Function at 0x1400a09f0
Capabilities:
Authenticate hmac
Create a process with modified i/o handles and window
Create process on windows
Encode data using base64
Encode data using xor
Encrypt data using speck
Get common file path
Parse credit card information
Query environment variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2a8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x210], xmm6
mov qword [rbp + 0x168], r8
mov qword [rbp + 0x188], rdx
mov qword [rbp + 0x1e0], rcx
nop dword [rax + rax]
mov eax, dword [0x141dceb90]
xor edx, edx
div dword [0x141dceb94]
mov ecx, eax
add ecx, 0x6d41632d
imul rax, rcx, 0x37249db9
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1e
or ecx, 0x4eb2a3e8
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x128], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1c0], rsp
mov eax, 0x50
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x120], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x68], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x50
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xc8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1a8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x130], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1b0], rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x190], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1e8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1c8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x118], rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x198], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x180], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xc0], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xb8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1a0], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x28], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x48], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x60], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x40], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x160], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1f8], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x150], rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1d0], rsp
mov eax, 0x60
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x148], rsp
mov eax, 0x70
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x140], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x158], rsp
mov eax, 0x70
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x1b8], rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rbx, rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdx, rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r13, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r10, rsp
mov eax, 0x70
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x70
call fcn.1400ed360
sub rsp, rax
mov r9, rsp
mov eax, 0x30
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
cmp ecx, 0xe682df25
ja 0x1400a0a30
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], r14
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x90], r11
mov qword [rbp + 0x108], rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0x178], rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r11, rsp
mov eax, 0x40
call fcn.1400ed360
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov rdx, qword [rbp + 0x188]
movzx eax, byte [rdx + 0xa0]
test al, al
sete cl
mov rdx, qword [rdx + 0x98]
mov qword [rbp + 0x98], rdx
test rdx, rdx
sete dl
and dl, cl
mov byte [rbp + 0x1df], dl
mov qword [rbp + 0x78], r8
mov qword [rbp + 0x100], r9
mov qword [rbp + 0x70], r10
je 0x1400a1025
mov r14, r11
xor eax, eax
mov qword [rbp + 0x208], rax
mov rdi, qword [rbp + 0x1e0]
mov r13, qword [rbp + 0x1e8]
jmp 0x1400a2d5e
mov r14, qword [rbp + 0x200]
mov qword [r14], 0
mov qword [r14 + 0x10], 0
test al, al
mov qword [rbp + 0x20], r11
jne 0x1400a15f0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dceb98]
sub ecx, dword [0x141dceb9c]
imul ecx, ecx, 0xab16417b
xor ecx, 0x90220089
or ecx, 0x1dc2456
cmp ecx, 0x721dc539
jb 0x1400a1060
test rax, rax
mov r13, qword [rbp + 0x88]
mov r15, qword [rbp + 0x1f8]
je 0x1400a7b2c
mov qword [rbp + 0x110], rax
cmp word [rax], 0
je 0x1400a15a0
add r15, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dceba0]
sub eax, dword [0x141dceba4]
and eax, 0x80085000
add eax, 0x102ef027
cmp eax, 0x724ba2
jb 0x1400a10c0
mov rax, qword [rbp + 0x170]
add rax, 0x20
mov qword [rbp + 0x138], rax
mov rsi, qword [rbp + 0x110]
mov qword [rbp + 0xf8], r15
nop dword [rax]
xor ecx, ecx
nop word cs:[rax + rax]
mov rbx, rcx
inc rcx
cmp word [rsi + rbx*2], 0
jne 0x1400a1110
nop dword [rax]
mov eax, dword [0x141dcebc0]
xor edx, edx
div dword [0x141dcebc4]
xor eax, 0x2bfe49ca
imul rdx, rax, 0x3e8d46d5
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
or eax, 0xcc88cacc
cmp eax, 0x4024f2d1
jb 0x1400a1120
lea r9, [rsi + rcx*2]
cmp rbx, 1
je 0x1400a1218
test rbx, rbx
je 0x1400a7aca
lea rcx, [rsi + rbx*2]
lea r8, [rsi + 2]
nop word cs:[rax + rax]
mov eax, dword [0x141dcebc8]
sub eax, dword [0x141dcebcc]
imul eax, eax, 0xb1d0cb8f
add eax, 0xd8ece342
cmp eax, 0xdd479683
ja 0x1400a1180
xor r12d, r12d
nop word cs:[rax + rax]
cmp word [r8], 0x3d
je 0x1400a1260
add r8, 2
nop
mov eax, dword [0x141dcebd0]
xor edx, edx
div dword [0x141dcebd4]
add eax, 0xde047843
xor eax, 0xd633342c
cmp eax, 0x56214680
ja 0x1400a11c0
inc r12
nop word cs:[rax + rax]
mov eax, dword [0x141dcebd8]
add eax, dword [0x141dcebdc]
imul eax, eax, 0x1e2567e5
add eax, 0x8709e17f
xor eax, 0xa3e7fe66
cmp eax, 0x8bbecf83
jb 0x1400a11f0
cmp r8, rcx
jne 0x1400a11b0
movzx eax, word [r9]
nop dword [rax]
mov ecx, dword [0x141dcebf0]
and ecx, dword [0x141dcebf4]
xor ecx, 0x902b20
and ecx, 0x88d0bf61
imul ecx, ecx, 0xa89ef7db
cmp ecx, 0x557cf45f
jb 0x1400a1220
test ax, ax
jne 0x1400a1570
jmp 0x1400a15a0
cmp r12, rbx
jae 0x1400a7892
mov qword [rbp + 0xf0], r9
lea r8, [r12 + 1]
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
call fcn.14008a680
add rsp, 0x20
add r12, 2
sub rbx, r12
jb 0x1400a7b10
nop word cs:[rax + rax]
mov eax, dword [0x141dcec20]
xor edx, edx
div dword [0x141dcec24]
or eax, 0x21aaf0dc
imul rax, rax, 0x4365814d
shr rax, 0x3d
imul eax, eax, 0x27b123c5
cmp eax, 0x298e1dab
je 0x1400a12a0
lea rsi, [rsi + r12*2]
mov rdi, qword [rbp + 0x1f8]
nop word cs:[rax + rax]
mov r12d, dword [0x141dcec28]
add r12d, dword [0x141dcec2c]
and r12d, 0x53de3f45
add r12d, 0xccd5b775
xor r12d, 0xc0769662
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call fcn.14008a680
add rsp, 0x20
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
cmp r12d, 0x4025f4b8
jae 0x1400a1360
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, rbx
call fcn.14008a680
add rsp, 0x20
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
jmp 0x1400a12e0
mov rsi, qword [rdi]
mov rbx, qword [rdi + 8]
mov eax, dword [0x141dcec30]
imul eax, dword [0x141dcec34]
shr eax, 4
imul rax, rax, 0x4c19add
shr rax, 0x36
xor eax, 0xf91b749b
cmp eax, 0xc1b3ad70
mov rax, qword [rbp + 0xe0]
jae 0x1400a13a5
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
movdqu xmm6, xmmword [rdi + 0x10]
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
movabs rax, 0x8000000000000000
cmp rsi, rax
mov rdi, qword [rbp + 0xa0]
je 0x1400a15a0
mov eax, dword [0x141dcec40]
mov ecx, dword [0x141dcec44]
add eax, ecx
add eax, 0xa1dd57b1
or eax, 0x1a902421
add eax, 0xb19a789c
movq r12, xmm6
cmp eax, 0x99d635bb
jbe 0x1400a1433
lea rax, [rbx + r12]
mov qword [rdi], rbx
mov qword [rdi + 8], rax
mov word [rdi + 0x10], 0
sub rsp, 0x20
mov rcx, qword [rbp + 0x138]
mov rdx, rdi
call fcn.1400ab880
add rsp, 0x20
mov rax, qword [rbp + 0x170]
mov qword [rax], rsi
mov qword [rax + 8], rbx
add r12, rbx
mov qword [rdi], rbx
mov qword [rdi + 8], r12
mov word [rdi + 0x10], 0
sub rsp, 0x20
mov rcx, qword [rbp + 0x138]
mov rdx, rdi
call fcn.1400ab880
add rsp, 0x20
mov rdi, qword [rbp + 0x170]
mov qword [rdi], rsi
mov qword [rdi + 8], rbx
movdqu xmmword [rdi + 0x10], xmm6
mov rbx, qword [rbp + 0xe8]
mov r15, qword [rbp + 0xe0]
nop dword [rax + rax]
mov esi, dword [0x141dcec48]
imul esi, dword [0x141dcec4c]
add esi, 0x62ee4dca
or esi, 0x30eb63dd
add esi, 0xf814794b
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, rdi
mov r9, r15
call fcn.1400ac0a0
add rsp, 0x20
cmp esi, 0x1c4331c9
jae 0x1400a14e0
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, rdi
mov r9, r15
call fcn.1400ac0a0
add rsp, 0x20
jmp 0x1400a1480
mov rax, qword [rbx]
shl rax, 1
test rax, rax
je 0x1400a1506
mov r8, qword [rbx + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r15, qword [rbp + 0xf8]
nop dword [rax]
mov eax, dword [0x141dcec50]
xor eax, dword [0x141dcec54]
add eax, 0x3d11d3e0
xor eax, 0x92acfe95
add eax, 0x955791f8
cmp eax, 0xc698879f
ja 0x1400a1510
mov r9, qword [rbp + 0xf0]
nop dword [rax]
mov eax, dword [0x141dcec58]
imul eax, dword [0x141dcec5c]
imul rax, rax, 0x6244b581
shr rax, 0x3d
not eax
and eax, 0xb8b5d481
cmp eax, 0x91538c1a
jb 0x1400a1540
cmp word [r9], 0
je 0x1400a15a0
nop dword [rax]
mov eax, dword [0x141dcebf8]
and eax, dword [0x141dcebfc]
or eax, 0xb794b870
imul eax, eax, 0xd6da2d14
and eax, 0xe642c824
cmp eax, 0x12952d6c
jb 0x1400a1570
mov rsi, r9
jmp 0x1400a1100
mov eax, dword [0x141dcec38]
or eax, dword [0x141dcec3c]
and eax, 0x293570a8
imul eax, eax, 0x7ab8cc5c
add eax, 0x41b11a82
cmp eax, 0x853a1317
ja 0x1400a15a0
sub rsp, 0x20
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
add rsp, 0x20
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400a15e0
nop word cs:[rax + rax]
mov eax, dword [str.z_7_t9__no]
imul eax, dword [0x141dcebbc]
add eax, 0x7f5ab5ed
and eax, 0x1464735d
imul eax, eax, 0xf3d56859
cmp eax, 0xb589cd7e
ja 0x1400a15f0
mov rax, qword [rbp + 0x188]
mov rax, qword [rax + 0x88]
test rax, rax
mov r13, qword [rbp + 0x1e8]
mov r15, qword [rbp + 0x98]
je 0x1400a2993
test r15, r15
je 0x1400a2993
mov rdx, qword [rbp + 0x1f0]
add rdx, 0x38
mov r8, qword [rbp + 0x148]
add r8, 0x38
nop dword [rax + rax]
mov ecx, dword [0x141dcec60]
sub ecx, dword [0x141dcec64]
and ecx, 0xe20e8112
imul ecx, ecx, 0xfa30f232
add ecx, 0x7e158854
cmp ecx, 0xa2213975
ja 0x1400a1660
mov qword [rbp + 0x110], r8
mov qword [rbp + 0xf8], rdx
mov rcx, qword [rbp + 0x188]
mov r10, qword [rcx + 0x90]
nop word cs:[rax + rax]
mov ecx, dword [0x141dcec68]
or ecx, dword [0x141dcec6c]
or ecx, 0x3a3e55c3
add ecx, 0x63412023
cmp ecx, 0xfffe0729
ja 0x1400a16b0
xor r9d, r9d
mov r8d, 0x8f5072bb
jmp 0x1400a1726
mov rax, qword [r15]
shl rax, 1
test rax, rax
mov r14, qword [rbp + 0x200]
jne 0x1400a17b0
mov eax, 0
mov r15, qword [rbp + 0x98]
test r15, r15
mov r13, qword [rbp + 0x1e8]
mov r8d, 0x8f5072bb
mov r9, qword [rbp + 0x88]
mov r10, qword [rbp + 0xe0]
je 0x1400a2993
test r9, r9
jne 0x1400a1853
nop
mov ecx, dword [0x141dcec70]
mov edx, dword [0x141dcec74]
add ecx, edx
add ecx, 0xd00f09ef
xor ecx, 0x92b9b406
add ecx, 0xb4dbf371
cmp ecx, 0x9aafb83f
ja 0x1400a1730
test r10, r10
je 0x1400a17f5
mov rcx, r10
and rcx, 7
je 0x1400a17fa
mov rdx, r10
mov r9, rax
xor eax, eax
nop word cs:[rax + rax]
mov r9, qword [r9 + 0x3d8]
inc rax
dec rdx
cmp rcx, rax
jne 0x1400a1780
mov rcx, r10
sub rcx, rax
cmp r10, 8
jae 0x1400a1810
jmp 0x1400a184e
mov eax, dword [0x141dced08]
xor edx, edx
div dword [0x141dced0c]
imul rax, rax, 0x35d3c5db
shr rax, 0x3d
or eax, 0xefffead6
cmp eax, 0xd585bb6e
jb 0x1400a17b0
mov r8, qword [r15 + 8]
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400a16f6
mov r9, rax
jmp 0x1400a184e
mov rcx, r10
mov r9, rax
cmp r10, 8
jb 0x1400a184e
nop word cs:[rax + rax]
mov rax, qword [r9 + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov r9, qword [rax + 0x3d8]
add rcx, 0xfffffffffffffff8
jne 0x1400a1810
xor r10d, r10d
xor eax, eax
dec r15
nop word cs:[rax + rax]
mov ecx, dword [0x141dcec78]
and ecx, dword [0x141dcec7c]
imul rcx, r8
shr rcx, 0x3f
or ecx, 0xdf41fbfe
cmp ecx, 0x62c297b2
jb 0x1400a1860
movzx ecx, word [r9 + 0x3d2]
cmp r10, rcx
jae 0x1400a18a0
mov rcx, r10
mov r13, r9
jmp 0x1400a18fb
mov r13, qword [r9 + 0x160]
test r13, r13
je 0x1400a337e
inc rax
nop word cs:[rax + rax]
mov ecx, dword [0x141dcec80]
sub ecx, dword [0x141dcec84]
add ecx, 0xfe3f3722
xor ecx, 0x4018c060
and ecx, 0xc45cc160
cmp ecx, 0xc160a8c1
ja 0x1400a18c0
movzx ecx, word [r9 + 0x3d0]
mov r9, r13
cmp cx, word [r13 + 0x3d2]
jae 0x1400a18a0
test rax, rax
je 0x1400a1a20
nop word cs:[rax + rax]
mov edx, dword [0x141dcec90]
or edx, dword [0x141dcec94]
add edx, 0xdc0c5c25
cmp edx, 0x79c137cd
jb 0x1400a1910
nop word [rax + rax]
mov edx, dword [0x141dcec98]
add edx, dword [0x141dcec9c]
or edx, 0x448e2332
add edx, 0xad19620c
or edx, 0x88c40880
cmp edx, 0xcbcf9741
jb 0x1400a1930
mov rdx, rax
mov rdi, qword [r13 + rcx*8 + 0x3e0]
dec rdx
je 0x1400a1a0e
mov r8, rdx
and r8, 7
je 0x1400a19be
xor r9d, r9d
nop word cs:[rax + rax]
mov r10d, dword [0x141dceca0]
or r10d, dword [0x141dceca4]
imul r10d, r10d, 0xee9a814f
and r10d, 0x6ca09071
add r10d, 0x677771b0
cmp r10d, 0x35350824
jb 0x1400a1980
mov rdi, qword [rdi + 0x3d8]
dec rdx
inc r9
dec r8
jne 0x1400a1980
add rax, 0xfffffffffffffffe
cmp rax, 7
jb 0x1400a1a0e
nop dword [rax + rax]
mov rax, qword [rdi + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rax, qword [rax + 0x3d8]
mov rdi, qword [rax + 0x3d8]
add rdx, 0xfffffffffffffff8
jne 0x1400a19d0
xor esi, esi
jmp 0x1400a1a27
lea rsi, [rcx + 1]
mov rdi, r13
imul rax, rcx, 0x38
lea r12, [rax + r13]
add r12, 0x168
shl rcx, 5
movabs rax, 0x8000000000000000
cmp qword [r13 + rcx], rax
mov qword [rbp + 0x98], r15
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0xe0], rsi
jne 0x1400a1c40
mov rax, qword [r14]
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x1400a16f6
mov rax, qword [r12 + 0x28]
mov qword [rbp + 0x1f8], rax
mov rdi, qword [r12 + 0x30]
nop dword [rax + rax]
mov eax, dword [0x141dced10]
and eax, dword [0x141dced14]
imul rax, rax, 0x1a4395cb
shr rax, 0x38
or eax, 0x4c7a719e
add eax, 0xeb570c51
cmp eax, 0xff891d93
ja 0x1400a1a90
mov r15, qword [r14 + 8]
lea ecx, [r15 + 7]
mov dword [rbp + 0x170], ecx
xor ecx, ecx
mov qword [rbp + 0xf0], rcx
mov qword [rbp + 0x138], r15
mov rdx, qword [rbp + 0xe8]
lea rcx, [rdx + 0x168]
movzx eax, word [rdx + 0x3d2]
mov qword [rbp + 0xa0], rax
imul rax, rax, 0x38
mov r14, rdx
lea r13, [rdx + rax]
add r13, 0x168
xor r12d, r12d
nop word [rax + rax]
mov rbx, r12
nop word cs:[rax + rax]
mov eax, dword [0x141dced18]
and eax, dword [0x141dced1c]
and eax, 0x10ad4329
add eax, 0x7b43f0a5
cmp eax, 0x73537e61
jb 0x1400a1b20
cmp rcx, r13
je 0x1400a1bd0
nop word cs:[rax + rax]
mov eax, dword [0x141dced20]
xor eax, dword [0x141dced24]
and eax, 0xc6276991
add eax, 0x67c9a615
cmp eax, 0x648c623d
jb 0x1400a1b50
lea rsi, [rcx + 0x38]
lea r12, [rbx + 1]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x1f8]
mov edx, edi
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
mov rcx, rsi
cmp eax, 3
je 0x1400a1b10
cmp eax, 1
jne 0x1400a1cb0
test r15, r15
mov rdx, r14
mov r14, qword [rbp + 0x200]
jne 0x1400a1bf0
jmp 0x1400a16f6
mov rbx, qword [rbp + 0xa0]
test r15, r15
mov rdx, r14
mov r14, qword [rbp + 0x200]
je 0x1400a16f6
nop word [rax + rax]
mov eax, dword [0x141dced30]
xor eax, dword [0x141dced34]
or eax, 0x635d1640
imul eax, eax, 0x72b6c8cd
add eax, 0xdfe670f4
cmp eax, 0xe6a12356
ja 0x1400a1bf0
mov rdx, qword [rdx + rbx*8 + 0x3d8]
dec r15
inc qword [rbp + 0xf0]
mov eax, dword [rbp + 0x170]
add al, 7
mov dword [rbp + 0x170], eax
jmp 0x1400a1add
add r13, rcx
mov r14, qword [r12 + 0x10]
test r14, r14
js 0x1400a7ac6
mov rbx, qword [r12 + 8]
je 0x1400a1fdf
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call fcn.1400beea0
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dceca8]
sub ecx, dword [0x141dcecac]
and ecx, 0xf6ac6de8
imul ecx, ecx, 0xf1b07c58
cmp ecx, 0x398d4cfe
ja 0x1400a1c80
test rax, rax
jne 0x1400a1fe4
jmp 0x1400aa3e6
cmp eax, 2
mov r12, qword [rbp + 0x1d0]
mov r13, qword [rbp + 0x90]
jne 0x1400a3699
mov rcx, r15
mov byte [r13], 0
test r15, r15
je 0x1400a212f
mov rsi, qword [r14 + rbx*8 + 0x3d8]
mov eax, dword [0x141dced40]
xor eax, dword [0x141dced44]
imul rax, rax, 0x5cbe9b9b
shr rax, 0x3d
imul eax, eax, 0xa609bdf
add eax, 0x802974ea
cmp eax, 0x9b0079b2
ja 0x1400a1ce0
mov rax, rcx
dec rax
mov rbx, qword [rbp + 0x150]
je 0x1400a1e62
test al, 7
je 0x1400a1d65
movzx eax, byte [rbp + 0x170]
and eax, 7
neg rax
mov ecx, 1
nop word cs:[rax + rax]
movzx edx, word [rsi + 0x3d2]
mov rsi, qword [rsi + rdx*8 + 0x3d8]
lea rdx, [rax + rcx]
inc rdx
inc rcx
cmp rdx, 1
jne 0x1400a1d40
sub r15, rcx
mov rax, r15
mov rcx, qword [rbp + 0x138]
sub rcx, qword [rbp + 0xf0]
add rcx, 0xfffffffffffffffe
nop word [rax + rax]
mov edx, dword [0x141dced48]
imul edx, dword [0x141dced4c]
imul rdx, rdx, 0x279cd05d
shr rdx, 0x3c
and edx, 1
or edx, 0x300dcb70
cmp edx, 0x6958d598
ja 0x1400a1d80
cmp rcx, 7
jb 0x1400a1e62
nop word cs:[rax + rax]
mov ecx, dword [0x141dced50]
xor ecx, dword [0x141dced54]
and ecx, 0xe976274e
add ecx, 0xa0fa7dd1
cmp ecx, 0x36720292
ja 0x1400a1dc0
movzx ecx, word [rsi + 0x3d2]
mov rcx, qword [rsi + rcx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rcx, qword [rcx + rdx*8 + 0x3d8]
movzx edx, word [rcx + 0x3d2]
mov rsi, qword [rcx + rdx*8 + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x1400a1dc0
mov eax, dword [0x141dced58]
or eax, dword [0x141dced5c]
add eax, 0xf652aa28
and eax, 0xad15f3b3
xor eax, 0x5345c628
cmp eax, 0x5e2f102b
jae 0x1400a1ef8
movzx eax, word [rsi + 0x3d2]
dec rax
mov rdx, qword [rbp + 0x140]
mov qword [rdx], rsi
mov qword [rdx + 8], 0
mov qword [rdx + 0x10], rax
sub rsp, 0x20
mov rdi, qword [rbp + 0x1f0]
mov rcx, rdi
mov r8, r13
call fcn.1400af620
add rsp, 0x20
mov rax, qword [rdi + 0x30]
mov qword [r12 + 0x30], rax
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmm2, xmmword [rdi + 0x20]
movups xmmword [r12 + 0x20], xmm2
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
mov rax, qword [rbp + 0xf8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov r14, qword [rbp + 0x1f0]
mov r13, qword [rbp + 0x140]
mov r15, qword [rbp + 0xf8]
nop dword [rax]
mov edi, dword [0x141dced60]
or edi, dword [0x141dced64]
xor edi, 0xd018410
or edi, 0xa07e118f
add edi, 0xf0277008
movzx eax, word [rsi + 0x3d2]
dec rax
mov qword [r13], rsi
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], rax
sub rsp, 0x20
mov rcx, r14
mov rdx, r13
mov r8, qword [rbp + 0x90]
call fcn.1400af620
add rsp, 0x20
mov rax, qword [r14 + 0x30]
mov qword [r12 + 0x30], rax
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
movups xmmword [r12 + 0x20], xmm2
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
cmp edi, 0x6deb0fc4
jb 0x1400a1f10
mov r8, qword [r14 + 0x58]
mov rax, qword [r14 + 0x68]
movzx ecx, word [r8 + 0x3d2]
cmp rax, rcx
jae 0x1400a21b5
mov rcx, r8
mov r14, qword [rbp + 0x200]
mov r10, qword [rbp + 0x110]
mov r11, qword [rbp + 0x148]
mov rsi, rbx
jmp 0x1400a225d
mov eax, 1
sub rsp, 0x20
mov r15, rax
mov rcx, rax
mov rdx, rbx
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rsi, qword [r12 + 0x30]
test rsi, rsi
js 0x1400a7aa1
lea rbx, [rsi + rsi]
movabs rax, 0x8000000000000000
add rax, 0xfffffffffffffffe
cmp rbx, rax
ja 0x1400a7aa1
movzx eax, byte [r12 + 0x18]
mov byte [rbp + 0x1f8], al
mov rdx, qword [r12 + 0x28]
test rbx, rbx
je 0x1400a20a9
mov qword [rbp + 0x170], rdx
mov eax, dword [0x141dcecb8]
add eax, dword [0x141dcecbc]
xor eax, 0xa200014
and eax, 0x4a20801e
cmp eax, 0x51384a97
jbe 0x1400a2079
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400beea0
add rsp, 0x20
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400beea0
add rsp, 0x20
mov r12, rax
mov rdi, rsi
test rax, rax
mov rdx, qword [rbp + 0x170]
jne 0x1400a20b1
jmp 0x1400a75ba
mov r12d, 2
xor edi, edi
sub rsp, 0x20
mov rcx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x208]
mov qword [rax], r14
mov qword [rax + 8], r15
mov qword [rax + 0x10], r14
movzx ecx, byte [rbp + 0x1f8]
mov byte [rax + 0x18], cl
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], rsi
mov rsi, qword [r13 + 0x10]
test rsi, rsi
js 0x1400a7559
mov rdi, qword [r13 + 8]
je 0x1400a2125
mov eax, dword [0x141dcecd0]
xor eax, dword [0x141dcecd4]
xor eax, 0x8601b880
and eax, 0xde89f984
cmp eax, 0x3a1fc640
jb 0x1400a2440
jmp 0x1400a22a0
mov ebx, 1
jmp 0x1400a235d
mov rsi, qword [rbp + 0x158]
mov qword [rsi], r14
mov qword [rsi + 8], 0
mov eax, dword [0x141dced38]
imul eax, dword [0x141dced3c]
and eax, 0xa29d9768
shr eax, 2
imul rax, rax, 0x40ab8689
shr rax, 0x39
imul eax, eax, 0x278573e7
cmp eax, 0x59426897
mov rdi, qword [rbp + 0x1b8]
jae 0x1400a218f
mov qword [rsi + 0x10], rbx
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
mov r8, r13
call fcn.1400af620
add rsp, 0x20
mov qword [rsi + 0x10], rbx
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
mov r8, r13
call fcn.1400af620
add rsp, 0x20
mov r14, qword [rbp + 0x200]
jmp 0x1400a2450
mov r9, qword [r14 + 0x60]
mov r14, qword [rbp + 0x200]
mov r10, qword [rbp + 0x110]
mov r11, qword [rbp + 0x148]
mov rsi, rbx
nop word cs:[rax + rax]
mov eax, dword [0x141dced68]
xor eax, dword [0x141dced6c]
imul rcx, rax, 0x96d86ad
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0x29b75aef
cmp eax, 0xea85b0ac
ja 0x1400a21e0
mov rcx, qword [r8 + 0x160]
test rcx, rcx
je 0x1400a2258
nop dword [rax + rax]
mov eax, dword [0x141dced70]
xor edx, edx
div dword [0x141dced74]
or eax, 0x41000430
and eax, 0x41802432
cmp eax, 0x35295a14
jb 0x1400a2220
inc r9
movzx eax, word [r8 + 0x3d0]
mov r8, rcx
cmp ax, word [rcx + 0x3d2]
jae 0x1400a21e0
jmp 0x1400a225d
mov rax, r9
xor ecx, ecx
mov edx, dword [0x141dced78]
xor edx, dword [0x141dced7c]
xor edx, 0x52545008
or edx, 0xc232db2
imul edx, edx, 0x1484f09f
cmp edx, 0x4733532b
mov rdi, qword [rbp + 0x1b8]
jb 0x1400a2806
jmp 0x1400a2710
mov eax, dword [0x141dcecd8]
and eax, dword [0x141dcecdc]
shr eax, 2
imul rax, rax, 0x2407c1ef
shr rax, 0x3b
or eax, 0x4c9963f0
imul eax, eax, 0x9920fb3c
movzx ecx, byte [0x141dd7ff8]
cmp eax, 0xd1e30e5
jb 0x1400a2440
mov eax, dword [0x141dcece0]
imul eax, dword [0x141dcece4]
xor eax, 0x370a5474
add eax, 0x6b06b6a7
xor eax, 0x77ced99c
cmp eax, 0xc55ea006
jbe 0x1400a2310
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400beea0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dcece8]
add eax, dword [0x141dcecec]
imul eax, eax, 0xdabe18d3
shr eax, 1
imul r12, rax, 0x4c2251a3
shr r12, 0x38
xor r12d, 0x84fb5996
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400beea0
add rsp, 0x20
cmp r12d, 0x919d9fac
ja 0x1400a2310
mov rbx, rax
test rax, rax
je 0x1400a2950
mov r14, qword [rbp + 0x10]
mov r15, qword [rbp + 0x18]
nop word cs:[rax + rax]
mov eax, dword [0x141dced00]
add eax, dword [0x141dced04]
imul r12d, eax, 0xb3642fed
add r12d, 0xea29f048
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movzx eax, byte [r13 + 0x18]
mov qword [r14], rsi
mov qword [r14 + 8], rbx
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], al
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp + 0x200]
mov r8, qword [rbp + 0x208]
mov r9, r14
call fcn.1400ac0a0
add rsp, 0x20
cmp r12d, 0xf31d3115
jbe 0x1400a16e0
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
movzx eax, byte [r13 + 0x18]
mov qword [r14], rsi
mov qword [r14 + 8], rbx
mov qword [r14 + 0x10], rsi
mov byte [r14 + 0x18], al
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp + 0x200]
mov r8, qword [rbp + 0x208]
mov r9, r14
call fcn.1400ac0a0
add rsp, 0x20
jmp 0x1400a2370
movzx eax, byte [0x141dd7ff8]
jmp 0x1400a22a0
mov eax, dword [0x141dced88]
xor edx, edx
div dword [0x141dced8c]
and eax, 0x804d3650
imul rax, rax, 0x6d86a15f
shr rax, 0x3d
add eax, 0xf76a1f31
cmp eax, 0xb3876ca
mov rcx, rdi
jb 0x1400a24be
nop dword [rax]
mov eax, dword [0x141dced90]
sub eax, dword [0x141dced94]
xor eax, 0x210d75c
imul eax, eax, 0x7b5f0db9
add eax, 0xd78acb7b
mov rsi, qword [rcx]
mov rbx, qword [rcx + 8]
mov r8, qword [rcx + 0x20]
mov rdi, qword [rcx + 0x28]
mov r13, qword [rcx + 0x38]
mov rdx, qword [rcx + 0x40]
dec qword [r14 + 0x10]
cmp eax, 0x18fa87f4
jae 0x1400a24d0
dec qword [r14 + 0x10]
jmp 0x1400a2480
mov qword [rbp + 0x1f8], r8
mov qword [rbp + 0x170], rdx
mov rax, qword [rbp + 0x90]
cmp byte [rax], 0
mov r15, qword [rbp + 0xe8]
je 0x1400a25ef
nop word cs:[rax + rax]
mov eax, dword [0x141dced98]
sub eax, dword [0x141dced9c]
imul eax, eax, 0xee33321c
or eax, 0xa08c3873
add eax, 0xf01e4cd6
cmp eax, 0xf1bcce58
ja 0x1400a2500
nop word cs:[rax + rax]
mov eax, dword [0x141dceda0]
sub eax, dword [0x141dceda4]
add eax, 0x7a8d12e
xor eax, 0x3e81600d
cmp eax, 0x7844fe6d
ja 0x1400a2530
cmp qword [rbp + 0x138], 0
je 0x1400aa3e6
mov r12, qword [r15 + 0x3d8]
mov qword [r14], r12
mov eax, dword [0x141dceda8]
sub eax, dword [0x141dcedac]
xor eax, 0x17e95492
add eax, 0xe53562f
xor eax, 0xd0301a73
cmp eax, 0x697e7ff2
jbe 0x1400a25bb
mov rax, qword [rbp + 0x138]
dec rax
mov qword [r14 + 8], rax
mov qword [r12 + 0x160], 0
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp + 0x138]
dec rax
mov qword [r14 + 8], rax
mov qword [r12 + 0x160], 0
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400a16f6
test rsi, rsi
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
je 0x1400a2625
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call r12
add rsp, 0x20
mov rcx, qword [rbp + 0x1f8]
nop dword [rax]
mov eax, dword [0x141dcedb0]
sub eax, dword [0x141dcedb4]
xor eax, 0x95b12901
imul rax, rax, 0x4e70191b
shr rax, 0x3b
xor eax, 0xca5b9111
cmp eax, 0x67479cba
jb 0x1400a2630
test rcx, rcx
je 0x1400a26d0
nop dword [rax]
mov eax, dword [0x141dcedb8]
sub eax, dword [0x141dcedbc]
xor eax, 0x1000
or eax, 0xfe69e045
add eax, 0x877c23f6
cmp eax, 0xe1e46931
ja 0x1400a2660
nop word cs:[rax + rax]
mov eax, dword [0x141dcedc0]
mov ecx, dword [0x141dcedc4]
lea esi, [rax + rcx]
add esi, 0x5fa21c41
and esi, 0x10719834
xor esi, 0x20a3f95
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp esi, 0x3651cc3d
ja 0x1400a2690
shl r13, 1
test r13, r13
je 0x1400a16f6
mov eax, dword [str._aDuk_]
xor edx, edx
div dword [0x141dcedcc]
and eax, 0x11208110
or eax, 0x6e597629
imul eax, eax, 0x470cbffc
cmp eax, 0x71123ffb
ja 0x1400a28fe
jmp 0x1400a28d7
mov edx, dword [0x141dced80]
xor edx, dword [0x141dced84]
xor edx, 0xc103884
or edx, 0x6268c279
imul r8, rax, 0x38
mov r9, qword [rcx + r8 + 0x198]
mov qword [r11 + 0x30], r9
movups xmm0, xmmword [rcx + r8 + 0x168]
movups xmm1, xmmword [rcx + r8 + 0x178]
movups xmm2, xmmword [rcx + r8 + 0x188]
movups xmmword [r11 + 0x20], xmm2
movups xmmword [r11 + 0x10], xmm1
movups xmmword [r11], xmm0
mov r9, qword [r12 + 0x30]
mov qword [rcx + r8 + 0x198], r9
mov r9, rax
shl r9, 5
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [rcx + r8 + 0x188], xmm2
movups xmmword [rcx + r8 + 0x178], xmm1
movups xmmword [rcx + r8 + 0x168], xmm0
movups xmm0, xmmword [rcx + r9]
movups xmm1, xmmword [rcx + r9 + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rcx + r9], xmm0
movups xmmword [rcx + r9 + 0x10], xmm1
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmm2, xmmword [r11 + 0x20]
movups xmm3, xmmword [r11 + 0x30]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x30], xmm3
movups xmm0, xmmword [r11 + 0x40]
movups xmmword [rdi + 0x40], xmm0
mov r8, qword [r11 + 0x50]
mov qword [rdi + 0x50], r8
cmp edx, 0x91cdb875
jne 0x1400a2450
imul rdx, rax, 0x38
mov r8, rax
shl r8, 5
mov r9, qword [rcx + rdx + 0x198]
mov qword [r11 + 0x30], r9
movups xmm0, xmmword [rcx + rdx + 0x168]
movups xmm1, xmmword [rcx + rdx + 0x178]
movups xmm2, xmmword [rcx + rdx + 0x188]
movups xmmword [r11 + 0x20], xmm2
movups xmmword [r11 + 0x10], xmm1
movups xmmword [r11], xmm0
mov r9, qword [r12 + 0x30]
mov qword [rcx + rdx + 0x198], r9
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [rcx + rdx + 0x188], xmm2
movups xmmword [rcx + rdx + 0x178], xmm1
movups xmmword [rcx + rdx + 0x168], xmm0
movups xmm0, xmmword [rcx + r8]
movups xmm1, xmmword [rcx + r8 + 0x10]
movups xmmword [r10 + 0x10], xmm1
movups xmmword [r10], xmm0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rcx + r8], xmm0
movups xmmword [rcx + r8 + 0x10], xmm1
movups xmm0, xmmword [r11]
movups xmm1, xmmword [r11 + 0x10]
movups xmm2, xmmword [r11 + 0x20]
movups xmm3, xmmword [r11 + 0x30]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x30], xmm3
movups xmm0, xmmword [r11 + 0x40]
movups xmmword [rdi + 0x40], xmm0
mov rdx, qword [r11 + 0x50]
mov qword [rdi + 0x50], rdx
jmp 0x1400a2710
mov eax, dword [0x141dcedd0]
xor edx, edx
div dword [0x141dcedd4]
and eax, 0x68fd9acf
imul eax, eax, 0xe477ff30
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x1b0c7856
jbe 0x1400a2907
mov rax, qword [0x141dd7fe0]
jmp 0x1400a28d7
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop
mov eax, dword [0x141dcedd8]
or eax, dword [0x141dceddc]
or eax, 0xd41402c4
and eax, 0xd4bc42de
xor eax, 0xcba409b8
cmp eax, 0x934b28ab
ja 0x1400a2920
jmp 0x1400a16f6
mov eax, dword [0x141dcecf0]
or eax, dword [0x141dcecf4]
add eax, 0x3a86939c
or eax, 0x30a4603a
ud2
mov rax, qword [r14]
mov qword [rbp + 0x140], rax
mov rax, qword [r14 + 8]
mov qword [rbp + 0x148], rax
mov rax, qword [r14 + 0x10]
mov qword [rbp + 0x150], rax
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
test rax, rax
je 0x1400aa3e6
mov rsi, rax
mov dword [rax], 0x48544150
add rax, 4
mov r15, qword [rbp + 0x160]
mov qword [r15], rsi
mov qword [r15 + 8], rax
mov word [r15 + 0x10], 0
mov rdi, qword [rbp + 0xa8]
add rdi, 0x20
nop word cs:[rax + rax]
mov ebx, dword [0x141dcede0]
and ebx, dword [0x141dcede4]
xor ebx, 0x3fffc210
add ebx, 0xbbb6f9b8
and ebx, 0x3c607ade
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
call fcn.1400ab880
add rsp, 0x20
cmp ebx, 0x41737b3
jae 0x1400a2a5e
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
call fcn.1400ab880
add rsp, 0x20
jmp 0x1400a2a10
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0x28]
mov qword [rbp + 0x200], rax
cmp qword [rbp + 0x140], 0
je 0x1400a2ca6
nop
mov eax, dword [0x141dcede8]
xor eax, dword [0x141dcedec]
shr eax, 3
imul rax, rax, 0x3137bf23
shr rax, 0x39
or eax, 0x5f6ffcac
cmp eax, 0xf2e58319
ja 0x1400a2a80
mov rax, qword [rbp + 0xa8]
mov r14, qword [rax + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dcedf0]
xor eax, dword [0x141dcedf4]
and eax, 0xd006d8e8
imul eax, eax, 0x7b184129
cmp eax, 0xbcb9ee79
jb 0x1400a2ac0
xor eax, eax
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x148]
mov qword [rbp + 0x1f8], rax
mov r8, qword [rbp + 0x140]
nop dword [rax]
mov eax, dword [0x141dcedf8]
xor edx, edx
div dword [0x141dcedfc]
xor eax, 0x4c0bd41d
add eax, 0xa5012d58
xor eax, 0x924a3a8a
cmp eax, 0x99266be4
ja 0x1400a2b00
lea rcx, [r8 + 0x168]
movzx eax, word [r8 + 0x3d2]
mov qword [rbp + 0x1d0], rax
imul rax, rax, 0x38
mov qword [rbp + 0x1f0], r8
lea r15, [r8 + rax]
add r15, 0x168
xor r13d, r13d
nop word cs:[rax + rax]
mov r12, r13
nop word cs:[rax + rax]
mov eax, dword [0x141dcee00]
sub eax, dword [0x141dcee04]
xor eax, 0x90284282
or eax, 0x6d873551
add eax, 0xf520c735
cmp eax, 0x69f6432a
jb 0x1400a2b70
cmp rcx, r15
mov r13, qword [rbp + 0x1e8]
je 0x1400a2c1a
nop
mov eax, dword [0x141dcee08]
xor edx, edx
div dword [0x141dcee0c]
or eax, 0xb0002c02
and eax, 0xb3246c12
imul eax, eax, 0xe14be8c3
cmp eax, 0x94d47074
jb 0x1400a2ba0
lea rbx, [rcx + 0x38]
lea r13, [r12 + 1]
mov r8, qword [rcx + 0x28]
mov r9d, dword [rcx + 0x30]
sub rsp, 0x30
mov dword [rsp + 0x20], 1
mov rcx, qword [rbp + 0x200]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
add rsp, 0x30
mov rcx, rbx
cmp eax, 3
je 0x1400a2b60
cmp eax, 1
jne 0x1400a2c71
mov rcx, r12
mov r13, qword [rbp + 0x1e8]
mov rax, qword [rbp + 0x1f8]
jmp 0x1400a2c28
mov rax, qword [rbp + 0x1f8]
mov rcx, qword [rbp + 0x1d0]
sub rax, 1
jb 0x1400a2caf
mov qword [rbp + 0x1f8], rax
nop dword [rax]
mov eax, dword [0x141dcee10]
add eax, dword [0x141dcee14]
or eax, 0xb7f4b920
xor eax, 0x976ef7b2
cmp eax, 0xb5567ae6
ja 0x1400a2c40
mov r8, qword [rbp + 0x1f0]
mov r8, qword [r8 + rcx*8 + 0x3d8]
jmp 0x1400a2b00
cmp eax, 2
mov r13, qword [rbp + 0x1e8]
jne 0x1400a7a92
shl r12, 5
mov rcx, qword [rbp + 0x1f0]
mov rax, qword [rcx + r12 + 8]
mov qword [rbp + 0x208], rax
mov rax, qword [rcx + r12 + 0x10]
mov qword [rbp + 0x1f0], rax
jmp 0x1400a2caf
xor eax, eax
mov qword [rbp + 0x208], rax
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dcee18]
sub eax, dword [0x141dcee1c]
imul ebx, eax, 0x2acfaede
add ebx, 0xb26d1fdb
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
cmp ebx, 0xb3adc3e2
jbe 0x1400a2d10
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
jmp 0x1400a2cc0
cmp qword [rdi], 0
je 0x1400a2d34
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [rbp + 0x1e0]
mov r14, qword [rbp + 0x20]
nop
mov eax, dword [0x141dcee20]
add eax, dword [0x141dcee24]
and eax, 0xc8054111
imul eax, eax, 0x110384e
cmp eax, 0x77e1c33d
ja 0x1400a2d40
mov rax, qword [rbp + 0x188]
mov r15, qword [rax + 0x10]
lea rbx, [0x141db6730]
test r15, r15
je 0x1400a2e00
mov r12, qword [rax + 8]
cmp r15, 4
jae 0x1400a2d90
lea rax, [0x1400b01d0]
jmp 0x1400a2de6
mov eax, dword [0x141dcee28]
xor edx, edx
div dword [0x141dcee2c]
imul ecx, eax, 0xe1f445f3
or ecx, 0x7c7cdb76
add ecx, 0x10c333a0
mov edx, dword [r12]
bswap edx
xor eax, eax
cmp edx, 0x5c5c3f5c
setb al
cmp edx, 0x5c5c3f5d
adc eax, 0xffffffff
cmp ecx, 0x1a67a0bf
ja 0x1400a2d90
test eax, eax
lea rcx, [0x1400b01a0]
lea rax, [0x1400b01d0]
cmove rax, rcx
movzx esi, byte [r15 + r12 - 1]
sub rsp, 0x20
mov ecx, esi
call rax
add rsp, 0x20
test al, al
je 0x1400a2eb8
mov rcx, qword [rbp + 0x108]
nop
mov eax, dword [0x141dcee30]
imul eax, dword [0x141dcee34]
imul eax, eax, 0x3fa40949
xor eax, 0x93fa9efc
add eax, 0x5345fd50
cmp eax, 0xcea68bf5
jb 0x1400a2ec0
cmp r15, 3
mov qword [rbp + 0x160], rcx
jbe 0x1400a3018
nop word cs:[rax + rax]
mov eax, dword [0x141dcee98]
xor edx, edx
div dword [0x141dcee9c]
imul edx, eax, 0x6fa6ea31
add edx, 0x8cc6e51f
movzx eax, byte [r15 + r12 - 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
cmp edx, 0xc1e2f57d
jb 0x1400a2f00
shl cl, 5
or cl, al
cmp cl, 0x2e
jne 0x1400a3072
movzx eax, byte [r12 + r15 - 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x1400a3072
movzx ecx, byte [r12 + r15 - 2]
lea r8d, [rcx - 0x41]
nop word cs:[rax + rax]
mov eax, dword [0x141dceea0]
xor edx, edx
div dword [0x141dceea4]
imul rdx, rax, 0x286728e3
shr rdx, 0x3c
add edx, 0xe35b9f72
cmp r8b, 0x1a
setb al
cmp edx, 0x39b67954
jb 0x1400a2f70
shl al, 5
or al, cl
nop word cs:[rax + rax]
mov ecx, dword [0x141dceea8]
and ecx, dword [0x141dceeac]
imul ecx, ecx, 0xb365da52
and ecx, 0x7e6ce658
add ecx, 0xe9e89ab9
cmp ecx, 0x8fdaa26f
jb 0x1400a2fb0
cmp al, 0x78
jne 0x1400a3072
lea eax, [rsi - 0x41]
cmp al, 0x1a
setb al
shl al, 5
or al, sil
nop dword [rax]
mov ecx, dword [0x141dceeb0]
imul ecx, dword [0x141dceeb4]
and ecx, 0x99b006f8
imul edx, ecx, 0x5c32bfbd
cmp al, 0x65
sete cl
cmp edx, 0x83a01a9c
jb 0x1400a2ff0
jmp 0x1400a3074
lea rax, [r12 + r15]
nop dword [rax]
mov ecx, dword [0x141dcee38]
or ecx, dword [0x141dcee3c]
imul ecx, ecx, 0x382018d8
cmp ecx, 0x80d583e8
je 0x1400a3020
mov rcx, r12
mov rsi, qword [rbp + 0x1f0]
nop word cs:[rax + rax]
cmp rcx, rax
je 0x1400a33a9
movzx edx, byte [rcx]
cmp edx, 0x2f
je 0x1400a3120
inc rcx
cmp edx, 0x5c
jne 0x1400a3050
jmp 0x1400a3120
xor ecx, ecx
lea r8, [r12 + r15]
mov r9, r12
mov rsi, qword [rbp + 0x1f0]
nop word cs:[rax + rax]
cmp r9, r8
je 0x1400a33a9
nop dword [rax]
mov eax, dword [0x141dceeb8]
xor edx, edx
div dword [0x141dceebc]
add eax, 0x6c59041d
cmp eax, 0x62979c8e
jb 0x1400a30a0
movzx eax, byte [r9]
cmp eax, 0x5c
je 0x1400a30cb
inc r9
cmp eax, 0x2f
jne 0x1400a3090
test cl, cl
je 0x1400a3120
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
mov rdx, r12
mov r8, r15
mov rsi, rcx
call fcn.14008f360
add rsp, 0x20
mov rcx, qword [rsi]
mov rax, qword [rsi + 8]
movabs rdx, 0x8000000000000000
cmp rcx, rdx
jne 0x1400a371a
mov r15, r14
mov qword [r14 + 8], rax
mov qword [r14], rdx
mov r12, qword [rbp + 0x1c0]
jmp 0x1400a4470
mov eax, dword [0x141dcee78]
sub eax, dword [0x141dcee7c]
xor eax, 0x343bc402
add eax, 0xab952cd3
cmp eax, 0xf0e357a7
ja 0x1400a3120
test r15, r15
js 0x1400a7ac6
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call fcn.1400beea0
add rsp, 0x20
test rax, rax
je 0x1400a31bf
mov rsi, rax
nop word [rax + rax]
mov eax, dword [0x141dcee88]
or eax, dword [0x141dcee8c]
xor eax, 0xecb2a82a
imul edi, eax, 0xd367f65d
sub rsp, 0x20
mov rcx, rsi
mov rdx, r12
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp edi, 0xbe1d02e3
jbe 0x1400a31ea
sub rsp, 0x20
mov rcx, rsi
mov rdx, r12
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
jmp 0x1400a3170
mov eax, dword [0x141dcee80]
mov ecx, dword [0x141dcee84]
add eax, ecx
add eax, 0xf3c78ac
or eax, 0x99c02afe
and eax, 0xbde03efe
ud2
lea rdi, [0x141db6748]
mov r12, qword [rbp - 0x70]
nop word cs:[rax + rax]
mov eax, dword [0x141dcee90]
sub eax, dword [0x141dcee94]
imul rax, rax, 0x1fa7d097
shr rax, 0x3c
imul ebx, eax, 0x4862349f
mov qword [r12], r15
mov qword [r12 + 8], rsi
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0
sub rsp, 0x20
mov r8d, 4
mov rcx, r12
mov rdx, rdi
call fcn.140090ae0
add rsp, 0x20
cmp ebx, 0xdfba752d
je 0x1400a3200
mov rbx, qword [r12]
mov rsi, qword [r12 + 8]
mov rdi, qword [r12 + 0x10]
sub rsp, 0x20
mov r15, qword [rbp - 0x78]
mov rcx, r15
mov rdx, rsi
mov r8, rdi
call fcn.1400b0210
add rsp, 0x20
movabs rax, 0x8000000000000000
cmp qword [r15], rax
mov r12, qword [rbp + 0x1c0]
jne 0x1400a35eb
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.14009fda0
add rsp, 0x20
nop word [rax + rax]
mov ecx, dword [0x141dceee0]
or ecx, dword [0x141dceee4]
and ecx, 0x765b2b21
add ecx, 0xeadbf87e
cmp ecx, 0x5177d6ef
ja 0x1400a32b0
test rax, rax
mov r15, qword [rbp - 0x60]
je 0x1400a42bb
nop dword [rax]
mov ecx, dword [0x141dceee8]
imul ecx, dword [0x141dceeec]
xor ecx, 0x48
or ecx, 0xfffffba3
cmp ecx, 0x8cb14301
jb 0x1400a32e0
cmp rdx, 2
jne 0x1400a3320
movzx ecx, word [rax]
cmp ecx, 0x2e2e
jne 0x1400a3320
mov r8d, 2
xor ecx, ecx
jmp 0x1400a4256
mov ecx, dword [0x141dceef0]
imul ecx, dword [0x141dceef4]
and ecx, 0xad403cdb
imul ecx, ecx, 0xf0b93318
xor ecx, 0xeb88a3de
cmp ecx, 0x3b87780d
ja 0x1400a3320
mov r8, rdx
nop word [rax + rax]
test r8, r8
je 0x1400a3779
mov r9, r8
dec r8
cmp byte [rax + r9 - 1], 0x2e
jne 0x1400a3350
test r8, r8
je 0x1400a4251
sub rdx, r9
mov rcx, rax
add rcx, r9
jmp 0x1400a4256
ud2
mov eax, 0xcbcbaecb
lea rcx, [r12 + r15]
nop word cs:[rax + rax]
mov edx, dword [0x141dcee40]
or edx, dword [0x141dcee44]
and edx, 0xcd9468b4
imul rdx, rax
shr rdx, 0x3b
add edx, 0xf82d82b0
cmp edx, 0x6c56d8b5
jb 0x1400a33c0
xor edx, edx
mov r8d, 0xd16e585d
lea rbx, [0x141db66f8]
mov r10, r12
jmp 0x1400a340c
mov eax, dword [0x141dceec8]
xor eax, dword [0x141dceecc]
imul eax, eax, 0x2f2b36b7
cmp eax, 0x175a72b9
jne 0x1400a3617
mov rax, qword [r15 + 0x10]
mov rcx, r14
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [r14], xmm0
mov rax, qword [r15 + 0x10]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [r15]
mov r15, r14
movups xmmword [r14], xmm0
mov rdi, qword [rbp + 0x1e0]
add byte [rsi + 0x66], ah
nop word cs:[rax + rax]
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
ud2
mov edx, dword [0x141dceec0]
imul edx, dword [0x141dceec4]
imul rdx, rdx, 0x4f0c4397
shr rdx, 0x3d
add edx, 0x407f8c9
cmp edx, 0x25e68021
mov r12, qword [rbp + 0x1c0]
mov rdx, qword [rbp - 0x40]
mov r15, r14
jbe 0x1400a3755
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov r8, qword [rsi + 0x10]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], r8
sub rsp, 0x20
mov rcx, r15
call fcn.1400b0710
add rsp, 0x20
jmp 0x1400a4470
mov rcx, rax
mov r8, rdx
xor eax, eax
jmp 0x1400a4256
xor ecx, ecx
ud2
ud2
ud2
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
ud2
mov eax, dword [0x141dcecb0]
xor eax, dword [str._f11]
or eax, 0x4c9bdbb5
imul eax, eax, 0x5f2f796a
add eax, 0x2c4c3fe4
cmp eax, 0x90cd6732
jbe 0x1400a7ac6
ud2
mov eax, dword [0x141dcebe0]
add eax, dword [0x141dcebe4]
imul eax, eax, 0xb751fb6b
add eax, 0x45518fc9
cmp eax, 0xda47901a
jbe 0x1400a7af0
ud2
mov eax, dword [0x141dcebe8]
and eax, dword [0x141dcebec]
imul eax, eax, 0x5d1a696b
ud2
mov eax, dword [0x141dcec08]
and eax, dword [0x141dcec0c]
cmp eax, 0x9461772e
je 0x1400aa414
jmp 0x1400aa3e8
sub rsp, 0x20
call sub.KERNEL32.dll_GetLastError
add rsp, 0x20
mov eax, dword [str.o_I_]
and eax, dword [0x141dcebac]
mov eax, dword [0x141dcec10]
mov ecx, dword [0x141dcec14]
add eax, ecx
add eax, 0x23f44cb3
imul rax, rax, 0x56ebe3d3
shr rax, 0x3e
or eax, 0xefcc2ac2
ud2
ud2