Function at 0x14026f44c
Capabilities:
Encode data using xor
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x468]
sub rsp, 0x540
mov rax, qword [0x140387a48]
xor rax, rsp
mov qword [rbp + 0x430], rax
xor ebx, ebx
mov qword [rbp - 0x70], rcx
mov r15, rcx
mov dword [rsp + 0x30], DllRegisterServer
mov rcx, qword [rcx + 0x28]
xor r9d, r9d
mov dword [rsp + 0x28], ebx
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], ebx
call qword [0x1403ad790]
nop dword [rax + rax]
mov rcx, r15
call fcn.14026513c
mov eax, dword [r15 + 0x74]
lea r13d, [rbx + 1]
mov rcx, qword [r15 + 0x28]
lea edx, [rbx - 0x14]
sub eax, 2
mov r8d, 0x40008
cmp eax, r13d
ja 0x14026f4df
mov r8d, 0x8080028
call qword [0x1403ad6c8]
nop dword [rax + rax]
mov edi, dword [r15 + 0x78]
lea r14, [r15 + 0x80]
mov qword [rsp + 0x60], r14
xorps xmm0, xmm0
mov dword [rsp + 0x78], edi
lea r12, [r15 + 0xf0]
mov dword [rsp + 0x58], ebx
lea rdx, [0x14038a340]
mov dword [rsp + 0x48], ebx
mov ecx, 4
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], rbx
movups xmmword [rbp], xmm0
test r14, r14
jne 0x14026f540
mov esi, 0x80070057
jmp 0x140270675
test r12, r12
je 0x14026f536
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r13d
jne 0x14026f545
mov eax, dword [0x140389de8]
test eax, eax
jne 0x14026fb12
mov ecx, 0x338
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x68], ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 8], rbx
call fcn.140091688
xor r8d, r8d
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14026fa7c
or dword [rsp + 0x50], 0xffffffff
lea rdi, [rax + 7]
mov ebx, dword [rsp + 0x50]
lea r15, [0x140319602]
mov ecx, r8d
lea esi, [r8 + 0x67]
mov r14d, r8d
mov r13d, r8d
movzx eax, byte [r15 - 1]
movzx r11d, byte [r15 - 2]
movzx r10d, byte [r15 + 2]
shl r11d, 8
or r11d, eax
shl r10d, 8
movzx eax, byte [r15]
lea r15, [r15 + 8]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 - 7]
shl r11d, 8
or r11d, eax
movzx eax, byte [r15 - 5]
or r10d, eax
xor r13d, r11d
movzx eax, byte [r15 - 4]
mov r9d, r13d
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 3]
shl r10d, 8
or r10d, eax
xor r14d, r10d
xor r9d, r14d
xor r9d, 0xac987321
lea eax, [r9 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r9d
rol eax, 0xa
add edx, eax
xor r13d, edx
lea eax, [r13 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r13d
rol eax, 2
sub edx, eax
xor r9d, edx
imul edx, r9d, 0x605e
mov eax, r9d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r13d, edx
mov eax, r13d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r13d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r9d, edx
mov edx, r9d
xor edx, 0xab69605e
sub eax, edx
xor r13d, eax
mov eax, r13d
mov r8d, r13d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r9d, r8d
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r9d
rol eax, 2
add edx, eax
xor r13d, edx
lea eax, [r13 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r13d
rol eax, 8
sub edx, eax
xor r9d, edx
mov eax, r9d
mov r8d, 0xab69605e
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r9d
ror eax, 0xa
xor edx, eax
xor r13d, edx
mov eax, r13d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r13d
shr eax, 0xa
xor edx, eax
xor edx, r9d
mov r9d, 0x605e
mov eax, edx
not eax
ror eax, 5
add eax, r9d
imul eax, eax, 0x7f1
xor r13d, eax
lea r14d, [r13 - 0x7f1]
xor r14d, edx
xor r14d, r8d
mov eax, r14d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r14d
shr eax, 2
add edx, eax
xor r13d, edx
lea eax, [r13 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r13d
rol eax, 7
add edx, eax
xor r14d, edx
mov eax, r14d
mov r8d, r14d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r13d, r8d
mov eax, r13d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r13d
rol eax, 7
add edx, eax
xor r14d, edx
xor r13d, r14d
xor r13d, 0xac987321
mov eax, r13d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r14d, edx
lea eax, [r14 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r14d
ror eax, 6
sub edx, eax
xor r13d, edx
lea eax, [r13 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r13d
rol eax, 0xe
add edx, eax
xor r14d, edx
lea eax, [r14 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r14d
ror eax, 0xe
sub edx, eax
xor r13d, edx
mov eax, r13d
xor eax, r9d
imul edx, eax, 0xab69
mov eax, r13d
shr eax, 3
xor edx, eax
xor r14d, edx
mov eax, r14d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r14d
xor r14d, ebx
rol eax, 2
mov ebx, r10d
xor edx, eax
xor edx, ecx
mov ecx, r11d
xor r13d, edx
mov byte [rdi - 4], r13b
mov byte [rdi], r14b
lea rdi, [rdi + 8]
ror r13d, 8
mov byte [rdi - 0xd], r13b
ror r14d, 8
mov byte [rdi - 9], r14b
ror r13d, 8
mov byte [rdi - 0xe], r13b
ror r14d, 8
mov byte [rdi - 0xa], r14b
ror r13d, 8
ror r14d, 8
mov byte [rdi - 0xf], r13b
mov byte [rdi - 0xb], r14b
ror r14d, 8
ror r13d, 8
sub rsi, 1
jne 0x14026f5ab
mov r15, qword [rbp - 0x70]
xor r8d, r8d
mov edi, dword [rsp + 0x78]
mov eax, r8d
mov rbx, qword [rbp - 0x28]
mov cl, r8b
mov esi, r8d
mov edx, 0x338
lea r14, [r15 + 0x80]
xor cl, byte [rax + rbx]
inc rax
cmp rax, rdx
jb 0x14026f8cc
movzx eax, cl
cmp rax, qword [0x140319938]
je 0x14026f8eb
mov r13d, 0xc004d501
jmp 0x14026f8f9
mov qword [rbp - 0x40], rbx
mov r13d, r8d
mov rbx, r8
mov qword [rbp - 8], rdx
test rbx, rbx
je 0x14026f909
mov rcx, rbx
call fcn.14009447c
xor r8d, r8d
test r13d, r13d
js 0x14026fa76
mov rax, qword [rbp - 8]
lea r13, [0x14038a340]
mov rbx, qword [rbp - 0x40]
xor edx, edx
mov rcx, r13
mov byte [rax + rbx - 1], r8b
lea r8d, [rdx + 0x60]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor r8d, r8d
cmp byte [rbx], r8b
jne 0x14026f94e
mov r13d, 1
jmp 0x14026fa81
lea r13, [0x14038a340]
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r8w
jne 0x14026f955
lea rbx, [rbx + rax*2]
mov eax, dword [rsp + 0x68]
lea rcx, [rax + rax*2]
lea r13, [r13 + rcx*8]
xor ecx, ecx
mov r8, r13
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r8d, r8d
test eax, eax
je 0x14026fa76
mov rax, qword [r13]
mov ecx, 0x5a4d
mov esi, r8d
cmp word [rax], cx
je 0x14026f9a4
mov esi, 0xc000007b
jmp 0x14026f9f1
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14026f99d
add rcx, qword [r13]
cmp rcx, qword [r13]
jb 0x14026f99d
cmp dword [rcx], 0x4550
jne 0x14026f99d
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14026f9df
mov esi, 0xc000000d
jmp 0x14026f9f1
mov rax, qword [rcx + 0x88]
mov qword [r13 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r13 + 8], eax
mov eax, dword [rbx + 2]
mov ecx, r8d
add rbx, 6
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x50], ecx
test eax, eax
je 0x14026fa60
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r8b
jne 0x14026fa0e
inc rbx
add rbx, rax
test esi, esi
js 0x14026fa50
mov rcx, qword [r13]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
xor r8d, r8d
test rax, rax
je 0x14026f93c
mov ecx, dword [rsp + 0x44]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
mov ecx, dword [rsp + 0x50]
inc dword [rsp + 0x44]
inc ecx
mov dword [rsp + 0x50], ecx
cmp ecx, dword [rsp + 0x40]
jb 0x14026fa07
mov r13d, 1
add dword [rsp + 0x68], r13d
cmp byte [rbx], r8b
jne 0x14026f947
jmp 0x14026fa81
mov r13d, 1
mov esi, 0xc000007a
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x14026faaa
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor ebx, ebx
test esi, esi
jns 0x14026fb0c
lea rbx, [0x14038a340]
mov esi, 4
xor eax, eax
mov rcx, qword [rbx]
test rcx, rcx
je 0x14026fad4
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
xor eax, eax
add rbx, 0x18
sub rsi, r13
jne 0x14026fabe
xor edx, edx
lea r8d, [rsi + 0x60]
lea rcx, [0x14038a340]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
xor ebx, ebx
jmp 0x14026fb1b
mov eax, dword [0x140389de8]
add eax, r13d
mov dword [0x140389de8], eax
xor edx, edx
mov eax, ebx
xchg dword [0x14038b0f0], eax
mov rcx, r14
lea r8d, [rdx + 0x70]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov ecx, reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, edi
shr eax, 4
mov r13d, edi
and ax, cx
and r13d, ecx
mov word [rbp + 0x370], ax
xorps xmm0, xmm0
mov eax, edi
mov dword [rbp - 0x68], r13d
shr eax, 8
xor edx, edx
and ax, cx
shr edi, 0xc
and di, cx
mov word [rbp + 0x372], ax
movups xmmword [r12], xmm0
mov rax, qword [0x1403860f8]
xor ecx, ecx
mov r8d, 0x403
mov word [rbp + 0x374], di
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14026fbd1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026fbaf
movzx esi, ax
or esi, 0x80070000
lea rdx, [0x14038a340]
mov ecx, 4
lea r13d, [rcx - 3]
test esi, esi
js 0x140270675
mov esi, 0x80004005
jmp 0x140270675
mov rax, qword [0x1403860a0]
lea r9, [rbp - 0x78]
xor r8d, r8d
mov qword [rbp - 0x18], rbx
lea rdx, [rsp + 0x70]
mov qword [rbp - 0x48], rbx
mov rdi, rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x58], rbx
mov esi, ebx
lea ecx, [r8 + 8]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x60], rbx
mov dword [rbp - 0x78], ebx
call qword [case.0x14006b68f.0]
mov r12d, 0x80004005
test eax, eax
jne 0x14026fc43
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14026fc33
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x14026fd5b
mov esi, r12d
jmp 0x14026fd5b
mov ecx, dword [rbp - 0x78]
add rcx, rcx
call fcn.140091688
lea rcx, [rbp - 0x50]
mov rbx, rax
call fcn.1401fc794
test rbx, rbx
jne 0x14026fc6d
mov qword [rbp - 0x50], rbx
mov esi, 0x8007000e
jmp 0x14026fd5b
mov ecx, dword [rsp + 0x70]
inc ecx
mov qword [rbp - 0x50], rbx
shl rcx, 2
call fcn.140091688
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x50], rax
call fcn.1401fc794
mov rax, qword [rsp + 0x50]
test rax, rax
jne 0x14026fca4
xor ebx, ebx
mov esi, 0x8007000e
jmp 0x14026fd57
mov qword [rbp - 0x60], rax
lea r9, [rbp - 0x78]
mov rax, qword [0x1403860a0]
lea rdx, [rsp + 0x70]
mov r8, rbx
mov ecx, 8
call qword [case.0x14006b68f.0]
xor ecx, ecx
test eax, eax
jne 0x14026fcdf
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor ebx, ebx
jmp 0x14026fc24
mov rax, qword [rsp + 0x50]
mov rdi, rax
cmp dword [rsp + 0x70], ecx
jbe 0x14026fd3e
mov r14d, ecx
mov r15d, 4
mov rax, qword [0x1403860b0]
xor edx, edx
mov rcx, rbx
call qword [case.0x14006b68f.0]
mov dword [rdi], eax
or rax, 0xffffffffffffffff
xor ecx, ecx
inc rax
cmp word [rbx + rax*2], cx
jne 0x14026fd10
lea rbx, [rbx + rax*2]
add rdi, r15
add rbx, 2
inc r14d
cmp r14d, dword [rsp + 0x70]
jb 0x14026fcf6
mov r15, qword [rbp - 0x70]
mov rax, qword [rsp + 0x50]
lea r14, [r15 + 0x80]
mov dword [rdi], 0x409
xor ebx, ebx
mov rdi, rax
mov qword [rbp - 0x18], rax
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x50], eax
mov qword [rbp - 0x60], rbx
lea rcx, [rbp - 0x60]
call fcn.1401fc794
lea rcx, [rbp - 0x50]
call fcn.1401fc794
test esi, esi
js 0x140270452
lea r11, [0x140339fa0]
mov r10d, ebx
mov r9d, ebx
mov dword [rsp + 0x68], ebx
cmp dword [rsp + 0x50], ebx
jbe 0x14026fdc1
mov r8, rbx
mov ecx, ebx
mov rdx, r11
mov eax, dword [rdx]
cmp dword [r8 + rdi], eax
je 0x14026fdba
mov eax, 4
inc ecx
add rdx, rax
cmp ecx, 0x26
jb 0x14026fd94
inc r9d
add r8, rax
cmp r9d, dword [rsp + 0x50]
jb 0x14026fd8f
jmp 0x14026fdc1
mov r10d, ecx
mov dword [rsp + 0x68], ecx
mov rax, qword [0x1403860a8]
lea rdx, [rbp + reloc.SHELL32.dll_Ordinal_896]
mov ebx, r10d
xor esi, esi
xor r9d, r9d
mov dword [rsp + 0x44], esi
mov ecx, dword [r11 + rbx*4]
lea r8d, [rsi + 0x55]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14026fe23
mov rax, qword [0x140386090]
lea r9d, [rsi + 0x10]
lea r8, [rbp + 0x1a0]
lea edx, [rsi + 0x58]
lea rcx, [rbp + reloc.SHELL32.dll_Ordinal_896]
call qword [case.0x14006b68f.0]
test eax, eax
jle 0x14026fe23
mov edi, dword [rbp + 0x1ac]
shr edi, 0x1b
and edi, 1
mov dword [rsp + 0x44], edi
lea rcx, str.Segoe_UI_Light
mov edi, SafeArrayUnaccessData
lea rdx, [rbp + 0x2d0]
mov qword [rdx], rcx
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], si
jne 0x14026fe3d
lea rcx, [rcx + rax*2]
add rdx, 8
add rcx, 2
sub rdi, 1
jne 0x14026fe36
lea rcx, [rbx + rbx*2]
lea rdx, [0x140321be0]
movzx eax, byte [rcx + rdx]
mov rbx, qword [rbp + rax*8 + 0x2d0]
movzx eax, byte [rcx + rdx + 1]
mov qword [rbp - 0x80], rbx
mov rax, qword [rbp + rax*8 + 0x2d0]
mov qword [rbp - 0x10], rax
movzx eax, byte [rcx + rdx + 2]
mov rax, qword [rbp + rax*8 + 0x2d0]
mov qword [rbp - 0x38], rax
mov ecx, 0x1c90
call fcn.140091688
xor r11d, r11d
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x14026feb5
mov esi, 0x8007000e
jmp 0x140270456
or dword [rsp + 0x40], 0xffffffff
lea r15, [rax + 7]
mov r10d, dword [rsp + 0x40]
lea r14, [0x14033a042]
mov r12d, r11d
mov ebx, r11d
mov r13d, 0x392
movzx eax, byte [r14 - 1]
movzx r9d, byte [r14 - 2]
movzx r8d, byte [r14 + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [r14]
lea r14, [r14 + 8]
shl r9d, 8
or r9d, eax
movzx eax, byte [r14 - 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [r14 - 5]
or r8d, eax
xor r11d, r9d
movzx eax, byte [r14 - 4]
mov edi, r11d
shl r8d, 8
or r8d, eax
movzx eax, byte [r14 - 3]
shl r8d, 8
or r8d, eax
xor ebx, r8d
xor edi, ebx
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
imul ecx, eax, 0x137f
mov eax, edi
rol eax, 0xa
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
imul ecx, eax, 0xab69
mov eax, r11d
rol eax, 2
sub ecx, eax
xor edi, ecx
imul ecx, edi, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 2
sub ecx, eax
mov eax, 0x7f1137f
xor edi, ecx
mov ecx, edi
xor ecx, 0xab69605e
sub eax, ecx
xor r11d, eax
mov eax, r11d
mov edx, r11d
xor eax, 0x137f
ror edx, 6
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
imul ecx, eax, 0x605e
mov eax, edi
rol eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 8
sub ecx, eax
xor edi, ecx
mov eax, edi
mov edx, 0xab69605e
xor eax, edx
ror eax, 0xc
imul ecx, eax, 0x137f
mov eax, edi
ror eax, 0xa
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea ebx, [r11 - 0x7f1]
xor ebx, edi
xor ebx, edx
mov eax, ebx
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, ebx
shr eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
imul ecx, eax, 0xab69
mov eax, r11d
rol eax, 7
add ecx, eax
xor ebx, ecx
mov eax, ebx
mov edx, ebx
xor eax, 0x137f
ror edx, 9
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 7
add ecx, eax
xor ebx, ecx
xor r11d, ebx
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor ebx, ecx
lea eax, [rbx - 0x7f1137f]
ror eax, 1
imul ecx, eax, 0x605e
mov eax, ebx
ror eax, 6
sub ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 3
imul ecx, eax, 0x7f1
mov eax, r11d
rol eax, 0xe
add ecx, eax
xor ebx, ecx
lea eax, [rbx - 0x54969fa2]
rol eax, 0xf
imul ecx, eax, 0x137f
mov eax, ebx
ror eax, 0xe
sub ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x7f1137f
rol eax, 4
imul ecx, eax, 0x605e
mov eax, ebx
xor ebx, r10d
rol eax, 2
mov r10d, r8d
xor ecx, eax
xor ecx, r12d
mov r12d, r9d
xor r11d, ecx
mov byte [r15 - 4], r11b
mov byte [r15], bl
lea r15, [r15 + 8]
ror r11d, 8
mov byte [r15 - 0xd], r11b
ror ebx, 8
mov byte [r15 - 9], bl
ror r11d, 8
mov byte [r15 - 0xe], r11b
ror ebx, 8
mov byte [r15 - 0xa], bl
ror r11d, 8
ror ebx, 8
mov byte [r15 - 0xf], r11b
mov byte [r15 - 0xb], bl
ror ebx, 8
ror r11d, 8
sub r13, 1
jne 0x14026fed6
mov r14, qword [rsp + 0x60]
xor r11d, r11d
mov r15, qword [rbp - 0x70]
mov eax, r11d
mov r13d, dword [rbp - 0x68]
xorps xmm1, xmm1
mov r10, qword [rbp - 0x28]
mov r12d, 0x80004005
mov ecx, 0x1c90
movdqu xmm0, xmmword [rax + r10]
add rax, 0x10
pxor xmm0, xmm1
movdqa xmm1, xmm0
cmp rax, rcx
jb 0x1402701cc
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
movzx eax, al
cmp rax, qword [0x14033bcd0]
je 0x14027022a
mov esi, 0xc004d501
jmp 0x140270235
mov qword [rbp - 0x48], r10
mov r10, r11
mov qword [rbp - 0x20], rcx
test r10, r10
je 0x140270245
mov rcx, r10
call fcn.14009447c
xor r11d, r11d
test esi, esi
js 0x140270452
mov rdx, qword [rbp - 0x48]
lea rdi, [rbp + 0x2a0]
mov r9d, dword [rsp + 0x68]
mov r8d, 6
mov ecx, r11d
cmp r9d, ecx
jne 0x14027026e
mov qword [rdi], rdx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], r11b
jne 0x140270272
inc rdx
inc ecx
add rdx, rax
cmp ecx, 0x26
jb 0x140270266
add rdi, 8
sub r8, 1
jne 0x140270263
lea ecx, [r8 + 0x18]
call fcn.140091688
lea rcx, [rbp - 0x58]
mov rdi, rax
call fcn.1401fc794
xor r11d, r11d
mov eax, 3
mov qword [rsp + 0x68], rax
test rdi, rdi
jne 0x1402702ca
mov ebx, r11d
mov esi, 0x8007000e
mov qword [rbp - 0x58], rbx
jmp 0x14027040c
xorps xmm0, xmm0
mov dword [rsp + 0x50], r11d
mov rbx, rdi
lea rcx, [rbp + 0x370]
xor eax, eax
mov qword [rbp - 0x58], rbx
mov rdx, rdi
mov qword [rbp - 0x68], rcx
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov r8d, r11d
mov qword [rbp - 0x70], rdx
movzx r9d, word [rcx]
lea rcx, [0x14033bcd8]
mov eax, r11d
cmp r9w, word [rcx]
je 0x14027031b
inc eax
add rcx, 2
cmp eax, 6
jb 0x140270305
jmp 0x1402703cf
mov rax, qword [rbp + rax*8 + 0x2a0]
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x60], rax
inc rcx
cmp byte [rax + rcx], r11b
jne 0x14027032c
lea r9d, [rcx + 1]
mov dword [rsp + 0x28], r11d
mov r8, rax
mov qword [rsp + 0x20], r11
mov rax, qword [0x1403860c0]
mov ecx, 0xfde9
xor edx, edx
call qword [case.0x14006b68f.0]
mov dword [rsp + 0x40], eax
test eax, eax
je 0x140270534
movsxd rcx, eax
add rcx, rcx
call fcn.140091688
mov rcx, qword [rbp - 0x70]
xor r11d, r11d
mov qword [rcx], rax
test rax, rax
je 0x14027052a
mov r8, qword [rsp + 0x60]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], r11b
jne 0x14027038d
mov edx, dword [rsp + 0x40]
lea r9d, [rcx + 1]
mov dword [rsp + 0x28], edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
xor edx, edx
mov rax, qword [0x1403860c0]
call qword [case.0x14006b68f.0]
xor r11d, r11d
test eax, eax
je 0x1402704fc
mov rdx, qword [rbp - 0x70]
mov r8d, dword [rsp + 0x50]
mov rcx, qword [rbp - 0x68]
inc r8d
add rcx, 2
mov dword [rsp + 0x50], r8d
add rdx, 8
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x70], rdx
cmp r8d, 3
jb 0x1402702f7
mov eax, dword [rsp + 0x44]
mov rbx, r11
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x30], rdi
mov dword [r14], eax
mov eax, 3
test rbx, rbx
je 0x140270452
mov rdi, qword [rbx]
test rdi, rdi
je 0x140270443
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdi + rcx*2], r11w
jne 0x14027041d
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
call fcn.14009447c
mov rax, qword [rsp + 0x68]
xor r11d, r11d
add rbx, 8
sub rax, 1
mov qword [rsp + 0x68], rax
jne 0x140270411
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rbp - 0x48]
test rdi, rdi
je 0x140270467
mov rcx, qword [rbp - 0x20]
xor eax, eax
rep stosb byte [rdi], al
lea rcx, [rbp - 0x58]
call fcn.1401fc794
lea rcx, [rbp - 0x48]
call fcn.1401fc794
lea rcx, [rbp - 0x18]
call fcn.1401fc794
xor edx, edx
test esi, esi
js 0x14027064f
mov rax, qword [rbp - 0x30]
lea r8, [rbp + 0x10]
xorps xmm0, xmm0
xor r9d, r9d
mov edi, edx
mov esi, edx
mov rcx, qword [rax]
mov qword [r14 + 8], rcx
mov rcx, qword [rax + 8]
mov qword [r14 + 0x10], rcx
mov rcx, qword [rax + 0x10]
mov qword [r14 + 0x18], rcx
lea ecx, [rdx + 0x42]
mov rax, qword [0x140386168]
movups xmmword [rbp + 0x10], xmm0
mov dword [rbp + reloc.OLEAUT32.dll_SafeArrayGetDim], 0x10
call qword [case.0x14006b68f.0]
test eax, eax
jne 0x140270567
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x1402704f5
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x14027056d
mov esi, r12d
jmp 0x14027056d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r11d, r11d
mov esi, eax
test eax, eax
jle 0x14027051a
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x140270407
mov esi, r12d
jmp 0x140270407
mov esi, 0x8007000e
jmp 0x140270407
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r11d, r11d
mov esi, eax
test eax, eax
jle 0x140270552
movzx esi, ax
or esi, 0x80070000
mov eax, 3
test esi, esi
js 0x14027040c
mov esi, r12d
jmp 0x14027040c
mov edi, dword [rbp + 0x14]
and edi, 1
mov dword [r14 + 4], edi
test esi, esi
js 0x14027064f
mov edx, SafeArrayDestroy
mov ecx, r13d
lea eax, [rdx + 0x1f]
mov dword [rsp + 0x44], eax
sub ecx, 1
je 0x1402705b0
sub ecx, 1
je 0x1402705a6
cmp ecx, 1
jne 0x1402705b8
mov esi, 0xe1
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x48], esi
jmp 0x1402705b8
mov dword [rsp + 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
jmp 0x1402705b4
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x48], edx
mov edi, SHRestricted
lea rcx, [rbp + 0x1c0]
xor edx, edx
mov dword [rsp + 0x50], edi
lea esi, [rdi + 0x7c]
mov r8d, esi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [0x1403860e0]
lea r8, [rbp + 0x1c0]
or edx, 0xffffffff
mov word [rbp + 0x204], si
xor ecx, ecx
call qword [case.0x14006b68f.0]
test eax, eax
je 0x14027061e
mov eax, dword [rbp + 0x26c]
movzx edi, word [rbp + 0x266]
mov dword [rbp + 8], eax
mov eax, dword [rbp + 0x270]
mov dword [rbp + 0xc], eax
lea eax, [rsi - 0x7c]
cmp edi, eax
cmovb edi, eax
mov dword [rsp + 0x50], edi
cmp r13d, 1
lea rcx, [rbp + 0x80]
cmovne rbx, qword [rbp - 0x38]
xor edx, edx
lea r8d, [rdx + 0x5c]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor ecx, ecx
lea rax, [r14 + 0x20]
mov esi, ecx
test rax, rax
jne 0x140270731
mov esi, 0x80070057
xor ebx, ebx
mov rdx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
mov ecx, 4
lea rdx, [0x14038a340]
lea r13d, [rcx - 3]
xor eax, eax
lock cmpxchg dword [0x14038b0f0], r13d
jne 0x140270675
mov eax, dword [0x140389de8]
test eax, eax
jle 0x1402706e9
sub eax, r13d
mov dword [0x140389de8], eax
jne 0x1402706e9
mov rdi, rdx
mov rbx, rcx
xor eax, eax
mov rcx, qword [rdi]
test rcx, rcx
je 0x1402706b5
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
xor eax, eax
add rdi, 0x18
sub rbx, r13
jne 0x14027069f
xor edx, edx
lea r8d, [rbx + 0x60]
lea rcx, [0x14038a340]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r8d, 0x170
lea rdx, [0x1402fbd30]
lea rcx, section..data
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov eax, ebx
lea rcx, [rbp - 0x30]
xchg dword [0x14038b0f0], eax
call fcn.1401fc794
test esi, esi
js 0x140271042
mov rcx, r15
call fcn.140264ea8
mov esi, eax
test eax, eax
js 0x140271042
mov eax, dword [r15 + 0x74]
mov rcx, r15
sub eax, 2
cmp eax, r13d
jbe 0x140270f81
call fcn.14026964c
jmp 0x140270f86
mov rax, qword [0x1403860f8]
xor edx, edx
mov r8d, 0x403
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x14027077d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor ebx, ebx
mov esi, eax
test eax, eax
jle 0x14027076d
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x140270651
mov esi, r12d
jmp 0x140270651
mov ecx, dword [rsp + 0x58]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, edi
call qword [case.0x14006b68f.0]
mov r8, rbx
mov dword [rbp + 0x90], 0x190
neg eax
mov byte [rbp + 0x9a], 5
mov edx, 0x20
mov dword [rbp + 0x80], eax
lea rcx, [rbp + 0x9c]
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x80]
call qword [case.0x14006b68f.0]
xor ebx, ebx
test rax, rax
jne 0x140270802
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x1402707f9
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x140270806
mov esi, r12d
jmp 0x140270806
mov qword [r14 + 0x20], rax
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
test esi, esi
js 0x140270651
mov rax, qword [rbp - 0x80]
lea rcx, [rbp + 0xe0]
cmp r13d, 1
lea rbx, [r14 + 0x28]
cmovne rax, qword [rbp - 0x38]
xor edx, edx
mov qword [rbp - 0x80], rax
lea r8d, [rdx + 0x5c]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov esi, eax
test rbx, rbx
je 0x14027064a
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140270750
mov ecx, dword [rsp + 0x48]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
mov edx, edi
call qword [case.0x14006b68f.0]
mov r8, qword [rbp - 0x80]
lea rcx, [rbp + 0xfc]
neg eax
mov dword [rbp + 0xf0], 0x190
mov edx, 0x20
mov dword [rbp + 0xe0], eax
mov byte [rbp + 0xfa], 5
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0xe0]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140270901
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor ebx, ebx
mov esi, eax
test eax, eax
jle 0x1402708f8
movzx esi, ax
or esi, 0x80070000
test esi, esi
js 0x140270906
mov esi, r12d
jmp 0x140270906
mov qword [rbx], rax
xor ebx, ebx
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
test esi, esi
js 0x140270651
mov ecx, r13d
mov edx, ebx
mov edi, ebx
sub ecx, 1
je 0x140270938
sub ecx, 1
je 0x14027096a
cmp ecx, 1
jne 0x14027093e
mov edx, dword [rbp + 8]
mov edi, dword [rbp + 0xc]
lea rcx, [r15 + 0xf0]
mov dword [rcx + 8], edx
mov dword [rcx + 0xc], edi
cmp r13d, 1
je 0x140270997
lea eax, [r13 - 2]
cmp eax, 1
ja 0x140270979
mov edx, ebx
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x48], ebx
jmp 0x1402709a8
mov eax, dword [rbp + 8]
mov ecx, 4
cdq
idiv ecx
mov edx, eax
jmp 0x14027093e
mov eax, dword [rsp + 0x40]
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x58], edx
jmp 0x1402709aa
mov edx, reloc.OLEAUT32.dll_DllRegisterServer
mov dword [rsp + 0x48], 0x20
mov dword [rsp + 0x58], edx
mov eax, ebx
mov dword [rsp + 0x68], eax
mov ebx, dword [rcx + 8]
mov rcx, qword [rsp + 0x78]
sub ebx, edx
sub ebx, eax
xor eax, eax
mov dword [r14 + 0x54], ebx
mov esi, eax
mov dword [r14 + 0x44], ebx
mov rdx, qword [r14 + 0x20]
mov rax, qword [0x140386078]
mov rdi, qword [r14 + 8]
call qword [case.0x14006b68f.0]
xor ecx, ecx
mov qword [rsp + 0x60], rax
mov rax, qword [method.4.virtual_56]
lea r9, [r14 + 0x3c]
mov qword [rsp + 0x28], rcx
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
or r8d, 0xffffffff
mov rcx, rdi
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
xor ecx, ecx
test eax, eax
cmove esi, r12d
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140270a36
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
xor ecx, ecx
test esi, esi
js 0x14027064f
mov rdx, qword [r14 + 0x28]
mov esi, ecx
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x140386078]
mov rdi, qword [r14 + 0x10]
call qword [case.0x14006b68f.0]
xor ecx, ecx
mov qword [rsp + 0x60], rax
mov rax, qword [method.4.virtual_56]
lea r9, [r14 + 0x4c]
mov qword [rsp + 0x28], rcx
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
or r8d, 0xffffffff
mov rcx, rdi
mov dword [rsp + 0x20], 0xc50
call qword [case.0x14006b68f.0]
xor ecx, ecx
test eax, eax
cmove esi, r12d
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140270ab5
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
xor ecx, ecx
test esi, esi
js 0x14027064f
lea eax, [r13 - 2]
cmp eax, 1
ja 0x140270ad3
mov ebx, dword [r14 + 0x54]
cmp dword [r14 + 0x44], ebx
cmovg ebx, dword [r14 + 0x44]
cmp dword [r14], ecx
lea rcx, [r14 + 0x3c]
mov r8d, dword [rsp + 0x44]
mov rax, qword [method.4.virtual_56]
je 0x140270b03
mov edi, dword [rsp + 0x68]
mov edx, edi
sub edx, dword [r14 + 0x44]
add edx, ebx
call qword [case.0x14006b68f.0]
sub edi, dword [r14 + 0x54]
lea edx, [rbx + rdi]
jmp 0x140270b11
mov edx, dword [rsp + 0x58]
call qword [case.0x14006b68f.0]
mov edx, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x48]
lea rcx, [r14 + 0x4c]
add r8d, dword [r14 + 0x48]
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
lea eax, [r13 - 2]
cmp eax, 1
jbe 0x140270daa
cmp r13d, 1
jne 0x140270dc4
xor edx, edx
mov dword [r14 + 0x38], 0xffffff
lea r8d, [r13 + 0x5b]
lea rcx, [rbp + 0x140]
lea rdi, [r14 + 0x30]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov esi, eax
test rdi, rdi
je 0x14027064a
mov rax, qword [0x1403860f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x140270bbb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
xor eax, eax
test esi, esi
jle 0x140270bad
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x140270c5a
mov esi, r12d
jmp 0x14027064f
mov edx, dword [rsp + 0x50]
mov r8d, 0x48
mov rax, qword [0x1403860b8]
lea ecx, [r8 - 0x3d]
call qword [case.0x14006b68f.0]
mov r8, qword [rbp - 0x10]
lea rcx, [rbp + 0x15c]
neg eax
mov dword [rbp + 0x150], 0x190
mov edx, 0x20
mov dword [rbp + 0x140], eax
mov byte [rbp + 0x15a], 5
call fcn.14003d070
mov rax, qword [0x140386020]
lea rcx, [rbp + 0x140]
call qword [case.0x14006b68f.0]
test rax, rax
jne 0x140270c41
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x140270c3a
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x140270c44
mov esi, r12d
jmp 0x140270c44
mov qword [rdi], rax
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
mov rax, qword [0x140386160]
call qword [case.0x14006b68f.0]
xor eax, eax
test esi, esi
js 0x14027064f
mov rcx, qword [rsp + 0x78]
mov esi, eax
mov dword [r14 + 0x64], ebx
mov rdx, qword [r14 + 0x30]
mov rax, qword [0x140386078]
mov rdi, qword [r14 + 0x18]
call qword [case.0x14006b68f.0]
mov qword [rsp + 0x60], rax
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
lea rbx, [r14 + 0x5c]
xor eax, eax
mov r9, rbx
mov qword [rsp + 0x28], rax
or r8d, 0xffffffff
mov rax, qword [method.4.virtual_56]
mov rcx, rdi
mov dword [rsp + 0x20], 0x460
call qword [case.0x14006b68f.0]
test eax, eax
cmove esi, r12d
mov rax, qword [rsp + 0x60]
xor r12d, r12d
test rax, rax
je 0x140270cdf
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140386078]
call qword [case.0x14006b68f.0]
test esi, esi
js 0x14027064f
mov eax, dword [r14 + 0x64]
mov ecx, SHFindFiles
mov edi, dword [rsp + 0x50]
add eax, 0x18
cmp eax, ecx
mov edx, edi
cmovl eax, ecx
lea esi, [rcx + 6]
mov dword [r14 + 0x64], eax
mov r8d, esi
mov dword [r14 + 0x68], 0x20
mov ecx, dword [rbx]
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov dword [rbx], eax
mov r8d, esi
mov ecx, dword [rbx + 4]
mov edx, edi
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov dword [rbx + 4], eax
mov r8d, esi
mov ecx, dword [rbx + 8]
mov edx, edi
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov dword [rbx + 8], eax
mov r8d, esi
mov ecx, dword [rbx + 0xc]
mov edx, edi
mov rax, qword [0x1403860b8]
call qword [case.0x14006b68f.0]
mov dword [rbx + 0xc], eax
mov rcx, rbx
mov r8d, dword [r14 + 0x58]
mov rax, qword [method.4.virtual_56]
add r8d, 0x24
cmp dword [r14], r12d
je 0x140270d95
mov edx, dword [r14 + 0x3c]
cmp edx, dword [r14 + 0x4c]
cmovge edx, dword [r14 + 0x4c]
call qword [case.0x14006b68f.0]
jmp 0x140270dc4
mov edx, dword [r14 + 0x44]
cmp edx, dword [r14 + 0x54]
cmovle edx, dword [r14 + 0x54]
sub edx, dword [r14 + 0x64]
add edx, dword [rbx]
jmp 0x140270d8d
mov dword [r15 + 0xf8], ebx
mov eax, dword [r14 + 0x58]
mov dword [r15 + 0xfc], eax
mov dword [r14 + 0x38], 0xffa8a8a8
mov esi, dword [r14]
lea r14, [r15 + 0xf0]
mov ebx, dword [r14 + 0xc]
mov edi, dword [r14 + 8]
sub r13d, 1
je 0x140270f77
sub r13d, 1
je 0x140270ebb
cmp r13d, 1
jne 0x140270eb2
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x78], rax
mov edx, r13d
mov rax, qword [method.4.virtual_56]
xor ecx, ecx
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x58]
mov dword [rbp + 0x58], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140270eb2
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x6c]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x74]
xor ecx, ecx
call qword [case.0x14006b68f.0]
movups xmm1, xmmword [rbp + 0x6c]
movdqa xmm0, xmm1
psrldq xmm0, 8
movd eax, xmm0
movups xmmword [rbp + 0x20], xmm1
sub eax, edi
psrldq xmm1, 8
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
movq rcx, xmm1
shr rcx, 0x20
sub ecx, ebx
mov dword [r14], edx
imul ecx, ecx, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [r14 + 4], edx
xor ebx, ebx
mov esi, ebx
jmp 0x140270651
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x50], rax
xor ecx, ecx
movups xmmword [rbp + 0x30], xmm0
lea edx, [rax + 1]
mov rax, qword [method.4.virtual_56]
movups xmmword [rbp + 0x40], xmm0
call qword [case.0x14006b68f.0]
lea rdx, [rbp + 0x30]
mov dword [rbp + 0x30], PathIsExe
mov rcx, rax
mov rax, qword [method.4.virtual_56]
call qword [case.0x14006b68f.0]
test eax, eax
je 0x140270eb2
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x44]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov rax, qword [method.4.virtual_56]
lea rdx, [rbp + 0x4c]
xor ecx, ecx
call qword [case.0x14006b68f.0]
mov eax, dword [rbp + 0x4c]
movups xmm0, xmmword [rbp + 0x44]
movdqu xmmword [rbp + 0x20], xmm0
test esi, esi
je 0x140270f4c
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0x44]
jmp 0x140270f62
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [r14], edx
mov rax, qword [rbp + 0x28]
shr rax, 0x20
sub eax, ebx
imul ecx, eax, 0x5f
jmp 0x140270e9d
xor ebx, ebx
mov qword [r14], rbx
jmp 0x140270eb4
call fcn.140269728
mov esi, eax
test eax, eax
jns 0x140270fb8
mov eax, 4
test byte [0x14038bd84], al
je 0x140271042
mov r8d, esi
lea rdx, [0x140334f68]
lea rcx, [0x140386800]
call fcn.14009e518
jmp 0x140271042
mov byte [r15 + 0x102], r13b
cmp byte [r15 + 0x101], bl
je 0x14027103a
mov ecx, dword [r15 + 0x74]
lea eax, [rcx - 2]
cmp eax, r13d
jbe 0x140271024
cmp ecx, r13d
jne 0x14027103a
mov rcx, qword [r15 + 0x28]
mov edx, 5
call qword [case.0x140024bf3.0]
nop dword [rax + rax]
mov rcx, qword [r15 + 0x28]
call qword [0x1403ad608]
nop dword [rax + rax]
cmp byte [r15 + 0x100], bl
je 0x14027103a
mov rcx, qword [r15 + 0x30]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
call qword [case.0x14004486b.0]
nop dword [rax + rax]
jmp 0x14027103a
mov rcx, r15
call fcn.14026de1c
test eax, eax
mov esi, eax
setns al
mov byte [r15 + 0x101], al
mov rcx, r15
call fcn.14026dd0c
mov eax, esi
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400a15a0
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret