Function at 0x140269728
Capabilities:
Encode data using xor
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb58]
sub rsp, 0xc30
mov rax, qword [0x140387a48]
xor rax, rsp
mov qword [rbp + 0xb20], rax
xorps xmm0, xmm0
mov qword [rsp + 0x78], rcx
xor r15d, r15d
mov rbx, rcx
xor ecx, ecx
mov dword [rsp + 0x64], r15d
movups xmmword [rbp + 0x120], xmm0
mov r14d, r15d
mov edi, r15d
movups xmmword [rbp + 0x130], xmm0
call qword [sym.imp.USER32.dll_GetDC]
nop dword [rax + rax]
mov qword [rbp + 0xb0], rax
test rax, rax
jne 0x1402697b6
call fcn.140020b4c
mov esi, eax
test eax, eax
js 0x14026d1d5
mov rax, qword [rbp + 0xb0]
mov rcx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
nop dword [rax + rax]
mov qword [rbx + 8], rax
test rax, rax
jne 0x1402697dd
call fcn.140020b4c
mov esi, eax
test eax, eax
js 0x14026d1a7
cmp dword [rbx + 0x74], 3
je 0x1402697ea
mov edi, dword [rbx + 0x18]
mov dword [rsp + 0x64], edi
mov ecx, dword [rbp + reloc.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_Ordinal_292]
xor eax, eax
mov qword [rbp + 0x6b0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
mov dword [rbp + 0x6b8], eax
add ecx, edi
movups xmmword [rbp + 0x6a0], xmm0
add dword [rbx + 0xf8], ecx
mov r12d, 1
mov eax, dword [rbx + 0xfc]
cmp eax, dword [rbp + 0x128]
cmovg r15d, eax
mov dword [rbx + 0xfc], r15d
mov eax, dword [rbx + 0xf8]
mov dword [rbp - 0x50], eax
mov rax, qword [rbx + 8]
mov qword [rbp + 8], rax
mov dword [rbp - 0x80], r15d
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r12d
jne 0x14026984a
mov eax, dword [0x140389de8]
mov r13d, 4
mov qword [rbp + 0xb8], r13
mov edi, 0x338
test eax, eax
jne 0x140269e16
mov ecx, edi
mov dword [rsp + 0x60], r14d
mov dword [rbp - 0x7c], r14d
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x90], r14
call fcn.140091688
mov qword [rbp - 0x38], rax
mov r11, rax
test rax, rax
je 0x140269d78
mov esi, 0x67
lea rbx, [r11 + 7]
mov r12d, r14d
lea r15, [0x140319602]
or eax, 0xffffffff
mov r13d, r14d
lea r11d, [rsi - 0x66]
movzx ecx, byte [r15 - 1]
movzx r10d, byte [r15 - 2]
movzx r9d, byte [r15 + 2]
shl r10d, 8
or r10d, ecx
shl r9d, 8
movzx ecx, byte [r15]
lea r15, [r15 + 8]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [r15 - 7]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [r15 - 5]
or r9d, ecx
xor r14d, r10d
movzx ecx, byte [r15 - 4]
mov r8d, r14d
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r15 - 3]
shl r9d, 8
or r9d, ecx
xor r13d, r9d
xor r8d, r13d
xor r8d, 0xac987321
lea ecx, [r8 + 0x54969fa2]
rol ecx, 5
imul edx, ecx, 0x137f
mov ecx, r8d
rol ecx, 0xa
add edx, ecx
xor r14d, edx
lea ecx, [r14 + 0x7f1137f]
ror ecx, 9
imul edx, ecx, 0xab69
mov ecx, r14d
rol ecx, 2
sub edx, ecx
xor r8d, edx
imul edx, r8d, 0x605e
mov ecx, r8d
shr ecx, 0xd
sub edx, ecx
sub edx, 0x756c8a2
xor r14d, edx
mov ecx, r14d
xor ecx, 0xab69
rol ecx, 6
imul edx, ecx, 0x7f1
mov ecx, r14d
rol ecx, 2
sub edx, ecx
mov ecx, 0x7f1137f
xor r8d, edx
mov edx, r8d
xor edx, 0xab69605e
sub ecx, edx
xor r14d, ecx
mov ecx, r14d
mov edi, r14d
xor ecx, 0x137f
ror edi, 6
imul edx, ecx, 0xab69
xor edi, edx
xor r8d, edi
lea ecx, [r8 + 0x7f1137f]
ror ecx, 0xf
imul edx, ecx, 0x605e
mov ecx, r8d
rol ecx, 2
add edx, ecx
xor r14d, edx
lea ecx, [r14 + 0x54969fa2]
ror ecx, 0xe
imul edx, ecx, 0x7f1
mov ecx, r14d
rol ecx, 8
sub edx, ecx
xor r8d, edx
mov ecx, r8d
mov edi, 0xab69605e
xor ecx, edi
ror ecx, 0xc
imul edx, ecx, 0x137f
mov ecx, r8d
ror ecx, 0xa
xor edx, ecx
xor r14d, edx
mov ecx, r14d
xor ecx, 0x7f1
imul edx, ecx, 0xab69
mov ecx, r14d
shr ecx, 0xa
xor edx, ecx
xor edx, r8d
mov r8d, 0x605e
mov ecx, edx
not ecx
ror ecx, 5
add ecx, r8d
imul ecx, ecx, 0x7f1
xor r14d, ecx
lea r13d, [r14 - 0x7f1]
xor r13d, edx
xor r13d, edi
mov ecx, r13d
xor ecx, 0x7f1
rol ecx, 2
imul edx, ecx, 0x137f
mov ecx, r13d
shr ecx, 2
add edx, ecx
xor r14d, edx
lea ecx, [r14 - 0x7f1137f]
ror ecx, 6
imul edx, ecx, 0xab69
mov ecx, r14d
rol ecx, 7
add edx, ecx
xor r13d, edx
mov ecx, r13d
mov edi, r13d
xor ecx, 0x137f
ror edi, 9
imul edx, ecx, 0x605e
add edi, edx
xor r14d, edi
mov ecx, r14d
xor ecx, 0xab69
rol ecx, 5
imul edx, ecx, 0x7f1
mov ecx, r14d
rol ecx, 7
add edx, ecx
xor r13d, edx
xor r14d, r13d
xor r14d, 0xac987321
mov ecx, r14d
ror ecx, 3
imul edx, ecx, 0x137f
sub edx, 0xd0dd417
xor r13d, edx
lea ecx, [r13 - 0x7f1137f]
ror ecx, 1
imul edx, ecx, 0x605e
mov ecx, r13d
ror ecx, 6
sub edx, ecx
xor r14d, edx
lea ecx, [r14 - 0x54969fa2]
rol ecx, 3
imul edx, ecx, 0x7f1
mov ecx, r14d
rol ecx, 0xe
add edx, ecx
xor r13d, edx
lea ecx, [r13 - 0x54969fa2]
rol ecx, 0xf
imul edx, ecx, 0x137f
mov ecx, r13d
ror ecx, 0xe
sub edx, ecx
xor r14d, edx
mov ecx, r14d
xor ecx, r8d
imul edx, ecx, 0xab69
mov ecx, r14d
shr ecx, 3
xor edx, ecx
xor r13d, edx
mov ecx, r13d
xor ecx, 0x7f1137f
rol ecx, 4
imul edx, ecx, 0x605e
mov ecx, r13d
xor r13d, eax
rol ecx, 2
mov eax, r9d
xor edx, ecx
xor edx, r12d
mov r12d, r10d
xor r14d, edx
mov byte [rbx - 4], r14b
mov byte [rbx], r13b
lea rbx, [rbx + 8]
ror r14d, 8
mov byte [rbx - 0xd], r14b
ror r13d, 8
mov byte [rbx - 9], r13b
ror r14d, 8
mov byte [rbx - 0xe], r14b
ror r13d, 8
mov byte [rbx - 0xa], r13b
ror r14d, 8
ror r13d, 8
mov byte [rbx - 0xf], r14b
mov byte [rbx - 0xb], r13b
ror r13d, 8
ror r14d, 8
sub rsi, r11
jne 0x1402698bf
mov rbx, qword [rsp + 0x78]
xor r14d, r14d
mov r11, qword [rbp - 0x38]
mov ecx, r14d
mov r15d, dword [rbp - 0x80]
mov al, r14b
mov esi, r14d
mov r12d, r14d
lea r9d, [r14 + 1]
mov edi, 0x338
xor al, byte [rcx + r11]
add rcx, r9
cmp rcx, rdi
jb 0x140269be2
movzx ecx, al
cmp rcx, qword [0x140319938]
je 0x140269c02
mov r12d, 0xc004d501
jmp 0x140269c10
mov qword [rbp + 0x68], r11
mov r11, r14
mov qword [rbp + 0x90], rdi
test r11, r11
je 0x140269c1d
mov rcx, r11
call fcn.14009447c
test r12d, r12d
js 0x140269d78
mov rax, qword [rbp + 0x90]
lea r12, [0x14038a340]
mov rdi, qword [rbp + 0x68]
xor edx, edx
mov rcx, r12
lea r8d, [rdx + 0x60]
mov byte [rax + rdi - 1], r14b
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
jmp 0x140269d6a
mov rdx, rdi
or rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], r14w
jne 0x140269c57
lea rdi, [rdi + rax*2]
mov eax, dword [rbp - 0x7c]
lea rcx, [rax + rax*2]
lea r14, [r12 + rcx*8]
xor ecx, ecx
mov r8, r14
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r8d, r8d
test eax, eax
je 0x140269d75
mov rax, qword [r14]
mov ecx, 0x5a4d
mov esi, r8d
cmp word [rax], cx
je 0x140269ca3
mov esi, 0xc000007b
jmp 0x140269cee
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x140269c9c
add rcx, qword [r14]
cmp rcx, qword [r14]
jb 0x140269c9c
cmp dword [rcx], 0x4550
jne 0x140269c9c
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140269cdc
mov esi, 0xc000000d
jmp 0x140269cee
mov rax, qword [rcx + 0x88]
mov qword [r14 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r14 + 8], eax
mov r13d, dword [rdi + 2]
mov r12d, r8d
add rdi, 6
test r13d, r13d
je 0x140269d58
mov rdx, rdi
or rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], r8b
jne 0x140269d05
inc rdi
add rdi, rax
test esi, esi
js 0x140269d45
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rax
test rax, rax
je 0x140269e08
mov eax, dword [rsp + 0x60]
lea rdx, section..data
mov qword [rdx + rax*8], rcx
mov eax, 1
add dword [rsp + 0x60], eax
add r12d, eax
cmp r12d, r13d
jb 0x140269cfe
jmp 0x140269d5d
mov eax, 1
add dword [rbp - 0x7c], eax
lea r12, [0x14038a340]
xor r14d, r14d
cmp byte [rdi], r14b
jne 0x140269c50
jmp 0x140269d7d
xor r14d, r14d
mov esi, 0xc000007a
mov rdi, qword [rbp + 0x68]
test rdi, rdi
je 0x140269da6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, 4
lea r12d, [r13 - 3]
test esi, esi
jns 0x140269e10
lea rdi, [0x14038a340]
mov esi, r13d
mov rcx, qword [rdi]
test rcx, rcx
je 0x140269dd2
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rsi, r12
jne 0x140269dbe
xor edx, edx
lea r8d, [rsi + 0x60]
lea rcx, [0x14038a340]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x140269e1f
xor r14d, r14d
jmp 0x140269d7d
mov eax, dword [0x140389de8]
add eax, r12d
mov dword [0x140389de8], eax
mov rcx, qword [rbp + 8]
lea r9, [rbp + 0x108]
mov eax, r14d
lea rdx, [rbp + 0x690]
xchg dword [0x14038b0f0], eax
mov eax, dword [rbp - 0x50]
neg r15d
mov dword [rbp + 0x698], r15d
xorps xmm0, xmm0
xor r15d, r15d
mov dword [rbp + 0x694], eax
mov rax, qword [0x140386018]
xor r8d, r8d
mov dword [rsp + 0x28], r15d
mov esi, r14d
mov qword [rsp + 0x20], r15
mov qword [rbp + 0x108], r14
movdqu xmmword [rbp + 0x6a0], xmm0
mov qword [rbp + 0x6b0], r14
mov dword [rbp + 0x6b8], r14d
mov dword [rbp + 0x690], PathIsExe
mov dword [rbp + 0x69c], 0x200001
call qword [case.0x14006b68f.0]
mov qword [rbp + 8], rax
mov r14, rax
mov edi, 0x80004005
test rax, rax
jne 0x140269ed2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x140269ecd
movzx esi, ax
or esi, 0x80070000
test esi, esi
cmovns esi, edi
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r12d
jne 0x140269ed2
mov eax, dword [0x140389de8]
test eax, eax
jle 0x140269f4a
sub eax, r12d
mov dword [0x140389de8], eax
jne 0x140269f4a
lea rdi, [0x14038a340]
mov r14, r13
mov rcx, qword [rdi]
test rcx, rcx
je 0x140269f12
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, r12
jne 0x140269efe
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14038a340]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov r14, qword [rbp + 8]
mov eax, r15d
xchg dword [0x14038b0f0], eax
test esi, esi
js 0x14026d1a7
mov rcx, qword [rbx + 8]
mov rdx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
nop dword [rax + rax]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbx + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
nop dword [rax + rax]
mov qword [rbp + 0xe8], rax
test rax, rax
jne 0x140269f9d
call fcn.140020b4c
mov esi, eax
test eax, eax
js 0x14026d1a7
cmp dword [rbx + 0x80], r15d
je 0x140269fab
mov ecx, r15d
jmp 0x140269fb5
mov ecx, dword [rsp + 0x64]
add ecx, dword [rbp + reloc.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_Ordinal_292]
mov dword [rbx + 0x1c], ecx
lea rax, [rbx + 0x1c]
mov dword [rbx + 0x20], r15d
lea rcx, [rbp + 0x140]
mov edi, dword [rbx + 0x78]
xor edx, edx
mov qword [rbp - 0x38], rax
mov rax, qword [rbx + 8]
mov qword [rbp], rax
lea r8d, [rdx + 0x70]
mov dword [rsp + 0x64], edi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xorps xmm0, xmm0
mov dword [rbp + 0x28], r12d
xor eax, eax
mov qword [rbp - 0x18], r15
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x650], rax
movups xmmword [rbp + 0x630], xmm0
mov dword [rbp + 0x658], eax
movups xmmword [rbp + 0x640], xmm0
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x60], r15
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r12d
jne 0x14026a01f
mov eax, dword [0x140389de8]
test eax, eax
jne 0x14026a5c2
mov ecx, 0x338
mov dword [rsp + 0x60], r15d
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x98], r15
call fcn.140091688
mov qword [rsp + 0x78], rax
mov rbx, rax
test rax, rax
je 0x14026a52d
or ecx, 0xffffffff
lea rdi, [rbx + 7]
xor eax, eax
lea r13, [0x140319602]
mov r12d, r15d
mov r14d, eax
lea esi, [rax + 0x67]
lea ebx, [rax + 1]
movzx eax, byte [r13 - 1]
movzx r11d, byte [r13 - 2]
movzx r10d, byte [r13 + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [r13]
lea r13, [r13 + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [r13 - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r13 - 5]
or r10d, eax
xor r14d, r11d
movzx eax, byte [r13 - 4]
shl r10d, 8
or r10d, eax
movzx eax, byte [r13 - 3]
shl r10d, 8
or r10d, eax
mov r9d, r10d
xor r9d, r15d
xor r9d, r14d
xor r9d, 0xac987321
lea eax, [r9 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r9d
rol eax, 0xa
add edx, eax
xor r14d, edx
lea eax, [r14 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r14d
rol eax, 2
sub edx, eax
xor r9d, edx
imul edx, r9d, 0x605e
mov eax, r9d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r14d, edx
mov eax, r14d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r9d, edx
mov edx, r9d
xor edx, 0xab69605e
sub eax, edx
xor r14d, eax
mov eax, r14d
mov r8d, r14d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r9d, r8d
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r9d
rol eax, 2
add edx, eax
xor r14d, edx
lea eax, [r14 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 8
sub edx, eax
xor r9d, edx
mov eax, r9d
mov r8d, 0xab69605e
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r9d
ror eax, 0xa
xor edx, eax
xor r14d, edx
mov eax, r14d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r14d
shr eax, 0xa
xor edx, eax
xor edx, r9d
mov r9d, 0x605e
mov eax, edx
not eax
ror eax, 5
add eax, r9d
imul eax, eax, 0x7f1
xor r14d, eax
lea r15d, [r14 - 0x7f1]
xor r15d, edx
xor r15d, r8d
mov eax, r15d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r15d
shr eax, 2
add edx, eax
xor r14d, edx
lea eax, [r14 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r14d
rol eax, 7
add edx, eax
xor r15d, edx
mov eax, r15d
mov r8d, r15d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r14d, r8d
mov eax, r14d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 7
add edx, eax
xor r15d, edx
xor r14d, r15d
xor r14d, 0xac987321
mov eax, r14d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r15d, edx
lea eax, [r15 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r15d
ror eax, 6
sub edx, eax
xor r14d, edx
lea eax, [r14 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 0xe
add edx, eax
xor r15d, edx
lea eax, [r15 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r15d
ror eax, 0xe
sub edx, eax
xor r14d, edx
mov eax, r14d
xor eax, r9d
imul edx, eax, 0xab69
mov eax, r14d
shr eax, 3
xor edx, eax
xor r15d, edx
mov eax, r15d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r15d
xor r15d, ecx
rol eax, 2
mov ecx, r10d
xor edx, eax
xor edx, r12d
mov r12d, r11d
xor r14d, edx
mov byte [rdi - 4], r14b
mov byte [rdi], r15b
lea rdi, [rdi + 8]
ror r14d, 8
mov byte [rdi - 0xd], r14b
ror r15d, 8
mov byte [rdi - 9], r15b
ror r14d, 8
mov byte [rdi - 0xe], r14b
ror r15d, 8
mov byte [rdi - 0xa], r15b
ror r14d, 8
ror r15d, 8
mov byte [rdi - 0xf], r14b
mov byte [rdi - 0xb], r15b
ror r15d, 8
ror r14d, 8
sub rsi, rbx
jne 0x14026a081
mov edi, dword [rsp + 0x64]
xor r15d, r15d
mov rbx, qword [rsp + 0x78]
mov eax, r15d
mov cl, r15b
mov esi, r15d
mov r12d, r15d
mov r13d, r15d
lea r9d, [r15 + 1]
mov edx, 0x338
xor cl, byte [rax + rbx]
add rax, r9
cmp rax, rdx
jb 0x14026a3a3
movzx eax, cl
cmp rax, qword [0x140319938]
je 0x14026a3c2
mov r12d, 0xc004d501
jmp 0x14026a3d0
mov qword [rbp + 0x70], rbx
mov rbx, r15
mov qword [rbp + 0x98], rdx
test rbx, rbx
je 0x14026a3dd
mov rcx, rbx
call fcn.14009447c
test r12d, r12d
js 0x14026a52d
mov rax, qword [rbp + 0x98]
lea r14, [0x14038a340]
mov rbx, qword [rbp + 0x70]
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x60]
mov byte [rax + rbx - 1], r15b
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
jmp 0x14026a51d
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x14026a417
lea rbx, [rbx + rax*2]
mov eax, r13d
lea rcx, [rax + rax*2]
lea r14, [r14 + rcx*8]
xor ecx, ecx
mov r8, r14
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14026a52d
mov rax, qword [r14]
mov ecx, 0x5a4d
mov esi, r15d
cmp word [rax], cx
je 0x14026a460
mov esi, 0xc000007b
jmp 0x14026a4ab
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14026a459
add rcx, qword [r14]
cmp rcx, qword [r14]
jb 0x14026a459
cmp dword [rcx], 0x4550
jne 0x14026a459
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14026a499
mov esi, 0xc000000d
jmp 0x14026a4ab
mov rax, qword [rcx + 0x88]
mov qword [r14 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r14 + 8], eax
mov r12d, dword [rbx + 2]
xor ecx, ecx
add rbx, 6
test r12d, r12d
je 0x14026a50b
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], cl
jne 0x14026a4c1
inc rbx
add rbx, rax
test esi, esi
js 0x14026a4f8
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14026a528
mov ecx, dword [rsp + 0x60]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
xor ecx, ecx
mov eax, 1
add dword [rsp + 0x60], eax
add r15d, eax
cmp r15d, r12d
jb 0x14026a4ba
jmp 0x14026a510
mov eax, 1
add r13d, eax
lea r14, [0x14038a340]
xor r15d, r15d
cmp byte [rbx], r15b
jne 0x14026a410
jmp 0x14026a532
xor r15d, r15d
jmp 0x14026a532
mov esi, 0xc000007a
mov rbx, qword [rbp + 0x70]
test rbx, rbx
je 0x14026a55b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, 4
lea r12d, [r13 - 3]
test esi, esi
jns 0x14026a5bc
lea r14, [0x14038a340]
mov esi, r13d
mov rbx, r14
mov rcx, qword [rbx]
test rcx, rcx
je 0x14026a58a
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rbx, 0x18
sub rsi, r12
jne 0x14026a576
xor edx, edx
lea r8d, [rsi + 0x60]
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x14026a5cb
mov eax, dword [0x140389de8]
add eax, r12d
mov dword [0x140389de8], eax
mov eax, r15d
mov dword [rbp - 0x50], r15d
xchg dword [0x14038b0f0], eax
xorps xmm0, xmm0
mov qword [rbp + 0x80], r15
movups xmmword [rbp + 0xc8], xmm0
mov dword [rsp + 0x70], r15d
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x28], r15
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r12d
jne 0x14026a5fa
mov eax, dword [0x140389de8]
test eax, eax
jne 0x14026abaf
mov ecx, 0x338
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x6c], r15d
mov qword [rbp + 0x78], r15
mov qword [rbp + 0xa0], r15
call fcn.140091688
mov qword [rsp + 0x78], rax
mov rbx, rax
test rax, rax
je 0x14026ab1a
or esi, 0xffffffff
mov byte [rsp + 0x68], r15b
xor eax, eax
lea rdi, [rbx + 7]
mov r13d, r15d
lea r12, [0x140319602]
mov r14d, eax
lea ecx, [rax + 0x67]
lea ebx, [rax + 1]
movzx eax, byte [r12 - 1]
movzx r11d, byte [r12 - 2]
movzx r10d, byte [r12 + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [r12]
lea r12, [r12 + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [r12 - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r12 - 5]
or r10d, eax
xor r14d, r11d
movzx eax, byte [r12 - 4]
shl r10d, 8
or r10d, eax
movzx eax, byte [r12 - 3]
shl r10d, 8
or r10d, eax
xor r15d, r10d
xor r15d, r14d
xor r15d, 0xac987321
mov r9d, r15d
lea eax, [r15 + 0x54969fa2]
rol r15d, 0xa
rol eax, 5
imul edx, eax, 0x137f
add edx, r15d
xor r14d, edx
lea eax, [r14 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r14d
rol eax, 2
sub edx, eax
xor r9d, edx
imul edx, r9d, 0x605e
mov eax, r9d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r14d, edx
mov eax, r14d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r9d, edx
mov edx, r9d
xor edx, 0xab69605e
sub eax, edx
xor r14d, eax
mov eax, r14d
mov r8d, r14d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r9d, r8d
mov r8d, 0xab69605e
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r9d
rol eax, 2
add edx, eax
xor r14d, edx
lea eax, [r14 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 8
sub edx, eax
xor r9d, edx
mov eax, r9d
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r9d
ror eax, 0xa
xor edx, eax
xor r14d, edx
mov eax, r14d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r14d
shr eax, 0xa
xor edx, eax
xor r9d, edx
mov eax, r9d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r14d, eax
lea r15d, [r14 - 0x7f1]
xor r15d, r9d
xor r15d, r8d
mov eax, r15d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r15d
shr eax, 2
add edx, eax
xor r14d, edx
lea eax, [r14 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r14d
rol eax, 7
add edx, eax
xor r15d, edx
mov eax, r15d
mov r8d, r15d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r14d, r8d
mov eax, r14d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 7
add edx, eax
xor r15d, edx
xor r14d, r15d
xor r14d, 0xac987321
mov eax, r14d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r15d, edx
lea eax, [r15 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r15d
ror eax, 6
sub edx, eax
xor r14d, edx
lea eax, [r14 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r14d
rol eax, 0xe
add edx, eax
xor r15d, edx
lea eax, [r15 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r15d
ror eax, 0xe
sub edx, eax
xor r14d, edx
mov eax, r14d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r14d
shr eax, 3
xor edx, eax
xor r15d, edx
mov eax, r15d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r15d
xor r15d, esi
rol eax, 2
mov esi, r10d
xor edx, eax
xor edx, r13d
mov r13d, r11d
xor r14d, edx
mov byte [rdi - 4], r14b
mov byte [rdi], r15b
lea rdi, [rdi + 8]
ror r14d, 8
mov byte [rdi - 0xd], r14b
ror r15d, 8
mov byte [rdi - 9], r15b
ror r14d, 8
mov byte [rdi - 0xe], r14b
ror r15d, 8
mov byte [rdi - 0xa], r15b
ror r14d, 8
ror r15d, 8
mov byte [rdi - 0xf], r14b
mov byte [rdi - 0xb], r15b
ror r15d, 8
ror r14d, 8
sub rcx, rbx
jne 0x14026a666
mov esi, dword [rsp + 0x6c]
xor r15d, r15d
mov cl, byte [rsp + 0x68]
mov eax, r15d
mov edi, dword [rsp + 0x64]
mov r12d, esi
mov rbx, qword [rsp + 0x78]
mov r13d, esi
lea r9d, [r15 + 1]
mov edx, 0x338
xor cl, byte [rax + rbx]
add rax, r9
cmp rax, rdx
jb 0x14026a990
movzx eax, cl
cmp rax, qword [0x140319938]
je 0x14026a9af
mov r12d, 0xc004d501
jmp 0x14026a9bd
mov qword [rbp + 0x78], rbx
mov rbx, r15
mov qword [rbp + 0xa0], rdx
test rbx, rbx
je 0x14026a9ca
mov rcx, rbx
call fcn.14009447c
test r12d, r12d
js 0x14026ab1a
mov rax, qword [rbp + 0xa0]
lea r14, [0x14038a340]
mov rbx, qword [rbp + 0x78]
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x60]
mov byte [rax + rbx - 1], r15b
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
jmp 0x14026ab0a
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x14026aa04
lea rbx, [rbx + rax*2]
mov eax, r13d
lea rcx, [rax + rax*2]
lea r14, [r14 + rcx*8]
xor ecx, ecx
mov r8, r14
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14026ab1a
mov rax, qword [r14]
mov ecx, 0x5a4d
mov esi, r15d
cmp word [rax], cx
je 0x14026aa4d
mov esi, 0xc000007b
jmp 0x14026aa98
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14026aa46
add rcx, qword [r14]
cmp rcx, qword [r14]
jb 0x14026aa46
cmp dword [rcx], 0x4550
jne 0x14026aa46
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14026aa86
mov esi, 0xc000000d
jmp 0x14026aa98
mov rax, qword [rcx + 0x88]
mov qword [r14 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r14 + 8], eax
mov r12d, dword [rbx + 2]
xor ecx, ecx
add rbx, 6
test r12d, r12d
je 0x14026aaf8
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], cl
jne 0x14026aaae
inc rbx
add rbx, rax
test esi, esi
js 0x14026aae5
mov rcx, qword [r14]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14026ab15
mov ecx, dword [rsp + 0x60]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
xor ecx, ecx
mov eax, 1
add dword [rsp + 0x60], eax
add r15d, eax
cmp r15d, r12d
jb 0x14026aaa7
jmp 0x14026aafd
mov eax, 1
add r13d, eax
lea r14, [0x14038a340]
xor r15d, r15d
cmp byte [rbx], r15b
jne 0x14026a9fd
jmp 0x14026ab1f
xor r15d, r15d
jmp 0x14026ab1f
mov esi, 0xc000007a
mov rbx, qword [rbp + 0x78]
test rbx, rbx
je 0x14026ab48
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, 4
lea r12d, [r13 - 3]
test esi, esi
jns 0x14026aba9
lea r14, [0x14038a340]
mov esi, r13d
mov rbx, r14
mov rcx, qword [rbx]
test rcx, rcx
je 0x14026ab77
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rbx, 0x18
sub rsi, r12
jne 0x14026ab63
xor edx, edx
lea r8d, [rsi + 0x60]
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x14026abb8
mov eax, dword [0x140389de8]
add eax, r12d
mov dword [0x140389de8], eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayDestroy
mov r14d, edi
and r14d, ecx
mov eax, r15d
xchg dword [0x14038b0f0], eax
mov eax, edi
mov dword [rbp - 0x40], r14d
shr eax, 4
xorps xmm0, xmm0
and ax, cx
xor edx, edx
mov word [rbp + 0xa60], ax
mov r8d, 0x403
mov eax, edi
shr edi, 0xc
shr eax, 8
and di, cx
and ax, cx
mov word [rbp + 0xa64], di
mov word [rbp + 0xa62], ax
xor ecx, ecx
mov rax, qword [0x1403860f8]
movups xmmword [rbp + 0x5a0], xmm0
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x30], 0xffffff
test rax, rax
jne 0x14026ac59
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026ac47
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026bff7
mov esi, 0x80004005
jmp 0x14026bff7
mov rax, qword [0x1403860a0]
lea r9, [rbp - 8]
xor r8d, r8d
mov qword [rbp + 0xc0], r15
lea rdx, [rbp - 0x20]
mov qword [rbp + 0x58], r15
mov rdi, r15
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0x18], r15
mov esi, r15d
lea ecx, [r8 + 8]
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x10], r15
mov dword [rbp - 8], r15d
call qword [case.0x14006b68f.0]
mov r12d, 0x8007000e
test eax, eax
jne 0x14026acd4
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026acc2
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026add2
mov esi, 0x80004005
jmp 0x14026add2
mov ecx, dword [rbp - 8]
add rcx, rcx
call fcn.140091688
lea rcx, [rbp + 0x50]
mov rbx, rax
call fcn.1401fc794
test rbx, rbx
jne 0x14026acfc
mov qword [rbp + 0x50], r15
mov esi, r12d
jmp 0x14026add2
mov ecx, dword [rbp - 0x20]
inc ecx
mov qword [rbp + 0x50], rbx
shl rcx, 2
call fcn.140091688
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x78], rax
mov r15, rax
call fcn.1401fc794
test r15, r15
jne 0x14026ad2a
mov qword [rbp + 0x10], r15
jmp 0x14026acf4
mov rax, qword [0x1403860a0]
lea r9, [rbp - 8]
mov r8, rbx
mov qword [rbp + 0x10], r15
lea rdx, [rbp - 0x20]
mov ecx, 8
call qword [case.0x14006b68f.0]
xor ecx, ecx
test eax, eax
jne 0x14026ad65
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r15d, r15d
jmp 0x14026acb3
mov rdi, r15
mov r12d, ecx
cmp dword [rbp - 0x20], ecx
jbe 0x14026adb2
mov r15d, 1
mov rax, qword [0x1403860b0]
xor edx, edx
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov dword [rdi], eax
or rax, 0xffffffffffffffff
xor ecx, ecx
inc rax
cmp word [rbx + rax*2], cx
jne 0x14026ad90
lea rbx, [rbx + rax*2]
add rdi, r13
add rbx, 2
add r12d, r15d
cmp r12d, dword [rbp - 0x20]
jb 0x14026ad76
mov r15, qword [rsp + 0x78]
mov dword [rdi], 0x409
mov rdi, r15
mov eax, dword [rbp - 0x20]
inc eax
mov qword [rbp + 0xc0], r15
mov dword [rsp + 0x64], eax
xor r15d, r15d
mov qword [rbp + 0x10], rcx
lea rcx, [rbp + 0x10]
call fcn.1401fc794
lea rcx, [rbp + 0x50]
call fcn.1401fc794
test esi, esi
js 0x14026b3aa
lea r10, [0x140339fa0]
mov ebx, r15d
mov r9d, r15d
mov dword [rsp + 0x60], ebx
cmp dword [rsp + 0x64], r15d
jbe 0x14026ae39
mov r8, r15
mov ecx, r15d
mov rdx, r10
mov eax, dword [rdx]
cmp dword [rdi + r8], eax
je 0x14026ae33
mov eax, 1
add rdx, r13
add ecx, eax
cmp ecx, 0x26
jb 0x14026ae0d
add r9d, eax
add r8, r13
cmp r9d, dword [rsp + 0x64]
jb 0x14026ae07
jmp 0x14026ae39
mov ebx, ecx
mov dword [rsp + 0x60], ecx
mov rax, qword [0x1403860a8]
lea rdx, [rbp + 0xa70]
xor r9d, r9d
mov edi, ebx
mov dword [rsp + 0x64], r15d
mov ecx, dword [r10 + rdi*4]
lea r8d, [r9 + 0x55]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026aea7
mov rax, qword [0x140386090]
lea r8, [rbp + 0x890]
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp + 0xa70]
lea edx, [r9 + 0x48]
call qword [case.0x14006b68f.0]
mov r9d, 1
test eax, eax
jle 0x14026aead
mov r12d, dword [rbp + 0x89c]
shr r12d, 0x1b
and r12d, r9d
mov dword [rsp + 0x64], r12d
jmp 0x14026aead
mov r9d, 1
lea rcx, str.Segoe_UI_Light
mov r8d, SafeArrayUnaccessData
lea rdx, [rbp + 0x9c0]
mov qword [rdx], rcx
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r15w
jne 0x14026aec8
lea rcx, [rcx + rax*2]
add rdx, 8
add rcx, 2
sub r8, r9
jne 0x14026aec1
lea rcx, [rdi + rdi*2]
lea rdx, [0x140321be0]
movzx eax, byte [rcx + rdx]
mov r13, qword [rbp + rax*8 + 0x9c0]
movzx eax, byte [rcx + rdx + 1]
mov qword [rbp - 0x58], r13
mov rax, qword [rbp + rax*8 + 0x9c0]
mov qword [rbp - 0x68], rax
movzx eax, byte [rcx + rdx + 2]
mov rax, qword [rbp + rax*8 + 0x9c0]
mov qword [rbp - 0x28], rax
mov ecx, 0x1c90
mov esi, r15d
call fcn.140091688
mov r14d, dword [rbp - 0x40]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14026af45
mov esi, 0x8007000e
jmp 0x14026b3ae
mov r11d, r15d
lea r13, [0x14033a042]
mov r10d, r15d
or r12d, 0xffffffff
lea r15, [rax + 7]
mov r14d, 0x392
mov r9d, esi
mov ebx, 1
movzx eax, byte [r13 - 1]
movzx r8d, byte [r13 - 2]
movzx edi, byte [r13 + 2]
shl r8d, 8
or r8d, eax
shl edi, 8
movzx eax, byte [r13]
lea r13, [r13 + 8]
shl r8d, 8
or r8d, eax
movzx eax, byte [r13 - 7]
shl r8d, 8
or r8d, eax
movzx eax, byte [r13 - 5]
or edi, eax
xor r10d, r8d
movzx eax, byte [r13 - 4]
shl edi, 8
or edi, eax
movzx eax, byte [r13 - 3]
shl edi, 8
or edi, eax
xor r11d, edi
xor r11d, r10d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
imul ecx, eax, 0x137f
mov eax, r11d
rol eax, 0xa
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
imul ecx, eax, 0xab69
mov eax, r10d
rol eax, 2
sub ecx, eax
xor r11d, ecx
imul ecx, r11d, 0x605e
mov eax, r11d
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 2
sub ecx, eax
mov eax, 0x7f1137f
xor r11d, ecx
mov ecx, r11d
xor ecx, 0xab69605e
sub eax, ecx
xor r10d, eax
mov eax, r10d
mov edx, r10d
xor eax, 0x137f
ror edx, 6
imul ecx, eax, 0xab69
xor edx, ecx
xor r11d, edx
mov edx, 0xab69605e
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
imul ecx, eax, 0x605e
mov eax, r11d
rol eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 8
sub ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, edx
ror eax, 0xc
imul ecx, eax, 0x137f
mov eax, r11d
ror eax, 0xa
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, r11d
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
imul ecx, eax, 0xab69
mov eax, r10d
rol eax, 7
add ecx, eax
xor r11d, ecx
mov eax, r11d
mov edx, r11d
xor eax, 0x137f
ror edx, 9
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 7
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
imul ecx, eax, 0x605e
mov eax, r11d
ror eax, 6
sub ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x54969fa2]
rol eax, 3
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 0xe
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
imul ecx, eax, 0x137f
mov eax, r11d
ror eax, 0xe
sub ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
imul ecx, eax, 0x605e
mov eax, r11d
xor r11d, r12d
rol eax, 2
mov r12d, edi
xor ecx, eax
xor ecx, r9d
mov r9d, r8d
xor r10d, ecx
mov byte [r15 - 4], r10b
mov byte [r15], r11b
lea r15, [r15 + 8]
ror r10d, 8
mov byte [r15 - 0xd], r10b
ror r11d, 8
mov byte [r15 - 9], r11b
ror r10d, 8
mov byte [r15 - 0xe], r10b
ror r11d, 8
mov byte [r15 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r15 - 0xf], r10b
mov byte [r15 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, rbx
jne 0x14026af68
mov r14d, dword [rbp - 0x40]
xor r15d, r15d
mov r9, qword [rsp + 0x78]
mov eax, r15d
mov r12d, dword [rsp + 0x64]
xorps xmm1, xmm1
mov ebx, dword [rsp + 0x60]
mov ecx, 0x1c90
movdqu xmm0, xmmword [rax + r9]
add rax, 0x10
pxor xmm0, xmm1
movdqa xmm1, xmm0
cmp rax, rcx
jb 0x14026b275
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
movzx eax, al
cmp rax, qword [0x14033bcd0]
je 0x14026b2d3
mov esi, 0xc004d501
jmp 0x14026b2e1
mov qword [rbp + 0x58], r9
mov r9, r15
mov qword [rbp + 0xa8], rcx
test r9, r9
je 0x14026b2ee
mov rcx, r9
call fcn.14009447c
test esi, esi
js 0x14026b3aa
mov rdx, qword [rbp + 0x58]
lea rdi, [rbp + 0x990]
mov r8d, 6
lea r13d, [r8 - 5]
mov ecx, r15d
cmp ebx, ecx
jne 0x14026b315
mov qword [rdi], rdx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], r15b
jne 0x14026b319
inc rdx
add ecx, r13d
add rdx, rax
cmp ecx, 0x26
jb 0x14026b30e
add rdi, 8
sub r8, r13
jne 0x14026b30b
lea ecx, [r8 + 0x18]
call fcn.140091688
lea rcx, [rbp + 0x18]
mov rdi, rax
call fcn.1401fc794
test rdi, rdi
jne 0x14026b47a
mov rbx, r15
mov esi, 0x8007000e
mov qword [rbp + 0x18], rbx
xor r10d, r10d
mov r15d, 3
test rbx, rbx
je 0x14026b3a7
mov rdi, qword [rbx]
test rdi, rdi
je 0x14026b39e
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdi + rcx*2], r10w
jne 0x14026b37d
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
call fcn.14009447c
xor r10d, r10d
add rbx, 8
sub r15, r13
jne 0x14026b371
xor r15d, r15d
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp + 0x58]
test rdi, rdi
je 0x14026b3c2
mov rcx, qword [rbp + 0xa8]
xor eax, eax
rep stosb byte [rdi], al
lea rcx, [rbp + 0x18]
call fcn.1401fc794
lea rcx, [rbp + 0x58]
call fcn.1401fc794
lea rcx, [rbp + 0xc0]
call fcn.1401fc794
test esi, esi
js 0x14026bfde
mov rax, qword [rbp + 0x80]
lea r8, [rbp + 0x110]
xor edx, edx
xorps xmm0, xmm0
xor r9d, r9d
mov edi, r15d
mov esi, r15d
mov rcx, qword [rax]
mov qword [rbp + 0x148], rcx
mov rcx, qword [rax + 8]
mov qword [rbp + 0x150], rcx
mov rcx, qword [rax + 0x10]
mov rax, qword [0x140386168]
mov qword [rbp + 0x158], rcx
lea ecx, [rdx + 0x42]
movups xmmword [rbp + 0x110], xmm0
mov dword [rbp + 0x110], reloc.OLEAUT32.dll_SafeArrayGetDim
call qword [case.0x14006b68f.0]
test eax, eax
jne 0x14026b645
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026b468
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026b64e
mov esi, 0x80004005
jmp 0x14026b64e
xor eax, eax
mov dword [rsp + 0x64], r15d
xorps xmm0, xmm0
lea rcx, [rbp + 0xa60]
mov rbx, rdi
mov qword [rbp - 0x78], rcx
mov rdx, rdi
mov qword [rbp + 0x18], rbx
movups xmmword [rdi], xmm0
mov r8d, r15d
mov qword [rdi + 0x10], rax
lea r15d, [rax + 3]
mov qword [rbp - 0x60], rdx
xor r10d, r10d
movzx r9d, word [rcx]
lea rcx, [0x14033bcd8]
mov eax, r10d
cmp r9w, word [rcx]
je 0x14026b4d3
add eax, r13d
add rcx, 2
cmp eax, 6
jb 0x14026b4bc
jmp 0x14026b586
mov r15, qword [rbp + rax*8 + 0x990]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], r10b
jne 0x14026b4df
mov rax, qword [0x1403860c0]
lea r9d, [rcx + r13]
mov dword [rsp + 0x28], r10d
mov ecx, 0xfde9
mov r8, r15
mov qword [rsp + 0x20], r10
xor edx, edx
call qword [case.0x14006b68f.0]
movsxd r13, eax
test r13d, r13d
je 0x14026b60b
mov rcx, r13
add rcx, rcx
call fcn.140091688
mov rcx, qword [rbp - 0x60]
xor r10d, r10d
mov qword [rcx], rax
test rax, rax
je 0x14026b5fb
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [r15 + rcx], r10b
jne 0x14026b53b
mov r9d, 1
mov dword [rsp + 0x28], r13d
add r9d, ecx
mov qword [rsp + 0x20], rax
mov rax, qword [0x1403860c0]
mov ecx, 0xfde9
mov r8, r15
xor edx, edx
call qword [case.0x14006b68f.0]
xor r10d, r10d
test eax, eax
je 0x14026b5c5
mov rdx, qword [rbp - 0x60]
lea r15d, [r10 + 3]
mov r8d, dword [rsp + 0x64]
lea r13d, [r10 + 1]
mov rcx, qword [rbp - 0x78]
add r8d, r13d
add rcx, 2
mov dword [rsp + 0x64], r8d
add rdx, 8
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x60], rdx
cmp r8d, r15d
jb 0x14026b4ae
mov rbx, r10
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x18], rbx
mov dword [rbp + 0x140], r12d
jmp 0x14026b36c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r10d, r10d
mov esi, eax
test eax, eax
jle 0x14026b5e3
movzx esi, ax
or esi, 0x80070000
mov r13d, 1
test esi, esi
js 0x14026b366
mov esi, 0x80004005
jmp 0x14026b366
mov esi, 0x8007000e
mov r13d, 1
jmp 0x14026b366
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r10d, r10d
mov esi, eax
test eax, eax
jle 0x14026b629
movzx esi, ax
or esi, 0x80070000
mov r15d, 3
lea r13d, [r15 - 2]
test esi, esi
js 0x14026b36c
mov esi, 0x80004005
jmp 0x14026b36c
mov edi, dword [rbp + 0x114]
and edi, 1
mov dword [rbp + 0x144], edi
test esi, esi
js 0x14026bfde
mov edx, SafeArrayDestroy
mov ecx, r14d
lea eax, [rdx + 0x1f]
mov dword [rsp + 0x74], eax
sub ecx, 1
je 0x14026b693
sub ecx, 1
je 0x14026b687
cmp ecx, 1
jne 0x14026b698
mov r15d, 0xe1
mov dword [rsp + 0x70], r15d
jmp 0x14026b69c
mov r15d, reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rsp + 0x70], edx
jmp 0x14026b69c
mov r15d, eax
jmp 0x14026b68d
mov r15d, dword [rbp - 0x50]
mov esi, SHRestricted
lea rcx, [rbp + 0x8b0]
xor edx, edx
mov r12d, esi
lea edi, [rsi + 0x7c]
mov r8d, edi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860e0]
lea r8, [rbp + 0x8b0]
or edx, 0xffffffff
mov word [rbp + 0x8f4], di
xor ecx, ecx
call qword [case.0x14006b68f.0]
xor ebx, ebx
test eax, eax
je 0x14026b705
movzx r12d, word [rbp + 0x956]
mov eax, dword [rbp + 0x95c]
cmp r12d, esi
mov dword [rbp + 0xd0], eax
mov eax, dword [rbp + 0x960]
cmovb r12d, esi
mov dword [rbp + 0xd4], eax
mov eax, 1
lea rcx, [rbp + 0x770]
cmp r14d, eax
mov rdi, r13
cmovne rdi, qword [rbp - 0x28]
xor edx, edx
lea r8d, [rax + 0x5b]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov esi, ebx
call qword [case.0x14006b68f.0]
mov rbx, rax
test rax, rax
jne 0x14026b778
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r15d, r15d
mov esi, eax
test eax, eax
jle 0x14026b766
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026bfde
mov esi, 0x80004005
jmp 0x14026bfde
mov rax, qword [0x1403860b8]
mov r8d, 0x48
mov edx, r12d
mov ecx, r15d
call qword [case.0x14006b68f.0]
mov r8, rdi
mov dword [rbp + 0x780], 0x190
neg eax
mov byte [rbp + 0x78a], 5
mov edx, 0x20
mov dword [rbp + 0x770], eax
lea rcx, [rbp + 0x78c]
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x770]
call qword [case.0x14006b68f.0]
xor r15d, r15d
test rax, rax
jne 0x14026b800
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026b7f5
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026b807
mov esi, 0x80004005
jmp 0x14026b807
mov qword [rbp + 0x160], rax
mov rax, qword [0x140386160]
mov rdx, rbx
xor ecx, ecx
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026bfde
mov eax, 1
lea rcx, [rbp + 0x7d0]
cmp r14d, eax
cmovne r13, qword [rbp - 0x28]
xor edx, edx
lea r8d, [rax + 0x5b]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov esi, r15d
call qword [case.0x14006b68f.0]
mov rdi, rax
test rax, rax
jne 0x14026b873
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14026b757
mov ecx, dword [rsp + 0x70]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, r12d
call qword [case.0x14006b68f.0]
mov r8, r13
mov dword [rbp + 0x7e0], 0x190
neg eax
mov byte [rbp + 0x7ea], 5
mov edx, 0x20
mov dword [rbp + 0x7d0], eax
lea rcx, [rbp + 0x7ec]
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x7d0]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x14026b8f9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026b8ee
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026b900
mov esi, 0x80004005
jmp 0x14026b900
mov qword [rbp + 0x168], rax
mov rax, qword [0x140386160]
mov rdx, rdi
xor ecx, ecx
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026bfde
mov ecx, r14d
mov ebx, r15d
mov edx, r15d
sub ecx, 1
je 0x14026b932
sub ecx, 1
je 0x14026b96b
cmp ecx, 1
jne 0x14026b93e
mov ebx, dword [rbp + 0xd0]
mov edx, dword [rbp + 0xd4]
mov dword [rbp + 0x5a8], ebx
mov dword [rbp + 0x5ac], edx
mov ecx, 1
cmp r14d, ecx
je 0x14026b998
lea eax, [r14 - 2]
cmp eax, ecx
ja 0x14026b980
xor edi, edi
mov r13d, r15d
mov dword [rsp + 0x74], edi
mov dword [rsp + 0x70], edi
jmp 0x14026b9a6
mov eax, dword [rbp + 0xd0]
mov ecx, 4
cdq
idiv ecx
mov edx, r15d
mov ebx, eax
jmp 0x14026b93e
mov eax, dword [rbp - 0x48]
mov r15d, dword [rbp - 0x48]
mov r13d, dword [rbp - 0x48]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x48]
mov dword [rsp + 0x74], eax
jmp 0x14026b9a6
mov r13d, reloc.OLEAUT32.dll_DllRegisterServer
mov dword [rsp + 0x70], 0x20
mov rdx, qword [rbp + 0x160]
xor eax, eax
mov rcx, qword [rbp - 0x48]
mov esi, eax
mov rax, qword [0x140386078]
sub ebx, r13d
mov rdi, qword [rbp + 0x148]
sub ebx, r15d
mov dword [rbp + 0x194], ebx
mov dword [rbp + 0x184], ebx
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x78], rax
mov rdx, rdi
mov rdi, qword [rbp - 0x48]
lea r9, [rbp + 0x17c]
xor eax, eax
or r8d, 0xffffffff
mov qword [rsp + 0x28], rax
mov rcx, rdi
mov rax, qword [method.4.virtual_56]
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
xor ecx, ecx
test eax, eax
mov eax, 0x80004005
cmove esi, eax
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14026ba3c
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
xor ecx, ecx
test esi, esi
js 0x14026bfdb
mov rdx, qword [rbp + 0x168]
mov esi, ecx
mov rcx, qword [rbp - 0x48]
mov rax, qword [0x140386078]
mov rdi, qword [rbp + 0x150]
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x78], rax
mov rdx, rdi
mov rdi, qword [rbp - 0x48]
lea r9, [rbp + 0x18c]
xor eax, eax
or r8d, 0xffffffff
mov qword [rsp + 0x28], rax
mov rcx, rdi
mov rax, qword [method.4.virtual_56]
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
xor edx, edx
test eax, eax
mov eax, 0x80004005
cmove esi, eax
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14026bac6
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
xor edx, edx
test esi, esi
js 0x14026bfdb
mov ecx, dword [rbp + 0x184]
lea eax, [r14 - 2]
mov r9d, 1
cmp eax, r9d
ja 0x14026baee
mov ebx, dword [rbp + 0x194]
cmp ecx, ebx
cmovg ebx, ecx
mov r8d, dword [rsp + 0x74]
mov rax, qword [method.4.virtual_56]
cmp dword [rbp + 0x140], edx
je 0x14026bb23
mov edx, r15d
sub edx, ecx
lea rcx, [rbp + 0x17c]
add edx, ebx
call qword [case.0x14006b68f.0]
sub r15d, dword [rbp + 0x194]
lea edx, [rbx + r15]
jmp 0x14026bb36
mov edx, r13d
lea rcx, [rbp + 0x17c]
call qword [case.0x14006b68f.0]
mov edx, r13d
mov r8d, dword [rbp + 0x188]
lea rcx, [rbp + 0x18c]
add r8d, dword [rsp + 0x70]
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
lea eax, [r14 - 2]
mov edx, 1
cmp eax, edx
jbe 0x14026bde7
cmp r14d, edx
jne 0x14026be03
xor edx, edx
mov dword [rbp + 0x178], 0xffffff
lea rcx, [rbp + 0x830]
lea r8d, [rdx + 0x5c]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860f8]
xor r15d, r15d
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov esi, r15d
call qword [case.0x14006b68f.0]
mov rdi, rax
test rax, rax
je 0x14026b862
mov rax, qword [0x1403860b8]
lea r8d, [r15 + 0x48]
mov edx, r12d
lea ecx, [r15 + 0xb]
call qword [case.0x14006b68f.0]
mov r8, qword [rbp - 0x68]
lea edx, [r15 + 0x20]
neg eax
mov dword [rbp + 0x840], 0x190
lea rcx, [rbp + 0x84c]
mov dword [rbp + 0x830], eax
mov byte [rbp + 0x84a], 5
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x830]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x14026bc39
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026bc2e
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026bc40
mov esi, 0x80004005
jmp 0x14026bc40
mov qword [rbp + 0x170], rax
mov rax, qword [0x140386160]
mov rdx, rdi
xor ecx, ecx
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026bfde
mov rdx, qword [rbp + 0x170]
mov esi, r15d
mov r15, qword [rbp - 0x48]
mov rax, qword [0x140386078]
mov rcx, r15
mov rdi, qword [rbp + 0x158]
mov dword [rbp + 0x1a4], ebx
call qword [case.0x14006b68f.0]
xor r13d, r13d
lea r9, [rbp + 0x19c]
mov rbx, rax
mov qword [rsp + 0x28], r13
mov rax, qword [method.4.virtual_56]
or r8d, 0xffffffff
mov rdx, rdi
mov dword [rsp + 0x20], 0x460
mov rcx, r15
call qword [case.0x14006b68f.0]
test eax, eax
mov eax, 0x80004005
cmove esi, eax
test rbx, rbx
je 0x14026bcd8
mov rax, qword [0x140386078]
mov rdx, rbx
mov rcx, r15
call qword [case.0x14006b68f.0]
xor r15d, r15d
test esi, esi
js 0x14026bfde
mov eax, dword [rbp + 0x1a4]
lea ecx, [r15 + 0x5a]
add eax, 0x18
mov dword [rbp + 0x1a8], 0x20
cmp eax, ecx
lea edi, [rcx + 6]
mov r8d, edi
mov edx, r12d
cmovl eax, ecx
mov ecx, dword [rbp + 0x19c]
mov dword [rbp + 0x1a4], eax
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x1a0]
mov r8d, edi
mov dword [rbp + 0x19c], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x1a4]
mov r8d, edi
mov dword [rbp + 0x1a0], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov ecx, dword [rbp + 0x1a8]
mov r8d, edi
mov dword [rbp + 0x1a4], eax
mov edx, r12d
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov r8d, dword [rbp + 0x198]
lea rcx, [rbp + 0x19c]
add r8d, 0x24
mov dword [rbp + 0x1a8], eax
mov rax, qword [method.4.virtual_56]
cmp dword [rbp + 0x140], r15d
je 0x14026bdc6
mov edx, dword [rbp + 0x17c]
cmp edx, dword [rbp + 0x18c]
cmovge edx, dword [rbp + 0x18c]
call qword [case.0x14006b68f.0]
mov edx, 1
jmp 0x14026be06
mov edx, dword [rbp + 0x184]
cmp edx, dword [rbp + 0x194]
cmovle edx, dword [rbp + 0x194]
sub edx, dword [rbp + 0x1a4]
add edx, dword [rbp + 0x19c]
jmp 0x14026bdb9
mov eax, dword [rbp + 0x198]
mov dword [rbp + 0x5ac], eax
mov dword [rbp + 0x5a8], ebx
mov dword [rbp + 0x178], 0xffa8a8a8
xor r15d, r15d
mov esi, dword [rbp + 0x140]
mov ecx, r14d
mov ebx, dword [rbp + 0x5ac]
mov edi, dword [rbp + 0x5a8]
sub ecx, 1
je 0x14026bfce
sub ecx, 1
je 0x14026bee5
cmp ecx, 1
jne 0x14026bfd6
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x768], rax
xor ecx, ecx
mov rax, qword [method.4.virtual_56]
movups xmmword [rbp + 0x748], xmm0
movups xmmword [rbp + 0x758], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x748]
mov dword [rbp + 0x748], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026bfd6
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x75c]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x764]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x764]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0x764]
shr rcx, 0x20
sub ecx, ebx
imul ecx, ecx, 0x32
jmp 0x14026bfaf
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x740], rax
xor ecx, ecx
mov rax, qword [method.4.virtual_56]
movups xmmword [rbp + 0x720], xmm0
movups xmmword [rbp + 0x730], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x720]
mov dword [rbp + 0x720], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026bfd6
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x734]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x73c]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x73c]
test esi, esi
je 0x14026bf89
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0x734]
jmp 0x14026bf9f
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0x73c]
shr rax, 0x20
sub eax, ebx
imul ecx, eax, 0x5f
mov dword [rbp + 0x5a0], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0x5a4], edx
jmp 0x14026bfd6
and qword [rbp + 0x5a0], 0
mov esi, r15d
jmp 0x14026bfde
xor r15d, r15d
mov rdx, qword [rbp - 0x48]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
mov r13d, 4
mov ecx, 1
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ecx
jne 0x14026bffc
mov eax, dword [0x140389de8]
test eax, eax
jle 0x14026c072
sub eax, ecx
mov dword [0x140389de8], eax
jne 0x14026c072
lea r12, [0x14038a340]
mov rbx, r13
mov rdi, r12
mov r13, rcx
mov rcx, qword [rdi]
test rcx, rcx
je 0x14026c040
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, r13
jne 0x14026c02c
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
jmp 0x14026c075
mov r13, rcx
mov eax, r15d
lea rcx, [rbp + 0x80]
xchg dword [0x14038b0f0], eax
call fcn.1401fc794
test esi, esi
js 0x14026cfe5
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x14026c0a2
mov ebx, dword [rax]
mov esi, dword [rax + 4]
jmp 0x14026c0b2
mov rax, qword [rbp + 0x5a0]
mov qword [rbp - 0x78], rax
mov ebx, eax
mov esi, dword [rbp - 0x74]
xor edx, edx
lea rcx, [rbp + 0x1b0]
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rcx, qword [rbp]
mov edx, 7
mov rax, qword [0x140386050]
mov edi, r13d
call qword [case.0x14006b68f.0]
test rax, rax
je 0x14026c12b
mov rcx, rax
lea r8, [rbp + 0x1b0]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026c12b
mov eax, 0x20
cmp word [rbp + 0x1c2], ax
jne 0x14026c12b
cmp qword [rbp + 0x1c8], r15
je 0x14026c12b
cmp dword [rbp + 0x1b4], r15d
jle 0x14026c12b
cmp dword [rbp + 0x1b8], r15d
jg 0x14026c12e
mov edi, r15d
mov dword [rbp + 0x28], edi
test edi, edi
jne 0x14026c13a
cmp r14d, r13d
jne 0x14026c194
mov rax, qword [method.4.virtual_56]
lea rcx, [rbp + 0x17c]
mov r8d, esi
mov edx, ebx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rcx, [rbp + 0x18c]
mov r8d, esi
mov edx, ebx
call qword [case.0x14006b68f.0]
cmp r14d, r13d
jne 0x14026c194
mov ecx, dword [rbp + 0x144]
mov rax, qword [0x140386028]
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0xb26720
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x60], rax
mov rbx, qword [rbp]
mov edx, r13d
mov rax, qword [method.4.virtual_56]
mov rcx, rbx
call qword [case.0x14006b68f.0]
cmp dword [rbp + 0x140], r15d
mov ecx, 0x20812
mov dword [rbp - 0x48], eax
mov eax, 0x810
cmovne eax, ecx
mov dword [rbp - 0x7c], eax
cmp dword [rbp + 0x28], r15d
je 0x14026cc79
mov eax, dword [rbp + 0x144]
lea rcx, [rbp + reloc.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_Ordinal_544]
mov r13, qword [rbp + 0x148]
xor edx, edx
mov dword [rsp + 0x6c], eax
mov rax, qword [rbp + 0x160]
mov qword [rsp + 0x78], rax
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
lea rcx, [rbp + 0x530]
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x78], r15
xorps xmm0, xmm0
mov dword [rsp + 0x64], r15d
mov rdi, r15
mov dword [rsp + 0x60], r15d
mov r12, r15
mov qword [rbp + 0x710], rax
mov dword [rbp + 0x718], eax
movups xmmword [rbp + 0x6f0], xmm0
movups xmmword [rbp + 0x700], xmm0
movups xmmword [rbp + 0x5e0], xmm0
test rbx, rbx
jne 0x14026c25e
mov esi, 0x80070057
jmp 0x14026cfcc
test r13, r13
je 0x14026c254
mov rax, qword [0x140386050]
mov edx, 7
mov rcx, rbx
call qword [case.0x14006b68f.0]
xor esi, esi
mov r15d, 0x80808081
test rax, rax
jne 0x14026c2b1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026c2a0
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026c2a9
mov esi, 0x80004005
xor r15d, r15d
jmp 0x14026cfcc
mov rcx, rax
lea r8, [rbp + reloc.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_Ordinal_544]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026c2f0
mov rax, qword [rbp + 0x238]
mov qword [rbp - 0x68], rax
mov eax, dword [rbp + reloc.SHLWAPI.dll_Ordinal_548]
mov dword [rsp + 0x64], eax
mov eax, dword [rbp + 0x228]
mov dword [rsp + 0x60], eax
mov rax, qword [0x140386010]
mov rcx, rbx
call qword [case.0x14006b68f.0]
xor ecx, ecx
mov rbx, rax
test rax, rax
je 0x14026c285
mov eax, dword [rbp + 0x184]
lea r9, [rbp + 0xe0]
sub eax, dword [rbp + 0x17c]
lea rdx, [rbp + 0x6f0]
mov dword [rbp + 0x6f4], eax
xorps xmm0, xmm0
mov eax, dword [rbp + 0x180]
xor r8d, r8d
sub eax, dword [rbp + 0x188]
mov dword [rsp + 0x28], ecx
mov dword [rbp + 0x6f8], eax
mov rax, qword [0x140386018]
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0x710], rcx
mov dword [rbp + 0x718], ecx
mov qword [rsp + 0x20], rcx
mov rcx, rbx
movdqu xmmword [rbp + 0x700], xmm0
mov dword [rbp + 0x6f0], PathIsExe
mov dword [rbp + 0x6fc], 0x200001
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14026c3c1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026c3b3
movzx esi, ax
or esi, 0x80070000
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
mov rax, qword [rbp - 0x58]
test esi, esi
js 0x14026c6f2
test rax, rax
je 0x14026c3f8
mov rcx, rax
lea r8, [rbp + 0x530]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
cmovne rdi, qword [rbp + 0x548]
mov qword [rbp - 0x78], rdi
mov eax, dword [rbp + 0x184]
mov rcx, rbx
sub eax, dword [rbp + 0x17c]
mov rdx, qword [rbp - 0x58]
mov dword [rbp + 0x5e8], eax
mov eax, dword [rbp + 0x188]
sub eax, dword [rbp + 0x180]
mov dword [rbp + 0x5ec], eax
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov r12d, 1
mov edx, r12d
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rdx, qword [rsp + 0x78]
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x60], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x5e0]
mov rcx, rbx
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
xor eax, eax
lea r9, [rbp + 0x5e0]
mov qword [rsp + 0x28], rax
or r8d, 0xffffffff
mov eax, dword [rbp - 0x7c]
mov rdx, r13
mov dword [rsp + 0x20], eax
mov rcx, rbx
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
xor r13d, r13d
cmp r14d, r12d
jne 0x14026c4ec
cmp dword [rsp + 0x6c], r13d
je 0x14026c4e4
mov rax, qword [0x140386118]
lea ecx, [r12 + 7]
call qword [case.0x14006b68f.0]
mov r12d, eax
mov dword [rsp + 0x74], eax
jmp 0x14026c4f7
mov r12d, 0xffffff
jmp 0x14026c4f2
mov r12d, 0xffa8a8a8
mov dword [rsp + 0x74], r12d
mov eax, dword [rbp + 0x17c]
mov edi, r13d
movsxd r10, dword [rbp + 0x5e8]
mov edx, eax
movsxd r9, dword [rsp + 0x64]
neg edx
mov r11d, dword [rbp + 0x5ec]
test eax, eax
mov r8d, r13d
cmovns edi, eax
cmovns edx, r13d
mov eax, dword [rbp + 0x180]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r13d
cmovns r8d, eax
mov r13d, r10d
mov eax, r9d
sub eax, edi
sub r13d, edx
cmp r13d, eax
cmovge r13d, eax
mov eax, dword [rsp + 0x60]
sub eax, r8d
sub r11d, ecx
cmp r11d, eax
cmovge r11d, eax
test r13d, r13d
jle 0x14026c6ee
test r11d, r11d
jle 0x14026c6ee
mov eax, r10d
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x78]
lea rdx, [rax + rcx*4]
mov eax, r9d
imul eax, r8d
xor r8d, r8d
mov qword [rbp - 0x78], rdx
mov dword [rsp + 0x60], r8d
movsxd rcx, eax
movsxd rax, edi
add rcx, rax
mov rax, qword [rbp - 0x68]
lea rcx, [rax + rcx*4]
mov rax, r10
shl rax, 2
mov qword [rsp + 0x78], rax
mov rax, r9
shl rax, 2
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x68], rcx
mov r10, rcx
mov dword [rsp + 0x64], r8d
sub r10, rdx
lea r9, [rdx + 2]
mov edi, r8d
mov r14d, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14026c6aa
movzx edi, byte [r10 + r9]
mov eax, r15d
movzx r8d, dl
movzx ecx, r12b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x75]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x76]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x64]
mov byte [r10 + r9 + 1], dl
xor r8d, r8d
add edi, r14d
add r9, 4
mov dword [rsp + 0x64], edi
cmp edi, r13d
jl 0x14026c5da
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x68]
mov eax, dword [rsp + 0x60]
add rdx, qword [rsp + 0x78]
inc eax
add rcx, qword [rbp - 0x38]
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x68], rcx
mov dword [rsp + 0x60], eax
cmp eax, r11d
jl 0x14026c5c2
mov r14d, dword [rbp - 0x40]
mov r12, qword [rbp - 0x60]
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x14026c70b
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
test r12, r12
je 0x14026c723
mov rax, qword [0x140386078]
mov rdx, r12
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rbx
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026c2a9
mov eax, dword [rbp + 0x144]
lea rcx, [rbp + 0x370]
mov rbx, qword [rbp + 0x150]
mov edi, 0x68
mov dword [rsp + 0x6c], eax
mov r8d, edi
mov rax, qword [rbp + 0x168]
xor edx, edx
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x38], rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, edi
lea rcx, [rbp + 0x4c0]
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor esi, esi
xor eax, eax
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
mov dword [rsp + 0x64], esi
mov r13d, esi
mov dword [rsp + 0x60], esi
mov edi, esi
mov qword [rbp + 0x620], rax
mov dword [rbp + 0x628], eax
movups xmmword [rbp + 0x600], xmm0
movups xmmword [rbp + 0x610], xmm0
movups xmmword [rbp + 0x5d0], xmm0
test rbx, rbx
jne 0x14026c7cc
mov esi, 0x80070057
jmp 0x14026c2a9
mov r12, qword [rbp]
mov edx, 7
mov rax, qword [0x140386050]
mov rcx, r12
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x14026c7fe
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r15d, r15d
jmp 0x14026ccce
mov rcx, rax
lea r8, [rbp + 0x370]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026c83d
mov rax, qword [rbp + 0x388]
mov qword [rbp - 0x78], rax
mov eax, dword [rbp + 0x374]
mov dword [rsp + 0x64], eax
mov eax, dword [rbp + 0x378]
mov dword [rsp + 0x60], eax
mov rax, qword [0x140386010]
mov rcx, r12
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
mov rbx, rax
test rax, rax
je 0x14026c7ea
mov eax, dword [rbp + 0x194]
lea r9, [rbp + 0xd8]
sub eax, dword [rbp + 0x18c]
lea rdx, [rbp + 0x600]
xor ecx, ecx
mov dword [rbp + 0x604], eax
mov eax, dword [rbp + 0x190]
xorps xmm0, xmm0
sub eax, dword [rbp + 0x198]
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov dword [rbp + 0x608], eax
mov rax, qword [0x140386018]
mov qword [rbp + 0x620], rcx
mov dword [rbp + 0x628], ecx
mov qword [rsp + 0x20], rcx
mov rcx, rbx
mov qword [rbp + 0xd8], rsi
movdqu xmmword [rbp + 0x610], xmm0
mov dword [rbp + 0x600], PathIsExe
mov dword [rbp + 0x60c], 0x200001
call qword [case.0x14006b68f.0]
mov r12, rax
test rax, rax
jne 0x14026c909
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026c901
movzx esi, si
or esi, 0x80070000
test esi, esi
mov ecx, 0x80004005
cmovns esi, ecx
test esi, esi
js 0x14026cc2c
test r12, r12
je 0x14026c93c
mov rax, qword [0x140386068]
lea r8, [rbp + 0x4c0]
mov edx, 0x68
mov rcx, r12
call qword [case.0x14006b68f.0]
test eax, eax
cmovne r13, qword [rbp + 0x4d8]
mov eax, dword [rbp + 0x194]
mov rdx, r12
sub eax, dword [rbp + 0x18c]
mov rcx, rbx
mov dword [rbp + 0x5d8], eax
mov eax, dword [rbp + 0x198]
sub eax, dword [rbp + 0x190]
mov dword [rbp + 0x5dc], eax
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov edx, 1
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rdx, qword [rsp + 0x78]
mov rcx, rbx
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rbp - 0x60], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x5d0]
mov rcx, rbx
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp - 0x38]
lea r9, [rbp + 0x5d0]
xor eax, eax
or r8d, 0xffffffff
mov qword [rsp + 0x28], rax
mov rcx, rbx
mov eax, dword [rbp - 0x7c]
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov eax, 1
cmp r14d, eax
jne 0x14026ca2a
xor r14d, r14d
cmp dword [rsp + 0x6c], r14d
je 0x14026ca20
lea ecx, [rax + 7]
mov rax, qword [0x140386118]
call qword [case.0x14006b68f.0]
jmp 0x14026ca32
mov dword [rsp + 0x74], 0xffffff
jmp 0x14026ca39
mov eax, 0xffa8a8a8
xor r14d, r14d
mov dword [rsp + 0x74], eax
mov dword [rbp - 0x30], eax
mov eax, dword [rbp + 0x18c]
mov edi, r14d
movsxd r9, dword [rsp + 0x64]
mov edx, eax
movsxd r10, dword [rbp + 0x5d8]
neg edx
mov r11d, dword [rbp + 0x5dc]
test eax, eax
mov r8d, r14d
cmovns edi, eax
cmovns edx, r14d
mov eax, dword [rbp + 0x190]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r14d
cmovns r8d, eax
mov eax, r9d
mov r14d, r10d
sub eax, edi
sub r14d, edx
cmp r14d, eax
cmovge r14d, eax
mov eax, dword [rsp + 0x60]
sub eax, r8d
sub r11d, ecx
cmp r11d, eax
cmovge r11d, eax
mov dword [rsp + 0x6c], r11d
test r14d, r14d
jle 0x14026cc28
test r11d, r11d
jle 0x14026cc28
imul ecx, r10d
movsxd rax, edx
movsxd rcx, ecx
add rcx, rax
mov eax, r9d
imul eax, r8d
xor r8d, r8d
mov dword [rsp + 0x60], r8d
lea r13, [r13 + rcx*4]
movsxd rcx, eax
movsxd rax, edi
add rcx, rax
mov rax, qword [rbp - 0x78]
lea rcx, [rax + rcx*4]
mov rax, r10
shl rax, 2
mov qword [rsp + 0x78], rax
mov rax, r9
shl rax, 2
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x78], rcx
mov ebx, dword [rbp - 0x30]
lea r9, [r13 + 2]
mov r10, rcx
mov dword [rsp + 0x64], r8d
sub r10, r13
mov edi, r8d
mov r11d, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14026cbea
movzx edi, byte [r10 + r9]
mov eax, r15d
movzx r8d, dl
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x75]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x76]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x64]
mov byte [r10 + r9 + 1], dl
xor r8d, r8d
add edi, r11d
add r9, 4
mov dword [rsp + 0x64], edi
cmp edi, r14d
jl 0x14026cb1b
mov rcx, qword [rbp - 0x78]
mov eax, dword [rsp + 0x60]
add rcx, qword [rbp - 0x38]
add eax, r11d
add r13, qword [rsp + 0x78]
mov qword [rbp - 0x78], rcx
mov dword [rsp + 0x60], eax
cmp eax, dword [rsp + 0x6c]
jl 0x14026cb00
mov rbx, qword [rbp - 0x68]
mov rdi, qword [rbp - 0x60]
xor r15d, r15d
test r12, r12
je 0x14026cc44
mov rax, qword [0x140386038]
mov rcx, r12
call qword [case.0x14006b68f.0]
test rdi, rdi
je 0x14026cc5c
mov rax, qword [0x140386078]
mov rdx, rdi
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rbx
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026cfcc
jmp 0x14026dce0
cmp dword [rbp + 0x144], r15d
jne 0x14026cc89
mov al, reloc.SHCORE.dll_Ordinal_192
cmp r14d, r13d
jne 0x14026cc8b
mov al, 0xff
and word [rsp + 0x74], 0
mov rcx, rbx
and qword [rbp + 0x30], 0
mov r12d, r15d
mov byte [rsp + 0x76], al
mov rax, qword [0x140386010]
mov byte [rsp + 0x77], r13b
mov dword [rbp + 0x40], r15d
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x18], rax
mov r10, rax
test rax, rax
jne 0x14026ccef
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026ccdd
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026cfcc
mov esi, 0x80004005
jmp 0x14026cfcc
cmp r14d, r13d
jne 0x14026cda7
mov edi, dword [rbp + 0x184]
mov eax, edi
mov r15d, dword [rbp + 0x194]
mov ebx, r15d
mov edx, dword [rbp + 0x17c]
sub eax, edx
mov r8d, dword [rbp + 0x18c]
sub ebx, r8d
mov r13d, dword [rbp + 0x198]
cmp ebx, eax
mov r9d, dword [rbp + 0x180]
mov ecx, r13d
cmovle ebx, eax
xor r11d, r11d
sub ecx, r9d
mov dword [rsp + 0x64], ebx
mov eax, r11d
mov dword [rsp + 0x60], ecx
mov esi, r11d
cmp dword [rbp + 0x140], r11d
je 0x14026cd6a
mov r12d, edx
mov esi, r8d
sub r12d, edi
sub esi, r15d
add r12d, ebx
add esi, ebx
mov dword [rbp + 0x30], r12d
mov dword [rbp + 0x40], esi
mov eax, r12d
sub r13d, dword [rbp + 0x190]
sub edi, edx
add edi, eax
sub r15d, r8d
mov eax, dword [rbp + 0x188]
add r15d, esi
sub eax, r9d
mov dword [rbp + 0x38], edi
mov dword [rsp + 0x70], eax
mov dword [rbp + 0x3c], eax
mov eax, dword [rbp + 0x190]
sub eax, r9d
mov dword [rbp + 0x48], r15d
add r13d, eax
mov dword [rbp + 0x44], eax
mov dword [rbp + 0x4c], r13d
jmp 0x14026cdef
movups xmm0, xmmword [rbp + 0x17c]
mov ebx, dword [rbp + 0x5a8]
xor r11d, r11d
movups xmm1, xmmword [rbp + 0x18c]
mov ecx, dword [rbp + 0x5ac]
movdqu xmmword [rbp + 0x30], xmm0
mov eax, dword [rbp + 0x3c]
mov edi, dword [rbp + 0x38]
mov r12d, dword [rbp + 0x30]
movdqu xmmword [rbp + 0x40], xmm1
mov r13d, dword [rbp + 0x4c]
mov r15d, dword [rbp + 0x48]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp + 0x44]
mov dword [rsp + 0x64], ebx
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x6c], eax
lea r9, [rbp + 0xf0]
mov eax, ecx
mov dword [rsp + 0x28], r11d
neg eax
mov dword [rbp - 0x70], r15d
mov dword [rbp + 0x638], eax
lea rdx, [rbp + 0x630]
mov rax, qword [0x140386018]
xorps xmm0, xmm0
xor r8d, r8d
mov dword [rbp - 0x80], r13d
mov rcx, r10
mov qword [rbp + 0xf0], r11
mov esi, r11d
mov qword [rbp + 0x650], r11
movdqu xmmword [rbp + 0x640], xmm0
mov dword [rbp + 0x658], r11d
mov dword [rbp + 0x630], PathIsExe
mov dword [rbp + 0x634], ebx
mov dword [rbp + 0x63c], 0x200001
mov qword [rsp + 0x20], r11
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x88], rax
test rax, rax
jne 0x14026cea5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026ce96
movzx esi, si
or esi, 0x80070000
test esi, esi
mov eax, 0x80004005
cmovns esi, eax
mov rax, qword [rbp + 0x88]
test esi, esi
js 0x14026cf94
mov rsi, qword [rbp - 0x18]
mov rdx, rax
mov rax, qword [0x140386078]
mov rcx, rsi
call qword [case.0x14006b68f.0]
mov eax, 1
cmp r14d, eax
jne 0x14026cf07
mov r8, qword [rbp + 0x60]
xor eax, eax
test r8, r8
je 0x14026cf07
mov qword [rbp + 0x5f0], rax
lea rdx, [rbp + 0x5f0]
mov eax, dword [rsp + 0x60]
mov rcx, rsi
mov dword [rbp + 0x5fc], eax
mov rax, qword [0x1403860e8]
mov dword [rbp + 0x5f8], ebx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x144]
lea rcx, [rbp + 0x300]
mov rsi, qword [rbp + 0x148]
xor edx, edx
mov dword [rbp - 0x28], eax
mov rax, qword [rbp + 0x160]
mov qword [rbp - 0x58], rax
lea r8d, [rdx + 0x68]
mov qword [rbp - 0x10], rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
lea rcx, [rbp + 0x3e0]
lea r8d, [rdx + 0x68]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor ecx, ecx
xor eax, eax
mov qword [rbp - 0x38], rcx
xorps xmm0, xmm0
mov qword [rbp - 0x68], rcx
mov dword [rbp - 0x1c], ecx
mov dword [rbp - 0x50], ecx
mov qword [rbp + 0x6e0], rax
mov dword [rbp + 0x6e8], eax
mov qword [rsp + 0x78], rcx
movups xmmword [rbp + 0x6c0], xmm0
movups xmmword [rbp + 0x6d0], xmm0
movups xmmword [rbp + 0x5b0], xmm0
test rsi, rsi
jne 0x14026d208
mov esi, 0x80070057
xor r15d, r15d
mov rax, qword [rbp + 0x88]
test rax, rax
je 0x14026cfb3
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x14026cfcc
mov rcx, rax
mov rax, qword [0x140386030]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x60]
test rax, rax
je 0x14026cfe5
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp + 0x148]
or rbx, 0xffffffffffffffff
test rax, rax
je 0x14026d028
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], r15w
jne 0x14026cff8
mov rdi, qword [rbp + 0x148]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x148]
call fcn.14009447c
mov qword [rbp + 0x148], r15
mov rax, qword [rbp + 0x150]
test rax, rax
je 0x14026d067
mov rcx, rbx
inc rcx
cmp word [rax + rcx*2], r15w
jne 0x14026d037
mov rdi, qword [rbp + 0x150]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x150]
call fcn.14009447c
mov qword [rbp + 0x150], r15
mov rdi, qword [rbp + 0x158]
test rdi, rdi
je 0x14026d09c
inc rbx
cmp word [rdi + rbx*2], r15w
jne 0x14026d073
xor eax, eax
lea rcx, [rbx*2 + 2]
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x158]
call fcn.14009447c
mov qword [rbp + 0x158], r15
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x14026d0bc
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x160], r15
mov rcx, qword [rbp + 0x168]
test rcx, rcx
je 0x14026d0dc
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x168], r15
mov rcx, qword [rbp + 0x170]
test rcx, rcx
je 0x14026d0fc
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov qword [rbp + 0x170], r15
mov ebx, 1
xor eax, eax
lock cmpxchg dword [0x14038b0f0], ebx
jne 0x14026d101
mov eax, dword [0x140389de8]
test eax, eax
jle 0x14026d182
sub eax, ebx
mov dword [0x140389de8], eax
jne 0x14026d182
lea r14, [0x14038a340]
mov eax, 4
mov rdi, r14
mov rcx, qword [rdi]
test rcx, rcx
je 0x14026d14b
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp + 0xb8]
add rdi, 0x18
sub rax, rbx
mov qword [rbp + 0xb8], rax
jne 0x14026d130
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rcx, qword [rbp + 0xe8]
mov eax, r15d
xchg dword [0x14038b0f0], eax
test rcx, rcx
je 0x14026d1a3
call qword [sym.imp.GDI32.dll_DeleteDC]
nop dword [rax + rax]
mov r14, qword [rbp + 8]
mov rdx, qword [rbp + 0xb0]
test rdx, rdx
je 0x14026d1c1
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
nop dword [rax + rax]
test r14, r14
je 0x14026d1d5
mov rcx, r14
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
mov eax, esi
mov rcx, qword [rbp + 0xb20]
xor rcx, rsp
call fcn.1400a15a0
lea r11, [rsp + 0xc30]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rsi, qword [rbp - 0x18]
mov edx, 7
mov rax, qword [0x140386050]
mov rcx, rsi
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x14026d256
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r12d, r12d
mov esi, eax
test eax, eax
jle 0x14026d244
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026cf94
mov esi, 0x80004005
jmp 0x14026cf94
mov rcx, rax
lea r8, [rbp + 0x300]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026d293
mov rax, qword [rbp + reloc.SHELL32.dll_Ordinal_792]
mov qword [rbp - 0x38], rax
mov eax, dword [rbp + 0x304]
mov dword [rbp - 0x1c], eax
mov eax, dword [rbp + 0x308]
mov dword [rbp - 0x50], eax
mov rax, qword [0x140386010]
mov rcx, rsi
call qword [case.0x14006b68f.0]
xor edx, edx
mov qword [rbp - 0x60], rax
mov rcx, rax
test rax, rax
je 0x14026d226
mov eax, dword [rbp + 0x34]
lea r9, [rbp + 0xf8]
sub eax, dword [rsp + 0x70]
mov esi, edx
mov dword [rsp + 0x28], edx
xorps xmm0, xmm0
mov dword [rbp + 0x6c8], eax
sub edi, r12d
mov rax, qword [0x140386018]
xor r8d, r8d
mov qword [rbp + 0xf8], rdx
mov qword [rbp + 0x6e0], rdx
mov dword [rbp + 0x6e8], edx
mov qword [rsp + 0x20], rdx
lea rdx, [rbp + 0x6c0]
movdqu xmmword [rbp + 0x6d0], xmm0
mov dword [rbp + 0x6c0], PathIsExe
mov dword [rbp + 0x6c4], edi
mov dword [rbp + 0x6cc], 0x200001
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x14026d359
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026d34b
movzx esi, ax
or esi, 0x80070000
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
mov rax, qword [rbp - 0x78]
test esi, esi
js 0x14026d686
test rax, rax
je 0x14026d394
mov rcx, rax
lea r8, [rbp + 0x3e0]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x68]
test eax, eax
cmovne rcx, qword [rbp + 0x3f8]
mov qword [rbp - 0x68], rcx
mov eax, dword [rsp + 0x70]
sub eax, dword [rbp + 0x34]
mov rdx, qword [rbp - 0x78]
mov dword [rbp + 0x5b8], edi
mov rdi, qword [rbp - 0x60]
mov dword [rbp + 0x5bc], eax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov edx, 1
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp - 0x58]
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov qword [rsp + 0x78], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x5b0]
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov rdi, qword [rbp - 0x60]
lea r9, [rbp + 0x5b0]
mov rdx, qword [rbp - 0x10]
xor eax, eax
mov qword [rsp + 0x28], rax
or r8d, 0xffffffff
mov eax, dword [rbp - 0x7c]
mov rcx, rdi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov eax, 1
xor ecx, ecx
cmp r14d, eax
jne 0x14026d477
cmp dword [rbp - 0x28], ecx
je 0x14026d470
lea ecx, [rax + 7]
mov rax, qword [0x140386118]
call qword [case.0x14006b68f.0]
xor ecx, ecx
jmp 0x14026d47c
mov eax, 0xffffff
jmp 0x14026d47c
mov eax, 0xffa8a8a8
movsxd r11, dword [rbp - 0x1c]
mov r8d, r12d
neg r8d
mov dword [rsp + 0x70], eax
mov eax, dword [rbp + 0x34]
test r12d, r12d
mov r9d, eax
mov r10d, ecx
cmovns r8d, ecx
cmovns r10d, r12d
mov r12d, dword [rbp + 0x5bc]
neg r9d
test eax, eax
mov edx, ecx
cmovns r9d, ecx
cmovns edx, eax
mov ecx, dword [rbp + 0x5b8]
mov eax, r11d
sub eax, r10d
sub ecx, r8d
cmp ecx, eax
cmovge ecx, eax
mov eax, dword [rbp - 0x50]
sub eax, edx
mov dword [rbp - 0x28], ecx
sub r12d, r9d
cmp r12d, eax
cmovge r12d, eax
mov dword [rbp - 0x58], r12d
test ecx, ecx
jle 0x14026d68a
test r12d, r12d
jle 0x14026d68a
mov eax, dword [rbp + 0x5b8]
xor r13d, r13d
mov r14d, dword [rbp - 0x28]
imul eax, r9d
imul edx, r11d
mov dword [rbp - 0x1c], r13d
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x68]
lea rdi, [rax + rcx*4]
movsxd rax, r10d
movsxd rcx, edx
add rcx, rax
mov qword [rbp - 0x68], rdi
mov rax, qword [rbp - 0x38]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x5b8]
shl rcx, 2
mov qword [rbp - 0x10], rcx
mov rcx, r11
shl rcx, 2
mov qword [rbp + 0x20], rcx
mov qword [rbp - 0x38], rax
mov r12d, dword [rsp + 0x70]
lea r9, [rdi + 2]
mov r10, rax
mov dword [rbp - 0x50], r13d
sub r10, rdi
mov r8d, r13d
mov ebx, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14026d639
movzx edi, byte [r10 + r9]
mov r11d, 0x80808081
movzx r8d, dl
mov eax, r11d
movzx ecx, r12b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x71]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x72]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8d, dword [rbp - 0x50]
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
add r8d, ebx
add r9, 4
mov dword [rbp - 0x50], r8d
cmp r8d, r14d
jl 0x14026d566
mov rdi, qword [rbp - 0x68]
mov rax, qword [rbp - 0x38]
mov ecx, dword [rbp - 0x1c]
add rdi, qword [rbp - 0x10]
inc ecx
add rax, qword [rbp + 0x20]
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x1c], ecx
cmp ecx, dword [rbp - 0x58]
jl 0x14026d54b
mov r14d, dword [rbp - 0x40]
mov ebx, dword [rsp + 0x64]
mov r15d, dword [rbp - 0x70]
mov r13d, dword [rbp - 0x80]
mov rdi, qword [rbp - 0x60]
mov rax, qword [rbp - 0x78]
xor r12d, r12d
test rax, rax
je 0x14026d6a6
mov rcx, rax
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14026d6c3
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rdi
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14026cf94
mov eax, dword [rbp + 0x144]
lea rcx, [rbp + 0x290]
mov rdi, qword [rbp + 0x150]
mov esi, 0x68
mov dword [rbp - 0x58], eax
mov r8d, esi
mov rax, qword [rbp + 0x168]
xor edx, edx
mov qword [rbp + 0x20], rax
mov qword [rbp - 0x10], rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, esi
lea rcx, [rbp + 0x450]
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
xorps xmm0, xmm0
mov dword [rbp - 0x80], r12d
mov dword [rbp - 0x70], r12d
mov qword [rbp + 0x680], rax
mov dword [rbp + 0x688], eax
mov qword [rbp - 0x60], r12
movups xmmword [rbp + 0x660], xmm0
movups xmmword [rbp + 0x670], xmm0
movups xmmword [rbp + 0x5c0], xmm0
test rdi, rdi
je 0x14026cf8f
mov rdi, qword [rbp - 0x18]
lea edx, [rsi - 0x61]
mov rax, qword [0x140386050]
mov rcx, rdi
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x14026d7b2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r15d, r15d
mov esi, eax
test eax, eax
jle 0x14026d7a0
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026cf97
mov esi, 0x80004005
jmp 0x14026cf97
mov rcx, rax
lea r8, [rbp + 0x290]
mov rax, qword [0x140386068]
mov edx, esi
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026d7ed
mov rax, qword [rbp + 0x2a8]
mov qword [rsp + 0x78], rax
mov eax, dword [rbp + 0x294]
mov dword [rbp - 0x80], eax
mov eax, dword [rbp + 0x298]
mov dword [rbp - 0x70], eax
mov rax, qword [0x140386010]
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x68], rax
mov rdi, rax
test rax, rax
jne 0x14026d834
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r15d, r15d
mov esi, eax
test eax, eax
jle 0x14026d827
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026dc47
jmp 0x14026d7a8
sub r15d, dword [rbp + 0x40]
lea r9, [rbp + 0x100]
mov qword [rbp + 0x100], r12
lea rdx, [rbp + 0x660]
mov qword [rbp + 0x680], r12
xorps xmm0, xmm0
mov dword [rbp + 0x688], r12d
mov esi, r12d
mov r12d, dword [rsp + 0x6c]
xor r8d, r8d
mov eax, r12d
mov dword [rbp + 0x660], PathIsExe
sub eax, r13d
mov dword [rbp + 0x664], r15d
mov dword [rbp + 0x668], eax
mov rcx, rdi
xor eax, eax
mov dword [rbp + 0x66c], 0x200001
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov rax, qword [0x140386018]
movdqu xmmword [rbp + 0x670], xmm0
call qword [case.0x14006b68f.0]
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x14026d8e5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026d8d7
movzx esi, ax
or esi, 0x80070000
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
mov rax, qword [rbp - 0x28]
test esi, esi
js 0x14026dc02
test rax, rax
je 0x14026d924
mov rcx, rax
lea r8, [rbp + 0x450]
mov rax, qword [0x140386068]
mov edx, 0x68
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x78]
test eax, eax
mov rax, qword [rbp - 0x28]
cmovne rcx, qword [rbp + 0x468]
mov qword [rbp - 0x78], rcx
mov rdx, rax
mov dword [rbp + 0x5c8], r15d
mov rax, qword [0x140386078]
sub r13d, r12d
mov rcx, rdi
mov dword [rbp + 0x5cc], r13d
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
mov edx, 1
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdx, qword [rbp + 0x20]
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
mov rdi, qword [0x1403860e8]
xor ecx, ecx
mov r13, rax
mov qword [rbp - 0x60], rax
mov rax, qword [0x140386070]
call qword [case.0x14006b68f.0]
mov rcx, qword [rbp - 0x68]
lea rdx, [rbp + 0x5c0]
mov r8, rax
mov rax, rdi
call qword [case.0x14006b68f.0]
mov eax, dword [rbp - 0x7c]
lea r9, [rbp + 0x5c0]
mov rdi, qword [rbp - 0x68]
xor r15d, r15d
mov rdx, qword [rbp - 0x10]
or r8d, 0xffffffff
mov qword [rsp + 0x28], r15
mov rcx, rdi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
lea eax, [r15 + 1]
cmp r14d, eax
jne 0x14026da01
cmp dword [rbp - 0x58], r15d
je 0x14026d9f8
lea ecx, [rax + 7]
mov rax, qword [0x140386118]
call qword [case.0x14006b68f.0]
jmp 0x14026da06
mov dword [rbp - 0x7c], 0xffffff
jmp 0x14026da0c
mov eax, 0xffa8a8a8
mov dword [rbp - 0x7c], eax
mov dword [rbp - 0x30], eax
mov eax, dword [rbp + 0x40]
mov r8d, r15d
movsxd r11, dword [rbp + 0x5c8]
mov edx, eax
movsxd r10, dword [rbp - 0x80]
neg edx
test eax, eax
mov ecx, r12d
mov r9d, r15d
cmovns edx, r15d
cmovns r8d, eax
neg ecx
mov eax, r10d
test r12d, r12d
cmovns r9d, r12d
cmovns ecx, r15d
mov r15d, dword [rbp + 0x5cc]
sub eax, r8d
mov r12d, r11d
sub r12d, edx
cmp r12d, eax
cmovge r12d, eax
mov eax, dword [rbp - 0x70]
sub eax, r9d
sub r15d, ecx
cmp r15d, eax
cmovge r15d, eax
mov dword [rbp - 0x58], r15d
test r12d, r12d
jle 0x14026dc06
test r15d, r15d
jle 0x14026dc06
mov eax, r11d
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x78]
lea r13, [rax + rcx*4]
mov eax, r10d
imul eax, r9d
movsxd rcx, eax
movsxd rax, r8d
xor r8d, r8d
add rcx, rax
mov dword [rbp - 0x80], r8d
mov rax, qword [rsp + 0x78]
lea rcx, [rax + rcx*4]
mov rax, r11
shl rax, 2
mov qword [rbp + 0x20], rax
mov rax, r10
shl rax, 2
mov qword [rbp - 0x10], rax
mov qword [rsp + 0x78], rcx
mov ebx, dword [rbp - 0x30]
lea r9, [r13 + 2]
mov r10, rcx
mov dword [rsp + 0x6c], r8d
sub r10, r13
mov edi, r8d
mov r15d, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14026dbbe
movzx edi, byte [r10 + r9]
mov r11d, 0x80808081
movzx r8d, dl
mov eax, r11d
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x7b]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x7a]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov edi, dword [rsp + 0x6c]
mov byte [r10 + r9 + 1], dl
xor r8d, r8d
add edi, r15d
add r9, 4
mov dword [rsp + 0x6c], edi
cmp edi, r12d
jl 0x14026daeb
mov rcx, qword [rsp + 0x78]
mov eax, dword [rbp - 0x80]
add rcx, qword [rbp - 0x10]
add eax, r15d
add r13, qword [rbp + 0x20]
mov qword [rsp + 0x78], rcx
mov dword [rbp - 0x80], eax
cmp eax, dword [rbp - 0x58]
jl 0x14026dad0
mov r14d, dword [rbp - 0x40]
mov ebx, dword [rsp + 0x64]
mov rdi, qword [rbp - 0x68]
mov r13, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x28]
xor r15d, r15d
test rcx, rcx
je 0x14026dc1f
mov rax, qword [0x140386038]
call qword [case.0x14006b68f.0]
test r13, r13
je 0x14026dc37
mov rax, qword [0x140386078]
mov rdx, r13
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rax, qword [0x140386030]
mov rcx, rdi
call qword [case.0x14006b68f.0]
mov rdi, qword [rbp - 0x18]
test esi, esi
js 0x14026cf97
mov eax, 1
mov r9d, ebx
cmp r14d, eax
mov eax, dword [rsp + 0x60]
jne 0x14026dc9f
mov r8d, dword [rbp + 0x180]
mov edx, dword [rbp + 0x17c]
mov rcx, qword [rbp]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [section..data]
call qword [case.0x14006b68f.0]
jmp 0x14026dce0
mov ecx, dword [rsp + 0x74]
mov r8d, dword [rbp + 0x5a4]
mov edx, dword [rbp + 0x5a0]
mov dword [rsp + 0x50], ecx
mov rcx, qword [rbp]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
mov rax, qword [rbp]
test rax, rax
je 0x14026cf97
mov edx, dword [rbp - 0x48]
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
jmp 0x14026cf97