax, dword [0x141dd536c]
xor eax, 0x90044f67
add eax, 0x65361c86
xor eax, 0x96c74c44
ud2
xor ebx, ebx
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x210], 0
je 0x1400a622e
nop dword [rax + rax]
mov eax, dword [0x141dd5380]
sub eax, dword [0x141dd5384]
xor eax, 0xc0004410
and eax, 0xe094df73
imul eax, eax, 0x3acf24ce
mov rcx, qword [0x141dde6e0]
cmp eax, 0x77d98b44
jae 0x1400a6223
mov rax, qword [0x141dde6e0]
jmp 0x1400a61f0
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x108]
mov r12, rbx
mov r14, qword [rax + 0x10]
lea rbp, [0x141dbb930]
test r14, r14
mov qword [rsp + 0xf8], rsi
je 0x1400a62c0
mov r15, qword [rax + 8]
cmp r14, 4
jae 0x1400a6264
lea rdi, [0x1400b4370]
jmp 0x1400a6290
mov eax, dword [r15]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rax, [0x1400b4360]
lea rdi, [0x1400b4370]
cmove rdi, rax
nop dword [rax]
mov ebx, dword [0x141dd5388]
sub ebx, dword [0x141dd538c]
movzx esi, byte [r14 + r15 - 1]
mov ecx, esi
call rdi
cmp ebx, 0xfe01f1d8
je 0x1400a6290
test al, al
je 0x1400a6424
nop word cs:[rax + rax]
mov eax, dword [0x141dd58f8]
and eax, dword [0x141dd58fc]
add eax, 0xb8236367
xor eax, 0xad255b9b
cmp eax, 0x5fb9b0b1
jae 0x1400a62c0
movabs rdi, 0x8000000000000000
cmp r14, 3
jbe 0x1400a656b
nop dword [rax + rax]
mov eax, dword [0x141dd53f8]
sub eax, dword [0x141dd53fc]
and eax, 0x88a44dc0
add eax, 0x9f88d611
cmp eax, 0xbbdc276f
ja 0x1400a6440
movzx ecx, byte [r15 + r14 - 4]
lea eax, [rcx - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, cl
mov ecx, dword [0x141dd5400]
add ecx, dword [0x141dd5404]
and ecx, 0x49002c
add ecx, 0xb3cbea87
cmp ecx, 0x2a03976f
jb 0x1400a6470
cmp al, 0x2e
jne 0x1400a65ef
movzx eax, byte [r15 + r14 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400a65f3
nop word cs:[rax + rax]
mov eax, dword [0x141dd5408]
imul eax, dword [0x141dd540c]
or eax, 0xfdffbc3f
cmp eax, 0x8a16eb90
jb 0x1400a64c0
movzx eax, byte [r15 + r14 - 2]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x78
jne 0x1400a65f7
lea ecx, [rsi - 0x41]
mov edx, 0xae0c06df
nop
cmp cl, 0x1a
setb al
mov r8d, dword [0x141dd5410]
and r8d, dword [0x141dd5414]
add r8d, 0x33fa2bc6
imul r8, rdx
shr r8, 0x3c
add r8d, 0xec89ad7b
shl al, 5
or al, sil
cmp al, 0x65
sete al
cmp r8d, 0x6228b888
jb 0x1400a6500
nop
mov ecx, dword [0x141dd5418]
add ecx, dword [0x141dd541c]
imul ecx, ecx, 0x4fd64e7a
xor ecx, 0x743cd414
add ecx, 0x17a87794
cmp ecx, 0xf90360d7
ja 0x1400a6540
jmp 0x1400a6600
lea rax, [r15 + r14]
nop
mov ecx, dword [0x141dd5390]
sub ecx, dword [0x141dd5394]
imul ecx, ecx, 0x28f70d20
or ecx, 0xb020840d
and ecx, 0xb4b8c78d
cmp ecx, 0x6688fa65
jb 0x1400a6570
mov rcx, r15
nop dword [rax]
cmp rcx, rax
je 0x1400a6978
movzx edx, byte [rcx]
inc rcx
nop
mov r8d, dword [0x141dd5398]
and r8d, dword [0x141dd539c]
or r8d, 0x8791b02e
add r8d, 0x914364f2
or r8d, 0x72fb0320
cmp r8d, 0xd381d31d
ja 0x1400a65b0
cmp edx, 0x2f
je 0x1400a6740
cmp edx, 0x5c
jne 0x1400a65a0
jmp 0x1400a6740
xor eax, eax
jmp 0x1400a6600
xor eax, eax
jmp 0x1400a6600
xor eax, eax
nop dword [rax]
mov ecx, dword [0x141dd5420]
or ecx, dword [0x141dd5424]
add ecx, 0x22763c4c
and ecx, 0x394ccc6c
add ecx, 0x7f38e6b5
cmp ecx, 0x92f599d
jb 0x1400a6600
xor ecx, ecx
mov rdx, r15
nop dword [rax + rax]
cmp r14, rcx
je 0x1400a6978
inc rdx
movzx r8d, byte [r15 + rcx]
nop word cs:[rax + rax]
mov r9d, dword [0x141dd5428]
and r9d, dword [0x141dd542c]
imul r9d, r9d, 0x9f5b55d0
add r9d, 0xe724f999
xor r9d, 0x6f853bef
cmp r9d, 0xe67369a7
ja 0x1400a6650
cmp r8d, 0x5c
je 0x1400a668b
inc rcx
cmp r8d, 0x2f
jne 0x1400a6630
test al, al
je 0x1400a6740
mov eax, dword [0x141dd5430]
mov ecx, dword [0x141dd5434]
add eax, ecx
add eax, 0xae1b8937
cmp eax, 0xb00c9779
jbe 0x1400a66c0
lea rcx, [rsp + 0x90]
mov rdx, r15
mov r8, r14
call fcn.140093550
mov edi, 0xcb474f2f
lea rsi, [rsp + 0x90]
nop dword [rax]
mov ebx, dword [0x141dd5438]
imul ebx, dword [0x141dd543c]
imul rbx, rdi
shr rbx, 0x3f
or ebx, 0xddf586b4
mov rcx, rsi
mov rdx, r15
mov r8, r14
call fcn.140093550
cmp ebx, 0x679c35de
jb 0x1400a66d0
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
movabs rcx, 0x8000000000000000
cmp rdi, rcx
jne 0x1400a6c2e
mov qword [rsp + 0x188], rsi
mov qword [rsp + 0x180], rcx
jmp 0x1400a8462
mov eax, dword [0x141dd53c0]
imul eax, dword [str.L]
shr eax, 1
imul rax, rax, 0x4afbac57
shr rax, 0x3d
imul eax, eax, 0x9c003632
cmp eax, 0x20f8f64c
je 0x1400a6740
test r14, r14
js 0x1400a8270
movzx eax, byte [0x141dde6f8]
xor ecx, ecx
mov rdx, r14
call fcn.1400c29b0
test rax, rax
je 0x1400a6d8e
mov rsi, rax
nop dword [rax]
mov eax, dword [0x141dd53e0]
or eax, dword [str._Xu]
add eax, 0x7b45cc0
xor eax, 0xaa668dce
imul edi, eax, 0x5b8bfb39
mov rcx, rsi
mov rdx, r15
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
cmp edi, 0x37635628
jmp [rax]
push rsi
invalid
invalid
jb 0x1400a6790
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x1f8], rsi
mov eax, dword [0x141dd53e8]
imul eax, dword [0x141dd53ec]
mov qword [rsp + 0x200], r14
add eax, 0xd7bd3b45
xor eax, 0xfe706493
cmp eax, 0x5376cd47
jae 0x1400a683b
mov qword [rsp + 0x208], 0
lea rdx, [0x141dbb948]
lea rcx, [rsp + 0x1f0]
mov r8d, 4
call fcn.140094760
mov rdx, qword [rsp + 0x1f8]
mov r8, qword [rsp + 0x200]
lea rcx, [rsp + 0x90]
call fcn.1400b4410
lea rbx, [0x141dbb948]
lea r14, [rsp + 0x1f0]
lea r15, [rsp + 0x90]
nop word cs:[rax + rax]
lea rcx, [r15 + r14]
xor eax, eax
mov r8d, 0xcfd1127f
lea rbp, [0x141dbb8f8]
mov r9, r15
jmp 0x1400a699c
xor eax, eax
test r10w, r10w
je 0x1400a62c0
mov r10w, 1
test ax, ax
jne 0x1400a6990
nop word cs:[rax + rax]
mov eax, dword [0x141dd53a0]
sub eax, dword [0x141dd53a4]
and eax, 0x64a1123
imul eax, eax, 0xfa28e046
cmp eax, 0xf2826873
ja 0x1400a69b0
cmp r9, rcx
je 0x1400a6bb8
nop word [rax + rax]
mov eax, dword [0x141dd53a8]
or eax, dword [0x141dd53ac]
imul rax, r8
shr rax, 0x3f
or eax, 0xbfe56fa2
cmp eax, 0x6ebcf28e
jb 0x1400a69e0
movzx r11d, byte [r9]
test r11b, r11b
js 0x1400a6a11
inc r9
jmp 0x1400a6abd
mov esi, r11d
and esi, 0x1f
nop word [rax + rax]
mov eax, dword [0x141dd53b0]
xor edx, edx
div dword [0x141dd53b4]
or eax, 0xcc4a6ba3
add eax, 0x425c3522
xor eax, 0x427c789a
cmp eax, 0xed2d4e45
ja 0x1400a6a20
movzx edx, byte [r9 + 1]
and edx, 0x3f
cmp r11b, 0xdf
jbe 0x1400a6ab1
movzx eax, byte [r9 + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp r11b, 0xf0
jb 0x1400a6ac7
nop word cs:[rax + rax]
mov edx, dword [0x141dd53b8]
and edx, dword [0x141dd53bc]
imul edx, edx, 0xf1a7aa5b
cmp edx, 0x88f9fe5d
je 0x1400a6a70
movzx r11d, byte [r9 + 3]
add r9, 4
and esi, 7
shl esi, 0x12
shl eax, 6
and r11d, 0x3f
or r11d, eax
or r11d, esi
cmp r11d, 0xffff
jbe 0x1400a6abd
jmp 0x1400a6adc
add r9, 2
shl esi, 6
or esi, edx
mov r11d, esi
xor eax, eax
mov r10d, r11d
jmp 0x1400a6992
add r9, 3
shl esi, 0xc
or eax, esi
mov r11d, eax
cmp r11d, 0xffff
jbe 0x1400a6abd
and r11d, 0x3ff
or r11d, 0xdc00
mov eax, r11d
jmp 0x1400a6992
mov ecx, 0x902f061b
mov rbx, qword [rsp + 0xa0]
mov eax, dword [0x141dd5440]
imul eax, dword [0x141dd5444]
imul rax, rax, 0x3b6149a7
shr rax, 0x3d
imul eax, eax, 0xfffdf5f5
add eax, 0xd327facf
cmp eax, 0xce9a9137
jae 0x1400a6c8d
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x200], rbx
lea rcx, [rsp + 0x180]
add byte [rcx], 0
add byte [rax - 0x73], cl
xchg esp, eax
and al, 0xf0
add dword [rax], eax
add al, ch
push rbx
fiadd word [rax]
invalid
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x200], rbx
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x1f0]
call fcn.1400b4ae0
movabs rcx, 0x8000000000000000
jmp 0x1400a8462
xor ebx, ebx
jmp 0x1400a615f
ud2
ud2
mov eax, dword [0x141dd51f8]
mov eax, dword [0x141dd5230]
and eax, dword [str.Y_f__tT]
add eax, 0x4160f8c8
mov ecx, 0x96caf3d1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x3c813fbc
cmp ecx, 0xc472424
jb 0x1400a80da
jmp 0x1400a94a5
mov eax, dword [0x141dd5300]
imul eax, dword [0x141dd5304]
invalid
mov eax, dword [0x141dd51b8]
sub eax, dword [0x141dd51bc]
and eax, 0x82024008
xor eax, 0x20224018
cmp eax, 0x25ccc271
jae 0x1400a80da
call sub.KERNEL32.dll_GetLastError
ud2
call sub.KERNEL32.dll_GetLastError
mov eax, dword [0x141dd52a0]
or eax, dword [0x141dd52a4]
imul eax, eax, 0x52637c64
add eax, 0xfb1a787c
xor eax, 0xddca9574
cmp eax, 0x6c91a90e
jb 0x1400a94d2
jmp 0x1400a94a7
mov eax, dword [0x141dd5190]
add eax, dword [0x141dd5194]
and eax, 0xa2aba104
add eax, 0x393e4147
cmp eax, 0x41043486
jae 0x1400a81e0
ud2
mov eax, dword [0x141dd5198]
xor eax, dword [0x141dd519c]
imul eax, eax, 0x87f37f3f
and eax, 0xd3617e41
xor eax, 0x5439389b
ud2
mov eax, dword [0x141dd53c8]
and eax, dword [0x141dd53cc]
imul eax, eax, 0x181d452
imul rax, rax, 0x1a6d473f
shr rax, 0x39
add eax, 0x9af3f48c
cmp eax, 0x2d8b034
jb 0x1400a94f5
jmp 0x1400a94d6
mov eax, dword [0x141dd52a8]
xor eax, dword [0x141dd52ac]
imul rax, rax, 0x757c0b19
shr rax, 0x3d
imul eax, eax, 0x51e54854
add eax, 0x292d7464
ud2
ud2
mov eax, dword [0x141dd53d0]
sub eax, dword [0x141dd53d4]
or eax, 0x1b216c54
and eax, 0x9b216f75
ud2
ud2