Function at 0x14026553c
Capabilities:
Encode data using xor
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb48]
sub rsp, 0xc20
mov rax, qword [0x140387a48]
xor rax, rsp
mov qword [rbp + 0xb10], rax
xor edx, edx
mov qword [rbp + 0xd0], rcx
mov r15, rcx
lea rcx, [rbp + 0x850]
lea r8d, [rdx + 0x48]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rcx, qword [r15 + 0x28]
lea rdx, [rbp + 0x850]
call qword [0x1403ad518]
nop dword [rax + rax]
xor esi, esi
mov qword [rbp + 0x18], rax
mov rbx, rax
test rax, rax
jne 0x1402655c4
call fcn.140020b4c
mov r14d, eax
test eax, eax
js 0x1402692c7
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x98], rax
movups xmmword [rbp + 0x6d8], xmm0
mov eax, dword [r15 + 0x84]
neg eax
sbb ecx, ecx
not ecx
and ecx, 0xb26720
call qword [0x1403ad430]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x140265607
call fcn.140020b4c
test eax, eax
js 0x140265662
mov ecx, 0x4e
call qword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_GetSystemMetrics]
nop dword [rax + rax]
mov ecx, 0x4f
mov dword [rbp + 0x6e0], eax
call qword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_GetSystemMetrics]
nop dword [rax + rax]
mov r8, rdi
lea rdx, [rbp + 0x6d8]
mov rcx, rbx
mov dword [rbp + 0x6e4], eax
call qword [sym.imp.USER32.dll_FillRect]
nop dword [rax + rax]
test rdi, rdi
je 0x140265662
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
mov rdx, qword [r15 + 0x28]
lea r8, [rbp + 0x98]
mov ebx, 1
xor ecx, ecx
mov r9d, ebx
call qword [0x1403ad6a0]
nop dword [rax + rax]
mov edi, dword [r15 + 0x78]
lea r8d, [rbx + 0x6f]
xor edx, edx
mov dword [rsp + 0x68], edi
lea rcx, [rbp + 0x100]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xorps xmm0, xmm0
mov dword [rbp + 0x10], ebx
xor eax, eax
mov qword [rbp - 0x10], rsi
movups xmmword [rbp + 0x560], xmm0
mov qword [rbp + 0x6a0], rax
movups xmmword [rbp + 0x680], xmm0
mov dword [rbp + 0x6a8], eax
movups xmmword [rbp + 0x690], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rsi
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ebx
jne 0x1402656d3
mov eax, dword [0x140389de8]
or r13, 0xffffffffffffffff
mov r15d, 0x338
lea r12d, [r13 + 5]
mov qword [rbp + 0xa8], r12
test eax, eax
jne 0x140265c6d
mov ecx, r15d
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x64], esi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x80], rsi
call fcn.140091688
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140265bc7
or dword [rsp + 0x60], 0xffffffff
lea rdi, [rax + 7]
mov r11d, dword [rsp + 0x60]
lea r14, [0x140319602]
mov ecx, esi
lea r12d, [r13 + 0x68]
mov r15d, esi
mov ebx, esi
lea esi, [r13 + 2]
movzx eax, byte [r14 - 1]
movzx r10d, byte [r14 - 2]
movzx r9d, byte [r14 + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [r14]
lea r14, [r14 + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [r14 - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [r14 - 5]
or r9d, eax
xor ebx, r10d
movzx eax, byte [r14 - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [r14 - 3]
shl r9d, 8
or r9d, eax
xor r15d, r9d
xor r15d, ebx
xor r15d, 0xac987321
lea eax, [r15 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r15d
rol eax, 0xa
add edx, eax
xor ebx, edx
lea eax, [rbx + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, ebx
rol eax, 2
sub edx, eax
xor r15d, edx
imul edx, r15d, 0x605e
mov eax, r15d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor ebx, edx
mov eax, ebx
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, ebx
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r15d, edx
mov edx, r15d
xor edx, 0xab69605e
sub eax, edx
xor ebx, eax
mov eax, ebx
mov r8d, ebx
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r15d, r8d
mov r8d, 0xab69605e
lea eax, [r15 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r15d
rol eax, 2
add edx, eax
xor ebx, edx
lea eax, [rbx + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, ebx
rol eax, 8
sub edx, eax
xor r15d, edx
mov eax, r15d
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r15d
ror eax, 0xa
xor edx, eax
xor ebx, edx
mov eax, ebx
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, ebx
shr eax, 0xa
xor edx, eax
xor edx, r15d
mov eax, edx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor ebx, eax
lea r15d, [rbx - 0x7f1]
xor r15d, edx
xor r15d, r8d
mov eax, r15d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r15d
shr eax, 2
add edx, eax
xor ebx, edx
lea eax, [rbx - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, ebx
rol eax, 7
add edx, eax
xor r15d, edx
mov eax, r15d
mov r8d, r15d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor ebx, r8d
mov eax, ebx
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, ebx
rol eax, 7
add edx, eax
xor r15d, edx
xor ebx, r15d
xor ebx, 0xac987321
mov eax, ebx
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r15d, edx
lea eax, [r15 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r15d
ror eax, 6
sub edx, eax
xor ebx, edx
lea eax, [rbx - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, ebx
rol eax, 0xe
add edx, eax
xor r15d, edx
lea eax, [r15 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r15d
ror eax, 0xe
sub edx, eax
xor ebx, edx
mov eax, ebx
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, ebx
shr eax, 3
xor edx, eax
xor r15d, edx
mov eax, r15d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r15d
xor r15d, r11d
rol eax, 2
mov r11d, r9d
xor edx, eax
xor edx, ecx
mov ecx, r10d
xor ebx, edx
mov byte [rdi - 4], bl
mov byte [rdi], r15b
lea rdi, [rdi + 8]
ror ebx, 8
mov byte [rdi - 0xd], bl
ror r15d, 8
mov byte [rdi - 9], r15b
ror ebx, 8
mov byte [rdi - 0xe], bl
ror r15d, 8
mov byte [rdi - 0xa], r15b
ror ebx, 8
ror r15d, 8
mov byte [rdi - 0xf], bl
mov byte [rdi - 0xb], r15b
ror r15d, 8
ror ebx, 8
sub r12, rsi
jne 0x14026574e
mov edi, dword [rsp + 0x68]
xor esi, esi
mov r11, qword [rbp - 0x80]
mov eax, esi
mov cl, sil
mov r14d, esi
mov r12d, esi
mov r15d, 0x338
lea ebx, [rsi + 1]
xor cl, byte [rax + r11]
add rax, rbx
cmp rax, r15
jb 0x140265a3e
movzx eax, cl
cmp rax, qword [0x140319938]
je 0x140265a5e
mov r12d, 0xc004d501
jmp 0x140265a6c
mov qword [rbp + 0x58], r11
mov r11, rsi
mov qword [rbp + 0x80], r15
test r11, r11
je 0x140265a79
mov rcx, r11
call fcn.14009447c
test r12d, r12d
js 0x140265bc7
mov rax, qword [rbp + 0x80]
lea r15, [0x14038a340]
mov rbx, qword [rbp + 0x58]
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x60]
mov byte [rax + rbx - 1], sil
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
jmp 0x140265bbc
mov rdx, rbx
mov rax, r13
inc rax
cmp word [rbx + rax*2], si
jne 0x140265ab2
lea rbx, [rbx + rax*2]
mov eax, dword [rsp + 0x64]
lea rcx, [rax + rax*2]
lea r15, [r15 + rcx*8]
xor ecx, ecx
mov r8, r15
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140265bc7
mov rax, qword [r15]
mov ecx, 0x5a4d
mov r14d, esi
cmp word [rax], cx
je 0x140265afc
mov r14d, 0xc000007b
jmp 0x140265b48
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x140265af4
add rcx, qword [r15]
cmp rcx, qword [r15]
jb 0x140265af4
cmp dword [rcx], 0x4550
jne 0x140265af4
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140265b36
mov r14d, 0xc000000d
jmp 0x140265b48
mov rax, qword [rcx + 0x88]
mov qword [r15 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r15 + 8], eax
mov eax, dword [rbx + 2]
mov r12d, esi
add rbx, 6
mov dword [rsp + 0x60], eax
test eax, eax
je 0x140265bac
mov rdx, rbx
mov rax, r13
inc rax
cmp byte [rbx + rax], sil
jne 0x140265b60
inc rbx
add rbx, rax
test r14d, r14d
js 0x140265b97
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140265bcd
mov ecx, dword [rsp + 0x78]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
mov eax, 1
add dword [rsp + 0x78], eax
add r12d, eax
cmp r12d, dword [rsp + 0x60]
jb 0x140265b5a
jmp 0x140265bb1
mov eax, 1
add dword [rsp + 0x64], eax
lea r15, [0x14038a340]
cmp byte [rbx], sil
jne 0x140265aac
jmp 0x140265bcd
mov r14d, 0xc000007a
mov rbx, qword [rbp + 0x58]
test rbx, rbx
je 0x140265bf6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, 4
test r14d, r14d
jns 0x140265c62
lea r15, [0x14038a340]
mov r14d, r12d
mov rbx, r15
lea eax, [r12 - 3]
cmp qword [rbx], rsi
je 0x140265c2c
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rbx, 0x18
sub r14, rax
jne 0x140265c13
xor edx, edx
lea r8d, [r14 + 0x60]
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
lea ebx, [r14 + 1]
jmp 0x140265c75
mov eax, dword [0x140389de8]
mov ebx, 1
add eax, ebx
mov dword [0x140389de8], eax
mov eax, esi
mov dword [rsp + 0x74], esi
xchg dword [0x14038b0f0], eax
xorps xmm0, xmm0
mov qword [rbp + 0x68], rsi
movups xmmword [rbp + 0xb0], xmm0
mov dword [rsp + 0x64], esi
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x20], rsi
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ebx
jne 0x140265c9f
mov eax, dword [0x140389de8]
test eax, eax
jne 0x14026624a
mov ecx, 0x338
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x60], esi
mov dword [rbp - 0x70], esi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x88], rsi
call fcn.140091688
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1402661a8
mov byte [rsp + 0x7c], sil
lea rdi, [rax + 7]
mov r14d, esi
lea rbx, [0x140319602]
mov r12d, esi
mov r15d, esi
mov esi, 0x67
or ecx, 0xffffffff
movzx eax, byte [rbx - 1]
movzx r11d, byte [rbx - 2]
movzx r10d, byte [rbx + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [rbx]
lea rbx, [rbx + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [rbx - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [rbx - 5]
or r10d, eax
xor r15d, r11d
movzx eax, byte [rbx - 4]
mov r9d, r15d
shl r10d, 8
or r10d, eax
movzx eax, byte [rbx - 3]
shl r10d, 8
or r10d, eax
xor r12d, r10d
xor r9d, r12d
xor r9d, 0xac987321
lea eax, [r9 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r9d
rol eax, 0xa
add edx, eax
xor r15d, edx
lea eax, [r15 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r15d
rol eax, 2
sub edx, eax
xor r9d, edx
imul edx, r9d, 0x605e
mov eax, r9d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r15d, edx
mov eax, r15d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r15d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r9d, edx
mov edx, r9d
xor edx, 0xab69605e
sub eax, edx
xor r15d, eax
mov eax, r15d
mov r8d, r15d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r9d, r8d
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r9d
rol eax, 2
add edx, eax
xor r15d, edx
lea eax, [r15 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r15d
rol eax, 8
sub edx, eax
xor r9d, edx
mov eax, r9d
mov r8d, 0xab69605e
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r9d
ror eax, 0xa
xor edx, eax
xor r15d, edx
mov eax, r15d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r15d
shr eax, 0xa
xor edx, eax
xor edx, r9d
mov r9d, 0x605e
mov eax, edx
not eax
ror eax, 5
add eax, r9d
imul eax, eax, 0x7f1
xor r15d, eax
lea r12d, [r15 - 0x7f1]
xor r12d, edx
xor r12d, r8d
mov eax, r12d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r12d
shr eax, 2
add edx, eax
xor r15d, edx
lea eax, [r15 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r15d
rol eax, 7
add edx, eax
xor r12d, edx
mov eax, r12d
mov r8d, r12d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r15d, r8d
mov eax, r15d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r15d
rol eax, 7
add edx, eax
xor r12d, edx
xor r15d, r12d
xor r15d, 0xac987321
mov eax, r15d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r12d, edx
lea eax, [r12 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r12d
ror eax, 6
sub edx, eax
xor r15d, edx
lea eax, [r15 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r15d
rol eax, 0xe
add edx, eax
xor r12d, edx
lea eax, [r12 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r12d
ror eax, 0xe
sub edx, eax
xor r15d, edx
mov eax, r15d
xor eax, r9d
imul edx, eax, 0xab69
mov eax, r15d
shr eax, 3
xor edx, eax
xor r12d, edx
mov eax, r12d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r12d
xor r12d, ecx
rol eax, 2
mov ecx, r10d
xor edx, eax
xor edx, r14d
mov r14d, r11d
xor r15d, edx
mov edx, 1
mov byte [rdi - 4], r15b
mov byte [rdi], r12b
lea rdi, [rdi + 8]
ror r15d, 8
mov byte [rdi - 0xd], r15b
ror r12d, 8
mov byte [rdi - 9], r12b
ror r15d, 8
mov byte [rdi - 0xe], r15b
ror r12d, 8
mov byte [rdi - 0xa], r12b
ror r15d, 8
ror r12d, 8
mov byte [rdi - 0xf], r15b
mov byte [rdi - 0xb], r12b
ror r12d, 8
ror r15d, 8
sub rsi, rdx
jne 0x140265d07
mov cl, byte [rsp + 0x7c]
mov rax, rsi
mov edi, dword [rsp + 0x68]
mov r8d, 0x338
mov r14d, dword [rsp + 0x60]
mov rbx, qword [rbp - 0x80]
xor cl, byte [rbx + rax]
add rax, rdx
cmp rax, r8
jb 0x14026601f
movzx eax, cl
cmp rax, qword [0x140319938]
je 0x14026603e
mov r15d, 0xc004d501
jmp 0x14026604f
mov qword [rbp + 0x60], rbx
mov r15d, r14d
mov rbx, rsi
mov qword [rbp + 0x88], r8
test rbx, rbx
je 0x14026605c
mov rcx, rbx
call fcn.14009447c
test r15d, r15d
js 0x1402661a8
mov rax, qword [rbp + 0x88]
lea r15, [0x14038a340]
mov rbx, qword [rbp + 0x60]
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x60]
mov byte [rax + rbx - 1], sil
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
jmp 0x14026619d
mov rdx, rbx
mov rax, r13
inc rax
cmp word [rbx + rax*2], si
jne 0x140266095
lea rbx, [rbx + rax*2]
mov eax, dword [rbp - 0x70]
lea rcx, [rax + rax*2]
lea r15, [r15 + rcx*8]
xor ecx, ecx
mov r8, r15
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x1402661a8
mov rax, qword [r15]
mov ecx, 0x5a4d
mov r14d, esi
cmp word [rax], cx
je 0x1402660de
mov r14d, 0xc000007b
jmp 0x14026612a
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x1402660d6
add rcx, qword [r15]
cmp rcx, qword [r15]
jb 0x1402660d6
cmp dword [rcx], 0x4550
jne 0x1402660d6
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140266118
mov r14d, 0xc000000d
jmp 0x14026612a
mov rax, qword [rcx + 0x88]
mov qword [r15 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r15 + 8], eax
mov eax, dword [rbx + 2]
mov r12d, esi
add rbx, 6
mov dword [rsp + 0x60], eax
test eax, eax
je 0x14026618e
mov rdx, rbx
mov rax, r13
inc rax
cmp byte [rbx + rax], sil
jne 0x140266142
inc rbx
add rbx, rax
test r14d, r14d
js 0x140266179
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1402661ae
mov ecx, dword [rsp + 0x78]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
mov eax, 1
add dword [rsp + 0x78], eax
add r12d, eax
cmp r12d, dword [rsp + 0x60]
jb 0x14026613c
jmp 0x140266193
mov eax, 1
add dword [rbp - 0x70], eax
lea r15, [0x14038a340]
cmp byte [rbx], sil
jne 0x14026608f
jmp 0x1402661ae
mov r14d, 0xc000007a
mov rbx, qword [rbp + 0x60]
test rbx, rbx
je 0x1402661d7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, 4
test r14d, r14d
jns 0x14026623f
lea r15, [0x14038a340]
mov r14d, r12d
mov rbx, r15
lea eax, [r12 - 3]
cmp qword [rbx], rsi
je 0x14026620d
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rbx, 0x18
sub r14, rax
jne 0x1402661f4
xor edx, edx
lea r8d, [r14 + 0x60]
mov rcx, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x140266252
mov eax, dword [0x140389de8]
mov ebx, 1
add eax, ebx
mov dword [0x140389de8], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayDestroy
mov r13d, edi
and r13d, ecx
mov eax, esi
xchg dword [0x14038b0f0], eax
mov eax, edi
mov dword [rbp - 0x70], r13d
shr eax, 4
xorps xmm0, xmm0
and ax, cx
xor edx, edx
mov word [rbp + 0xa50], ax
mov r8d, 0x403
mov eax, edi
shr edi, 0xc
shr eax, 8
and di, cx
and ax, cx
mov word [rbp + 0xa54], di
mov word [rbp + 0xa52], ax
xor ecx, ecx
mov rax, qword [0x1403860f8]
movups xmmword [rbp + 0x560], xmm0
call qword [case.0x14006b68f.0]
mov dword [rbp - 0x30], 0xffffff
mov ebx, 0x80004005
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x1402662fb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
mov r15d, 0x80070000
test eax, eax
jle 0x1402662ea
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x1402676b3
mov r14d, ebx
jmp 0x1402676b3
mov rax, qword [0x1403860a0]
lea r9, [rbp - 0x18]
xor r8d, r8d
mov qword [rbp + 0x90], rsi
lea rdx, [rbp - 0x28]
mov qword [rbp + 0x50], rsi
mov rdi, rsi
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0x20], rsi
mov r14d, esi
lea ecx, [r8 + 8]
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x28], rsi
mov dword [rsp + 0x70], esi
mov dword [rbp - 0x18], esi
call qword [case.0x14006b68f.0]
mov r15d, 0x80070000
test eax, eax
jne 0x140266377
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266366
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x140266489
mov r14d, ebx
jmp 0x140266489
mov ecx, dword [rbp - 0x18]
add rcx, rcx
call fcn.140091688
lea rcx, [rbp + 0x48]
mov rbx, rax
call fcn.1401fc794
test rbx, rbx
jne 0x1402663a2
mov qword [rbp + 0x48], rsi
mov r14d, 0x8007000e
jmp 0x140266489
mov ecx, dword [rbp - 0x28]
inc ecx
mov qword [rbp + 0x48], rbx
shl rcx, 2
call fcn.140091688
lea rcx, [rbp + 0x28]
mov r12, rax
call fcn.1401fc794
test r12, r12
jne 0x1402663d0
mov r14d, 0x8007000e
jmp 0x140266485
mov rax, qword [0x1403860a0]
lea r9, [rbp - 0x18]
mov r8, rbx
mov qword [rbp + 0x28], r12
lea rdx, [rbp - 0x28]
mov ecx, 8
call qword [case.0x14006b68f.0]
test eax, eax
jne 0x14026641c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x14026640f
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x140266489
mov r14d, 0x80004005
jmp 0x140266489
mov rdi, r12
cmp dword [rbp - 0x28], esi
jbe 0x14026646c
mov r13d, esi
mov r14d, 1
mov rax, qword [0x1403860b0]
xor edx, edx
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov dword [rdi], eax
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], si
jne 0x140266445
lea rbx, [rbx + rax*2]
add rdi, 4
add rbx, 2
add r13d, r14d
cmp r13d, dword [rbp - 0x28]
jb 0x14026642d
mov r14d, dword [rsp + 0x70]
mov r13d, dword [rbp - 0x70]
mov dword [rdi], 0x409
mov rdi, r12
mov eax, dword [rbp - 0x28]
inc eax
mov qword [rbp + 0x90], r12
mov dword [rsp + 0x68], eax
mov qword [rbp + 0x28], rsi
lea rcx, [rbp + 0x28]
call fcn.1401fc794
lea rcx, [rbp + 0x48]
call fcn.1401fc794
test r14d, r14d
js 0x140266bdc
lea r11, [0x140339fa0]
mov r12d, esi
mov r9d, esi
mov dword [rsp + 0x6c], esi
cmp dword [rsp + 0x68], esi
jbe 0x1402664f7
mov r8, rsi
mov r10d, 1
mov ecx, esi
mov rdx, r11
mov eax, dword [rdx]
cmp dword [r8 + rdi], eax
je 0x1402664f0
mov eax, 4
add ecx, r10d
add rdx, rax
cmp ecx, 0x26
jb 0x1402664c9
add r9d, r10d
add r8, rax
cmp r9d, dword [rsp + 0x68]
jb 0x1402664c4
jmp 0x1402664f7
mov r12d, ecx
mov dword [rsp + 0x6c], ecx
mov rax, qword [0x1403860a8]
lea rdx, [rbp + 0xa60]
xor r9d, r9d
mov r14d, r12d
mov dword [rbp - 0x2c], esi
mov ecx, dword [r11 + r14*4]
lea r8d, [r9 + 0x55]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140266560
mov rax, qword [0x140386090]
lea r8, [rbp + 0x830]
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp + 0xa60]
lea edx, [r9 + 0x48]
call qword [case.0x14006b68f.0]
mov r8d, 1
test eax, eax
jle 0x140266566
mov edi, dword [rbp + 0x83c]
shr edi, 0x1b
and edi, r8d
mov dword [rbp - 0x2c], edi
jmp 0x140266566
mov r8d, 1
lea rcx, str.Segoe_UI_Light
mov edi, SafeArrayUnaccessData
lea rdx, [rbp + 0x9b0]
or rbx, 0xffffffffffffffff
mov qword [rdx], rcx
mov rax, rbx
inc rax
cmp word [rcx + rax*2], si
jne 0x140266583
lea rcx, [rcx + rax*2]
add rdx, 8
add rcx, 2
sub rdi, r8
jne 0x14026657d
lea rcx, [r14 + r14*2]
lea rdx, [0x140321be0]
movzx eax, byte [rcx + rdx]
mov rax, qword [rbp + rax*8 + 0x9b0]
mov qword [rbp - 0x38], rax
movzx eax, byte [rcx + rdx + 1]
mov rax, qword [rbp + rax*8 + 0x9b0]
mov qword [rbp - 0x78], rax
movzx eax, byte [rcx + rdx + 2]
mov rax, qword [rbp + rax*8 + 0x9b0]
mov qword [rbp - 0x20], rax
mov ecx, 0x1c90
mov dword [rsp + 0x70], esi
call fcn.140091688
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1402665fc
mov r14d, 0x8007000e
jmp 0x140266bdc
mov r12d, esi
lea r15, [rax + 7]
mov r13d, esi
lea r10, [0x14033a042]
mov r11d, esi
or r14d, 0xffffffff
mov esi, 0x392
movzx eax, byte [r10 - 1]
movzx r9d, byte [r10 - 2]
movzx r8d, byte [r10 + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [r10]
lea r10, [r10 + 8]
shl r9d, 8
or r9d, eax
movzx eax, byte [r10 - 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [r10 - 5]
or r8d, eax
xor r11d, r9d
movzx eax, byte [r10 - 4]
mov edi, r11d
shl r8d, 8
or r8d, eax
movzx eax, byte [r10 - 3]
shl r8d, 8
or r8d, eax
xor r13d, r8d
xor edi, r13d
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
imul ecx, eax, 0x137f
mov eax, edi
rol eax, 0xa
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
imul ecx, eax, 0xab69
mov eax, r11d
rol eax, 2
sub ecx, eax
xor edi, ecx
imul ecx, edi, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 2
sub ecx, eax
mov eax, 0x7f1137f
xor edi, ecx
mov ecx, edi
xor ecx, 0xab69605e
sub eax, ecx
xor r11d, eax
mov eax, r11d
mov edx, r11d
xor eax, 0x137f
ror edx, 6
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
imul ecx, eax, 0x605e
mov eax, edi
rol eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 8
sub ecx, eax
xor edi, ecx
mov eax, edi
mov edx, 0xab69605e
xor eax, edx
ror eax, 0xc
imul ecx, eax, 0x137f
mov eax, edi
ror eax, 0xa
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov edi, 0x605e
mov eax, ecx
not eax
ror eax, 5
add eax, edi
imul eax, eax, 0x7f1
xor r11d, eax
lea r13d, [r11 - 0x7f1]
xor r13d, ecx
xor r13d, edx
mov eax, r13d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r13d
shr eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
imul ecx, eax, 0xab69
mov eax, r11d
rol eax, 7
add ecx, eax
xor r13d, ecx
mov eax, r13d
mov edx, r13d
xor eax, 0x137f
ror edx, 9
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 7
add ecx, eax
xor r13d, ecx
xor r11d, r13d
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r13d, ecx
lea eax, [r13 - 0x7f1137f]
ror eax, 1
imul ecx, eax, 0x605e
mov eax, r13d
ror eax, 6
sub ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 3
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 0xe
add ecx, eax
xor r13d, ecx
lea eax, [r13 - 0x54969fa2]
rol eax, 0xf
imul ecx, eax, 0x137f
mov eax, r13d
ror eax, 0xe
sub ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, edi
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor ecx, eax
xor r13d, ecx
mov eax, r13d
xor eax, 0x7f1137f
rol eax, 4
imul ecx, eax, 0x605e
mov eax, r13d
xor r13d, r14d
rol eax, 2
mov r14d, r8d
xor ecx, eax
xor ecx, r12d
mov r12d, r9d
xor r11d, ecx
mov r9d, 1
mov byte [r15 - 4], r11b
mov byte [r15], r13b
lea r15, [r15 + 8]
ror r11d, 8
mov byte [r15 - 0xd], r11b
ror r13d, 8
mov byte [r15 - 9], r13b
ror r11d, 8
mov byte [r15 - 0xe], r11b
ror r13d, 8
mov byte [r15 - 0xa], r13b
ror r11d, 8
ror r13d, 8
mov byte [r15 - 0xf], r11b
mov byte [r15 - 0xb], r13b
ror r13d, 8
ror r11d, 8
sub rsi, r9
jne 0x140266619
mov r14d, dword [rsp + 0x70]
mov rax, rsi
mov r13d, dword [rbp - 0x70]
xorps xmm1, xmm1
mov r10, qword [rbp - 0x80]
mov r15d, 0x80070000
mov r12d, dword [rsp + 0x6c]
mov ecx, 0x1c90
movdqu xmm0, xmmword [rax + r10]
add rax, 0x10
pxor xmm0, xmm1
movdqa xmm1, xmm0
cmp rax, rcx
jb 0x140266927
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
movzx eax, al
cmp rax, qword [0x14033bcd0]
je 0x140266986
mov r14d, 0xc004d501
jmp 0x140266994
mov qword [rbp + 0x50], r10
mov r10, rsi
mov qword [rbp + 0xa0], rcx
test r10, r10
je 0x1402669a7
mov rcx, r10
call fcn.14009447c
mov r9d, 1
test r14d, r14d
js 0x140266bdc
mov rdx, qword [rbp + 0x50]
lea rdi, [rbp + 0x980]
mov r8d, 6
mov ecx, esi
cmp r12d, ecx
jne 0x1402669cb
mov qword [rdi], rdx
mov rax, rbx
inc rax
cmp byte [rdx + rax], sil
jne 0x1402669ce
inc rdx
add ecx, r9d
add rdx, rax
cmp ecx, 0x26
jb 0x1402669c3
add rdi, 8
sub r8, r9
jne 0x1402669c1
lea ecx, [r8 + 0x18]
call fcn.140091688
lea rcx, [rbp + 0x20]
mov rdi, rax
call fcn.1401fc794
mov r12d, 3
lea r10d, [r12 - 2]
test rdi, rdi
jne 0x140266a25
mov rbx, rsi
mov r14d, 0x8007000e
mov qword [rbp + 0x20], rbx
jmp 0x140266b9f
xorps xmm0, xmm0
mov dword [rsp + 0x68], esi
mov rbx, rdi
lea rcx, [rbp + 0xa50]
xor eax, eax
mov qword [rbp + 0x20], rbx
mov rdx, rdi
mov qword [rbp - 0x60], rcx
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov r8d, esi
mov qword [rbp - 0x68], rdx
movzx r9d, word [rcx]
lea rcx, [0x14033bcd8]
mov eax, esi
cmp r9w, word [rcx]
je 0x140266a75
add eax, r10d
add rcx, 2
cmp eax, 6
jb 0x140266a5e
jmp 0x140266b22
mov r12, qword [rbp + rax*8 + 0x980]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [r12 + rcx], sil
jne 0x140266a81
mov rax, qword [0x1403860c0]
lea r9d, [r10 + rcx]
mov ecx, 0xfde9
mov dword [rsp + 0x28], esi
mov r8, r12
mov qword [rsp + 0x20], rsi
xor edx, edx
call qword [case.0x14006b68f.0]
mov dword [rsp + 0x60], eax
test eax, eax
je 0x140266b70
movsxd rcx, eax
add rcx, rcx
call fcn.140091688
mov rcx, qword [rbp - 0x68]
mov qword [rcx], rax
test rax, rax
je 0x140266b5d
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [r12 + rcx], sil
jne 0x140266ad9
mov edx, dword [rsp + 0x60]
lea r9d, [rcx + 1]
mov dword [rsp + 0x28], edx
mov r8, r12
mov qword [rsp + 0x20], rax
xor edx, edx
mov rax, qword [0x1403860c0]
mov ecx, 0xfde9
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140266b70
mov rdx, qword [rbp - 0x68]
mov r12d, 3
mov r8d, dword [rsp + 0x68]
lea r10d, [r12 - 2]
mov rcx, qword [rbp - 0x60]
add r8d, r10d
add rcx, 2
mov dword [rsp + 0x68], r8d
add rdx, 8
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x68], rdx
cmp r8d, r12d
jb 0x140266a51
mov eax, dword [rbp - 0x2c]
mov rbx, rsi
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x68], rdi
mov dword [rbp + 0x100], eax
jmp 0x140266b9f
mov r12d, 3
mov r14d, 0x8007000e
lea r10d, [r12 - 2]
jmp 0x140266b9f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266b8a
movzx r14d, ax
or r14d, r15d
mov r10d, 1
lea r12d, [r10 + 2]
test r14d, r14d
js 0x140266b9f
mov r14d, 0x80004005
test rbx, rbx
je 0x140266bdc
mov rdi, qword [rbx]
test rdi, rdi
je 0x140266bd3
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdi + rcx*2], si
jne 0x140266bb0
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
call fcn.14009447c
mov r10d, 1
add rbx, 8
sub r12, r10
jne 0x140266ba4
mov rdi, qword [rbp + 0x50]
test rdi, rdi
je 0x140266bf0
mov rcx, qword [rbp + 0xa0]
xor eax, eax
rep stosb byte [rdi], al
lea rcx, [rbp + 0x20]
call fcn.1401fc794
lea rcx, [rbp + 0x50]
call fcn.1401fc794
lea rcx, [rbp + 0x90]
call fcn.1401fc794
test r14d, r14d
js 0x14026769a
mov rax, qword [rbp + 0x68]
lea r8, [rbp + 0xf0]
xor edx, edx
xorps xmm0, xmm0
xor r9d, r9d
mov edi, esi
mov r14d, esi
mov rcx, qword [rax]
mov qword [rbp + 0x108], rcx
mov rcx, qword [rax + 8]
mov qword [rbp + 0x110], rcx
mov rcx, qword [rax + 0x10]
mov rax, qword [0x140386168]
mov qword [rbp + 0x118], rcx
lea ecx, [rdx + 0x42]
movups xmmword [rbp + 0xf0], xmm0
mov dword [rbp + 0xf0], reloc.OLEAUT32.dll_SafeArrayGetDim
call qword [case.0x14006b68f.0]
test eax, eax
jne 0x140266ca1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266c8e
movzx r14d, ax
or r14d, r15d
mov r12d, 1
test r14d, r14d
js 0x140266cb0
mov r14d, 0x80004005
jmp 0x140266cb0
mov edi, dword [rbp + 0xf4]
mov r12d, 1
and edi, r12d
mov dword [rbp + 0x104], edi
test r14d, r14d
js 0x14026769a
mov edx, SafeArrayDestroy
mov ecx, r13d
lea eax, [rdx + 0x1f]
mov dword [rsp + 0x70], eax
sub ecx, 1
je 0x140266cf6
sub ecx, 1
je 0x140266cec
cmp ecx, 1
jne 0x140266cfe
mov ebx, 0xe1
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x64], ebx
jmp 0x140266cfe
mov dword [rsp + 0x74], reloc.OLEAUT32.dll_SafeArrayDestroy
jmp 0x140266cfa
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x64], edx
mov r14d, SHRestricted
lea rcx, [rbp + 0x8a0]
xor edx, edx
mov dword [rbp - 0x58], r14d
mov edi, r14d
lea ebx, [r14 + 0x7c]
mov r8d, ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860e0]
lea r8, [rbp + 0x8a0]
or edx, 0xffffffff
mov word [rbp + 0x8e4], bx
xor ecx, ecx
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140266d6d
movzx edi, word [rbp + 0x946]
mov eax, dword [rbp + 0x94c]
cmp edi, r14d
mov dword [rbp + 0xb8], eax
mov eax, dword [rbp + 0x950]
cmovb edi, r14d
mov dword [rbp - 0x58], edi
mov dword [rbp + 0xbc], eax
mov rbx, qword [rbp - 0x38]
lea rcx, [rbp + 0x770]
cmp r13d, r12d
cmovne rbx, qword [rbp - 0x20]
xor edx, edx
lea r8d, [rdx + 0x5c]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov r14d, esi
call qword [case.0x14006b68f.0]
mov r12, rax
test rax, rax
jne 0x140266ddb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266dc7
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x14026769a
mov r14d, 0x80004005
jmp 0x14026769a
mov ecx, dword [rsp + 0x74]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, edi
call qword [case.0x14006b68f.0]
mov r8, rbx
mov dword [rbp + 0x780], 0x190
neg eax
mov byte [rbp + 0x78a], 5
mov edx, 0x20
mov dword [rbp + 0x770], eax
lea rcx, [rbp + 0x78c]
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x770]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140266e61
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266e54
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x140266e68
mov r14d, 0x80004005
jmp 0x140266e68
mov qword [rbp + 0x120], rax
mov rax, qword [0x140386160]
mov rdx, r12
xor ecx, ecx
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x14026769a
mov r12, qword [rbp - 0x38]
lea rcx, [rbp + 0x710]
mov eax, 1
cmp r13d, eax
cmovne r12, qword [rbp - 0x20]
xor edx, edx
lea r8d, [rax + 0x5b]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov r14d, esi
call qword [case.0x14006b68f.0]
mov rbx, rax
test rax, rax
jne 0x140266f58
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266ee6
movzx r14d, ax
or r14d, r15d
test r14d, r14d
jns 0x140266dd0
mov edi, 0x20
test r14d, r14d
js 0x14026769a
mov ecx, r13d
mov ebx, esi
mov edx, esi
sub ecx, 1
je 0x140266f17
sub ecx, 1
je 0x140266ffe
cmp ecx, 1
jne 0x140266f23
mov ebx, dword [rbp + 0xb8]
mov edx, dword [rbp + 0xbc]
mov dword [rbp + 0x568], ebx
mov dword [rbp + 0x56c], edx
mov ecx, 1
cmp r13d, ecx
je 0x14026702c
lea eax, [r13 - 2]
cmp eax, ecx
ja 0x140267015
mov eax, esi
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x64], esi
jmp 0x140267035
mov ecx, dword [rsp + 0x64]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, edi
call qword [case.0x14006b68f.0]
mov edi, 0x20
mov dword [rbp + 0x720], 0x190
neg eax
mov byte [rbp + 0x72a], 5
mov r8, r12
mov dword [rbp + 0x710], eax
mov edx, edi
lea rcx, [rbp + 0x72c]
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x710]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140266fe0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140266fd3
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x140266fe7
mov r14d, 0x80004005
jmp 0x140266fe7
mov qword [rbp + 0x128], rax
mov rax, qword [0x140386160]
mov rdx, rbx
xor ecx, ecx
call qword [case.0x14006b68f.0]
jmp 0x140266ef4
mov eax, dword [rbp + 0xb8]
mov ecx, 4
cdq
idiv ecx
mov edx, esi
mov ebx, eax
jmp 0x140266f23
mov eax, dword [rbp - 0x40]
mov r12d, dword [rbp - 0x40]
mov dword [rsp + 0x64], eax
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x40]
jmp 0x140267038
mov eax, reloc.OLEAUT32.dll_DllRegisterServer
mov dword [rsp + 0x64], edi
mov r12d, esi
mov dword [rsp + 0x78], eax
mov rdx, qword [rbp + 0x120]
sub ebx, eax
mov rcx, qword [rbp - 0x40]
sub ebx, r12d
mov rax, qword [0x140386078]
mov r14d, esi
mov rdi, qword [rbp + 0x108]
mov dword [rbp + 0x154], ebx
mov dword [rbp + 0x144], ebx
call qword [case.0x14006b68f.0]
mov rdx, rdi
mov qword [rsp + 0x28], rsi
mov rdi, qword [rbp - 0x40]
lea r9, [rbp + 0x13c]
mov qword [rbp - 0x80], rax
mov rcx, rdi
mov rax, qword [method.4.virtual_56]
or r8d, 0xffffffff
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x1402670c9
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x14026769a
mov rdx, qword [rbp + 0x128]
mov r14d, esi
mov rcx, qword [rbp - 0x40]
mov rax, qword [0x140386078]
mov rdi, qword [rbp + 0x110]
call qword [case.0x14006b68f.0]
mov rdx, rdi
mov qword [rsp + 0x28], rsi
mov rdi, qword [rbp - 0x40]
lea r9, [rbp + 0x14c]
mov qword [rbp - 0x80], rax
mov rcx, rdi
mov rax, qword [method.4.virtual_56]
or r8d, 0xffffffff
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x14026714e
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x14026769a
mov ecx, dword [rbp + 0x144]
lea eax, [r13 - 2]
cmp eax, 1
ja 0x140267171
mov ebx, dword [rbp + 0x154]
cmp ecx, ebx
cmovg ebx, ecx
mov r8d, dword [rsp + 0x70]
mov rax, qword [method.4.virtual_56]
cmp dword [rbp + 0x100], esi
je 0x1402671a6
mov edx, r12d
sub edx, ecx
lea rcx, [rbp + 0x13c]
add edx, ebx
call qword [case.0x14006b68f.0]
sub r12d, dword [rbp + 0x154]
lea edx, [rbx + r12]
jmp 0x1402671bb
mov edx, dword [rsp + 0x78]
lea rcx, [rbp + 0x13c]
call qword [case.0x14006b68f.0]
mov edx, dword [rsp + 0x78]
mov r8d, dword [rsp + 0x64]
lea rcx, [rbp + 0x14c]
add r8d, dword [rbp + 0x148]
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
lea eax, [r13 - 2]
mov edx, 1
cmp eax, edx
jbe 0x1402674a9
cmp r13d, edx
jne 0x1402674c5
xor edx, edx
mov dword [rbp + 0x138], 0xffffff
lea rcx, [rbp + 0x7d0]
lea r8d, [rdx + 0x5c]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov r14d, esi
call qword [case.0x14006b68f.0]
mov rdi, rax
test rax, rax
jne 0x1402673db
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140267251
movzx r14d, ax
or r14d, r15d
test r14d, r14d
jns 0x140266dd0
mov r12d, dword [rbp - 0x58]
test r14d, r14d
js 0x14026769a
mov rdx, qword [rbp + 0x130]
mov r14d, esi
mov rax, qword [0x140386078]
mov rdi, qword [rbp + 0x118]
mov dword [rbp + 0x164], ebx
mov rbx, qword [rbp - 0x40]
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x15c]
mov qword [rbp - 0x80], rax
or r8d, 0xffffffff
mov rax, qword [method.4.virtual_56]
mov rdx, rdi
mov rcx, rbx
mov dword [rsp + 0x20], 0x460
call qword [case.0x14006b68f.0]
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x1402672e8
mov rdx, rax
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x14026769a
mov eax, dword [rbp + 0x164]
mov ecx, SHFindFiles
add eax, 0x18
mov dword [rbp + 0x168], 0x20
cmp eax, ecx
mov edx, r12d
cmovl eax, ecx
lea edi, [rcx + 6]
mov ecx, dword [rbp + 0x15c]
mov r8d, edi
mov dword [rbp + 0x164], eax
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x160]
mov r8d, edi
mov dword [rbp + 0x15c], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x164]
mov r8d, edi
mov dword [rbp + 0x160], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x168]
mov r8d, edi
mov dword [rbp + 0x164], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov r8d, dword [rbp + 0x158]
lea rcx, [rbp + 0x15c]
add r8d, 0x24
mov dword [rbp + 0x168], eax
mov rax, qword [method.4.virtual_56]
cmp dword [rbp + 0x100], esi
je 0x140267485
mov edx, dword [rbp + 0x13c]
cmp edx, dword [rbp + 0x14c]
cmovge edx, dword [rbp + 0x14c]
call qword [case.0x14006b68f.0]
mov edx, 1
jmp 0x1402674c5
mov r12d, dword [rbp - 0x58]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, r12d
lea ecx, [r8 - 0x3d]
call qword [case.0x14006b68f.0]
mov r8, qword [rbp - 0x78]
lea rcx, [rbp + 0x7ec]
neg eax
mov dword [rbp + 0x7e0], 0x190
mov edx, 0x20
mov dword [rbp + 0x7d0], eax
mov byte [rbp + 0x7ea], 5
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x7d0]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140267467
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x14026745a
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x14026746e
mov r14d, 0x80004005
jmp 0x14026746e
mov qword [rbp + 0x130], rax
mov rax, qword [0x140386160]
mov rdx, rdi
xor ecx, ecx
call qword [case.0x14006b68f.0]
jmp 0x14026725e
mov edx, dword [rbp + 0x144]
cmp edx, dword [rbp + 0x154]
cmovle edx, dword [rbp + 0x154]
sub edx, dword [rbp + 0x164]
add edx, dword [rbp + 0x15c]
jmp 0x1402673cb
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0x56c], eax
mov dword [rbp + 0x568], ebx
mov dword [rbp + 0x138], 0xffa8a8a8
mov r14d, dword [rbp + 0x100]
mov ecx, r13d
mov ebx, dword [rbp + 0x56c]
mov edi, dword [rbp + 0x568]
sub ecx, 1
je 0x14026768f
sub ecx, 1
je 0x1402675a5
cmp ecx, 1
jne 0x140267697
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x708], rax
xor ecx, ecx
mov rax, qword [method.4.virtual_56]
movups xmmword [rbp + 0x6e8], xmm0
movups xmmword [rbp + 0x6f8], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x6e8]
mov dword [rbp + 0x6e8], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140267697
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x6fc]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x704]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x704]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0x704]
shr rcx, 0x20
sub ecx, ebx
imul ecx, ecx, 0x32
jmp 0x140267670
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x6d0], rax
xor ecx, ecx
mov rax, qword [method.4.virtual_56]
movups xmmword [rbp + 0x6b0], xmm0
movups xmmword [rbp + 0x6c0], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x6b0]
mov dword [rbp + 0x6b0], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140267697
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x6c4]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x6cc]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x6cc]
test r14d, r14d
je 0x14026764a
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0x6c4]
jmp 0x140267660
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0x6cc]
shr rax, 0x20
sub eax, ebx
imul ecx, eax, 0x5f
mov dword [rbp + 0x560], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0x564], edx
jmp 0x140267697
and qword [rbp + 0x560], 0
mov r14d, esi
mov rdx, qword [rbp - 0x40]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
mov r12d, 4
mov ecx, 1
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ecx
jne 0x1402676b8
mov eax, dword [0x140389de8]
test eax, eax
jle 0x14026772f
sub eax, ecx
mov dword [0x140389de8], eax
jne 0x14026772f
mov rbx, r12
lea rdi, [0x14038a340]
mov r12, rcx
cmp qword [rdi], rsi
je 0x1402676f9
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, r12
jne 0x1402676e5
xor edx, edx
lea r8d, [rbx + 0x60]
lea rcx, [0x14038a340]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x140267732
mov r12, rcx
mov eax, esi
lea rcx, [rbp + 0x68]
xchg dword [0x14038b0f0], eax
call fcn.1401fc794
test r14d, r14d
js 0x140269109
mov rdi, qword [rbp + 0x98]
lea rcx, [rbp + 0x170]
xor edx, edx
mov qword [rbp - 0x78], rdi
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r14, qword [rbp + 0x18]
mov edx, 7
mov rax, qword [0x140386050]
mov rcx, r14
mov ebx, r12d
call qword [case.0x14006b68f.0]
test rax, rax
je 0x1402677d1
mov rcx, rax
lea r8, [rbp + 0x170]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x1402677d1
mov eax, 0x20
cmp word [rbp + 0x182], ax
jne 0x1402677d1
cmp qword [rbp + 0x188], rsi
je 0x1402677d1
cmp dword [rbp + 0x174], esi
jle 0x1402677d1
cmp dword [rbp + 0x178], esi
jg 0x1402677d3
mov ebx, esi
mov dword [rbp + 0x10], ebx
test ebx, ebx
jne 0x1402677df
cmp r13d, r12d
jne 0x14026783b
mov r8d, dword [rbp - 0x74]
lea rcx, [rbp + 0x13c]
mov rax, qword [method.4.virtual_56]
mov edx, edi
call qword [case.0x14006b68f.0]
mov r8d, dword [rbp - 0x74]
lea rcx, [rbp + 0x14c]
mov rax, qword [method.4.virtual_56]
mov edx, edi
call qword [case.0x14006b68f.0]
cmp r13d, r12d
jne 0x14026783b
mov ecx, dword [rbp + 0x104]
mov rax, qword [0x140386028]
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0xb26720
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x78], rax
mov rax, qword [method.4.virtual_56]
mov edx, r12d
mov rcx, r14
call qword [case.0x14006b68f.0]
cmp dword [rbp + 0x100], esi
mov ecx, 0x20812
mov dword [rbp - 0x40], eax
mov eax, 0x810
cmovne eax, ecx
mov dword [rsp + 0x64], eax
cmp dword [rbp + 0x10], esi
je 0x140268301
mov eax, dword [rbp + 0x104]
lea rcx, [rbp + 0x250]
mov rbx, qword [rbp + 0x108]
mov edi, 0x68
mov dword [rsp + 0x60], eax
mov r8d, edi
mov rax, qword [rbp + 0x120]
xor edx, edx
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x50], rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, edi
lea rcx, [rbp + 0x3a0]
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
mov dword [rsp + 0x68], esi
mov rdi, rsi
mov dword [rsp + 0x6c], esi
mov qword [rbp + 0x5e0], rax
mov dword [rbp + 0x5e8], eax
mov qword [rbp - 0x38], rsi
movups xmmword [rbp + 0x5c0], xmm0
movups xmmword [rbp + 0x5d0], xmm0
movups xmmword [rbp + 0x570], xmm0
test r14, r14
jne 0x140267906
mov r14d, 0x80070057
jmp 0x1402690f0
test rbx, rbx
je 0x1402678fb
mov rax, qword [0x140386050]
mov edx, 7
mov rcx, r14
call qword [case.0x14006b68f.0]
mov r12d, 0x80808081
test rax, rax
je 0x140268345
mov rcx, rax
lea r8, [rbp + 0x250]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026796e
mov rax, qword [rbp + 0x268]
mov qword [rbp - 0x60], rax
mov eax, dword [rbp + 0x254]
mov dword [rsp + 0x68], eax
mov eax, dword [rbp + 0x258]
mov dword [rsp + 0x6c], eax
mov rax, qword [0x140386010]
mov rcx, r14
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x48], rax
mov rbx, rax
test rax, rax
je 0x140268345
mov eax, dword [rbp + 0x144]
lea r9, [rbp + 0xc0]
sub eax, dword [rbp + 0x13c]
lea rdx, [rbp + 0x5c0]
mov dword [rbp + 0x5c4], eax
xorps xmm0, xmm0
mov eax, dword [rbp + 0x140]
xor r8d, r8d
sub eax, dword [rbp + 0x148]
mov rcx, rbx
mov dword [rbp + 0x5c8], eax
mov r14d, esi
mov rax, qword [0x140386018]
mov dword [rsp + 0x28], esi
mov qword [rbp + 0xc0], rsi
mov dword [rsp + 0x70], esi
movdqu xmmword [rbp + 0x5d0], xmm0
mov qword [rbp + 0x5e0], rsi
mov dword [rbp + 0x5e8], esi
mov dword [rbp + 0x5c0], PathIsExe
mov dword [rbp + 0x5cc], 0x200001
mov qword [rsp + 0x20], rsi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140267a4e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140267a39
movzx r14d, ax
or r14d, r15d
mov eax, 0x80004005
test r14d, r14d
cmovns r14d, eax
mov rax, qword [rbp - 0x68]
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x140267d87
test rax, rax
je 0x140267a86
mov rcx, rax
lea r8, [rbp + 0x3a0]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
cmovne rdi, qword [rbp + 0x3b8]
mov qword [rbp - 0x78], rdi
mov eax, dword [rbp + 0x144]
mov rcx, rbx
sub eax, dword [rbp + 0x13c]
mov rdx, qword [rbp - 0x68]
mov dword [rbp + 0x578], eax
mov eax, dword [rbp + 0x148]
sub eax, dword [rbp + 0x140]
mov dword [rbp + 0x57c], eax
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov edx, 1
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp - 0x80]
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x38], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x570]
mov rcx, rbx
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov eax, dword [rsp + 0x64]
lea r9, [rbp + 0x570]
mov rdx, qword [rbp - 0x50]
or r8d, 0xffffffff
mov qword [rsp + 0x28], rsi
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov eax, 1
cmp r13d, eax
jne 0x140267b73
cmp dword [rsp + 0x60], esi
je 0x140267b69
lea ecx, [rax + 7]
mov rax, qword [0x140386118]
call qword [case.0x14006b68f.0]
mov dword [rsp + 0x74], eax
jmp 0x140267b7b
mov dword [rsp + 0x74], 0xffffff
jmp 0x140267b7b
mov dword [rsp + 0x74], 0xffa8a8a8
mov eax, dword [rbp + 0x13c]
mov r9d, esi
movsxd r10, dword [rsp + 0x68]
mov r8d, eax
mov edx, dword [rbp + 0x578]
neg r8d
mov r11d, dword [rbp + 0x57c]
test eax, eax
mov edi, esi
cmovns r9d, eax
cmovns r8d, esi
mov eax, dword [rbp + 0x140]
mov ecx, eax
neg ecx
test eax, eax
cmovns edi, eax
cmovns ecx, esi
sub edx, r8d
mov eax, r10d
sub eax, r9d
cmp edx, eax
cmovge edx, eax
mov eax, dword [rsp + 0x6c]
sub eax, edi
mov dword [rsp + 0x60], edx
sub r11d, ecx
cmp r11d, eax
cmovge r11d, eax
test edx, edx
jle 0x140267d87
test r11d, r11d
jle 0x140267d87
imul ecx, dword [rbp + 0x578]
mov r13d, dword [rsp + 0x74]
mov ebx, dword [rsp + 0x60]
movsxd rax, r8d
mov r8d, 1
imul edi, r10d
movsxd rcx, ecx
add rcx, rax
mov dword [rsp + 0x6c], esi
mov rax, qword [rbp - 0x78]
lea rdx, [rax + rcx*4]
movsxd rax, r9d
movsxd rcx, edi
add rcx, rax
mov qword [rbp - 0x78], rdx
mov rax, qword [rbp - 0x60]
lea rcx, [rax + rcx*4]
movsxd rax, dword [rbp + 0x578]
shl rax, 2
mov qword [rbp - 0x80], rax
mov rax, r10
mov r15, qword [rbp - 0x80]
shl rax, 2
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x60], rcx
mov r10, rcx
mov dword [rsp + 0x68], esi
sub r10, rdx
lea r9, [rdx + 2]
mov edi, esi
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140267d36
movzx edi, byte [r10 + r9]
mov eax, r12d
movzx r8d, dl
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x75]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x76]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8d, 1
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x68]
mov byte [r10 + r9 + 1], dl
add edi, r8d
add r9, 4
mov dword [rsp + 0x68], edi
cmp edi, ebx
jl 0x140267c63
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x60]
add rdx, r15
mov eax, dword [rsp + 0x6c]
add rcx, qword [rbp - 0x50]
add eax, r8d
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x60], rcx
mov dword [rsp + 0x6c], eax
cmp eax, r11d
jl 0x140267c53
mov r14d, dword [rsp + 0x70]
mov r15d, 0x80070000
mov r13d, dword [rbp - 0x70]
mov rbx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x140267da0
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x140267dbc
mov rdx, rax
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rbx
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x1402690f0
mov eax, dword [rbp + 0x104]
lea rcx, [rbp + 0x1e0]
mov rbx, qword [rbp + 0x110]
mov r14d, Ordinal_109
mov dword [rsp + 0x60], eax
mov r8d, r14d
mov rax, qword [rbp + 0x128]
xor edx, edx
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x50], rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, r14d
lea rcx, [rbp + 0x410]
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
mov dword [rsp + 0x68], esi
mov rdi, rsi
mov dword [rsp + 0x6c], esi
mov qword [rbp + 0x610], rax
mov dword [rbp + 0x618], eax
mov qword [rbp - 0x38], rsi
movups xmmword [rbp + 0x5f0], xmm0
movups xmmword [rbp + 0x600], xmm0
movups xmmword [rbp + 0x590], xmm0
test rbx, rbx
je 0x1402678fb
mov rbx, qword [rbp + 0x18]
lea edx, [rax + 7]
mov rax, qword [0x140386050]
mov rcx, rbx
call qword [case.0x14006b68f.0]
test rax, rax
je 0x140268345
mov rcx, rax
lea r8, [rbp + 0x1e0]
mov rax, qword [0x140386068]
mov edx, r14d
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140267ec1
mov rax, qword [rbp + 0x1f8]
mov qword [rbp - 0x60], rax
mov eax, dword [rbp + 0x1e4]
mov dword [rsp + 0x68], eax
mov eax, dword [rbp + 0x1e8]
mov dword [rsp + 0x6c], eax
mov rax, qword [0x140386010]
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rbx, rax
test rax, rax
je 0x140268345
mov eax, dword [rbp + 0x154]
lea r9, [rbp + 0xd8]
sub eax, dword [rbp + 0x14c]
lea rdx, [rbp + 0x5f0]
mov dword [rbp + 0x5f4], eax
xorps xmm0, xmm0
mov eax, dword [rbp + 0x150]
xor r8d, r8d
sub eax, dword [rbp + 0x158]
mov rcx, rbx
mov dword [rbp + 0x5f8], eax
mov r14d, esi
mov rax, qword [0x140386018]
mov dword [rsp + 0x28], esi
mov qword [rbp + 0xd8], rsi
mov dword [rsp + 0x70], esi
movdqu xmmword [rbp + 0x600], xmm0
mov qword [rbp + 0x610], rsi
mov dword [rbp + 0x618], esi
mov dword [rbp + 0x5f0], PathIsExe
mov dword [rbp + 0x5fc], 0x200001
mov qword [rsp + 0x20], rsi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140267f9d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140267f88
movzx r14d, ax
or r14d, r15d
mov eax, 0x80004005
test r14d, r14d
cmovns r14d, eax
mov rax, qword [rbp - 0x68]
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x1402682ae
test rax, rax
je 0x140267fd5
mov rcx, rax
lea r8, [rbp + 0x410]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
cmovne rdi, qword [rbp + 0x428]
mov qword [rbp - 0x78], rdi
mov eax, dword [rbp + 0x154]
mov rcx, rbx
sub eax, dword [rbp + 0x14c]
mov rdx, qword [rbp - 0x68]
mov dword [rbp + 0x598], eax
mov eax, dword [rbp + 0x158]
sub eax, dword [rbp + 0x150]
mov dword [rbp + 0x59c], eax
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov r15d, 1
mov edx, r15d
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp - 0x80]
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x38], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x590]
mov rcx, rbx
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov eax, dword [rsp + 0x64]
lea r9, [rbp + 0x590]
mov rdx, qword [rbp - 0x50]
or r8d, 0xffffffff
mov qword [rsp + 0x28], rsi
mov rcx, rbx
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
cmp r13d, r15d
jne 0x1402680be
cmp dword [rsp + 0x60], esi
je 0x1402680b4
mov rax, qword [0x140386118]
lea ecx, [r15 + 7]
call qword [case.0x14006b68f.0]
jmp 0x1402680c3
mov dword [rsp + 0x64], 0xffffff
jmp 0x1402680ca
mov eax, 0xffa8a8a8
mov dword [rsp + 0x64], eax
mov dword [rbp - 0x30], eax
mov eax, dword [rbp + 0x14c]
mov r8d, esi
movsxd r10, dword [rbp + 0x598]
mov edi, eax
movsxd r9, dword [rsp + 0x68]
neg edi
mov r11d, dword [rbp + 0x59c]
test eax, eax
mov edx, esi
mov r15d, r10d
cmovns r8d, eax
cmovns edi, esi
mov eax, dword [rbp + 0x150]
mov ecx, eax
neg ecx
test eax, eax
cmovns edx, eax
cmovns ecx, esi
sub r15d, edi
mov eax, r9d
sub eax, r8d
cmp r15d, eax
cmovge r15d, eax
mov eax, dword [rsp + 0x6c]
sub eax, edx
sub r11d, ecx
cmp r11d, eax
cmovge r11d, eax
mov dword [rsp + 0x60], r11d
test r15d, r15d
jle 0x1402682ae
test r11d, r11d
jle 0x1402682ae
imul ecx, r10d
movsxd rax, edi
imul edx, r9d
mov dword [rsp + 0x6c], esi
movsxd rcx, ecx
add rcx, rax
mov rax, qword [rbp - 0x78]
lea r13, [rax + rcx*4]
movsxd rax, r8d
movsxd rcx, edx
add rcx, rax
mov rax, qword [rbp - 0x60]
lea rcx, [rax + rcx*4]
mov rax, r10
shl rax, 2
mov qword [rbp - 0x80], rax
mov rax, r9
shl rax, 2
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x78], rcx
mov r14d, dword [rbp - 0x30]
lea r9, [r13 + 2]
mov r10, rcx
mov dword [rsp + 0x68], esi
sub r10, r13
mov edi, esi
mov r11d, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140268270
movzx edi, byte [r10 + r9]
mov eax, r12d
movzx r8d, dl
movzx ecx, r14b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x65]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x66]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x68]
mov byte [r10 + r9 + 1], dl
add edi, r11d
add r9, 4
mov dword [rsp + 0x68], edi
cmp edi, r15d
jl 0x1402681a3
mov rcx, qword [rbp - 0x78]
mov eax, dword [rsp + 0x6c]
add rcx, qword [rbp - 0x50]
add eax, r11d
add r13, qword [rbp - 0x80]
mov qword [rbp - 0x78], rcx
mov dword [rsp + 0x6c], eax
cmp eax, dword [rsp + 0x60]
jl 0x140268189
mov r14d, dword [rsp + 0x70]
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x1402682c7
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x1402682e3
mov rdx, rax
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rbx
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x1402690f0
jmp 0x1402690a2
cmp dword [rbp + 0x104], esi
jne 0x140268310
mov al, reloc.SHCORE.dll_Ordinal_192
cmp r13d, r12d
jne 0x140268312
mov al, 0xff
and word [rsp + 0x70], 0
mov rcx, r14
and qword [rbp], 0
mov byte [rsp + 0x72], al
mov rax, qword [0x140386010]
mov byte [rsp + 0x73], r12b
mov dword [rbp + 0x38], esi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x10], rax
mov r11, rax
test rax, rax
jne 0x140268373
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x14026835f
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x1402690f0
mov r14d, 0x80004005
jmp 0x1402690f0
cmp r13d, r12d
jne 0x14026842b
mov edi, dword [rbp + 0x144]
mov r14d, esi
mov r12d, dword [rbp + 0x154]
mov eax, edi
mov edx, dword [rbp + 0x13c]
mov ebx, r12d
mov r8d, dword [rbp + 0x14c]
sub eax, edx
mov ecx, dword [rbp + 0x158]
sub ebx, r8d
mov r9d, dword [rbp + 0x140]
cmp ebx, eax
mov r10d, esi
cmovle ebx, eax
sub ecx, r9d
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x78], ecx
cmp dword [rbp + 0x100], esi
je 0x1402683e6
mov r14d, ebx
mov eax, ebx
sub r14d, edi
sub eax, r12d
add r14d, edx
add eax, r8d
mov dword [rbp], r14d
mov dword [rbp + 0x38], eax
mov r10d, eax
mov eax, dword [rbp + 0x148]
sub edi, edx
sub eax, r9d
sub r12d, r8d
mov dword [rbp - 0x58], eax
add edi, r14d
mov dword [rbp + 0xc], eax
add r12d, r10d
mov eax, dword [rbp + 0x150]
sub eax, r9d
mov dword [rbp + 8], edi
mov dword [rbp - 0x2c], eax
mov dword [rbp + 0x3c], eax
sub eax, dword [rbp + 0x150]
add eax, dword [rbp + 0x158]
mov dword [rsp + 0x6c], eax
mov dword [rbp + 0x44], eax
mov dword [rbp + 0x40], r12d
jmp 0x140268471
movups xmm0, xmmword [rbp + 0x13c]
mov ebx, dword [rbp + 0x568]
movups xmm1, xmmword [rbp + 0x14c]
mov ecx, dword [rbp + 0x56c]
movdqu xmmword [rbp], xmm0
mov eax, dword [rbp + 0xc]
mov edi, dword [rbp + 8]
movdqu xmmword [rbp + 0x38], xmm1
mov r12d, dword [rbp + 0x40]
mov dword [rbp - 0x58], eax
mov eax, dword [rbp + 0x44]
mov dword [rsp + 0x6c], eax
mov eax, dword [rbp + 0x3c]
mov dword [rbp - 0x2c], eax
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x78], ecx
mov eax, ecx
mov dword [rsp + 0x28], esi
neg eax
mov dword [rsp + 0x60], r12d
mov dword [rbp + 0x688], eax
lea r9, [rbp + 0xe0]
mov rax, qword [0x140386018]
lea rdx, [rbp + 0x680]
xorps xmm0, xmm0
mov qword [rbp + 0xe0], rsi
xor r8d, r8d
mov qword [rbp + 0x6a0], rsi
mov rcx, r11
mov dword [rbp + 0x6a8], esi
mov r14d, esi
mov dword [rbp + 0x680], PathIsExe
movdqu xmmword [rbp + 0x690], xmm0
mov dword [rbp + 0x684], ebx
mov dword [rbp + 0x68c], 0x200001
mov qword [rsp + 0x20], rsi
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x70], rax
test rax, rax
jne 0x140268519
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140268509
movzx r14d, ax
or r14d, r15d
mov eax, 0x80004005
test r14d, r14d
cmovns r14d, eax
mov rax, qword [rbp + 0x70]
test r14d, r14d
js 0x1402690be
mov r14, qword [rbp - 0x10]
mov rdx, rax
mov rax, qword [0x140386078]
mov rcx, r14
call qword [case.0x14006b68f.0]
mov eax, 1
cmp r13d, eax
jne 0x14026857b
mov r8, qword [rbp + 0x78]
test r8, r8
je 0x14026857b
mov eax, dword [rsp + 0x78]
lea rdx, [rbp + 0x5b0]
and qword [rbp + 0x5b0], 0
mov rcx, r14
mov dword [rbp + 0x5bc], eax
mov rax, qword [0x1403860e8]
mov dword [rbp + 0x5b8], ebx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x104]
lea rcx, [rbp + 0x2c0]
mov r14, qword [rbp + 0x108]
xor edx, edx
mov dword [rsp + 0x74], eax
mov rax, qword [rbp + 0x120]
mov qword [rbp - 0x38], rax
lea r8d, [rdx + 0x68]
mov qword [rbp - 8], r14
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
lea rcx, [rbp + 0x480]
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
mov dword [rbp - 0x20], esi
mov dword [rbp - 0x48], esi
mov qword [rbp + 0x640], rax
mov dword [rbp + 0x648], eax
mov qword [rbp - 0x80], rsi
movups xmmword [rbp + 0x620], xmm0
movups xmmword [rbp + 0x630], xmm0
movups xmmword [rbp + 0x580], xmm0
test r14, r14
jne 0x140268608
mov r14d, 0x80070057
jmp 0x1402690be
mov r14, qword [rbp - 0x10]
mov edx, 7
mov rax, qword [0x140386050]
mov rcx, r14
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140268654
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140268640
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x1402690be
mov r14d, 0x80004005
jmp 0x1402690be
mov rcx, rax
lea r8, [rbp + 0x2c0]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140268691
mov rax, qword [rbp + 0x2d8]
mov qword [rbp - 0x50], rax
mov eax, dword [rbp + 0x2c4]
mov dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x2c8]
mov dword [rbp - 0x48], eax
mov rax, qword [0x140386010]
mov rcx, r14
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
mov rcx, rax
test rax, rax
je 0x140268626
mov eax, dword [rbp + 4]
lea r9, [rbp + 0xe8]
sub eax, dword [rbp - 0x58]
lea rdx, [rbp + 0x620]
sub edi, dword [rbp]
xorps xmm0, xmm0
mov dword [rbp + 0x628], eax
xor r8d, r8d
mov rax, qword [0x140386018]
mov r14d, esi
mov dword [rsp + 0x28], esi
mov qword [rbp + 0xe8], rsi
movdqu xmmword [rbp + 0x630], xmm0
mov qword [rbp + 0x640], rsi
mov dword [rbp + 0x648], esi
mov dword [rbp + 0x620], PathIsExe
mov dword [rbp + 0x624], edi
mov dword [rbp + 0x62c], 0x200001
mov qword [rsp + 0x20], rsi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x60], rax
test rax, rax
jne 0x140268756
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140268746
movzx r14d, ax
or r14d, r15d
mov eax, 0x80004005
test r14d, r14d
cmovns r14d, eax
mov rax, qword [rbp - 0x60]
test r14d, r14d
js 0x140268a7f
test rax, rax
je 0x140268791
mov rcx, rax
lea r8, [rbp + 0x480]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
mov rcx, rsi
cmovne rcx, qword [rbp + 0x498]
mov qword [rbp - 0x78], rcx
mov eax, dword [rbp - 0x58]
sub eax, dword [rbp + 4]
mov rdx, qword [rbp - 0x60]
mov dword [rbp + 0x588], edi
mov rdi, qword [rbp - 0x68]
mov dword [rbp + 0x58c], eax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov edx, 1
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp - 0x38]
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x80], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x68]
lea rdx, [rbp + 0x580]
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov eax, dword [rsp + 0x64]
lea r9, [rbp + 0x580]
mov rdi, qword [rbp - 0x68]
or r8d, 0xffffffff
mov rdx, qword [rbp - 8]
mov rcx, rdi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov eax, 1
cmp r13d, eax
jne 0x14026886e
cmp dword [rsp + 0x74], esi
je 0x140268867
lea ecx, [rax + 7]
mov rax, qword [0x140386118]
call qword [case.0x14006b68f.0]
jmp 0x140268873
mov eax, 0xffffff
jmp 0x140268873
mov eax, 0xffa8a8a8
mov edx, dword [rbp + 0x588]
mov r11d, esi
mov r10d, dword [rbp - 0x48]
mov r8d, esi
mov dword [rsp + 0x74], eax
mov eax, dword [rbp]
mov r9d, eax
neg r9d
test eax, eax
cmovns r11d, eax
cmovns r9d, esi
mov eax, dword [rbp + 4]
mov ecx, eax
neg ecx
test eax, eax
cmovns r8d, eax
cmovns ecx, esi
mov eax, dword [rbp - 0x20]
sub edx, r9d
sub eax, r11d
cmp edx, eax
cmovge edx, eax
mov eax, dword [rbp + 0x58c]
sub eax, ecx
mov dword [rbp - 0x58], edx
sub r10d, r8d
cmp eax, r10d
cmovge eax, r10d
mov dword [rbp - 0x38], eax
test edx, edx
jle 0x140268a83
test eax, eax
jle 0x140268a83
imul ecx, dword [rbp + 0x588]
movsxd rdi, dword [rbp - 0x20]
mov r13d, dword [rbp - 0x58]
mov r12d, dword [rsp + 0x74]
imul r8d, edi
movsxd rcx, ecx
movsxd rax, r9d
add rcx, rax
mov dword [rbp - 0x20], esi
mov rax, qword [rbp - 0x78]
lea rdx, [rax + rcx*4]
movsxd rcx, r8d
movsxd rax, r11d
mov r8d, 1
add rcx, rax
mov qword [rbp - 0x78], rdx
mov rax, qword [rbp - 0x50]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x588]
shl rcx, 2
mov qword [rbp - 8], rcx
mov rcx, rdi
mov rbx, qword [rbp - 8]
shl rcx, 2
mov qword [rbp + 0x30], rcx
mov qword [rbp - 0x50], rax
mov r11, rax
mov dword [rbp - 0x48], esi
sub r11, rdx
lea r9, [rdx + 2]
mov edi, esi
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140268a30
movzx edi, byte [r11 + r9]
mov r10d, 0x80808081
movzx r8d, dl
mov eax, r10d
movzx ecx, r12b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x75]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r10d
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x76]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r10d
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r10d
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8d, 1
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rbp - 0x48]
mov byte [r11 + r9 + 1], dl
add edi, r8d
add r9, 4
mov dword [rbp - 0x48], edi
cmp edi, r13d
jl 0x140268958
mov rdx, qword [rbp - 0x78]
mov rax, qword [rbp - 0x50]
add rdx, rbx
mov ecx, dword [rbp - 0x20]
add rax, qword [rbp + 0x30]
add ecx, r8d
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x20], ecx
cmp ecx, dword [rbp - 0x38]
jl 0x140268949
mov r13d, dword [rbp - 0x70]
mov r15d, 0x80070000
mov ebx, dword [rsp + 0x68]
mov r12d, dword [rsp + 0x60]
mov rdi, qword [rbp - 0x68]
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x140268a9c
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x140268ab8
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rdi
call qword [case.0x14006b68f.0]
test r14d, r14d
js 0x1402690be
mov eax, dword [rbp + 0x104]
lea rcx, [rbp + 0x330]
mov rdi, qword [rbp + 0x110]
mov r14d, Ordinal_109
mov dword [rbp - 0x38], eax
mov r8d, r14d
mov rax, qword [rbp + 0x128]
xor edx, edx
mov qword [rbp + 0x30], rax
mov qword [rbp - 8], rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, r14d
lea rcx, [rbp + 0x4f0]
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x80], rsi
xorps xmm0, xmm0
mov dword [rsp + 0x60], esi
mov dword [rbp - 0x48], esi
mov qword [rbp + 0x670], rax
mov dword [rbp + 0x678], eax
mov qword [rbp - 0x78], rsi
movups xmmword [rbp + 0x650], xmm0
movups xmmword [rbp + 0x660], xmm0
movups xmmword [rbp + 0x5a0], xmm0
test rdi, rdi
je 0x1402685fd
mov rdi, qword [rbp - 0x10]
lea edx, [rax + 7]
mov rax, qword [0x140386050]
mov rcx, rdi
call qword [case.0x14006b68f.0]
test rax, rax
je 0x140268626
mov rcx, rax
lea r8, [rbp + 0x330]
mov rax, qword [0x140386068]
mov edx, r14d
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140268bb7
mov rax, qword [rbp + 0x348]
mov qword [rbp - 0x50], rax
mov eax, dword [rbp + 0x334]
mov dword [rsp + 0x60], eax
mov eax, dword [rbp + 0x338]
mov dword [rbp - 0x48], eax
mov rax, qword [0x140386010]
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x60], rax
mov rdi, rax
test rax, rax
jne 0x140268bfb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140268bed
movzx r14d, ax
or r14d, r15d
test r14d, r14d
js 0x14026900c
jmp 0x140268649
mov eax, dword [rbp - 0x2c]
lea r9, [rbp + 0xc8]
sub eax, dword [rsp + 0x6c]
lea rdx, [rbp + 0x650]
sub r12d, dword [rbp + 0x38]
xorps xmm0, xmm0
mov dword [rbp + 0x658], eax
xor r8d, r8d
mov rax, qword [0x140386018]
mov rcx, rdi
mov dword [rsp + 0x28], esi
mov r14d, esi
mov qword [rbp + 0xc8], rsi
movdqu xmmword [rbp + 0x660], xmm0
mov qword [rbp + 0x670], rsi
mov dword [rbp + 0x678], esi
mov dword [rbp + 0x650], PathIsExe
mov dword [rbp + 0x654], r12d
mov dword [rbp + 0x65c], 0x200001
mov qword [rsp + 0x20], rsi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140268ca6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140268c96
movzx r14d, ax
or r14d, r15d
mov eax, 0x80004005
test r14d, r14d
cmovns r14d, eax
mov rax, qword [rbp - 0x68]
test r14d, r14d
js 0x140268fc7
test rax, rax
je 0x140268ce1
mov rcx, rax
lea r8, [rbp + 0x4f0]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
mov rcx, rsi
cmovne rcx, qword [rbp + 0x508]
mov qword [rbp - 0x80], rcx
mov eax, dword [rsp + 0x6c]
mov rcx, rdi
mov r15d, dword [rbp - 0x2c]
sub eax, r15d
mov rdx, qword [rbp - 0x68]
mov dword [rbp + 0x5ac], eax
mov rax, qword [0x140386078]
mov dword [rbp + 0x5a8], r12d
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov r12d, 1
mov edx, r12d
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp + 0x30]
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x78], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x5a0]
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov eax, dword [rsp + 0x64]
lea r9, [rbp + 0x5a0]
mov rdi, qword [rbp - 0x60]
or r8d, 0xffffffff
mov rdx, qword [rbp - 8]
mov rcx, rdi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
cmp r13d, r12d
jne 0x140268dc3
cmp dword [rbp - 0x38], esi
je 0x140268db9
mov rax, qword [0x140386118]
lea ecx, [r12 + 7]
call qword [case.0x14006b68f.0]
jmp 0x140268dc8
mov dword [rsp + 0x64], 0xffffff
jmp 0x140268dcf
mov eax, 0xffa8a8a8
mov dword [rsp + 0x64], eax
mov dword [rbp - 0x30], eax
mov eax, dword [rbp + 0x38]
mov ecx, r15d
movsxd r10, dword [rsp + 0x60]
mov edx, eax
movsxd r11, dword [rbp + 0x5a8]
neg edx
test eax, eax
mov r8d, esi
mov r9d, esi
mov r12d, r11d
cmovns r8d, eax
cmovns edx, esi
neg ecx
mov eax, r10d
test r15d, r15d
cmovns r9d, r15d
cmovns ecx, esi
mov r15d, dword [rbp + 0x5ac]
sub eax, r8d
sub r12d, edx
cmp r12d, eax
cmovge r12d, eax
mov eax, dword [rbp - 0x48]
sub eax, r9d
sub r15d, ecx
cmp r15d, eax
cmovge r15d, eax
test r12d, r12d
jle 0x140268fc7
test r15d, r15d
jle 0x140268fc7
mov eax, r11d
mov dword [rbp - 0x48], esi
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x80]
lea rdx, [rax + rcx*4]
mov eax, r10d
imul eax, r9d
mov qword [rbp - 0x80], rdx
movsxd rcx, eax
movsxd rax, r8d
mov r8d, 1
add rcx, rax
mov rax, qword [rbp - 0x50]
lea rcx, [rax + rcx*4]
mov rax, r11
shl rax, 2
mov qword [rbp + 0x30], rax
mov rax, r10
shl rax, 2
mov qword [rbp - 8], rax
mov qword [rbp - 0x50], rcx
mov ebx, dword [rbp - 0x30]
lea r9, [rdx + 2]
mov r10, rcx
mov dword [rsp + 0x60], esi
sub r10, rdx
mov edi, esi
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140268f7d
movzx edi, byte [r10 + r9]
mov r11d, 0x80808081
movzx r8d, dl
mov eax, r11d
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x65]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x66]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8d, 1
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x60]
mov byte [r10 + r9 + 1], dl
add edi, r8d
add r9, 4
mov dword [rsp + 0x60], edi
cmp edi, r12d
jl 0x140268ea5
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x50]
mov eax, dword [rbp - 0x48]
add rdx, qword [rbp + 0x30]
add eax, r8d
add rcx, qword [rbp - 8]
mov qword [rbp - 0x80], rdx
mov qword [rbp - 0x50], rcx
mov dword [rbp - 0x48], eax
cmp eax, r15d
jl 0x140268e92
mov r13d, dword [rbp - 0x70]
mov ebx, dword [rsp + 0x68]
mov rdi, qword [rbp - 0x60]
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x140268fe0
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140268ffc
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdi, qword [rbp - 0x10]
test r14d, r14d
js 0x1402690be
mov eax, 1
mov r9d, ebx
cmp r13d, eax
mov eax, dword [rsp + 0x78]
jne 0x140269063
mov r8d, dword [rbp + 0x140]
mov edx, dword [rbp + 0x13c]
mov rcx, qword [rbp + 0x18]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [section..data]
call qword [case.0x14006b68f.0]
jmp 0x1402690a2
mov ecx, dword [rsp + 0x70]
mov r8d, dword [rbp + 0x564]
mov edx, dword [rbp + 0x560]
mov dword [rsp + 0x50], ecx
mov rcx, qword [rbp + 0x18]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x1402690be
mov edx, dword [rbp - 0x40]
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x70]
test rax, rax
je 0x1402690d7
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x1402690f0
mov rcx, rax
mov rax, qword [0x140386030]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x78]
test rax, rax
je 0x140269109
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x108]
or rbx, 0xffffffffffffffff
test rax, rax
je 0x14026914b
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], si
jne 0x14026911c
mov rdi, qword [rbp + 0x108]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x108]
call fcn.14009447c
mov qword [rbp + 0x108], rsi
mov rax, qword [rbp + 0x110]
test rax, rax
je 0x140269189
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], si
jne 0x14026915a
mov rdi, qword [rbp + 0x110]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x110]
call fcn.14009447c
mov qword [rbp + 0x110], rsi
mov rdi, qword [rbp + 0x118]
test rdi, rdi
je 0x1402691bd
inc rbx
cmp word [rdi + rbx*2], si
jne 0x140269195
xor eax, eax
lea rcx, [rbx*2 + 2]
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x118]
call fcn.14009447c
mov qword [rbp + 0x118], rsi
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1402691dd
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x120], rsi
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x1402691fd
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x128], rsi
mov rcx, qword [rbp + 0x130]
test rcx, rcx
je 0x14026921d
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x130], rsi
mov ebx, 1
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ebx
jne 0x140269222
mov eax, dword [0x140389de8]
test eax, eax
jle 0x1402692a3
sub eax, ebx
mov dword [0x140389de8], eax
jne 0x1402692a3
lea r15, [0x14038a340]
mov eax, 4
mov rdi, r15
cmp qword [rdi], rsi
je 0x14026926c
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp + 0xa8]
add rdi, 0x18
sub rax, rbx
mov qword [rbp + 0xa8], rax
jne 0x140269251
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
xchg dword [0x14038b0f0], esi
mov rcx, qword [rbp + 0xd0]
lea rdx, [rbp + 0x850]
mov rcx, qword [rcx + 0x28]
call qword [case.0x140019929.2]
nop dword [rax + rax]
mov eax, r14d
mov rcx, qword [rbp + 0xb10]
xor rcx, rsp
call fcn.1400a15a0
lea r11, [rsp + 0xc20]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret