Function at 0x1400a1360
Capabilities:
Authenticate hmac
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2b8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x220], xmm6
mov qword [rbp + 0x190], r8
mov qword [rbp + 0x188], rdx
mov qword [rbp + 0x1b0], rcx
nop dword [rax + rax]
mov eax, dword [0x141dd20f0]
imul eax, dword [0x141dd20f4]
imul eax, eax, 0xcf76fa45
mov dword [rbp + 0x218], eax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x120], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1e0], rsp
mov eax, 0x50
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1c0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xc0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x78], rsp
mov eax, 0x50
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x128], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1c8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x150], rsp
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x198], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xb8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1e8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1d0], rsp
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x180], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x208], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xf0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x160], rsp
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1a0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x178], rsp
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1d8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x1b8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x80], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rcx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r11, rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
mov eax, 0x60
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
cmp dword [rbp + 0x218], 0x308720a5
je 0x1400a13a0
mov qword [rbp + 0x170], r9
mov qword [rbp + 0xe0], r11
mov qword [rbp + 0x90], rax
mov qword [rbp - 0x38], rbx
mov qword [rbp + 0x98], r13
mov qword [rbp + 0x168], rdx
mov qword [rbp + 8], r14
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0xa8], r12
mov qword [rbp - 8], r8
mov qword [rbp], r10
mov qword [rbp + 0x10], rsi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 0x18], r15
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r10, rsp
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xf8], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x158], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x200], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r11, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x118], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x148], rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov qword [rbp + 0x140], rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov rdx, qword [rbp + 0x188]
movzx ecx, byte [rdx + 0xa0]
test cl, cl
sete al
mov r14, qword [rdx + 0x98]
test r14, r14
sete dl
and dl, al
mov byte [rbp + 0x1ff], dl
mov r12, qword [rbp + 0x1e0]
je 0x1400a1959
xor r14d, r14d
jmp 0x1400a33d6
mov qword [rbp + 0xc8], rdi
mov qword [rbp - 0x20], r10
mov qword [rbp + 0xa0], r9
mov qword [rbp + 0x30], r8
mov eax, dword [0x141dd20f8]
xor edx, edx
div dword [str.XUw]
nop dword [rax]
mov eax, dword [0x141dd2100]
sub eax, dword [0x141dd2104]
shr eax, 1
imul rax, rax, 0x4afca22f
shr rax, 0x3d
add eax, 0xfcdfa80b
cmp eax, 0x219fec44
jb 0x1400a1980
mov qword [rbp + 0x108], r8
mov qword [r11], 0
mov qword [rbp + 0x1a8], r11
mov qword [r11 + 0x10], 0
test cl, cl
mov rdi, qword [rbp + 0x168]
mov rbx, qword [rbp + 0x170]
mov qword [rbp + 0x80], rsi
jne 0x1400a1ea3
mov qword [rbp + 0x138], r13
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2108]
imul ecx, dword [0x141dd210c]
and ecx, 0x93bd1ae7
add ecx, 0xeba4c33d
xor ecx, 0x9e575b33
cmp ecx, 0xdda71c0b
jb 0x1400a1a00
mov qword [rbp + 0x110], r14
test rax, rax
mov r15, qword [rbp + 0xe0]
je 0x1400a4bed
mov qword [rbp + 0xe8], rax
cmp word [rax], 0
je 0x1400a1e54
add rbx, 0x20
mov qword [rbp + 0x218], rbx
mov rax, qword [rbp + 0x138]
add rax, 0x20
mov qword [rbp + 0x100], rax
mov r14, qword [rbp + 0xe8]
jmp 0x1400a1a8d
cmp word [rsi], 0
mov r14, rsi
je 0x1400a1e54
mov rax, 0xfffffffffffffffe
xor r8d, r8d
nop word [rax + rax]
mov rdi, r8
mov rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd2120]
imul eax, dword [0x141dd2124]
add eax, 0x93567d85
or eax, 0xfffefe7f
cmp eax, 0x9b2e6b67
jb 0x1400a1ab0
lea r8, [rdi + 1]
lea rax, [rcx + 2]
cmp word [r14 + rdi*2], 0
jne 0x1400a1aa0
nop
mov eax, dword [0x141dd2128]
xor edx, edx
div dword [0x141dd212c]
or eax, 0xb8f39b4b
xor eax, 0x595d2568
add eax, 0x6e99f51f
cmp eax, 0x98367f68
ja 0x1400a1ae0
lea rsi, [r14 + r8*2]
cmp rdi, 1
je 0x1400a1a80
test rdi, rdi
je 0x1400a4b14
nop dword [rax + rax]
mov eax, dword [0x141dd2130]
and eax, dword [0x141dd2134]
add eax, 0x34590f4b
and eax, 0xf02012aa
cmp eax, 0xe84b9be9
ja 0x1400a1b20
xor r13d, r13d
cmp word [r14 + r13*2 + 2], 0x3d
je 0x1400a1b60
inc r13
add rcx, 0xfffffffffffffffe
jne 0x1400a1b40
jmp 0x1400a1a80
cmp r13, rdi
jae 0x1400a3252
mov eax, dword [0x141dd2150]
and eax, dword [0x141dd2154]
or eax, 0x2d5bb731
imul rax, rax, 0x60b0833
shr rax, 0x39
add eax, 0xb4fb56b1
cmp eax, 0x15add3f9
jae 0x1400a1ba8
lea r8, [r13 + 1]
sub rsp, 0x20
mov rcx, r15
mov rdx, r14
call fcn.14008ba90
add rsp, 0x20
mov qword [rbp + 0x130], rsi
lea r8, [r13 + 1]
sub rsp, 0x20
mov rbx, r15
mov rcx, r15
mov rdx, r14
call fcn.14008ba90
add rsp, 0x20
add r13, 2
sub rdi, r13
jb 0x1400a4bca
lea rax, [r14 + r13*2]
mov qword [rbp + 0x210], rax
mov rsi, qword [rbp + 0x170]
mov r15, qword [rbp + 0x200]
mov r14, rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dd2160]
imul eax, dword [0x141dd2164]
imul ebx, eax, 0x23169414
add ebx, 0x499144f8
sub rsp, 0x20
mov rcx, qword [rbp + 0x218]
mov rdx, qword [rbp + 0x210]
mov r8, rdi
call fcn.14008ba90
mov rax, qword [rbp + 0x218]
add rsp, 0x20
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm1
mov r13, qword [rsi]
mov r12, qword [rsi + 8]
movdqu xmm6, xmmword [rsi + 0x10]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
cmp ebx, 0x19e270a3
jb 0x1400a1c00
movabs rax, 0x8000000000000000
cmp r13, rax
je 0x1400a1e54
mov r15, r14
mov eax, dword [0x141dd2170]
xor eax, dword [0x141dd2174]
and eax, 0xa26a7357
xor eax, 0xf206f280
add eax, 0x5615fa0
movq rdi, xmm6
cmp eax, 0x6cbb72e1
mov rsi, qword [rbp + 0xc8]
mov r14, qword [rbp + 0x158]
jbe 0x1400a1cf3
lea rax, [r12 + rdi]
mov qword [rsi], r12
mov qword [rsi + 8], rax
mov word [rsi + 0x10], 0
sub rsp, 0x20
mov rcx, qword [rbp + 0x100]
mov rdx, rsi
call fcn.1400acc30
add rsp, 0x20
mov rax, qword [rbp + 0x138]
mov qword [rax], r13
mov qword [rax + 8], r12
add rdi, r12
mov qword [rsi], r12
mov qword [rsi + 8], rdi
mov word [rsi + 0x10], 0
sub rsp, 0x20
mov rcx, qword [rbp + 0x100]
mov rdx, rsi
call fcn.1400acc30
add rsp, 0x20
mov rsi, qword [rbp + 0x138]
mov qword [rsi], r13
mov qword [rsi + 8], r12
mov rbx, qword [rbp + 0x1a8]
mov r12, qword [rbp + 0x200]
nop word cs:[rax + rax]
mov edi, dword [0x141dd2178]
sub edi, dword [0x141dd217c]
and edi, 0x20005880
or edi, 0xd3f2679
xor edi, 0xba963ca6
movdqu xmmword [rsi + 0x10], xmm6
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
mov r8, rsi
mov r9, r12
call fcn.1400ad3b0
add rsp, 0x20
cmp edi, 0xa6313d67
ja 0x1400a1d40
mov rax, qword [r14]
shl rax, 1
test rax, rax
je 0x1400a1e24
mov rdi, qword [r14 + 8]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dd2180]
xor edx, edx
div dword [0x141dd2184]
or eax, 0xbcc50de5
imul ebx, eax, 0xf050597c
add ebx, 0xf4228d58
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
cmp ebx, 0xe9a1a02c
jae 0x1400a1e00
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rsi
add rsp, 0x20
jmp 0x1400a1da0
mov eax, dword [0x141dd2188]
xor edx, edx
div dword [0x141dd218c]
add eax, 0x131f798e
xor eax, 0x73d0aa8
add eax, 0xbec66d19
cmp eax, 0xbd96ae55
jb 0x1400a1e00
mov r14, qword [rbp + 0x130]
nop dword [rax + rax]
mov eax, dword [0x141dd2190]
and eax, dword [0x141dd2194]
imul eax, eax, 0x8000c01a
cmp eax, 0x17cdc5c4
je 0x1400a1e30
cmp word [r14], 0
jne 0x1400a1a8d
sub rsp, 0x20
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
add rsp, 0x20
mov rdi, qword [rbp + 0x168]
mov r14, qword [rbp + 0x110]
nop word [rax + rax]
mov eax, dword [0x141dd2168]
or eax, dword [0x141dd216c]
or eax, 0x2c177961
imul eax, eax, 0x213b12a9
and eax, 0x656eaa15
cmp eax, 0x20a9e44e
jbe 0x1400a1e80
mov rax, qword [rbp + 0x188]
mov rax, qword [rax + 0x88]
test rax, rax
je 0x1400a2f8e
test r14, r14
je 0x1400a2f8e
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2198]
sub ecx, dword [0x141dd219c]
add ecx, 0x7cfb304e
and ecx, 0xeca9bd1b
cmp ecx, 0x15c6e9e3
jb 0x1400a1ed0
mov rcx, qword [rbp + 0x188]
mov r9, qword [rcx + 0x90]
mov rcx, qword [rbp + 0xa0]
add rcx, 0x38
mov qword [rbp - 0x28], rcx
mov rcx, qword [rbp + 0x90]
add rcx, 0x38
mov qword [rbp + 0xe8], rcx
xor r13d, r13d
nop word cs:[rax + rax]
test r13, r13
je 0x1400a1f60
movzx ecx, word [r13 + 0x3d2]
cmp r9, rcx
jae 0x1400a2030
mov rcx, r9
mov r15, r13
jmp 0x1400a207f
mov ecx, dword [0x141dd21a0]
add ecx, dword [0x141dd21a4]
cmp ecx, 0xf77393d6
je 0x1400a1f60
test r9, r9
je 0x1400a2010
mov rdx, r9
mov rcx, r9
mov r13, rax
and rdx, 7
je 0x1400a1fc7
xor eax, eax
nop
mov r8d, dword [0x141dd21a8]
or r8d, dword [0x141dd21ac]
imul r8d, r8d, 0x229150ac
xor r8d, 0x60b40394
cmp r8d, 0x29e37c3a
jb 0x1400a1f90
dec rcx
inc rax
mov r13, qword [r13 + 0x3d8]
cmp rax, rdx
jne 0x1400a1f90
cmp r9, 8
jb 0x1400a2013
nop dword [rax]
mov rax, qword [r13 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r13, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400a1fd0
jmp 0x1400a2013
mov r13, rax
xor r9d, r9d
xor eax, eax
movzx ecx, word [r13 + 0x3d2]
cmp r9, rcx
jb 0x1400a1f46
nop dword [rax]
mov r15, qword [r13 + 0x160]
test r15, r15
je 0x1400a5f42
mov ecx, dword [0x141dd21b0]
imul ecx, dword [0x141dd21b4]
add ecx, 0x379e88d6
or ecx, 0xa1932a82
imul ecx, ecx, 0x4c818c37
cmp ecx, 0xec1f99ea
je 0x1400a2040
inc rax
movzx ecx, word [r13 + 0x3d0]
mov r13, r15
cmp cx, word [r15 + 0x3d2]
jae 0x1400a2030
test rax, rax
je 0x1400a2120
mov r13, qword [r15 + rcx*8 + 0x3e0]
mov rdx, rax
dec rdx
je 0x1400a210e
mov r8, rdx
and r8, 7
je 0x1400a20c2
xor r9d, r9d
nop word cs:[rax + rax]
mov r13, qword [r13 + 0x3d8]
dec rdx
inc r9
cmp r9, r8
jne 0x1400a20b0
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400a210e
nop dword [rax]
mov rax, qword [r13 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r13, qword [rax + 0x3d8]
add rdx, 0xfffffffffffffff8
jne 0x1400a20d0
xor r12d, r12d
jmp 0x1400a2127
lea r12, [rcx + 1]
mov r13, r15
imul rax, rcx, 0x38
lea rdi, [r15 + rax]
add rdi, 0x168
shl rcx, 5
movabs rax, 0x8000000000000000
cmp qword [r15 + rcx], rax
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x170], r12
jne 0x1400a2430
nop dword [rax]
mov eax, dword [0x141dd2208]
xor edx, edx
div dword [0x141dd220c]
or eax, 0xbcffeff5
imul eax, eax, 0x39c31262
cmp eax, 0x57659962
jb 0x1400a2160
mov rax, qword [rbp + 0x1a8]
mov rax, qword [rax]
mov qword [rbp + 0x100], rax
test rax, rax
je 0x1400a2f40
mov rax, qword [rdi + 0x28]
mov qword [rbp + 0x218], rax
mov r14, qword [rdi + 0x30]
mov ecx, 0xb85bc613
nop
mov eax, dword [0x141dd2210]
sub eax, dword [0x141dd2214]
imul rax, rcx
shr rax, 0x3f
xor eax, 0x33798727
add eax, 0xb6b08221
cmp eax, 0xbeb49045
jb 0x1400a21b0
mov rax, qword [rbp + 0x1a8]
mov rcx, qword [rax + 8]
mov eax, dword [0x141dd2218]
xor eax, dword [0x141dd221c]
imul rax, rax, 0x79c7adf7
shr rax, 0x3e
add eax, 0x89aeba15
cmp eax, 0x87cdd477
jb 0x1400a21e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd2220]
xor edx, edx
div dword [0x141dd2224]
add eax, 0xfbae31e5
shr eax, 6
imul rax, rax, 0x23a757d
shr rax, 0x33
or eax, 0xfdf44bd2
cmp eax, 0x3b5510d8
jb 0x1400a2210
lea eax, [rcx + 7]
mov dword [rbp + 0x158], eax
xor eax, eax
mov qword [rbp + 0x138], rax
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0x210], rcx
mov rdx, qword [rbp + 0x100]
lea rdi, [rdx + 0x168]
movzx eax, word [rdx + 0x3d2]
mov qword [rbp + 0x130], rax
imul rax, rax, 0x38
mov qword [rbp + 0x200], rdx
lea r15, [rdx + rax]
add r15, 0x168
xor r12d, r12d
jmp 0x1400a22dc
lea rbx, [rdi + 0x38]
lea r12, [rsi + 1]
mov r8, qword [rdi + 0x28]
mov r9d, dword [rdi + 0x30]
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x218]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
mov rdi, rbx
cmp eax, 3
jne 0x1400a2390
mov rsi, r12
nop
mov eax, dword [0x141dd2228]
imul eax, dword [0x141dd222c]
xor eax, 0x80040a10
and eax, 0x90040a1c
cmp eax, 0x25ade6c7
ja 0x1400a22e0
cmp rdi, r15
je 0x1400a23c0
nop word [rax + rax]
mov eax, dword [0x141dd2230]
or eax, dword [0x141dd2234]
imul rax, rax, 0x10e6722b
shr rax, 0x39
imul eax, eax, 0xa612fe71
cmp eax, 0x3de7b040
je 0x1400a2310
mov eax, dword [0x141dd2238]
and eax, dword [0x141dd223c]
xor eax, 0xd961f5a3
add eax, 0x5e828103
cmp eax, 0x593c4cc4
jae 0x1400a22a0
mov r8, qword [rdi + 0x28]
mov r9d, dword [rdi + 0x30]
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x218]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
jmp 0x1400a22a0
cmp eax, 1
jne 0x1400a24d0
mov rcx, qword [rbp + 0x210]
test rcx, rcx
mov rdx, qword [rbp + 0x200]
jne 0x1400a23e0
jmp 0x1400a2f40
mov rsi, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x210]
test rcx, rcx
mov rdx, qword [rbp + 0x200]
je 0x1400a2f40
nop
mov eax, dword [0x141dd2250]
and eax, dword [0x141dd2254]
or eax, 0x6bb0d6cd
imul eax, eax, 0x433b0cec
add eax, 0xcc780bc8
cmp eax, 0x972463f
jb 0x1400a23e0
mov rdx, qword [rdx + rsi*8 + 0x3d8]
dec rcx
mov qword [rbp + 0x210], rcx
inc qword [rbp + 0x138]
mov eax, dword [rbp + 0x158]
add al, 7
mov dword [rbp + 0x158], eax
jmp 0x1400a2264
add r15, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd21b8]
xor eax, dword [0x141dd21bc]
imul eax, eax, 0x6730305c
xor eax, 0x29882c5a
and eax, 0xab8a2f5a
cmp eax, 0xa9b8d6a8
ja 0x1400a2440
nop word cs:[rax + rax]
mov eax, dword [0x141dd21c0]
sub eax, dword [0x141dd21c4]
add eax, 0xd8fc563d
and eax, 0x787ac07d
add eax, 0xf529ef0d
cmp eax, 0xf17ef1f8
ja 0x1400a2470
mov rsi, qword [rdi + 0x10]
test rsi, rsi
js case.default.0x1400a5e09
mov rbx, qword [rdi + 8]
je 0x1400a2613
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400bf820
add rsp, 0x20
test rax, rax
jne 0x1400a2618
jmp case.default.0x1400a5e09
cmp eax, 2
mov rdi, qword [rbp + 0x90]
mov r15, qword [rbp - 0x40]
jne 0x1400a4ab4
mov rax, qword [rbp + 0xf8]
mov byte [rax], 0
mov rcx, qword [rbp + 0x210]
test rcx, rcx
mov r14, qword [rbp + 0xe8]
je 0x1400a291c
mov rax, qword [rbp + 0x200]
mov rax, qword [rax + rsi*8 + 0x3d8]
dec rcx
je 0x1400a2957
test cl, 7
mov rsi, qword [rbp + 0x98]
je 0x1400a256a
movzx ecx, byte [rbp + 0x158]
and ecx, 7
neg rcx
mov edx, 1
nop dword [rax + rax]
movzx r8d, word [rax + 0x3d2]
mov rax, qword [rax + r8*8 + 0x3d8]
lea r8, [rcx + rdx]
inc r8
inc rdx
cmp r8, 1
jne 0x1400a2540
mov rcx, qword [rbp + 0x210]
sub rcx, rdx
mov rdx, qword [rbp + 0xe0]
sub rdx, qword [rbp + 0x138]
add rdx, 0xfffffffffffffffe
cmp rdx, 7
jb 0x1400a295e
nop word cs:[rax + rax]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
movzx edx, word [rax + 0x3d2]
mov rax, qword [rax + rdx*8 + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400a2590
jmp 0x1400a295e
mov eax, 1
sub rsp, 0x20
mov r14, rax
mov rcx, rax
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rbx, qword [rdi + 0x30]
test rbx, rbx
js 0x1400a31f2
lea r8, [rbx + rbx]
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp r8, rax
ja 0x1400a31f2
movzx eax, byte [rdi + 0x18]
mov rcx, qword [rdi + 0x28]
test r8, r8
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], rcx
je 0x1400a2736
mov edi, eax
mov eax, dword [0x141dd21d8]
and eax, dword [0x141dd21dc]
imul eax, eax, 0xd10401f8
xor eax, 0x288d555b
cmp eax, 0x822e4ab4
jbe 0x1400a26b0
movzx eax, byte [0x141ddb9b8]
nop dword [rax]
mov eax, dword [0x141dd21e0]
xor edx, edx
div dword [0x141dd21e4]
imul eax, eax, 0xdf63bc50
add eax, 0xd5871210
xor eax, 0x834cc27
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0xa5f15c29
jb 0x1400a26b0
mov eax, dword [0x141dd21e8]
and eax, dword [0x141dd21ec]
add eax, 0xf24d11f5
cmp eax, 0x49d742fb
jbe 0x1400a270c
sub rsp, 0x20
xor ecx, ecx
mov rdx, r8
mov rsi, r8
call fcn.1400bf820
mov r8, rsi
add rsp, 0x20
sub rsp, 0x20
xor ecx, ecx
mov r15, r8
mov rdx, r8
call fcn.1400bf820
add rsp, 0x20
mov r12, rax
mov rdx, rbx
mov rsi, rbx
test rax, rax
mov eax, edi
jne 0x1400a2744
jmp case.default.0x1400a5e09
mov r15, r8
mov rdx, rbx
mov r12d, 2
xor esi, esi
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x210], rdx
mov rbx, qword [rbp + 0x80]
mov qword [rbp + 0x218], r14
mov rdi, qword [rbp + 0x158]
mov r15, qword [rbp + 0x138]
nop
mov r14d, dword [0x141dd21f0]
or r14d, dword [0x141dd21f4]
or r14d, 0x6f62f4ff
add r14d, 0xecf3d857
and r14d, 0x58eed700
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, qword [rbp + 0x200]
mov r13d, eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, r13d
add rsp, 0x20
mov qword [rbx], rdi
mov rdx, qword [rbp + 0x218]
mov qword [rbx + 8], rdx
mov qword [rbx + 0x10], rdi
mov byte [rbx + 0x18], r13b
mov qword [rbx + 0x20], rsi
mov qword [rbx + 0x28], r12
mov rdx, qword [rbp + 0x210]
mov qword [rbx + 0x30], rdx
cmp r14d, 0x22f46b2b
jb 0x1400a2770
mov r14, qword [rbp + 0x130]
mov rsi, qword [r14 + 0x10]
test rsi, rsi
js 0x1400a5f42
mov rdi, qword [r14 + 8]
mov r13, qword [rbp + 0xc8]
je 0x1400a282c
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400bf820
add rsp, 0x20
mov rbx, rax
test rax, rax
jne 0x1400a2831
jmp case.default.0x1400a5e09
mov ebx, 1
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movzx eax, byte [r14 + 0x18]
mov r9, qword [rbp - 0x48]
mov qword [r9], rsi
mov qword [r9 + 8], rbx
mov qword [r9 + 0x10], rsi
mov byte [r9 + 0x18], al
sub rsp, 0x20
mov rsi, qword [rbp + 0x88]
mov rcx, rsi
mov rdx, qword [rbp + 0x1a8]
mov r8, qword [rbp + 0x80]
call fcn.1400ad3b0
add rsp, 0x20
mov rax, qword [rsi]
shl rax, 1
test rax, rax
je 0x1400a2f40
mov rax, qword [rbp + 0x88]
mov rsi, qword [rax + 8]
mov rdi, qword [0x141ddb9a0]
mov eax, dword [str.Vve]
imul eax, dword [0x141dd21fc]
imul rax, rax, 0x15ca8063
shr rax, 0x3c
imul eax, eax, 0x3b14594e
or eax, 0x5cc0338e
cmp eax, 0x91720d22
jbe 0x1400a28e5
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov ebx, dword [0x141dd2200]
and ebx, dword [0x141dd2204]
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
cmp ebx, 0x2399ecc
je 0x1400a28f0
jmp 0x1400a2f40
mov rdi, qword [rbp - 0x20]
mov rax, qword [rbp + 0x200]
mov qword [rdi], rax
mov eax, dword [0x141dd2258]
xor eax, dword [str.P_1_.ei3Z]
imul eax, eax, 0xefdd6514
and eax, 0x3e13433c
imul eax, eax, 0x22ca1ca7
cmp eax, 0x555d3e53
ja 0x1400a2c4f
jmp 0x1400a2c20
mov rsi, qword [rbp + 0x98]
movzx ecx, word [rax + 0x3d2]
dec rcx
mov rdx, qword [rbp - 0x30]
mov qword [rdx], rax
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], rcx
sub rsp, 0x20
mov rbx, qword [rbp + 0xa0]
mov rcx, rbx
mov r8, qword [rbp + 0xf8]
call fcn.1400b0990
add rsp, 0x20
mov rax, qword [rbx + 0x30]
mov r11, qword [rbp - 0x38]
mov qword [r11 + 0x30], rax
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmm2, xmmword [rbx + 0x20]
movups xmmword [r11 + 0x20], xmm2
movups xmmword [r11 + 0x10], xmm1
movups xmmword [r11], xmm0
mov rax, qword [rbp - 0x28]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rdx, qword [rbx + 0x58]
mov rax, qword [rbx + 0x68]
movzx ecx, word [rdx + 0x3d2]
cmp rax, rcx
jae 0x1400a29ec
mov rcx, rdx
jmp 0x1400a2b1c
mov rax, qword [rbx + 0x60]
mov rcx, qword [rdx + 0x160]
test rcx, rcx
je 0x1400a2a4b
inc rax
movzx r8d, word [rdx + 0x3d0]
mov rdx, rcx
cmp r8w, word [rcx + 0x3d2]
jae 0x1400a29f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd2270]
add eax, dword [0x141dd2274]
imul eax, eax, 0xa6897729
add eax, 0x91aa482
or eax, 0x643c6286
cmp eax, 0x92889e9e
jbe 0x1400a2a20
mov rax, r8
jmp 0x1400a2b1c
xor ecx, ecx
jmp 0x1400a2b1c
mov r9, qword [rcx + r8 + 0x198]
mov qword [rdi + 0x30], r9
movups xmm0, xmmword [rcx + r8 + 0x168]
movups xmm1, xmmword [rcx + r8 + 0x178]
movups xmm2, xmmword [rcx + r8 + 0x188]
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov r9, qword [r11 + 0x30]
mov qword [rcx + r8 + 0x198], r9
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmm2, xmmword [r11 + 0x20]
movups xmmword [rcx + r8 + 0x188], xmm2
movups xmmword [rcx + r8 + 0x178], xmm1
movups xmmword [rcx + r8 + 0x168], xmm0
movups xmm0, xmmword [rcx + rdx]
movups xmm1, xmmword [rcx + rdx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rcx + rdx], xmm0
movups xmmword [rcx + rdx + 0x10], xmm1
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15 + 0x20], xmm2
movups xmmword [r15 + 0x30], xmm3
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [r15 + 0x40], xmm0
mov rdx, qword [rdi + 0x50]
mov qword [r15 + 0x50], rdx
mov r9d, dword [0x141dd2278]
and r9d, dword [0x141dd227c]
imul r8, rax, 0x38
mov rdx, rax
shl rdx, 5
mov r10, qword [rcx + r8 + 0x198]
mov qword [rdi + 0x30], r10
movups xmm0, xmmword [rcx + r8 + 0x168]
movups xmm1, xmmword [rcx + r8 + 0x178]
movups xmm2, xmmword [rcx + r8 + 0x188]
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov r10, qword [r11 + 0x30]
mov qword [rcx + r8 + 0x198], r10
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmm2, xmmword [r11 + 0x20]
movups xmmword [rcx + r8 + 0x188], xmm2
movups xmmword [rcx + r8 + 0x178], xmm1
movups xmmword [rcx + r8 + 0x168], xmm0
movups xmm0, xmmword [rcx + rdx]
movups xmm1, xmmword [rcx + rdx + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rcx + rdx], xmm0
movups xmmword [rcx + rdx + 0x10], xmm1
mov r10, qword [rdi + 0x50]
mov qword [r15 + 0x50], r10
and r9d, 0x731b5638
xor r9d, 0xf55b07a2
imul r9d, r9d, 0x34b10e8f
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15 + 0x20], xmm2
movups xmmword [r15 + 0x30], xmm3
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [r15 + 0x40], xmm0
cmp r9d, 0x66d3849e
ja 0x1400a2a60
jmp 0x1400a2cb0
mov eax, dword [0x141dd2260]
add eax, dword [0x141dd2264]
and eax, 0xaa98169e
imul eax, eax, 0x28abb4ed
add eax, 0xdd28fc8d
mov qword [rdi + 8], 0
mov qword [rdi + 0x10], rsi
cmp eax, 0x99710be9
jbe 0x1400a2c5d
mov qword [rdi + 8], 0
mov qword [rdi + 0x10], rsi
jmp 0x1400a2c20
mov eax, dword [0x141dd2268]
xor edx, edx
div dword [0x141dd226c]
and eax, 0x22c3558
add eax, 0xe8687572
cmp eax, 0x885d9230
jae 0x1400a2c96
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, qword [rbp + 0xf8]
call fcn.1400b0990
add rsp, 0x20
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, qword [rbp + 0xf8]
call fcn.1400b0990
add rsp, 0x20
mov rbx, qword [r15]
mov rax, qword [r15 + 8]
mov qword [rbp + 0x210], rax
mov r12, qword [r15 + 0x20]
mov rax, qword [r15 + 0x28]
mov qword [rbp + 0x218], rax
mov rax, qword [rbp + 0x1a8]
dec qword [rax + 0x10]
mov rax, r15
mov r15, qword [r15 + 0x38]
mov rax, qword [rax + 0x40]
mov qword [rbp + 0x200], rax
mov rax, qword [rbp + 0xf8]
cmp byte [rax], 0
je 0x1400a2e2c
nop word [rax + rax]
mov eax, dword [0x141dd2280]
imul eax, dword [0x141dd2284]
imul eax, eax, 0xf530d7aa
or eax, 0x4c2e854a
add eax, 0xf7e389ea
cmp eax, 0xb35f5ae6
jb 0x1400a2d00
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r14, qword [rbp + 0x100]
nop word cs:[rax + rax]
mov eax, dword [0x141dd2288]
or eax, dword [0x141dd228c]
xor eax, 0x77948d3d
imul rax, rax, 0x97dbcdb
shr rax, 0x3a
imul eax, eax, 0xd169232e
cmp eax, 0x75a09680
je 0x1400a2d40
mov rdx, qword [rbp + 0xe0]
test rdx, rdx
je 0x1400a4b78
mov rax, qword [r14 + 0x3d8]
mov rcx, qword [rbp + 0x1a8]
mov qword [rcx], rax
dec rdx
mov qword [rcx + 8], rdx
mov qword [rax + 0x160], 0
mov eax, dword [0x141dd22a0]
xor edx, edx
div dword [0x141dd22a4]
xor eax, 0x89fd9e64
mov ecx, 0x828007f1
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x1f9bb934
cmp eax, 0xea7236c2
jbe 0x1400a2ddf
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call rdi
add rsp, 0x20
mov rsi, rdi
nop word cs:[rax + rax]
mov edi, dword [0x141dd22a8]
xor edi, dword [0x141dd22ac]
or edi, 0x1f02f6ad
add edi, 0x500b989b
xor edi, 0x23907011
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call rsi
add rsp, 0x20
cmp edi, 0x294f637b
jb 0x1400a2df0
mov ecx, 0x9d0f8bcf
nop word cs:[rax + rax]
mov eax, dword [0x141dd22b0]
xor edx, edx
div dword [0x141dd22b4]
xor eax, 0x91a40238
imul rax, rcx
shr rax, 0x3f
add eax, 0x4b86b4db
cmp eax, 0x60ae35c4
ja 0x1400a2e40
movabs rax, 0x8000000000000000
cmp rbx, rax
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
je 0x1400a2f40
test rbx, rbx
je 0x1400a2ed6
mov eax, dword [0x141dd22b8]
add eax, dword [0x141dd22bc]
xor eax, 0x8e403901
and eax, 0x9ed039c5
cmp eax, 0x8246ed45
mov rsi, qword [rbp + 0x210]
jae 0x1400a2ec0
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
test r12, r12
je 0x1400a2f00
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x218]
call rdi
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd22c0]
add eax, dword [0x141dd22c4]
cmp eax, 0xd47358a4
je 0x1400a2f00
shl r15, 1
test r15, r15
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
je 0x1400a2f40
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x200]
call rax
add rsp, 0x20
nop dword [rax]
mov r14, qword [rbp + 0x110]
dec r14
nop word [rax + rax]
mov eax, dword [0x141dd22c8]
xor eax, dword [0x141dd22cc]
or eax, 0x5470dba0
add eax, 0x5c734523
and eax, 0xfb470173
cmp eax, 0xd00a4145
ja 0x1400a2f50
mov eax, 0
test r14, r14
mov rdi, qword [rbp + 0x168]
mov r9, qword [rbp + 0x170]
jne 0x1400a1f30
mov rcx, qword [rbp + 0x1a8]
mov rbx, qword [rcx]
mov r14, qword [rcx + 8]
mov eax, dword [0x141dd22d0]
sub eax, dword [0x141dd22d4]
mov rsi, qword [rcx + 0x10]
imul eax, eax, 0xb62c261a
add eax, 0x3a341256
cmp eax, 0xc005dc8d
jae 0x1400a2fc5
movzx eax, byte [0x141ddb9b8]
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400bf820
add rsp, 0x20
test rax, rax
mov r13, qword [rbp + 0x108]
je case.0x1400616b6.780
mov r12, rax
mov dword [rax], 0x48544150
add rax, 4
mov qword [rdi], r12
mov qword [rdi + 8], rax
mov word [rdi + 0x10], 0
add r13, 0x20
sub rsp, 0x20
mov rcx, r13
mov rdx, rdi
call fcn.1400acc30
add rsp, 0x20
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax + 0x28]
mov qword [rbp + 0x218], rcx
test rbx, rbx
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x1a8], r12
je 0x1400a32d6
mov qword [rbp + 0x108], r13
mov edi, dword [rax + 0x30]
mov qword [rbp + 0x200], r14
lea r12, [rbx + 0x168]
movzx eax, word [rbx + 0x3d2]
mov qword [rbp + 0x170], rax
imul rax, rax, 0x38
mov qword [rbp + 0x210], rbx
lea r13, [rbx + rax]
add r13, 0x168
xor ebx, ebx
jmp 0x1400a30d6
add r12, 0x38
lea rbx, [rsi + 1]
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x218]
mov edx, edi
mov r8, r14
mov r9d, r15d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
cmp eax, 3
jne 0x1400a3160
mov rsi, rbx
nop dword [rax]
mov eax, dword [0x141dd22e0]
xor eax, dword [0x141dd22e4]
add eax, 0x77418ff1
imul rax, rax, 0x39e1280f
shr rax, 0x3d
add eax, 0x880d2257
cmp eax, 0x20407c1b
jb 0x1400a30e0
cmp r12, r13
je 0x1400a3180
mov r14, qword [r12 + 0x28]
mov r15d, dword [r12 + 0x30]
mov eax, dword [str.pp]
xor eax, dword [0x141dd22ec]
cmp eax, 0x5bfe840a
jne 0x1400a30a0
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x218]
mov edx, edi
mov r8, r14
mov r9d, r15d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
jmp 0x1400a30a0
cmp eax, 1
jne 0x1400a327c
mov r12, qword [rbp + 0x1e0]
mov r13, qword [rbp + 0x108]
jmp 0x1400a3195
mov r12, qword [rbp + 0x1e0]
mov r13, qword [rbp + 0x108]
mov rsi, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x200]
test rcx, rcx
mov r14d, 0
je 0x1400a3d25
nop dword [rax + rax]
mov eax, dword [str.Z]
and eax, dword [0x141dd2304]
add eax, 0xd1012947
and eax, 0x8e2e818b
add eax, 0x2c33387a
cmp eax, 0xc531577c
jae 0x1400a31b0
dec rcx
mov qword [rbp + 0x200], rcx
mov rbx, qword [rbp + 0x210]
mov rbx, qword [rbx + rsi*8 + 0x3d8]
jmp 0x1400a3066
mov eax, dword [0x141dd21c8]
imul eax, dword [0x141dd21cc]
or eax, 0xb01c3ad4
xor eax, 0x9a56bee6
ud2
mov eax, dword [0x141dd2158]
xor eax, dword [0x141dd215c]
and eax, 0x45ef9504
imul eax, eax, 0x554febf8
add eax, 0xb85735fa
ud2
cmp eax, 2
mov r12, qword [rbp + 0x1e0]
mov r13, qword [rbp + 0x108]
jne 0x1400a4a60
shl rsi, 5
nop word [rax + rax]
mov eax, dword [0x141dd2308]
or eax, dword [0x141dd230c]
and eax, 0x21320acc
imul eax, eax, 0x315e224b
add eax, 0x49988372
cmp eax, 0x15bc537e
jb 0x1400a32a0
mov rax, qword [rbp + 0x210]
mov r14, qword [rax + rsi + 8]
mov rsi, qword [rax + rsi + 0x10]
jmp 0x1400a32e0
xor r14d, r14d
mov r12, qword [rbp + 0x1e0]
mov eax, dword [0x141dd2310]
imul eax, dword [0x141dd2314]
or eax, 0x4c51a2d4
add eax, 0x22d23526
xor eax, 0xab7a3350
cmp eax, 0xa0cd2cb6
jbe 0x1400a3321
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp qword [r13], 0
je 0x1400a33d6
mov eax, dword [0x141dd2318]
and eax, dword [0x141dd231c]
add eax, 0x19afd72f
or eax, 0x84e9b11f
add eax, 0xb707fba0
cmp eax, 0x95671bdc
jae 0x1400a3373
mov rax, qword [0x141ddb9a0]
mov rdi, qword [0x141ddb9a0]
mov eax, dword [0x141dd2320]
xor eax, dword [0x141dd2324]
imul rax, rax, 0x7f056659
shr rax, 0x3b
add eax, 0x9a1e38b7
and eax, 0x82080089
cmp eax, 0x915343ae
jbe 0x1400a33bc
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, qword [rbp + 0x218]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, qword [rbp + 0x218]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp + 0x188]
mov r13, qword [rax + 0x10]
lea rbx, [0x141db9530]
test r13, r13
je 0x1400a34c0
mov qword [rbp + 0x210], r14
mov r15, qword [rax + 8]
cmp r13, 4
mov qword [rbp + 0x218], rsi
mov r14, rbx
jae 0x1400a3415
lea rdi, [0x1400b16d0]
jmp 0x1400a3470
mov ecx, dword [r15]
bswap ecx
xor eax, eax
cmp ecx, 0x5c5c3f5c
setb al
cmp ecx, 0x5c5c3f5d
adc eax, 0xffffffff
lea rcx, [0x1400b16c0]
lea rdx, [0x1400b16d0]
nop dword [rax]
mov r8d, dword [0x141dd2328]
and r8d, dword [0x141dd232c]
imul r8d, r8d, 0xcb80373e
add r8d, 0xbb90713c
test eax, eax
mov rdi, rdx
cmove rdi, rcx
cmp r8d, 0xb2ff7ff
jb 0x1400a3440
nop
mov eax, dword [0x141dd2330]
imul eax, dword [0x141dd2334]
imul ebx, eax, 0xe5fec70c
or ebx, 0xb08c699e
add ebx, 0xac6a2488
movzx esi, byte [r13 + r15 - 1]
sub rsp, 0x20
mov ecx, esi
call rdi
add rsp, 0x20
cmp ebx, 0x8ac9c777
ja 0x1400a3470
test al, al
mov rbx, r14
je 0x1400a3580
nop word cs:[rax + rax]
mov eax, dword [0x141dd2338]
imul eax, dword [0x141dd233c]
xor eax, 0x2080880a
and eax, 0xaa9a8b2a
imul eax, eax, 0xeba7fb4c
cmp eax, 0xa7fad944
ja 0x1400a3580
cmp r13, 3
mov r14, qword [rbp + 0x210]
jbe 0x1400a3678
nop word cs:[rax + rax]
mov ecx, 0xa0135da7
lea rax, [r15 + r13]
nop word cs:[rax + rax]
mov edx, dword [0x141dd2340]
and edx, dword [0x141dd2344]
add edx, 0x9b28a7c9
imul rdx, rcx
shr rdx, 0x3f
xor edx, 0x13091833
cmp edx, 0xd1ab5018
ja 0x1400a3690
mov rdx, r15
nop dword [rax + rax]
cmp rdx, rax
je 0x1400a3996
lea rcx, [rdx + 1]
nop dword [rax]
mov r8d, dword [0x141dd2348]
xor r8d, dword [0x141dd234c]
add r8d, 0xf9f6f3f0
or r8d, 0xdba52612
add r8d, 0x78191dd9
cmp r8d, 0x8daf443e
ja 0x1400a36d0
movzx r8d, byte [rdx]
mov edx, dword [0x141dd2350]
xor edx, dword [0x141dd2354]
or edx, 0x508180
and edx, 0x2ed4a5aa
add edx, 0x1a53e0b8
cmp edx, 0x56d86012
ja 0x1400a3700
cmp r8d, 0x2f
je 0x1400a3880
mov rdx, rcx
cmp r8d, 0x5c
jne 0x1400a36c0
jmp 0x1400a3880
jmp 0x1400a32e0
mov eax, dword [0x141dd22f0]
imul eax, dword [0x141dd22f4]
add eax, 0x114c1eb7
or eax, 0xc7020e88
imul eax, eax, 0xf6cc1fab
cmp eax, 0xb64f3168
ja 0x1400a5f71
jmp 0x1400a5f48
sub rsp, 0x20
call fcn.140091140
mov eax, dword [0x141dd2138]
sub eax, dword [0x141dd213c]
add dword [0x1410a4b65], esp
mov eax, dword [0x141dd2290]
add eax, dword [0x141dd2294]
and eax, 0x187c0c52
add eax, 0x69cd6a2f
cmp eax, 0x70c50790
jbe 0x1400a4ba0
ud2
mov eax, dword [0x141dd2298]
add eax, dword [0x141dd229c]
imul eax, eax, 0xbe4dc600
add eax, 0xbca39e00
xor eax, 0xcf120416
ud2
xor eax, eax
ud2
sub rsp, 0x20
mov eax, dword [0x141dd22f8]
xor edx, edx
div dword [0x141dd22fc]
imul esi, eax, 0x99dd979f
sub rsp, 0x20
call fcn.140091140
add rsp, 0x20
cmp esi, 0x68a6e1f1
jne 0x1400a5f42
sub rsp, 0x20
call fcn.140091140
add rsp, 0x20
jmp 0x1400a5f48